Enterprise Connect

Enable/disable the workstation authentication CP post-installation

Workstation authentication for Windows supports the ability to control availability of the workstation authentication credential provider (CP) on target machines after installation.

Considerations for enabling or disabling the workstation authentication CP:

  • This feature allows for bulk installation, followed by gradual deployment on group or user workstations.

  • Workstations on which the workstation authentication CP is manually disabled post-installation will not support workstation authentication as a means of logging into Windows.

  • The installation of workstation authentication is transparent to users, who will not see the Workstation CP on the login screen and will continue to login as they did prior to installation.

  • If it is crucial for your organization to be able to control the workstation authentication CP, it needs to be enabled.

  • To enable or disable the workstation authentication CP post-installation, the Windows registry must be updated.

Administrative privileges might be required.

To disable the workstation authentication CP post-installation, open the Command Prompt application and run:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication +
\Credential Provider Filters\\{F04AB2CC-5585-4069-9B95-AABB3CD21DF0}] +
@="SDOCredentialProvider" +
"Disabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication +
\Credential Providers\\{F04AB2CC-5585-4069-9B95-AABB3CD21DF0}] +
@="SDOCredentialProvider" +
"Disabled"=dword:00000001

To enable the workstation authentication CP, open the Command Prompt application and run:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\ +
Credential Provider Filters\\{F04AB2CC-5585-4069-9B95-AABB3CD21DF0}] +
@="SDOCredentialProvider" "Disabled"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication +
\Credential Providers\\{F04AB2CC-5585-4069-9B95-AABB3CD21DF0}] +
@="SDOCredentialProvider" +
"Disabled"=dword:00000000
Copyright © 2010-2022 ForgeRock, all rights reserved.