File Share Encryption

Hello,

I have a laptop that when the PGP was installed it was set to windows SSO. I want to disable this feature so the PGP password is seperate from the windows login. I have tried http://www.symantec.com/business/support/index?page=content&id=HOWTO42010 but the string is not in that location in the registry. Is there anyway of changing this withhout re-installing the whole laptop.

Thanks

Dean

Hi Dean,

The KBA describes how to create that string.  I'm not sure what you are saying is not there to do this?

The SSO was initiated when you encrypted your disk, rather that with the installation of PGP.  You do have the option of decryption and then encrypting without using SSO.

Hi Tom,

This location is not in the registry HKEY_LOCAL_MACHINE>SOFTWARE>PGP Corporation>PGP. At present the PGP passphrase and windows login are sync'd together, so when the windows login changes the PGP login also changes,  need them to be seperate.

Thanks

Dean

I'm puzzled - that path is in the computers I'm looking at here.  What Windows version, and what PGP version are you using? You may want to consider just decrypting and then re-encrypting.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\PGP Corporation\PGP]
"PGP_INSTALL_DISABLESSOENROLL"=dword:00000001
"PGP_SILENT_FORCE_LDAP"=dword:00000000
"PGP_INSTALL_RDD"=dword:00000001
"INSTALLPATH"="C:\\Program Files (x86)\\PGP Corporation\\PGP Desktop\\"
"PGP_SET_HWORDER"=dword:00000000
"PGP_INSTALL_MAPI_PLUGIN"=dword:00000001
"INSTALLDATE"=""
"PGPSTAMP"="Default PGP Stamp"
"OLDSTAMP"="Default PGP Stamp"
"PGP_INSTALL_GROUPWISE"=dword:00000000
"PGP_INSTALL_LSP"=dword:00000001
"PGP_INSTALL_MAPI"=dword:00000001
"PGP_INSTALL_NETSHARE"=dword:00000001
"PGP_INSTALL_NOTES"=dword:00000001
"PGP_INSTALL_SSO"=dword:00000001            --------->00000000  there?
"PGP_INSTALL_WDE"=dword:00000001
"MACHINEGUID"="{89903AA3-23E8-449B-B1A4-B160538BF1BC}"
"PGP_INSTALL_MEMLOCK"=dword:00000001
"PGP_INSTALL_VDISK"=dword:00000001

If this is a managed client, you cannot change this unless your administrator configure policy to disable SSO.

I've been working with support on this issue with the latest 10.2 MP5 client. It is a known issue to them that you cannot disable SSO on this version. There is no fix from them yet. 

The article you linked and the related registry locations and settings do not work. I'll update you guys once Symantec support sends me back a fix so far it's been more than a month without a fix. I'm currently using MP4 but this version has it's fair share of bugs as well....