Web Security Services

Hi;

Client Logon App "aclogon.exe" does not seem to be working. I have made sure it initiates using a gpo startup script. However, the user comes up always as unauthenticated.

Is this a known issue. Also, do you have a 64 bit version.

Kindly

Wasfi

Hi Wasfi,

you have to follow below steps to creat a proper logon/logoff scrip in Group policy. Also please note only mention ip address of your auth connector server and not hte host name  in your GPO Parameter and nothing else that only it will work.

It appears that the GPO is configured to run the script from Windows configuration as a “Startup” script. The aclogon script is a logon\logoff script, GPO should be configured to run it from “User Configuration > Policies > Windows Settings > Scripts (Logon/Logoff)”

Please follow the below steps to run the script.

 

1. Open the Group Policy Management console:
2. Expand the Domains tree, right-click a domain or OU name, and select Create a GPO in this domain and Link it here.
3. In the New GPO dialog box, give the GPO a descriptive name, then click OK.
4. Locate the new GPO in the Domains tree (under the domain or OU that you selected above), right-click it, and select Edit.
5. In the Group Policy Management Editor, navigate to User Configuration > Policies > Windows Settings > Scripts (Logon/Logoff), then double-click Logon in the right pane.
6. In the Logon Properties window, click Show Files. A folder whose name ends in User\Scripts\Logon\ is displayed.
7. Copy the aclogon.exe files into this folder.
8. In the Logon Properties window, click Add.
9. Click Browse to open the logon script directory, then select aclogon and click OK.
10. Verify that the aclogon script now appears in the list on the Logon Properties window, then click OK.
11. In the Script Parameters option enter the hostname or IP address of your Auth Connector server. (Take a look at the Aclogon release notes for other optional parameters)
12. To configure log off script, repeat steps 5 through 9. This time, double-click Logoff at Step 5 and copy aclogon file into the folder that opens.
13. Close the Group Policy Management Editor window for your GPO, then close the Group Policy Management window.
14. Repeat this procedure on each domain controller in your network, as needed.

Attachment for your reference

Thanks.