Knowledge Base

Enrollment data in AD is locked down with a default permission set that should be sufficient for all Specops Authentication products to function. Use the instructions provided here only on guidance from Specops Support staff. The following PowerShell commands can be used to grant a group full access to all SpecopsAuthentication leaf objects in Active...

Note: This does not require a license for secure service desk to use this feature. The ability to look up enrollment info and user details is necessary for troubleshooting issues within the Specops Authentication platform. Ensure you are a member of the “Specops Authentication Service Desk Agents” security group, which can be done from Active...

In order to use Kerberos in Specops Authentication, you will need to re-install each gatekeeper in your environment and use a Group Managed Service Account (gMSA). This is recommended as Microsoft will start phasing out NTLM. It is important to note that when doing this, each gatekeeper will need to be restarted in order to...

Specops Password Auditor This can be downloaded directly from the Password Policy Domain administration menu. The application will also prompt when an update is available. Specops Password Policy https://specopssoft.com/support/en/password-policy/download.htm uReset You would do this directly through the gatekeeper. Specops Authentication Client https://specopssoft.com/support/en/ureset-8/download.htm *If you have uReset, you will need the Cefsharp runtime browser as well....

After upgrading, you may notice this message pop up: This can happen for several reasons. Stale gatekeeper that no longer exists In this instance you will go to active directory with and enable these 2 options: Then navigate here and delete the server name of the stale gatekeeper under the gatekeepers container: The Specops Authentication...

If you are an administrator using Specops Authentication, and you want test a reset as the managed service account, this article will walk you through how to use PsExec.exe to impersonate that account. By using PsExec.exe you will open the new Command Prompt in the System Context and the account doing all the operations will...