Knowledge Base

Enrollment data in AD is locked down with a default permission set that should be sufficient for all Specops Authentication products to function. Use the instructions provided here only on guidance from Specops Support staff. The following PowerShell commands can be used to grant a group full access to all SpecopsAuthentication leaf objects in Active...

In certain configurations, the Specops Authentication Client requires additional configuration to determine the location of the Specops configuration in Active Directory: If you have a single-domain setup with the default settings container location (under domain/System/Specops) the steps in this article should not be necessary. Identify the Settings Container Location We can get the configuration root...

This article applies to uReset when used in a multi-domain environment. When using uReset and Password Policy in multiple trusted domains/forests, you may find that users accessing uReset from domains other than the Gatekeeper domain do not see the Password Policy rules when setting their new password. When this occurs, you will find event ID...

Error message during an enrollment or password reset attempt. The most common cause is obviously as the error message says, that you have typed the wrong username or password but if you’re 100% sure that it’s correct and you’re still getting the message then it may be due to other causes. Out of Scope Make...

Specops Password Auditor Password Policy customers should download Password Auditor directly from Password Policy Domain Administration. Updates to Password Auditor can be downloaded from within the Password Auditor application — if an update is available, you will see a prompt to download it. Specops Password Policy https://specopssoft.com/support/en/password-policy/download.htm uReset You would do this directly through the...

Please ensure you are on the latest version of Gatekeeper and in your Ureset Admin portal, go to Reporting>Enrollment Ratio>Details. From there you can generate or export a list of “Enrolled Users” or “Not Enrolled Users”.

If an end user receives the following message during enrollment for Mobile Code and you would like for them to have to enroll themselves instead of having an Administrator enroll them in Active Directory, you should enable this option in the Admin Portal. You should then have the user close out of the browser and...

In order to use Kerberos in Specops Authentication, you will need to uninstall the Specops Authentication Gatekeeper and the Specops Authentication Gatekeeper Administration applications and then install a new instance of each gatekeeper in your environment and use a Group Managed Service Account (gMSA). This is recommended as Microsoft will start phasing out NTLM. It...

This article will walk you through configuring multiple policies with in the Specops Authentication platform. It is important to note that this will not work if your policy mode is set to cloud mode. It will need to be set to group policy or both. https://specopssoft.com/support/en/ureset-8/authentication-web.htm#ureset. Go to Group Policy Management console. If this is...

After upgrading, you may notice this message pop up: This can happen for several reasons. Stale gatekeeper that no longer exists In this instance you will go to active directory with and enable these 2 options: Then navigate here and delete the server name of the stale gatekeeper under the gatekeepers container: The Specops Authentication...