Knowledge Base

Our dedicated Product Specialist team is always ready to help you when you need it the most. Contact Support

Specops uReset (7.12 and earlier)

Force Gatekeeper to specific domain controller

To force the uReset Gatekeeper to use a specific domain controller, edit the settings in the registry (as shown below).

Invalid license key

Version mismatch The error message can appear if there’s a version mismatch. If for instance the version of the installed product is 6.x and the license key that you’re trying to import is for version 7.x then this can occur. You can find out by comparing the name of the license key text file (it...

License key error, attempted to perform an unauthorized operation

This usually means that you’re not authorized to import the license key file. Make sure that you’re logged in with a domain administrator account on the machine. Close the Password Policy Domain Administration tool, open it again by right clicking its icon and select “Run as administrator”. Now try again to import the license key.

Unable to Delete Users with Leaf Objects

Specops Password Policy, Password Reset, and uReset/Specops Authentication all use leaf objects under user accounts for the purposes of storing user specific information — for Password Policy this includes password history and length-based password age information; for Password Reset and uReset/Specops Authentication the leaf object contains user enrollment data. The advantage of using a leaf...

Specops Is Not Accurately Displaying my Domain Password Policy or Fine-Grained Password Policy

In Specops Password policy administrative tools or in Specops uReset/Password Reset you may find that the displayed password policy rules from Active Directory do not appear accurate. All Specops password products respect both the default and fine-grained password policies as configured in Active Directory and are displayed by reading the relevant configuration attributes directly from...

Wrapping Custom Credential Provider using the Registry

While we recommend using the client ADMX template, often for testing or remote users we must create the registry keys that the ADMX would create through some other means. For specifying which credential provider to wrap, create the following string value in the registry: Change the GUID value to the appropriate GUID for the credential...

What functionality will be lost if the Specops uReset/Authentication Client isn’t installed on the client machines?

If you don’t install the Specops uReset/Authentication Client you will lose the ability to display the “Reset Password…” link on the ctrl-alt-del screen and the lockscreen, and it will not be able to process any enrolment enforcement options (pop up balloon, auto open browser and unclosable full screen browser).

What ports and possible firewall whitelisting will we need to have in place for Specops uReset to work?

The uReset Gatekeeper, if installed on a 2012/2012r2 server, will use a secure web socket over TCP port 443 to talk to This is usually covered by normal “https web browsing” traffic and can be handled via a proxy if that is what you use. If the server OS is 2008/2008r2 then TCP port...

Wrapping Third Party Credential Providers

The Specops Authentication client operates as a Windows credential provider in order to enhance the user experience when using Specops products from AD-joined Windows workstations. For Specops Password Policy this means improving the user feedback during a CTRL+ALT+DEL password change. For Specops uReset and Password Reset customers, our client provides a link for the user...

Update Certificate Pinning for uReset 7.12 And Earlier (Feb 2021)

On February 2, 2021 at 15:00 GMT Specops will need to renew/replace the certificate for Due to the way the uReset 7 Gatekeeper has implemented certificate pinning, customers will need to update pinning information in the registry in order for the Gatekeeper to reconnect successfully. Once the certificate is updated on our end, existing...
Next Page »