The following table outlines generic administrative template policy settings you can use to customize the behavior of Secure Password Extension.
POLICY NAME DESCRIPTION
Generic Settings
Specify URL path to the Self-Service site This policy lets you specify the link for the access to the Self-Service site from the Windows logon screen. This link is opened when users click the Forgot My Password or Manage My Password buttons on the Windows logon screen in pre-Vista operating systems, and the Forgot My Password command link in Windows Vista and Windows 7 operating systems.
Use the following URL path format:
https://COMPUTER_NAME/VIRTUAL_DIRECTORY/User, where COMPUTER_NAME is the name of the server where Password Manager resides, and
VIRTUAL_DIRECTORY is a virtual directory name that was configured during Password Manager Setup (by default, the virtual directory name is QPM). Substitute https:// with http:// if you don’t use HTTPS.
Override URL path to Self-Service site By default, Secure Password Extension automatically locates the Self-Service site in its domain. This policy setting lets you override the default behavior and force Secure Password Extension to use the Self-Service site specified in the "Specify URL path to the Self-service site" setting.
Password Manager realm affinity This policy setting lets you force Secure Password Extension to use only Password Manager Service instances that belong to specific Password Manager realm.
Maximum number of attempts to connect to the
Self-Service site This setting specifies the maximum number of
attempts to connect to the Self-Service site from Secure Password Extension.
If this setting is disabled or not configured, the default number of attempts is 5.
Add the Forgot My Password link to credential provider
tile This policy setting allows adding the Forgot my
password link on the logon screen to the tile of the selected credential provider. If you enable this policy setting, the Forgot my password link will be added to the tile of the selected credential provider on the logon screen. If you disable or do not configure this policy setting, the Forgot my password link will be added to the default Microsoft Password provider tile. You can select a credential provider from the list or specify the GUID of another credential provider. GUID should be specified in the following format:
{00000000-0000-0000-0000-000000000000}
Create a separate tile for Secure Password Extension This policy setting allows creating a separate tile for Secure Password Extension on the Windows logon screen. You can enable this setting when there is a compatibility issue with other credential providers.
If you disable or do not configure this policy setting, the Forgot My Password link will be added to a default Microsoft Password provider tile or tiles of the
credential provider selected in the "Add the Forgot my password link to credential provider tile" policy.
Refresh interval This policy setting allows you to change the default settings refresh interval. This policy setting determines how often domain settings are refreshed for Secure Password Extension. The default value is five minutes.
If you want to reduce network load, you can increase the refresh interval. If you disable or do not configure this policy setting, the default refresh interval will be used.
Proxy Settings
Enable proxy server access This policy setting determines whether connections to the Self-Service from the Windows logon screen are established through the specified proxy server.
Configure required proxy settings Specifies the settings required to enable proxy server access to the Self-Service site from the Windows logon screen.
Configure optional proxy settings Specifies optional settings for the proxy server access.
Shortcut Policies
Restore desktop shortcuts for the Self-Service site This policy setting lets you define whether the desktop shortcut to the Self-Service site on a user's computer should be re-created by Secure Password Extension if the user deletes the desktop shortcut.
Do not create desktop shortcuts for the Self-Service
site This policy setting lets you define whether the desktop
shortcuts to the Self-Service site on users' computers should not be created by Secure Password Extension.
Do not create any shortcuts for the Self-Service site This policy setting lets you define whether any shortcuts to the Self-Service site on users' computers (on the desktop and in the Start menu) should not be created by Secure Password Extension.
Secure Password Extension Title Settings Display custom names for the Secure Password
Extension window title This policy setting lets you define whether to replace the default language-specific names of the Secure Password Extension window title with the names that you specify for the required logon languages.
POLICY NAME DESCRIPTION
Set custom name for the Secure Password Extension
window title in <Language> This group of policy setting allows you to specify custom name for the Secure Password Extension window title. You can specify the title for each of the required logon languages. 36 language-specific policy settings are available out-of-the-box.
Note: The name you specify must not exceed 32 characters. If a hieroglyphic font is used, the name is limited by 14 characters because of hieroglyph’s width.
The URL length must not exceed 256 characters.
Usage Policy Settings
Display the usage policy button (command link) Defines whether to display the usage policy buttons and command links for which you have specified the logon language-specific names and URLs.
The usage policy button on pre-Windows Vista operating systems, and the usage policy command link on Windows Vista and Windows 7 operating systems, are displayed on the Windows logon screen, and are intended to open a HTML document that describes the enterprise usage policy or contains any information that you may want to make available to end-users.
Set default URL This policy lets you specify an URL referring to the usage policy document that will be opened by clicking the usage policy button (command link) if no logon language-specific URLs are set. The default URL may refer to a HTML file.
Set name and URL for the usage policy button
(command link) in <Language> This group of policy setting allows you to specify the name of the usage policy button (command link) and set the link to the usage policy document that will be opened by clicking the usage policy button or command link. You can specify the name and URL for each of the required logon languages. 36 language-specific policy settings are available.
Note: The name you specify must not exceed 32 characters. If a hieroglyphic font is used, the name is limited by 14 characters because of hieroglyph’s width.
The URL length must not exceed 256 characters.
Forgot My Password Settings
Display custom names for the Forgot My Password
button (command link) This policy setting lets you define whether to replace the default language-specific names of the Forgot My Password button and command link with the names that you specify for the required logon languages.
The Forgot My Password button (command link) is intended to open the Self-Service site from the Windows logon screen. On pre-Windows Vista operating systems, the Forgot My Password button is displayed if you are not logged on to the system. On Windows Vista and Windows 7 operating systems, the command link is displayed on the Windows logon screen irrespective of whether the user is logged on to the system or not.
POLICY NAME DESCRIPTION
Set custom name for the Forgot My Password button
(command link) in <Language> This group of policy settings allows you to specify names of the Forgot My Password button (command link) individually for each of the required logon languages. 36 language-specific policy settings are available.
Notification Customization
Set background image for registration notification
dialog box This policy setting allows you to change the default
background by specifying an image that will be used as a new background.
Customize registration notifications This policy setting allows you to define whether you want to replace the default text on language-specific registration notification dialog boxes with your custom text.
Registration Notification
Customize registration notification in <Language> This group of policy settings allows you to customize texts in notification dialog boxes individually for each of the required logon languages. 36 language-specific policy settings are available.
Q&A Profile Update Notification
Customize Q&A profile update notification in
<Language> This group of policy settings allows you to customize notifications that request users to update their Q&A profiles individually for each of the required logon languages. 36 language-specific policy settings are available.
Upgrade Settings
Force connection to Self-Service site 4.x This policy setting allows you force Secure Password Extension to connect to Self-Service sites 4.x. You can use this setting during migration from Password Manager 4.x to Password Manager 5.x - after you upgrade SPE 4.x to 5.x, but before converting users' Q&A profiles. If you enable this setting, SPE will connect to Self-Service sites 4.x. You should apply the setting to users whose Q&A profiles have not been converted yet, thus enabling them to use Self-service sites. If you disable or do not configure the setting, SPE will connect to Self-Service sites 5.x.
Secure Password Extension Separate Tile Settings
Create a separate tile for Secure Password Extension This policy setting allows creating a separate tile for Secure Password Extension on the Windows logon screen. You can enable this setting when there is a compatibility issue with other credential providers. If you disable or do not configure this policy setting, the Forgot My Password link will be added to a default Microsoft Password provider tile or tiles of the
credential provider selected in the "Add the Forgot my password link to credential provider tile" policy.
POLICY NAME DESCRIPTION