All users are able to access all Password Manager portals
Users can access all Password Manager portals due to IIS authentication being configured with a specific user for path credentials instead of pass-through authentication. This article explains how to configure pass-through authentication in IIS so the website uses the credentials of the visiting user.
Automatic user enrollment failed: The certificate authority is invalid or incorrect (Error code: 12045)
Resolve "Automatic user enrollment failed: The certificate authority is invalid or incorrect (Error code: 12045)" when using a self-signed SSL certificate for the Self-Service portal by deploying the certificate to client machines via Group Policy or using a third-party signed certificate.
Disconnected-mode password reset
Explains how disconnected-mode password reset works for the Logon Prompt Extension and how to configure registry keys to enforce or prohibit local cached password resets.
Does the Password Manager always use your current Windows user to authenticate?
Netwrix Password Manager uses Integrated Windows authentication by default. This article shows two options to force prompting for credentials by changing zone settings or disabling automatic authentication for the Local Intranet zone.
Enrollment failed: cannot save secret
When you enroll a user, this error occurs if the Netwrix Password Secure service account lacks write access to the installation directory. Grant Modify/Write permissions or verify administrative membership to resolve the issue.
Enrollment wizard prompts for credentials
When you install the Netwrix Password Manager client, the Enrollment wizard prompts you to register and then to enter credentials to connect to `gina_set_answers_anonymous.asp`.
Error 401 in the Enrollment wizard
Resolve Error 401 (Not authorized) that appears when starting the Enrollment wizard by adding the Password Manager Self-service portal URL to the Local Intranet Zone or by configuring automatic logon settings.
Error 401: Unauthorized: Access is denied due to invalid credentials
Error 401 occurs when accessing the Administrative or Help-Desk portals due to failed authentication in Internet Information Services (IIS). This article explains causes and steps to verify IIS authentication settings, folder permissions, and portal roles.
How to Set Up Single Sign-On via Microsoft Entra ID Authentication
Step-by-step instructions to configure single sign-on (SSO) for Netwrix Data Classification using Microsoft Entra ID authentication, including app registration, web.config updates, and using bearer tokens with REST APIs.
How to Update Service Account Password
Instructions to update the service account password used by Netwrix Data Classification services and IIS application pools, including notes about service-name variations between upgraded and fresh v5.7 installations.
Password Manager Credential Providers
Explains how Windows credential providers are used by the Password Manager client and details the icon and link credential provider implementations, registry key location, and deployment considerations.
Service Account Password Reset for Netwrix Data Classification
Shows where to update the service account password after resetting it for Netwrix Data Classification, including Windows services, ConceptConfig locations, IIS application pool, and taxonomy global settings.
The “User must change password at next logon\" option is enabled automatically
Explains why the "User must change password at next logon" option can be enabled automatically when a password reset or change fails to meet the password policy, and how to prevent it.
Using Sharepoint Modern Authentication
This article describes how to configure Sharepoint modern authentication by preparing an application certificate, registering an app in Microsoft Entra ID, granting required permissions, uploading the certificate, and obtaining the Tenant ID for use with Netwrix Data Classification.
Windows Authentication Doesn't Work - HTTP Error 401
This article provides troubleshooting steps for resolving HTTP error 401 when using Windows authentication in the Admin and Helpdesk portal.