Skip to main content

Password Reset Link Is Missing with Duo and PPE Client Installed

Symptom​

The reset link is missing for Netwrix Password Reset when Duo MFA and Netwrix Password Policy Enforcer Client are installed.

Cause​

Multiple Credential Providers in the environment can conflict when you do not configure them correctly. Ensure that the credential stacks are in the correct order.

The ProvidersWhitelist registry value must be added to the system to allow the Netwrix Password Reset Client and Netwrix Password Policy Enforcer Client to work together with Duo MFA.

Resolution​

  1. Uninstall the following in this exact order:

    • Duo MFA
    • Netwrix Password Reset (NPR) Client
    • Netwrix Password Policy Enforcer (PPE) Client

  2. Reboot the system.

  3. Reinstall the following in this exact order:

    IMPORTANT: Restore any Duo settings that the uninstallation process may have removed before proceeding with the reinstall order below.

    • Duo MFA
    • PPE Client
    • NPR Client

  4. Add a ProvidersWhitelist multi-string value of {407DAD37-1BA1-49BB-8401-45B22F5EF77C} following the Duo instructions ⸱ Duo 🡥.

  5. Press CTRL+ALT+DEL and select Change Password.

  6. Verify that PPE policies appear and that the Password Reset link appears on the Lock Screen.

IMPORTANT: If the Password Reset link is still missing or the PPE Client is not showing policies, confirm that the following registry values are not present on the machine:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\ANIXIS\Password Reset Client]
"PreferredProvider"="{44E2ED41-48C7-4712-A3C3-250C5E6D5D84}"
"PreferredProviderUsernameField"=dword:00000001
"PreferredProviderFriendlyNameField"=dword:00000000
"PreferredProviderConfirmPasswordField"=dword:00000004
"PreferredProviderResetPasswordLinkField"=dword:00000006
"PreferredProviderLogOnToField"=dword:00000008