Administrators Cannot Reset the Primary Password of an Active Directory User (288410)

• Description

  When using the EAM Console, an administrative user cannot set the primary password of a user, even though he/she has the proper administration rights over this user. In the Connection / Password tab for a selected user, after generating or typing a new password for the user, pressing the Apply button in the User data area leads to the EAM Console hanging indefinitely.

  
  Similar issue may arise when users try to self-enroll themselves from the EAM Web Portal.

  
  NOTE: Only EAM environments using Active Directory as the repository of users is affected by this problem.

• Resolution

  The following registry value must be set to a NULL value on all EAM Controllers:

  HKLM\SOFTWARE\Enatel\WiseGuard\FrameWork\Directory
  PerformImpersonationBeforePasswordReset (REG_DWORD) = 0

  NB: you can also deploy this registry value through a GPO. In this case, the registry value path is:

  HKLM\SOFTWARE\Policies\Enatel\WiseGuard\FrameWork\Directory
  PerformImpersonationBeforePasswordReset (REG_DWORD) = 0