Known Issues and Troubleshooting › Unified Logon from Web Console Fails on Standalone WAC

Unified Logon from Web Console Fails on Standalone WAC

Symptom:

When I access the Unified Logon feature of Web Console from a supported browser on Windows 2008 and above, log in fails and prompts me to perform an explicit logon.

Solution:

Follow these steps:

1. Verify that the Domain Controller is on windows 2008 or above with the following local policy setting:
   • Network access: Sharing and security model for local accounts: Classic
   • Network access: LAN manager authentication level: Send LM and NTLM Responses
   • Network security: Verify that the minimum session security for NTLM SSP based (including secure RPC) clients is set to 'no minimum'
2. Verify that the Domain Manager is on windows 2008 or above and set the local policy as given in step 1.
3. Verify that the Registry of the Domain manager is on windows 2008 or above and disable the loopback check box:
   1. Click Start, Run.
   2. Type regedit. Click OK.
   3. In Registry Editor, locate and click the following registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
   4. Right-click LSA and point to New. Click DWORD Value.
   5. Type DisableLoopbackCheck. Press ENTER.
   6. Right-click DisableLoopbackCheck. Click Modify.
   7. In the Value data box, type 1. Click OK.

      4. Verify the settings of the browser (IE or Firefox) on the User’s computer.

   Note: For more information about browser settings for unified logon, see Configure Browser Settings for Unified Logon topic in the Web Console Help.

   5. If the browser is on the server class machine, follow the local policy settings given in step 1.