Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 6 additions & 2 deletions docs/kb/passwordreset/_category_.json
Original file line number Diff line number Diff line change
@@ -1,6 +1,10 @@
{
"label": "Troubleshooting Articles",
"label": "Knowledge Base",
"position": 999,
"collapsed": true,
"collapsible": true
"collapsible": true,
"link": {
"type": "doc",
"id": "index"
}
}
Original file line number Diff line number Diff line change
Expand Up @@ -44,9 +44,9 @@ All values are string values (`REG_SZ`):
- `LogonCaption` — this value replaces the header of the Logon Prompt Extension password reset wizard
- `MainCaption` — this value replaces the header of the Enrollment wizard

![User-added image](./images/ka04u00000116Nm_0EM700000004xhy.png)
![User-added image](../0-images/ka04u00000116Nm_0EM700000004xhy.png)

![User-added image](./images/ka04u00000116Nm_0EM700000004xi3.png)
![User-added image](../0-images/ka04u00000116Nm_0EM700000004xi3.png)

---

Expand All @@ -65,9 +65,9 @@ String values (`REG_SZ`):
- `LPE_AccountRemark` — replaces the example text under the field used to enter the account name
- `Predefine_Domain` — this value sets a predefined domain name that will be used

![User-added image](./images/ka04u00000116Nm_0EM700000004xiD.png)
![User-added image](../0-images/ka04u00000116Nm_0EM700000004xiD.png)

![User-added image](./images/ka04u00000116Nm_0EM700000004xiI.png)
![User-added image](../0-images/ka04u00000116Nm_0EM700000004xiI.png)

### DWORD values

Expand Down Expand Up @@ -99,4 +99,4 @@ Set `PRM_CurrentUserLanguage` to one of the following values:
| sk | Slovak |
| zh | Traditional Chinese |

![User-added image](./images/ka04u00000116Nm_0EM700000004xhe.png)
![User-added image](../0-images/ka04u00000116Nm_0EM700000004xhe.png)
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ To change the language used on the portal by default please do the following:
2. Edit the **locale.asp** file
3. Change line 112 to `var langsDict, defLang = "%langcode%"` (substitute `en` with the desired language code)

![User-added image](./images/ka04u00000116cJ_0EM70000000ts5W.png)
![User-added image](../0-images/ka04u00000116cJ_0EM70000000ts5W.png)

4. Save the changes and execute an IIS reset in a command prompt with the following command: `iisreset`

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -35,4 +35,4 @@ Follow the steps below to configure Netwrix Password Reset to redirect a site to

2. Select **Default web site** and click **Advanced Settings...** in the right pane.

![User-added image](./images/ka0Qk0000002mmv_0EMQk000003xxC1.png)
![User-added image](../0-images/ka0Qk0000002mmv_0EMQk000003xxC1.png)
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ Each language has a separate localization file.

Localization files are stored in the **Web_SSLocals** folder in the program installation directory (by default - `C:\Program Files (x86)\Netwrix Password Manager\Web_SSLocals`)

![User-added image](./images/ka04u00000116S9_0EM700000005OBk.png)
![User-added image](../0-images/ka04u00000116S9_0EM700000005OBk.png)

To add a language, create a copy of `en.asp`, then rename it to `%language code%.asp` and edit.

Expand All @@ -39,7 +39,7 @@ To add a language, create a copy of `en.asp`, then rename it to `%language code%
- `strLangID=`%language code%` (NOTE: Must correspond with the asp file name)`
- `strLangDispName=`%language name%``

![User-added image](./images/ka04u00000116S9_0EM700000005OBp.png)
![User-added image](../0-images/ka04u00000116S9_0EM700000005OBp.png)

3. Then substitute all English phrases with their equivalents in the desired language.
4. After you finish, save changes and execute `iisreset` from the command line.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -39,23 +39,23 @@ How to setup a load balancing cluster for Netwrix Password Reset
2. In the **Host** field specify a name of a machine that is to be part of the new cluster, click **Connect**
3. Select the network Interface that will be used to build a cluster, click **Next**

![User-added image](./images/ka04u00000116bU_0EM70000000554p.png)
![User-added image](../0-images/ka04u00000116bU_0EM70000000554p.png)

4. In the **New Cluster: Cluster IP addresses** window click **Add** and specify the IP address and subnet mask that will be used to access the cluster. Click **OK**, then **Next**.

![User-added image](./images/ka04u00000116bU_0EM70000000554u.png)
![User-added image](../0-images/ka04u00000116bU_0EM70000000554u.png)

5. In the **New cluster: Cluster Parameters** window verify cluster IP, specify cluster internet name and cluster operational mode. Click **Next.**

**Note:** For servers with only one network interface set **Multicast.**

![User-added image](./images/ka04u00000116bU_0EM70000000554z.png)
![User-added image](../0-images/ka04u00000116bU_0EM70000000554z.png)

6. In the **New cluster: Port rules** window click **Finish**.

**Note:** By default all traffic (on all protocols and ports) is equally divided between all cluster nodes. If you want to load-balance requests on a specific protocol or port, in the **New cluster: Port rules** window highlight the rule and click **Modify**.

![User-added image](./images/ka04u00000116bU_0EM700000005554.png)
![User-added image](../0-images/ka04u00000116bU_0EM700000005554.png)

7. Right-click the newly created cluster in the left pane and select **Add host to cluster** and add more nodes if needed.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ knowledge_article_id: kA00g000000H9XwCAK
# Automatic enrollment failed: Unknown error

I get the following error in **Enrollment wizard**.
![User-added image](./images/ka04u00000116c4_0EM700000004yFv.png)
![User-added image](../0-images/ka04u00000116c4_0EM700000004yFv.png)

---

Expand All @@ -48,9 +48,9 @@ It can happen due to several reasons but the most common reasons for this error
The key 1 is determined by Group policy. If there is no PRM_Serer value in the key 1, then the value from the key 2 is used.

Make sure that the specified value has correct URL.
![User-added image](./images/ka04u00000116c4_0EM700000004yGF.png)
![User-added image](../0-images/ka04u00000116c4_0EM700000004yGF.png)

2. Verify SSL settings.
- Make sure you are able to browse to the Netwrix Password Reset Self-service portal without any warnings. Please refer to [this article](https://kb.netwrix.com/610) if there are warnings.
- Make sure that SSL settings for PM virtual directory are set to **Ignore client certificates**
![User-added image](./images/ka04u00000116c4_0EM7000000050oO.png)
![User-added image](../0-images/ka04u00000116c4_0EM7000000050oO.png)
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@ knowledge_article_id: kA00g000000H9biCAC

The following error occurs after installation of Netwrix Password Reset.

![User-added image](./images/ka04u00000116c8_0EM7000000052RW.png)
![User-added image](../0-images/ka04u00000116c8_0EM7000000052RW.png)

---

Expand All @@ -42,4 +42,4 @@ The 404 error code means that there are no portals at the specified URL.
1. `HKLMSoftware[Wow6432Node]PoliciesNetWrixPassword Manager`
2. `HKLMSoftware[Wow6432Node]NetWrixPassword Manager Self-Service client (is used if there is no value in the 1st key)`

![User-added image](./images/ka04u00000116c8_0EM7000000052KG.png)
![User-added image](../0-images/ka04u00000116c8_0EM7000000052KG.png)
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ knowledge_article_id: kA00g000000H9bfCAC

You see the following error in the client (logon prompt extension) after entering username and clicking **Next**:

![User-added image](./images/ka04u00000116bh_0EM7000000052Jh.png)
![User-added image](../0-images/ka04u00000116bh_0EM7000000052Jh.png)

---

Expand All @@ -48,7 +48,7 @@ First, make sure that the client is pointed to the correct Password Manager Self
1. `HKLMSoftware[Wow6432Node]PoliciesNetWrixPassword Manager`
2. `HKLMSoftware[Wow6432Node]NetWrixPassword Manager Self-Service client (is used if there is no value in the 1st key)`

![User-added image](./images/ka04u00000116bh_0EM7000000052KG.png)
![User-added image](../0-images/ka04u00000116bh_0EM7000000052KG.png)

- If the server URL value is correct, but the server is temporarily unavailable, the error is expected for users who enrolled via web.
- If you need an option to reset the password in disconnected mode, enroll through the Enrollment wizard locally from the machine.
Original file line number Diff line number Diff line change
Expand Up @@ -47,10 +47,10 @@ Verify all possible reasons mentioned above:
- Click **Advanced** and go to **Effective Permissions** tab
- Specify the name of the service account and check effective permissions

![User-added image](./images/ka04u00000116eK_0EM700000004y5b.png)
![User-added image](../0-images/ka04u00000116eK_0EM700000004y5b.png)

3. In Active Directory Users and Computers, open the required account`s **Properties** dialog, switch to the **Delegation** tab and select the **Trust this computer for delegation to any service (Kerberos only)** option.

![User-added image](./images/ka04u00000116eK_0EM700000004y5W.png)
![User-added image](../0-images/ka04u00000116eK_0EM700000004y5W.png)

4. Try to delete the computer from your domain and then add it back.
Original file line number Diff line number Diff line change
Expand Up @@ -40,11 +40,11 @@ If you are using single server installation, make sure that the `gina_set_answer
4. Select `gina_set_answers.asp` (or `gina_set_answers_anonymous.asp` respectively) from the list
5. Right-click it and select **Switch to Features view**

![User-added image](./images/ka04u00000116eO_0EM700000004xJ3.png)
![User-added image](../0-images/ka04u00000116eO_0EM700000004xJ3.png)

6. Select **Authentication** under IIS group
7. Make sure **Windows authentication** is **Enabled** and all other are Disabled

![User-added image](./images/ka04u00000116eO_0EM700000004xJI.png)
![User-added image](../0-images/ka04u00000116eO_0EM700000004xJI.png)

NOTE. For DMZ setup, `gina_set_answers.asp` should have **all** authentication types set to **Disabled**. `gina_set_answers_anonymous.asp` should only have **Windows authentication** set to **Enabled** and all other types of authentication set to **Disabled**.
22 changes: 18 additions & 4 deletions docs/kb/passwordreset/index.md
Original file line number Diff line number Diff line change
@@ -1,18 +1,32 @@
---
title: "Password Reset Knowledge Base"
description: "Password Reset knowledge base articles and troubleshooting guides"
description: "Knowledge base articles for Netwrix Password Reset (versions 3.3 and 3.23)"
slug: passwordreset
---

# Password Reset Knowledge Base

Welcome to the Password Reset knowledge base. Browse our collection of troubleshooting guides, configuration instructions, and best practices.
Welcome to the Netwrix Password Reset knowledge base. This section contains troubleshooting guides, configuration instructions, best practices, and reference materials for Password Reset versions 3.3 and 3.23.

Use the search function above to find specific articles or browse through all Password Reset KB articles in this section.
## Browse by Category

- **Enrollment and User Setup** - User enrollment workflows, enrollment errors, and onboarding processes
- **Portal Access and Authentication** - Portal login issues, session management, and authentication troubleshooting
- **Configuration and Customization** - System configuration, localization, language settings, and UI customization
- **Security and Administration** - Security configurations, permissions, certificates, and administrative operations
- **Reporting and Monitoring** - Report generation, data console usage, and monitoring capabilities
- **Deployment and Infrastructure** - Load balancing, clustering, migration, and infrastructure setup
- **Integrations and Notifications** - Email/SMTP configuration, SMS verification, and third-party integrations

## Quick Links

- [Password Reset Documentation](https://docs.netwrix.com/docs/passwordreset/)
- [Netwrix Support](https://www.netwrix.com/support.html)
- [Product Downloads](https://www.netwrix.com/downloads.html)

## Need Help?

If you can't find what you're looking for:
1. Use the search function above
2. Check the main Password Reset documentation
3. Contact [Netwrix support](https://www.netwrix.com/support.html)
3. Contact [Netwrix Support](https://www.netwrix.com/support.html)
Original file line number Diff line number Diff line change
Expand Up @@ -40,7 +40,7 @@ The Twilio CLI allows to manage phone numbers, call Twilio APIs, and test webhoo
1. **Account SID**
2. **Auth Token**

![Group 115 (1).png](./images/ka04u00000116uq_0EM4u000008LdZI.png)
![Group 115 (1).png](../0-images/ka04u00000116uq_0EM4u000008LdZI.png)

8. In Netwrix Password Reset SMS Verification Settings, setup **Command** and **Parameter**

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ knowledge_article_id: kA00g000000H9aXCAS

When a user tries to browse to the self-service portal they receive an error message that an error occurred on the server when processing the URL.

![User-added image](./images/ka04u00000116cx_0EM700000005ODC.png)
![User-added image](../0-images/ka04u00000116cx_0EM700000005ODC.png)

---

Expand All @@ -46,13 +46,13 @@ The most common reason is access permission issues. For example, if some files a

1. Run IIS, and select the web site that Netwrix Password Reset is installed to.

![User-added image](./images/ka04u00000116cx_0EM700000005ODW.png)
![User-added image](../0-images/ka04u00000116cx_0EM700000005ODW.png)

2. Select the **ASP** feature in the central pane.

3. Expand **Debugging Properties** and set **Send errors to browser** to **True**.

![User-added image](./images/ka04u00000116cx_0EM700000005ODb.png)
![User-added image](../0-images/ka04u00000116cx_0EM700000005ODb.png)

## Disable user-friendly errors in Internet Explorer

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ knowledge_article_id: kA00g000000H9aeCAC

When trying to access the Admin or Helpdesk portal, in both cases you receive an IIS login prompt that you are unable to get past.

![User-added](./images/ka04u00000116eiAAA_1.png)
![User-added](../0-images/ka04u00000116eiAAA_1.png)

You have verified that username and password are correct.

Expand Down Expand Up @@ -53,7 +53,7 @@ To resolve the issue please verify the following:
3. In the **Properties** dialog, open the **Directory Security** tab, and select **Edit** for **Authentication and Access Control**.
4. In the **Authentication Methods** dialog, select either the **Integrated Windows authentication** box or **Basic authentication** (password is sent in clear text), and clear all other authentication options for Authentication access.

![User-added](./images/ka04u00000116eiAAA_2.png)
![User-added](../0-images/ka04u00000116eiAAA_2.png)

To ensure the required settings are enabled in **IIS7**, do the following:

Expand All @@ -63,7 +63,7 @@ b) In the Manager central pane, double-click the **Authentication** option.

c) In the Authentication list, enable either the **Windows Authentication** option or **Basic Authentication**, and disable all other authentication options.

![User-added](./images/ka04u00000116eiAAA_3.png)
![User-added](../0-images/ka04u00000116eiAAA_3.png)

3. The account you are using has READ access to the physical directory of the Web-portal (by default `C:Program Files (x86)Netwrix Password Manager`).

Expand All @@ -72,4 +72,4 @@ c) In the Authentication list, enable either the **Windows Authentication** opti
2. In the **Internet Properties** dialog, open the **Connections** tab and click the **LAN settings** button.
3. Make sure the **Use a proxy server for your LAN** option is not enabled. Otherwise, make sure the **Bypass proxy server for local addresses** option is enabled too; in this case the Help-Desk portal must be a member of the **Local intranet zone**, or specified as an exception.

![User-added](./images/ka04u00000116eiAAA_4.png)
![User-added](../0-images/ka04u00000116eiAAA_4.png)
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ knowledge_article_id: kA00g000000H9anCAC

A user receives a Session expired message when trying to reset their password using the Self-Service portal.

![User-added image](./images/ka04u00000116eY_0EM700000005OD2.png)
![User-added image](../0-images/ka04u00000116eY_0EM700000005OD2.png)

## Cause

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -25,11 +25,11 @@ knowledge_article_id: kA00g000000H9aUCAS

While downloading a report from the Netwrix Password Reset Helpdesk portal, no error messages are displayed but the report can not be downloaded.

![User-added image](./images/ka04u00000116ed_0EM700000005b6x.png)
![User-added image](../0-images/ka04u00000116ed_0EM700000005b6x.png)

Reports are actually generated as html files. To make them available for download, Password Manager saves them in .csv format in the Helpdesk physical path folder (by default `C:\Program Files (x86)\Netwrix Password Manager\Web`)

![User-added image](./images/ka04u00000116ed_0EM700000005b7b.png)
![User-added image](../0-images/ka04u00000116ed_0EM700000005b7b.png)

If the time period (for the Activity Report) or Number of users in monitored domains are large, then report files might be several megabytes in size.

Expand All @@ -46,6 +46,6 @@ In order to do it:
5. Change **Response Buffering Limit** to `10485760` (10 MB) or more
6. Click **Apply** under **Actions** at the top of the right pane

![User-added image](./images/ka04u00000116ed_0EM700000005b7g.png)
![User-added image](../0-images/ka04u00000116ed_0EM700000005b7g.png)

If the above does not help, try restarting IIS with the `iisreset` command after making the changes.
Original file line number Diff line number Diff line change
Expand Up @@ -24,11 +24,11 @@ knowledge_article_id: kA00g000000H9ddCAC

Password Manager has two reports that might be useful for monitoring: the **User Activity report**, which shows all activities of a user within the application — enrollment, successful and failed password reset and change attempts, unlock operations — between two specified dates; and the **User Enrollment report**, which queries all users of all managed domains and shows if they are enrolled or not. The enrollment report also shows the OU that a user belongs to and the e-mail address specified during enrollment (the e-mail address is only requested if the Additional authentication feature is enabled). Reports can be generated online, or downloaded in `.csv` format.

[![User-added image](./images/ka04u00000116SD_0EM700000005OFh.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000Xe0Q&feoid=00N700000032Pj2&refid=0EM700000005OFh)
[![User-added image](../0-images/ka04u00000116SD_0EM700000005OFh.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000Xe0Q&feoid=00N700000032Pj2&refid=0EM700000005OFh)

To get to the Reports page:

1. Log in to the Helpdesk portal.
2. Click the **Reports** button under **Summary**.

[![User-added image](./images/ka04u00000116SD_0EM700000005OFm.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000Xe0Q&feoid=00N700000032Pj2&refid=0EM700000005OFm)
[![User-added image](../0-images/ka04u00000116SD_0EM700000005OFm.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000Xe0Q&feoid=00N700000032Pj2&refid=0EM700000005OFm)
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ knowledge_article_id: kA00g000000H9akCAC

When a user tries to reset the password via Self-Service portal they receive "Access Denied" error or "Insufficient permissions"

![User-added image](./images/ka04u00000116eU_0EM700000005OEF.png)
![User-added image](../0-images/ka04u00000116eU_0EM700000005OEF.png)

---

Expand Down Expand Up @@ -59,4 +59,4 @@ To resolve the issue:
1. Start **Server Manager a**nd find the user account in **Active Directory Users and Computers**, right-click the user and select **Properties**.
2. On the **Account** tab in the **Account options** list, make sure that **User cannot change password** is NOT selected.

![User-added image](./images/ka04u00000116eU_0EM700000004xbM.png)
![User-added image](../0-images/ka04u00000116eU_0EM700000004xbM.png)
15 changes: 7 additions & 8 deletions sidebars/passwordreset/3.23.js
Original file line number Diff line number Diff line change
@@ -1,17 +1,16 @@
// DIAGNOSTIC TEST: const generateKBSidebar = require('../../src/utils/generateKBSidebar');
const generateKBSidebar = require('../../src/utils/generateKBSidebar');

module.exports = {
sidebar: [
{
type: 'autogenerated',
dirName: '.',
},
// DIAGNOSTIC TEST: Comment out entire KB section
// {
// type: 'category',
// label: 'Knowledge Base',
// collapsed: true,
// items: generateKBSidebar('passwordreset')
// },
{
type: 'category',
label: 'Knowledge Base',
collapsed: true,
items: generateKBSidebar('passwordreset')
},
],
};
Loading