Power-on password and windows logon

Hi,
I have just purchased two T61p's (by accident without the fingerprint reader). From a previous T60p I know that I could configure a poweron password (using the fingerprint) and when that was accepted the system would boot up and log my right into Windows since I was already authenticated.
Now, I would like to configure the same thing with these new T61p's using a poweron password (typed on the keyboard). I have tried to figure out how to do it (e.g. under Client Security Solution/Advanced/Manage security policies) - but so far without success. It still prompts me for the Windows password as well.
I have talked to Lenovo Support but it seems that they only support "genuine" Windows startup issues.... And Client Security Solution is a third-party program that they are not trained in - and thus cannot support.... - although this program (and others in the same category) are under Lenovo copyright etc. etc. if you look under "Help - About". Very strange (seen from a customer viewpoint)... However, the supervisor I ended up talking to was of the personal opinion that the above setup should be possible although he could not remember how to configure it (and could not officially support/help on the issue).
Any ideas would be appreciated.
Thank you in advance!
John

OK - I left the domain and ran FP Mgr Pro and lo and behold, no fingerprints were enrolled. Unfortunately, when I tried to enroll the fingers that I use for the FP reader, the machine told me that the fingerprints were already enrolled. Recall that I did not delete the fingerprints that were enrolled under the domain before attempting to enroll at the machine level.
Then - I deleted the fingerprints at the domain level and deleted the fingerprints at the BIOS level. I then logged in at machine level and enrolled fingerprints.
I rebooted and the machine asked for FPs at power on password and accepted my print. Unfortunately, it booted me through power on and Windows security into machine level, not my domain which is where I need to be.
This is very frustrating.

Similar Messages

Compatibility issue between your power management system and Windows 8.1

I have purchased a new Lenovo Ideapad S410 and have this problem.
Compatibility issue between your power management system and Windows
It also gives a message "Your PC ran into a problem and needs to restart. We're just collecting some error info, and then we'll restart for you. (100% complete)
If you'd like to know more, you can search online later for this error:
VIDEO DXGKRNL FATAL ERROR
Please help! My laptop is only 5 days old.

What model do you have? Can you post your MTM or model name?
Sometimes these messages are a false alarm.

Compatibility issue between your power management system and Windows,

Compatibility issue between your power management system and Windows, and my system is Lenovo ACPI-Compliant Virtual Power Controller.

What model do you have? Can you post your MTM or model name?
Sometimes these messages are a false alarm.

Leap authentication and windows Logon

Folks,
Is it possible to login only one into windows and not login to the leap client, assuming that you are using ACS whihc is point LEAP credidentails to the WINDOWS domain controller so same password and username. Users in my company do not want to logon twice (windows and leap client) with the same credidentails.
Thanks

If you mean you want to still use LEAP but only want the users to have to log into WIndows to do so then the anser is yes. You just need to configure this on the ACU application. Under the profile go to Edit,Network Security. Make sure that you have LEAP selected. Click the configure button. Select Use WIndows Logon User Name and Password. That should do it. Take a look at the screen shot. Please be aware that the authenticatio will appear to be hung on the finding a Domain Controller section. Just give it about a minute or so to complete. Cisco is working on fixing this. Usually if you hit cancel once it gets to that point it still authenticates you and takes you onto your desktop.
Please remember to rate all replies.

Fingerprint and Windows Logon

How can I use the Lenovo Fingerprint Software AND the Windows Logon with keyboard?
The Fingerprint-Software works very well, but my colleague would have both options.
When I want to use the keyboard for logon, there is a error message that requires the fingerprint logon.
How can I configure this system with both logon-options???

Well, it was working great, but now that I've let it sit in the bag with only the battery connected for about 10 hours, it's back to the same behavior.
The reader on my T500 was perfect. Not sure what's going on here, but this issue makes it unusable with the 3 try limit in the BIOS.

Supervisor password and windows restoring problem

hello everyone ,
I bought my toshiba satellite L755 5 months ago but the windows just crashed down and when I try restoring the windows factory setting by holding the 0 button while turning on the laptop it requires a supervisor password which I didn't set !
please help me what should I do ?!

Hi Alex,
any chance that the password (WPA or WPA2 I assume) contains special keys/characters like * / and/or also international ones like ä ü ö ß ?
These can be troublesome with using different operating systems.
Such characters can be coded differently on different operating systems like OSX or Windows so that the pass-phrase isn't compatible anymore.
Since the PSK is stored in the router, using such a PSK with different operating systems can lead to a scenario where you can connect to the router with OSX but not with Windows, for example.
I personally avoid such special characters and instead use the full length of the PSK and mix numbers and upper/lower characters.
Regards
Stefan

Reconnect, Expired Password and Grace Logon

Hi I am trying to find a better way of implementing grace logons when a password has expired in a web application. The problem is the LdapContext is not serializable therefore we cannot put it in an HTTP Session and allow clusterability. Also storing the user ID/password in order to recreate the context in the session would not help as recreating the context would use up a grace logon.
In two projects I have done with the workarounds of increasing the grace login limit from n to 2n+1 (basically 1 login to get through the login page, and another login to change the password allowing for 2 tries in case they reused their old password).
The other more recent one I just stored the Context in the HTTP Session with the caveat that the application may not be clustered. I have documented it earlier in http://www.trajano.net/2007/04/ldap-logon-and-password-management.html
The test case I wanted to do was something like this:
Serializable someSerialiazableObject;
HashTable envWithAuthData = new HashTable();
envWithAuthData.put(Context.PROVIDER_URL, providerURL);
envWithAuthData.put(Context.SECURITY_PRINCIPAL, userDN);
envWithAuthData.put(Context.SECURITY_CREDENTIALS, userPassword);
envWithAuthData.put(Context.SECURITY_AUTHENTICATION, "simple");
LdapContext c = new InitialLdapContext(envWithAuthData, null);
// THIS DOES NOT EXIST
someSerialiazableObject = c.getSomeReconnectionData();
HashTable envWithNoAuthData = new HashTable();
envWithNoAuthData.put(Context.PROVIDER_URL, providerURL);
envWithNoAuthData.put("ReconnectData", someSerialiazableObject);
LdapContext c = new InitialLdapContext(envWithAuthData, null);
c.operationThatCanOnlyBeDoneByAnAuthenticatedUser();
}I have tried looking at reconnect, getRequestControl etc, but I am not able to find any useful information.

Though it is not a full solution, utilizing Proxy Authorization can get me past a few issues. Howeevr, it is not available with every directory server, I would much like it if it were possible to do it in a more vendor neutral fashion.
[http://www.ibm.com/developerworks/tivoli/library/t-ldappatds/index.html|
The code that is in there does not seem to work with Apache DS

Power-on password and fingerprint reader

Hello! I am trying to enable power-on fingerprint authentication on T420, set everything everywhere like I did on my T61, but still every time after this
I got this
and prompt for password right after. What am I missing?

Hi tasafoni,
My TVT fingerprint settings and am able to login without entering password in BIOS. Note that the screenshot is taken from T410.
Check and see if you have the same.
Check out the Community Knowledge Base for hints and tips.
Did someone help you today? Press the star on the left to thank them with a Kudo!
If you find a post helpful and it answers your question, please mark it as an "Accepted Solution"!
X240 | 8GB RAM | 512GB Samsung SSD

Leap and windows domain logon

I'm doing some test with an Air 1200 and some 352 Pc card for one of our customers.
With ACU ver. 4.25.23, I enabled LEAP authentication using the windows user name and password.
Leap authentication is successful, while windows domain logon not.
Not to say using a "normal" NIC that logon succeed.
Sniffing the packets that come out the AP, it seems the domain logon happens... I see the requests/answers between my client and the domain controller...
However, after canceling the windows domain logon I have normal connectivity with the entire network.
Someone experienced that? Any help will be greatly appreciated.
Antonio Tassone

Sure.
My attempts to logon in a windows domain using the same user/password for LEAP authentication and windows logon were unsuccessful (either using Win9x or Win NT/2000 on the client), indeed the login dialog box was stuck in something like "searching primary domain controller" or similar (I'm sorry but it's been some month ago).
Looking the Radius server log, I found an error like " xxxxx DLL rejected".
Searching the Cisco web site and the forums for that error, I read the advice to make the authentication services on the NT server to run with the privileges of one of the Windows Domain Administrator accounts.
Following that advice, and with some other tweaking explained in the document I read, I reached my goal.
I regret I can't be more precise.
Regards.

Resetting hpg61 power on password

Forgot my Hp G61 power on password and its saying system disable 56623936
This question was solved.
View Solution.

Check your PM
****Please click on Accept As Solution if a suggestion solves your problem. It helps others facing the same problem to find a solution easily****
2015 Microsoft MVP - Windows Experience Consumer

Is ther any way of filling credentials in Windows logon using script?

Hello,
Is there any way to fill in login and password at windows logon using a script (that would be started via psexec)? Bat would be great, but any other is ok too. Nothing more, no mapping. Just logon.
I've spent a few days searching for this info, and haven't found any usefull info. Anyone tried such thing?
Cheers,
K.
PS. Sorry if I'm writing in the wrong section. Not shure where this topic should go.

There is no way to do this in Windows, Unix or any other system.
You can set a Windows account to "auto-logon" but only one account can be set per machine.
¯\_(ツ)_/¯

BIOS password (power-on password) replacement by fingerprint on x61s

Hello, just bought x61s (type 7669) and want to know whether (and how) I can set fingerprint login for power-on password.
Thanks
On Lenovo web I found only "BIOS password (also known as power-on password) replacement is currently available on select ThinkPad notebook systems" which is not really helpful for me
Message Edited by snowbuk on 08-06-2008 09:19 AM
Solved!
Go to Solution.

hi snowbuk,
try this:
1. set the power-on password within bios (save and reboot)
2. go to "ThinkVantage Fingerprint Software"->fingerprints->register fingerprints->power-on password
and add a new fingerprint (click on empty field above windows password)
3. check "ThinkVantage Fingerprint Software"->security with power-on->
and enable using fingerprints for startup (save and reboot system)
plz check whether this works
christian

Administrator / Power on Password

Everytime I start my laptop I have to typ in my password. I was stupid to set a password. I did that on accident
However when I typ my password wrong 3 times. I get this code :''59293696''
What does this mean? And how can I disable the password?
- Danny
This question was solved.
View Solution.

Hi,
Enter: 46191218
To remove the need for a power on password as follows - use the above code where necessary.
Shut down the notebook. Tap away at the esc key as soon as you press the power button to access the Start-up menu and then select f10 to enter the Bios menu. Use the arrow keys to highlight the Security tab and hit enter. Use the arrow keys again to highlight power on password and hit enter. Enter the current password ( use the code above ) and then for the new password, just leave this blank and hit enter - do the same for the confirmation field. Press f10, select to save the new settings and hit enter.
Regards,
DP-K
****Click the White thumb to say thanks****
****Please mark Accept As Solution if it solves your problem****
****I don't work for HP****
Microsoft MVP - Windows Experience

Admin or power up password hp g6

hello
am getting code 68082422
thx
nick
This question was solved.
View Solution.

Hi Nick,
Enter: 39193819
Then see if you can remove the need for a power on password entirely as follows - use the code above where necessary.
Shut down the notebook. Tap away at the esc key as soon as you press the power button to access the Start-up menu and then select f10 to enter the Bios menu. Use the arrow keys to highlight the Security tab and hit enter. Use the arrow keys again to highlight power on password and hit enter. Enter the current password ( use the code above ) and then for the new password, just leave this blank and hit enter - do the same for the confirmation field. Press f10, select to save the new settings and hit enter.
Regards,
DP-K
****Click the White thumb to say thanks****
****Please mark Accept As Solution if it solves your problem****
****I don't work for HP****
Microsoft MVP - Windows Experience

Does the power-on password fully protect user data?

Hi,
I am a T61 user.
First question
Does the power-on password fully protect user data, or could someone just boot from the optical drive or another source?
Second question
If I were to use full disc encryption, could I easily unecrypt it in the future?
Thanks in advance!

As mostly with everything in life, there are pros and cons related to all sort of data protection schemes. At least in therory, everything that can be encripted may also be decripted in some way, be it via reverse engineering or some other technique. - But of course some sort of protection is always better than no protection at all, especially if you deal with lets say sensible data.
The power-on password is not a full data protection at all, to get an idea of the different password protection schemes take a look at the following short descriptions here...
--> http://www.tech-faq.com/ibm-thinkpad-bios-password.shtml
...there are some ways to reset a power-on password and informations how to do so can be found on the net. Further it doesn't help much if somebody takes out the whole harddrive of your Thinkpad.
Performing a full HDD encription, via an embedded ATM hardware chip inside the Thinkpad, or even using some OS related encription mechanism would be more secure for sensible data, as long as you don't get hardware or software trouble with those parts, which are responsible for the build-in encription/decription scheme. So it's always also a good idea to also perform additional periodically backups of your sensible data, so if some worst case scenario might appear, that you are still be able to restore your valuable data.
Hope this gives you at least a little idea about the pros and cons of both of these security schemes.
Message Edited by vkyr on 02-19-2008 01:48 AM
ThinkPad T60/X32/600/770 · IBM IntelliStation · 3x IBM SpaceSaver II

Power-on password and windows logon

Similar Messages

Maybe you are looking for