Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-8642: Local user profiles are being created on host machines running the Centrify Connector

23 November,17 at 02:45 PM

Applies to:


Centrify Identity Service



Problem:


On the host machines, running the Centrify Connector, local user profiles are created, despite the User never having logged on to the Connector host. 



Cause: 



The profiles get created by the Directory Services API when the call for  "ChangePassword" happens, when a User uses the Self Service Password reset option from the User portal>Account tab IF they have rights to "Logon Locally" to the Connector host. 



Workaround:


None



Resolution:


To prevent this from occurring, the following steps can be taken. Note that this will not delete the profiles already created, but instead will prevent any further profiles from being created. 


1) On each Connector host machine, login as an Administrator and open up the Local Group Policy Editor by typing gpedit.msc in the Run box.

     User-added image


2) Navigate to "Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment."

     User-added image


3) Click on "Allow log on locally" and remove "Users" and "Backup Operators" and click "apply."

     User-added image

Note- Default settings to "Allow logon locally" are;
 
• On workstations and servers: Administrators, Backup Operators, Power Users, Users, and Guest.
• On domain controllers: Account Operators, Administrators, Backup Operators, and Print Operators. 




For additional information not covered in this guide or troubleshooting assistance, please review Centrify Online Help or visit the Centrify Customer Portal at support.centrify.com.

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.