FAQ NetWrix Password Manager
|Q1: Are the verification questions/security answers encrypted?
A1: The verification questions are public, and they are stored in the plain text format. The secret answers are encrypted with the one-way MD5 hash function.
Q2: When logging into the Password Manager Helpdesk Portal, is there a way to input the AD user name without adding the domain name as a prefix?
A2: NetWrix Password Manager Helpdesk Portal relies on Windows Authentication, which requires the domain name to be entered, not just the user name.
Q3: Does the licensing for Password Manager include the Microsoft Windows Logon GINA Extension?
A3: The license for the Password Manager software includes the Windows Logon GINA extension.
Q4: Does Password Manager support 2048 bit encryption on SSL?
A4: Yes, if your web browser and IIS server support it. The GINA extension uses the Microsoft Internet Explorer engine to communicate with the web server, so the support of 2048-bit encryption on SSL totally depends on the version of IE installed in the system.
Q5: After applying a binding to the Password Manager site (or changing from http:// to https://), the shortcuts found in All Programs->NetWrix->Password Manager do not work.
A5: By design, any changes to the Admin, Helpdesk and Self-Service shortcuts are disabled. Delete the old shortcuts and manually create new ones.
Q6: The freeware version of Password Manager indicates that the 20-day trial has expired.
A6: The freeware edition requires a license to be entered. Open the Administrative Portal, click the License button and specify the following license:
License name: NetWrix Password Manager Freeware License
License count: 50
License code: e2f5d1-addef6-82a5cb-f80d7f-342223
Q7: "This portal is temporarily unavailable, please contact your IT helpdesk" error message comes up when trying to open the Self-Service Portal.
A7: This message indicates that all options on the User Options tab of the Settings in the Administrative Portal are disabled. To resolve this issue, enable these options as necessary.
Q8: A user gets the following error message “Administrator restricted access to users of your domain” during any operation with the Self-Service portal.
A8: Go to the Administrative Portal -> Roles and make sure that the Self-Service Access is granted to 'Everyone'.
Q9: The product does not deliver email notifications on account lockouts.
A9: In NetWrix Account Lockout Examiner Console, navigate to File --> Settings. Open the Notifications tab and make sure that the SMTP server you specified is up and running, and that there is no firewall blocking the connection to the server.
Q10: NetWrix Password Manager audits the DC a hundred times a second. It is slowing the domain controller down with too many audits.
A10: This is a known issue with NetWrix Password Manager and NetWrix Active Directory Change Reporter compatibility. Active Directory Change Reporter requires a specific audit settings configuration and the Password Manager continually accesses one of the audited objects. To resolve this issue, contact NetWrix Technical Support for the most recent version of the Password Manager software.
Q11: Every time the server where NetWrix Account Lockout Examiner Service is installed is rebooted, a message is returned saying that the license has expired.
A11: Make sure that the Account Lockout Examiner service account has the local administrative privileges.
Q12: Server CPU is running at 100% caused by the PRMService and web portals are non-operational.
A12: This is a known issue that was addressed in the latest NetWrix Password Manager version. Contact NetWrix Technical Support to get the latest product version.
Q13: How do I upgrade NetWrix Password Manager to a newer version?
A13: To upgrade NetWrix Password Manager to a newer product version, simply run the installer. It will upgrade all system files automatically. Note that the installer only updates the default files and folders, and ignores files and folders added manually. If you have a non-standard configuration (for example, you have two Self-Service Portals with a separate folder for the second portal which was created manually), you will have to update the files in the non-default folder by copying them manually.
Q14: How does NetWrix Password Manager handle expired accounts? Will the product reset or extend them?
A14: The product does not do anything to expired accounts. NetWrix Password Manager will simply display a message that an account has expired.
Q15: NetWrix Password Manager crashes or consumes a lot of memory.
A15: This is a known issue that has been fixed in the latest product version. Contact NetWrix Technical Support to get a download link.
Q16: When I enter the new license, the user counter is reset. Do I lose my previously counted users?
A16: NetWrix Password Manager license counts active users (per username).
When users perform any operation (enroll, reset password, unlock account) via Password Manager, they are counted. Your users were counted during the enroll procedure. When you enter the new license, the counter is reset. The users will be counted again, if they perform any action, so neither the users' nor enroll information is lost.
Q18: Is NetWrix Password Manager compliant with the PCI regulation?
A18: Yes, NetWrix Password Manager is PCI Compliant. Learn more about PCI compliance of NetWrix products.
Q19: Where can I find the version number?
A19: The version number can be found in two ways:
1) On the Details tab of the Properties dialog of the PRMServcie.exe file located Password Manager installation directory.
2) On the Updates tab of Settings on the Administrative portal. Please note, the Current version field may be empty for older product versions. in this case, use the first method.
Q20: Is there a way for NetWrix Password Manager to automatically de-enroll users that no longer exist? When an employee leaves, we disable the account and then delete it. Will we also need to manually delete the profile from NetWrix Password Manager ?
A20: Starting from the version 6.2.774 of NetWrix Password Manager, there is a similar functionality - non-existing users are marked in the Help Desk portal as "Not found".
Q21: After the Netwrix Password Manager client is installed, some of our users get a pop up asking to "Insert a Smart Card" when launching Microsoft Lync 2010 and/or Outlook 2010.
A21: It is a known issue of some versions of Password Manager Self-Service client. Contact NetWrix Technical Support to get the latest version of the software.
Q22: Will changes to web-portal affect enrolled computers?
A22: Computers do not get enrolled, users do. Data is stored locally on the Password Manager server and is not affected by web-site properties and configurations. You can easily change URL/bindings, or set up redirects, etc.