PDQ Deploy and WatchGuard

We use a WatchGuard firewall for Single Sign-On authentication exiting our network. After deploying a package such as Java to selected PCs, my adminpdq account refuses to release its WatchGuard authentication. 

This causes the Users on those PCs to be invalidated on the WatchGuard firewall and blocking them from reaching the internet until they restart the PC.

I can go into WatchGuard and manually log off adminpdq on those PCs, but it immediately reauthenticates adminpdq thus blocking the user again.

Any ideas about what is going on here?

PDQDeploy version 14 Release 2

Java package is set to Push and run as Deploy User (adminpdq)

One Install step with a custom command line of: jre-8u144-windows-x64.exe INSTALL_SILENT=Enable AUTO_UPDATE=Disable SPONSORS=Disable WEB_ANALYTICS=Disable REMOVEOUTOFDATEJRES=1

This package is deployed to only 11 targets, but they range in OS including: Windows 10 1703, Windows 8.1, Windows Server 2008 R2, and Windows Server 2012.

 

 

 

 

 

0

Comments

4 comments
Date Votes
  • Are you using the SSO Client or the Event Log Monitor?

    0
  • SSO Client

    0
  • Is there any way to make Watchguard ignore the PDQ user? My theory is that the SSO Client either doesn't update when a user logs off or it doesn't know how to tell when PDQ closes its non-GUI session. 

    Can you run a test for me please?

    1. Have User A log into a PC.
    2. Lock the PC.
    3. Have User B log into the PC.
    4. Have User B log out of the PC.
    5. Does Watchguard show User A or B?
    0
  • Sorry it took me a bit to get back to this. My results agree with your theory. Now, just to find a way to get WatchGuard to ignore a certain user.

    Have User A log into a PC.
    Watchguard shows user A authentication
    Lock the PC.
    Watchguard shows user A authentication
    Have User B log into the PC.
    Watchguard shows user B authentication
    Have User B log out of the PC.
    Watchguard shows user B authentication
    Does Watchguard show User A or B?
    Watchguard shows user B authentication
     
     

     

     

    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post