PGP Universal Server Version 3.2

I have been tasked with creating a new MSI for PGP.  Also I would like to set up the consumer policy to disable the SSO feature and use a generic password if possible.  So when a device is powered on the user will type the generic password and not auto login with that account.
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

It's all in the manual. Did you read it?

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
bhiller06Author Commented:
Looking for a little more information.  I have browsed over the Admin guide but not seeing actual instructions.  I see SSO referenced one time but no instructions to disable it in the consumer policy.
Did you find what you were looking for?
Acronis True Image 2019 just released!

Create a reliable backup. Make sure you always have dependable copies of your data so you can restore your entire system or individual files.

bhiller06Author Commented:
Right now I have set Deny encryption of disks to existing Windows Single-Sign On password.  Require Standard passphrase authentication.  I also have set Encrypt WDE disk to a Disk administrator passphrase with a set passphrase.  Under WDE BootGuard Customization I have set display simple authentication field.    I moved my user into the group that is pointed to the consumer policy.   I am having issues with enable silent enrollment that I enabled.  Every user that logs in is requested to enroll.  After a reboot depending on what group the user is in they may SSO login screen when powering on the PC.  I was hoping this would be a device specific setting.
Do I understand you correctly: you have denied sso for all users in question before they enrolled but sso is active for them? I find that hard to believe. Or did you deny sso after enrollment?
bhiller06Author Commented:
With all the new policies set and a fresh install I am getting this error when silently enrolling users.  Could not start disk encryption err: -12000.  I corrected the earlier issue.  My account was nested to another policy.  I am using the PGP_INSTALL_DISABLESSOENROLL=0
"Could not start disk encryption err: -12000." - oh, how I LOVE these errors.
We used Symantec Desktop for three years and had these 12000-errors sometimes. It's such a crappy software! Bitlocker does not produce a tenth of the difficulties we had with Symantec!
(sorry, had to say this :( )

Ok, you should try to reset your profile like this:
net stop pgpserv
taskkill /im pgptray.exe /f
dir /b c:\users >%temp%\users.txt
for /f %%a in (%temp%\users.txt) do rd "c:\users\%%a\AppData\Roaming\PGP Corporation" /s /q
net start pgpserv
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PGP\PGP Desktop.lnk"

Open in new window

Execute it as admin and elevated.
Code is outdated, it was from a time before symantec aquired PGP, but I guess it will work, when you adjust the paths. The main part is deleting the folder below appdata.
bhiller06Author Commented:
I ran the script and made sure the PGP Corporation is deleted but still receiving the error after I log off and back on.   I agree we may be headed over to MBAM.  I only get an error on the account that is applied to this new consumer policy.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.