diff --git a/docs/kb/passwordreset/portal-access-and-authentication/password-reset-link-missing-duo-and-ppe-client.md b/docs/kb/passwordreset/portal-access-and-authentication/password-reset-link-missing-duo-and-ppe-client.md new file mode 100644 index 0000000000..bc53a6742f --- /dev/null +++ b/docs/kb/passwordreset/portal-access-and-authentication/password-reset-link-missing-duo-and-ppe-client.md @@ -0,0 +1,67 @@ +--- +description: >- + If the Password Reset link is missing in the Netwrix Password Reset client and Duo MFA and Password Policy Enforcer Client are both in the environment. This article explains the steps and registry settings needed to get Password Reset Client, Password Policy Enforcer Client, and Duo MFA working together. +keywords: + - password reset + - Password Reset client + - Duo + - ProvidersWhitelist + - registry + - Password Policy Enforcer Client + - GUID + - third-party credential provider +products: + - passwordreset +sidebar_label: Password Reset Link Missing with Duo and PPE Client +tags: + - kb +title: "Password Reset Link Is Missing with Duo and PPE Client Installed" +knowledge_article_id: "" +--- + +# Password Reset Link Is Missing with Duo and PPE Client Installed + +## Symptom + +The reset link is missing for Netwrix Password Reset when Duo MFA and Netwrix Password Policy Enforcer Client are installed. + +## Cause + +Multiple Credential Providers in the environment can conflict when you do not configure them correctly. Ensure that the credential stacks are in the correct order. + +The ProvidersWhitelist registry value must be added to the system to allow the Netwrix Password Reset Client and Netwrix Password Policy Enforcer Client to work together with Duo MFA. + +## Resolution + +1. Uninstall the following in this exact order: + - Duo MFA + - Netwrix Password Reset (NPR) Client + - Netwrix Password Policy Enforcer (PPE) Client + +2. Reboot the system. + +3. Reinstall the following in this exact order: + + > **IMPORTANT:** Restore any Duo settings that the uninstallation process may have removed before proceeding with the reinstall order below. + + - Duo MFA + - PPE Client + - NPR Client + +4. Add a ProvidersWhitelist multi-string value of `{407DAD37-1BA1-49BB-8401-45B22F5EF77C}` following the [Duo instructions ⸱ Duo 🡥](https://help.duo.com/s/article/4041?language=en_US). + +5. Press CTRL+ALT+DEL and select **Change Password**. + +6. Verify that PPE policies appear and that the Password Reset link appears on the Lock Screen. + +> **IMPORTANT:** If the Password Reset link is still missing or the PPE Client is not showing policies, confirm that the following registry values are not present on the machine: + > + > ``` + > [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\ANIXIS\Password Reset Client] + > "PreferredProvider"="{44E2ED41-48C7-4712-A3C3-250C5E6D5D84}" + > "PreferredProviderUsernameField"=dword:00000001 + > "PreferredProviderFriendlyNameField"=dword:00000000 + > "PreferredProviderConfirmPasswordField"=dword:00000004 + > "PreferredProviderResetPasswordLinkField"=dword:00000006 + > "PreferredProviderLogOnToField"=dword:00000008 + > ``` \ No newline at end of file