Frequently Asked Questions
v-GO® SSPRTM 6.0
Authentication
2. What if v-GO SSPR does not allow a user to reset, are they permanently locked out?
Security
4. Can anyone see the answers to SSPR Questions?
Support
7. What are the SSPR server requirements?
8. Does v-GO SSPR require the Windows® GINA to be replaced?
Authentication
1. If my users get one question wrong are they automatically prevented from resetting their Windows account?
No, v-GO SSPR uses a unique confidence-building model for scoring correct/incorrect answers. All of this is determined by the positive/negative value that the administrator specifies for each question. The administrator can specify mandatory and optional questions and set up questions with very low positive values but with high negative values for obvious answers.
Back to top
2. What if v-GO SSPR does not allow a user to reset, are they permanently locked out?
No. A user can always call the help desk for a manual reset.
Back to top
3. If a user forgets their Windows password how do they reset? Do they need to go to another user's workstation?
If you deploy v-GO SSPR with the v-GO SSPR Client, your users will have a SSPR Reset button right on their Windows Logon. Simply clicking on that will take them to the v-GO SSPR whenever they forget their Windows password and if they answer the reset questions with a high enough score they can reset their Windows password themselves and log right into Windows and get to work.
Back to top
Security
4. Can anyone see the answers to SSPR Questions?
No, all of the answers that you provide to the SSPR system are encrypted and cannot be revealed or exposed even by an administrator. That is why it is important for you to answer the SSPR Questions with answers that you will remember instead of made up information. If you wish, you can periodically re-enroll yourself to make sure that the answers in the SSPR system are still valid for your current situation. (This depends if your administrator has chosen questions where the answer could change over time; location, favorites, etc.)
Back to top
5. If someone attempts to hack the SSPR system by trying to guess a user's answers how can I tell and what can prevent them from continually trying?
You can configure the SSPR system to automatically lock out the Windows Account after x failed reset attempts for a configurable time period and get an automatic e-mail sent to you and to the end-user if you wish.
Back to top
Support
6. I have a large user environment that is geographically distributed, I want to start with just one SSPR server and then add more as I deploy it to more users/departments, is that supported?
Yes, simply start with one SSPR server and store all of the SSPR Settings, Questions and encrypted answers in your designated repository; Microsoft Active Directory, Microsoft ADAM or Microsoft SQL. As you feel the need for more SSPR capacity or to have SSPR available geographically distributed; simply add another SSPR server (just another Internet Information Server) and configure it like the first one to read and store all of its data from the same designated repository as the first.
Back to top
7. What are the SSPR server requirements? Repository for system questions, settings and encrypted user answers: 8. Does v-GO SSPR require the Windows® GINA to be replaced?
Server for Reset Service and Admin Pages:
Windows 2000 Server or Windows Server 2003 with IIS 5.0 or 6.0 and Microsoft.NET 1.1
Microsoft Active Directory,Microsoft ADAM (requires Windows Server 2003), or Microsoft SQL 2000
Back to top
If you wish to use the in-the-flow enrollment and reset features; a GINA stub is installed that loads with the Windows GINA, but the Windows GINA remains in place.
Back to top
Related Documents
