Microsoft update to Full Enforcement Mode - impact to PCoIP Zero Client

Rate this Article
Average: 5 (3 votes)

August 22, 2023

Last modified: 09/25/2023, 6:05 am

Knowledge Base Article Advisory Zero Clients Anyware Trusted Endpoints

Microsoft will implement Full Enforcement Mode of Certificate-based authentication changes on Windows domain controllers in February 2025.

We have confirmed there will be no impact to PCoIP Zero Client users and smart card authentication will work even when Full Enforcement Mode is set if the following changes are completed:

  • the AD domain controller and the Certificate Authority have the May 10, 2022 update (or newer)
  • new certificates are generated for smart card users after the Domain Controller and Active Directory Certificate Authority are updated

Refer to Microsoft Certificate-based authentication changes on Windows domain controllers - Microsoft Support for details.

Note:

New certificates must be generated for domain users after the Domain Controller and Active Directory Certificate Authority are updated. If new certificates cannot be generated, manual mapping of altSecuritiesIdentifies for each user needs to be done using strong mapping.