Cause

When the Evidian EAM Controller manages the password changes and the environment includes a distributed Active Directory configuration, Evidian uses the LsaLogonUser function to determine the Active Directory Domain Controller(DC) name, and then uses the DC that is closest to the access point for a user to manage password changes. Due to an issue with the LsaLogonUser function, the process takes longer than expected.

Resolution

Manage password changes outside of the Evidian EAM Controller and configure the Evidian EAM Client to avoid the use of the LsaLogonUser function.

To disable the LsaLogonUser function, perform the following actions on each Evidian EAM Client:

1. Run regedit.exe, and navigate to HKLM\SOFTWARE\Enatel\WiseGuard\Framework\Directory
2. Create a new DWord (32bit) key named CallLsaLogonUserAfterLogon.
3. Edit the key, and in the value field, type 0.
4. Close regedit.exe.
5. Restart the Evidian EAM Client.