https://community.checkpoint.com/t5/Endpoint/Checkpoint-SDL-and-Windows-11-MPR-notifications-setting/m-p/238446#M9956 <P>Hi,</P> <P>We use the standalone Checkpoint Endpoint VPN client E88.60. We also use implicit mode&nbsp; Secure Domain Logon (SDL).</P> <P>We started upgrading our workstations to Win 11 23H2.</P> <P>&nbsp;</P> <P>After upgrading implicit mode SDL doesn’t work anymore. We’ve identified that a new Windows setting was causing the issue.</P> <P>“Enable MPR Notifications for the system”&nbsp;<span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MPR.png" style="width: 449px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/29198iF0D8B9E213131964/image-size/large?v=v2&amp;px=999" role="button" title="MPR.png" alt="MPR.png" /></span></P> <P>The ability to disable this setting seems to be a nice security improvement from MS as leaving it as default allows reading plain text credentials from Winlogon with a simple DLL.</P> <P>&nbsp;</P> <P>But doing so is affecting Checkpoint SDL. Has anybody else experienced this?</P> <P>&nbsp;</P> <P>Francis</P> Mon, 13 Jan 2025 20:16:51 GMT flachance 2025-01-13T20:16:51Z https://community.checkpoint.com/t5/Endpoint/Checkpoint-SDL-and-Windows-11-MPR-notifications-setting/m-p/238446#M9956 <P>Hi,</P> <P>We use the standalone Checkpoint Endpoint VPN client E88.60. We also use implicit mode&nbsp; Secure Domain Logon (SDL).</P> <P>We started upgrading our workstations to Win 11 23H2.</P> <P>&nbsp;</P> <P>After upgrading implicit mode SDL doesn’t work anymore. We’ve identified that a new Windows setting was causing the issue.</P> <P>“Enable MPR Notifications for the system”&nbsp;<span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MPR.png" style="width: 449px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/29198iF0D8B9E213131964/image-size/large?v=v2&amp;px=999" role="button" title="MPR.png" alt="MPR.png" /></span></P> <P>The ability to disable this setting seems to be a nice security improvement from MS as leaving it as default allows reading plain text credentials from Winlogon with a simple DLL.</P> <P>&nbsp;</P> <P>But doing so is affecting Checkpoint SDL. Has anybody else experienced this?</P> <P>&nbsp;</P> <P>Francis</P> Mon, 13 Jan 2025 20:16:51 GMT https://community.checkpoint.com/t5/Endpoint/Checkpoint-SDL-and-Windows-11-MPR-notifications-setting/m-p/238446#M9956 flachance 2025-01-13T20:16:51Z https://community.checkpoint.com/t5/Endpoint/Checkpoint-SDL-and-Windows-11-MPR-notifications-setting/m-p/238457#M9959 <P>I'm guessing SDL leverages this feature which is now disabled thanks to this registry setting.<BR />I suspect this is an RFE.</P> Mon, 13 Jan 2025 22:16:29 GMT https://community.checkpoint.com/t5/Endpoint/Checkpoint-SDL-and-Windows-11-MPR-notifications-setting/m-p/238457#M9959 PhoneBoy 2025-01-13T22:16:29Z