Checkpoint SDL and Windows 11 MPR notifications setting

[flachance]

Hi,

We use the standalone Checkpoint Endpoint VPN client E88.60. We also use implicit mode  Secure Domain Logon (SDL).

We started upgrading our workstations to Win 11 23H2.

After upgrading implicit mode SDL doesn’t work anymore. We’ve identified that a new Windows setting was causing the issue.

“Enable MPR Notifications for the system” 

The ability to disable this setting seems to be a nice security improvement from MS as leaving it as default allows reading plain text credentials from Winlogon with a simple DLL.

But doing so is affecting Checkpoint SDL. Has anybody else experienced this?

Francis

[PhoneBoy]

I'm guessing SDL leverages this feature which is now disabled thanks to this registry setting.
I suspect this is an RFE.