Secure Domain Logon Altering Windows Logon

[Tony_Seely]

Client: 80.87 / OS: Windows 7 Enterprise

When Secure Domain Logon (SDL) is enabled it alters the Windows logon screen with an additional button to launch the VPN. This works as intended. However if SDL is disabled on a device it was previously enabled on the Windows logon screen remains altered. The logon screen will no longer remember the last user automatically and instead presents the logon window with a button for the last user, a button for other user, and also a button for the Smart Card if the device has that capability.

We'd like to disable the way SDL is altering the Windows logon screen when SDL is also disabled to return to our previous logon experience. I currently cannot find what registry keys are being altered by enabling SDL beyond "HKLM\SOFTWARE\Wow6432Node\CheckPoint\TRAC\IsInEncDomain" and "HKLM\SOFTWARE\Wow6432Node\CheckPoint\TRAC\SDLEnabled".

I appreciate any suggestions you can provide.

[PhoneBoy]

As far as I know, SDL loads a DLL that may be interfering.
Removing the relevant DLL might be necessary.
Probably best to get the TAC involved.