This scenario demonstrates how a user gets to his PC in the corporate network and fails to login but then uses the Windows Client (GINA extension) to reset his Password.

Sunday afternoon at 4PM and the user John Doe is in the Office to complete a sales forecast and the agenda for a sales meeting scheduled for Monday morning.

John gets to his PC and to his surprise he finds that he can’t remember his password and after a few tries he has now been locked out.

Luckily the company has deployed the FastPass Password Manager Windows Client (GINA extension) which “sits” in the Windows Login Dialog so what he sees when he acknowledges the Logon Message is the screen shown below.

John clicks on the “Forgot Password” button and after a few seconds the system presents him with a browser-like application. This is a protected kiosk-mode application that is only capable of showing the FastPass application.

He clicks on the “Reset Password” menu item and identifies as johnd (JD####) and selects the same domain as also presented in the Windows Login Box.

Because he is accessing from a corporate network he does not apply to a multi factor authentication flow and he is now asked to give the correct answers to two of the registered questions. This policy has been defined and configured by the security administrator of his company.

He enters the answers and clicks on the "Continue" button.

Note: The questions are randomly selected of the registered questions but the same questions are used throughout one session to give a higher protection against social engineering attacks.

Since all answers were verified as correct the system now allows John to specify a new password.

He enters the new password as wanted and confirms it.

Note: The password is now reset in the Active Directory and is going through all policy checks exactly as if the user would have changed the password from the Windows Security dialog.

Since the specified password was considered as valid by the system John is now presented to a confirmation page.

Note: If the password would not have been verified as valid/proper a message explaining this would have been shown and the user would have been requested to repeat the step.

John exits the kiosk mode login and returns to the Windows Login Dialog where he now can login without problems.

A couple of minutes spent and without the need of a end-user oriented Help Desk John is now ready to work and complete his sales forecast and agenda for the Monday morning meeting.