The logout and disconnection timeout policies are invalid

Latest reply: Mar 30, 2019 03:08:28 898 1 6 0

[Fault type]

The logout and disconnection timeout policies are invalid.


[Key words]

The logout and disconnection timeout policies are invalid.


[Applicable version]

Versions later than FusionAccess5.X


[Symptom]

The logout and disconnection timeout policies are invalid.


[Cause analysis]


SBC Scenario


1. When the Internet Explorer application is opened for the first time, the Internet Explorer is closed, but the notepad application is not started.


2. When you log in to the system using a shared desktop,Internet Explorer is closed when you open the Internet Explorer.


3. The five-minute deregistration policy of the FA is disabled, and the Internet Explorer is closed. Therefore, the problem is not caused by the desktop policy.


4. Use the local account to log in to the APS server and open the Internet Explorer. The problem does not occur.


5. Each time a user logs in to the system, the session is not logged out. When the user logs in to the system again, the session is not disconnected.


6. Log out of the session. The login failure occurs again. The login failure of the account is different.


Based on the preceding analysis, it is suspected that the group policy is associated with the AD user group policy. Use the process monitor tool to obtain the information and group policy configuration. It is found that the newProxySetting.bat script of the logon contains the command of the kill IE process. In addition, newProxySetting.bat is configured as the login execution script in the domain policy. The following is an example:


110820h7ve3zv803xmz31b.png?4.png


110824h7w2o3wvwz93ccc3.png?5.png

 

[Solution]

This problem is basically determined by the customer's group policy. This policy is a user login script. After a user logs in, the policy is executed. It is inferred that the script content should be to modify the proxy settings of the IE and kill the IE process. The customer needs to confirm that the AD group policy is modified. This is not a Huawei issue.


  • x
  • convention:

guanjf
guanjf Created Mar 31, 2019 15:53:38
it's wonderful  
Login and enjoy all the member benefits

Login and enjoy all the member benefits

Login