Duplicate Windows Logon Entries (Tiles) Following GP Client Install

Overview

• GlobalProtect clients installed on Windows 7/8 machines.
• Following the install, there are multiple login tiles for the same user account. Issues are present regardless as to whether the screen is locked, account is logged off or if the workstation is rebooted.

Issue

Issues were isolated to the workstation in question which utilizes a Fingerprint Logon CP (Credential Provider).  End result in certain scenarios is duplicate SSO Logon tiles as seen above.

Resolution

Workarounds in this case would be as follows:

Option 1

DISABLE the Fingerprint Logon CP as the GP client will utilize it's own built-in CP. Conflict would be removed & issues should no longer be present (though obviously customers may wish to utilize this functionality).

Option 2

DISABLE Our Logon CP which should still allow full functionality of the GP client, while allowing the use of the 3rd Party Fingerprint CP. Workaround requires issuing the following commands via CLI:

1. Via command prompt, run the following: "c:\program files\Palo alto networks\globalprotect\PanGPUpdater.exe" -u
2. Restart PC & verify whether duplicate login options are still present. If duplicate tiles are no longer present, proceed with step 3.
3. Via command prompt, run the following: "c:\program files\Palo alto networks\globalprotect\PanGPUpdater.exe" –c
4. Logoff (or restart) & verify whether duplicate login options have returned.

Desktop should now be restored to expected functionlity without duplicate users:

Note: As of GP Client v1.2.x the previous utility (PanGPUpdater.exe) has now been merged into the service process, hence the removal off this executable altogether.

Workaround still stands though now referencing 'PanGPS.exe', i.e.:

1. Via command prompt, run the following: "c:\program files\Palo alto networks\globalprotect\PanGPS.exe" -u
2. Restart PC & verify whether duplicate login options are still present. If duplicate tiles are no longer present, proceed with step 3.
3. Via command prompt, run the following: "c:\program files\Palo alto networks\globalprotect\PanGPS.exe" –c
4. Logoff (or restart) & verify whether duplicate login options have returned.

owner: bryan