nFront Password Filter Client

Overview

The latest client for nFront Password Filter supports Windows 2000, Windows XP, Windows Vista and Windows 7 (32-bit and x64).  See the nFront Password Filter Documentation for complete details on client installation and configuration.

The client is optional (i.e. nFront Password Filter will still filter passwords even if you do not deploy the client). The client offers the following benefits:

  1. Modifies the Password Change dialog box to show the list of password policy rules that apply to this specific user account
  2. Provides a more detailed failure message to the end user if he or she types a password that does not meet the requirements
  3. Provides an optional password strength meter to help the user select a strong password.
  4. **Provides password expiration warning message at logon if the user's password is within the expiration warning interval and approaching expiration due to to nFront max password age settings.

**The password expiration notification at logon is not currently supported when the client is installed on Windows Vista or Windows 7.  The support will be added in a future release.

Installation

The client can be installed on any OS from Windows 2000 through Windows 7 (be sure to use x64 version for x64 OS however).  If the client is installed on Windows 2000 or Windows XP a reboot will be required to integrate the "gina stub" technology into the OS.  If the client is installed on Windows Vista or Windows 7 it will not require a reboot since logon credential providers can be added dynamically.

The client can be deployed automatically via a softare GPO just like any other MSI software package. If deployed as an administrative / silent installation a reboot of the client is not triggered.  Thus, the client will immediately affect Windows Vista and Windows 7 machines but will not affect Windows XP machines until the next reboot.

Client requires nFront Password Policy service from product version 4.14 or later

The client uses a newer RPC call to communicate with the nFront Password Policy Service on Domain Controllers.  Thus, you must install nFront Password Filter version 4.14 or later on all domain controllers or you may keep your earlier version and simply replace the nFront Password Policy Service with the newer version for client support.  In the download package below you will find the nFront Password Policy Service file and instructions on how to replace the file on your domain controllers.

 

Screenshots - Windows 7 (with optional Strength Meter)

Windows 7 Client Password Change Screen

 

Windows 7 Client Password Change Failure Screen

Screenshots - Windows XP (with optional Strength Meter)

Vista Client Password Change Screen

 

Vista Client Password Change Failure Screen