Description
This article explains how to disable the Persistent Agent credentials pop-up window.
Scope
FortiNAC and persistent agent.
Solution
If the FortiNAC server requires that the host be registered to a user or that a user need to be authenticated (Need to Authenticate state), a request to display the login dialog box is sent to the agent. In certain situations, this functionality may not be desired and could distract the end user.
This activity can be seen in the agent logs:
> Get-Content "C:\ProgramData\Bradford Networks\general.txt" -Wait -tail 1
2025-12-12 12:29:09 UTC :: Detected Server Version: 0
2025-12-12 12:29:10 UTC :: SslStreamTransport::sslSendThread calling take()
2025-12-12 12:29:10 UTC :: constructFromBufer verb = Login
2025-12-12 12:29:10 UTC :: handleReceivedPacket() -- received this packet:
Login <-- FortiNAC sends a login requests and the agent shows the pop up
END of packet
--
2025-12-12 12:29:42 UTC :: Sending ACK for 0
2025-12-12 12:29:49 UTC :: IPC Verb = AUTH <-- user credential are sent by the agent
2025-12-12 12:29:51 UTC :: SslStreamTransport::sslSendThread calling sendImpl()
2025-12-12 12:29:51 UTC :: SslStreamTransport::sslSendThread calling take()
The window can be suppressed by disabling the Login Dialog Persistent Agent setting. The setting can be edited directly on the Registry Editor, pushed by Group Policy (GPO) or via a software management program.
In Microsoft Windows the registry path is on: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Bradford Networks\Persistent Agent
A new value with the name 'LoginDialogDisabled' need to be created as shown below:
Refer to the following sections of the deployment guide for details and similar changes made for macOS or Linux machines: Persistent Agent Deployment and Configuration.
