Why does closing the Rublon Prompt bypass MFA?

Modified on Tue, 12 Mar, 2024 at 7:35 AM

IMPORTANT

With the latest version of the Rublon for Windows Logon and RDP connector, this issue should no longer happen.

Moreover, Rublon now adds MFA to your VMware Horizon View (VDI) Logins.

IMPORTANT

VMware Tools is known to cause issues with the Rublon Prompt in the Rublon for Windows connector.

One of our customers had been running Windows Server 2019 on VMware 7. They had installed VMware Tools 11.2.5, which caused Rublon to bypass MFA after the Rublon Prompt had been closed using the X in the upper-right corner.

Every time Rublon Prompt was closed, an entry would appear in the Event Viewer marked as Error.

The error message was as follows:

Faulting application name: rublonLogin.exe, version: 0.0.0.0, time stamp: 0x613ee8b1
Faulting module name: vm3dgl64.dll, version: 3.4.9.0, time stamp: 0x5fa2f938
Exception code: 0xc0000005
Fault offset: 0x0000000000083e1d
Faulting process id: 0x480
Faulting application start time: 0x01d7a947f1cb770d
Faulting application path: C:\Program Files\Rublon\Logon\rublonLogin.exe
Faulting module path: C:\Windows\SYSTEM32\vm3dgl64.dll
Report Id: 7ed0df33-1aa6-49cf-9258-41877e0f93ec
Faulting package full name:

Uninstalling VMware Tools 11.2.5 and installing VMware Tools 11.3.0 fixed the issue.

If you are facing similar issues, check if there are any updates for VMware Tools.

If you have updated VMware Tools or you are not using VMware Tools at all, contact us at Rublon Support.

Helpful Links

Description of the error on the VMware website