Authyo RDP Guard for Windows — What's New (v1.0.63)

Updated: 2026-07-13
Applies to: Authyo RDP Guard for Windows (Credential Provider) on Windows Server 2016–2025 / Windows 10–11.

Download: the latest installer is on your Authyo dashboard download page.
Windows: AuthyoGatekeeper-1.0.63.msi

This release is centered on one guarantee: you can never be locked out of your
own server. It also fixes the logon-tile branding. No configuration changes are
required — existing setups keep working, and the new safety behavior is on by
default.

At a glance

Change	What it means for you
Never-stuck sign-in (anti-lockout)	When RDP Guard genuinely can't run the OTP step, it lets you sign in with your normal Windows password instead of blocking you out.
Deactivated seat → clean password login	Deactivating a server's seat on the portal now signs in with the Windows password — no dead OTP tile.
Team Login: "My name is not listed"	If the person list is empty or your name isn't on it, you can still get in instead of being stuck.
Logon tile icon fixed	The Authyo logo now renders correctly on the sign-in tile.

RDP Guard now guarantees a way in whenever it cannot perform the OTP challenge.
In each of these situations it steps aside to your normal Windows password sign-in
instead of denying the login:

the server's seat was deactivated / blocked on the portal,

Authyo is unreachable (network/outage),

no OTP contact is configured for the user,

Team Login: the selected person isn't set up, or the roster is empty.

This is on by default — nothing to configure.

What it does not do (your security is intact)

A working OTP is still enforced. A code that is delivered and entered wrong is still rejected — never-stuck only applies when the OTP step can't run at all.

The remote kill-switch still blocks. If you Disable a server from the portal, sign-in is denied outright — that is an explicit lock, not a delivery failure.

The user still signs in with their real Windows password — RDP Guard only drops the extra OTP factor; it never grants access without the account password.

Strict enforcement (optional)

If you run a server where you would rather block sign-in than ever allow a
password-only login when OTP can't run, RDP Guard supports a strict mode
(neverLockOut = false in the server's policy). Contact Authyo support to enable
strict mode on a specific server. Most deployments should keep the default
(never-stuck) on — locking an admin out of a production server is usually worse
than a brief password-only window during a misconfiguration or outage.

When you deactivate a server's seat on the portal (to move the license, or
retire the box), that server now signs in with the normal Windows password on the
very next login — no leftover OTP tile that can't complete. This is the behavior
the portal has always promised ("this server stops asking for OTP"), now made
reliable.

For shared-account Team Login servers:

If the person roster is empty (Team Login is on but no people are configured),
or a person isn't on the list, a "My name is not listed" option now appears
so they can still sign in (with the Windows password) instead of being trapped at
the picker.

A normal, properly-configured roster is unchanged — the "not listed" option
only appears when there are no selectable names, so day-to-day sign-in looks
exactly as before: pick your name → enter the OTP.

Team Login remains a Windows-only feature.

4. Logon tile icon

The Windows sign-in tile now displays the Authyo logo correctly (previously it
could appear blank or oversized on some servers).

Upgrade notes

Install AuthyoGatekeeper-1.0.63.msi over your existing version and reboot
(Windows loads the logon tile at boot).

No configuration changes required. Your contacts, exempt users, and policy
continue to work. The never-stuck safety behavior is on by default.

As always, keep at least one exempt (break-glass) administrator account as an
extra safety net during any upgrade.

Quick reference — Windows OTP screen

Type the OTP → Sign in

Code not arriving? wait for the countdown → Resend OTP (switches channel)

No OTP at all? → I have a backup code / Use Google Authenticator code

Team Login: pick your name → enter the OTP. Not on the list? choose
"My name is not listed" (appears only when the roster has no names) to sign in
with your password.

Authyo RDP Guard for Windows — What's New (v1.0.63)

At a glance#

1. Never-stuck sign-in (anti-lockout)#

What it does not do (your security is intact)#

Strict enforcement (optional)#

2. Deactivated seat → clean password sign-in#

3. Team Login — never stuck at the name picker#

4. Logon tile icon#

Upgrade notes#

Quick reference — Windows OTP screen#

At a glance

1. Never-stuck sign-in (anti-lockout)

What it does not do (your security is intact)

Strict enforcement (optional)

2. Deactivated seat → clean password sign-in

3. Team Login — never stuck at the name picker

4. Logon tile icon

Upgrade notes

Quick reference — Windows OTP screen