The CodeB Admin Console (CodeBAdminConsole.exe) is the administrator tool of CodeB SmartLogin. It shows every Active Directory user with CodeB cards and the card tokens stored on the PC, lets you add and remove cards, set validity dates and “Log On To”, reads the CodeB logon log with CSV export, and sets the logo on the Windows logon tile. It runs as administrator and ships in the Tools edition and the Systray download.
What is the CodeB Admin Console?
The CodeB Admin Console replaces several separate tools with one window. It works next to the command-line tool CodeBAdminCLI.exe, which remains the choice for scripts.
- Program:
CodeBAdminConsole.exe, run as administrator. - Download: included in the Tools edition (
codeb_smartloginhelper.zip) and the Systray download (codeb_tray.zip) — see Downloads. - Tabs: Active Directory cards · Cards on this PC · Logon log · Logo & settings.
How do you see which card belongs to which Active Directory user?
The tab Active Directory cards lists every user with CodeB cards:
| Column | Content |
|---|---|
| User / display name | The Active Directory account. |
| Card number | The card serial (UID); phone cards start with CAP1. |
| Removal action | None, lock or log off. |
| Valid from / until, status | The temporary-card window and whether the card is valid now. |
| Log On To | The account’s computer list (one card, several accounts). |
| Raw value | The exact CodeB value in altSecurityIdentities: codeb_<card>_<action>[_vf…][_vu…]. |
Buttons: Add card… (account, card number, removal action, optional validity window), Change validity…, Log On To… and Remove selected card, which removes exactly that value. A filter box narrows the list by user. Cards linked to several accounts are highlighted (“same card on N accounts”).
How do you manage the card tokens stored on this PC?
The tab Cards on this PC lists the card token files on this computer with their account, removal action, validity, protection (DPAPI-NG or old format) and file date. Change validity… sets the window; Delete selected card file also removes the card from the shared data folder and so from the other computers.
Where do you read the CodeB logon log?
The tab Logon log reads the event log CodeB Credential Provider V2, newest first, up to 5000 entries, with time, event ID, level, account, card and computer. It shows all CodeB audit events — 1100 logon/unlock OK, 1101 failed, 1102 temporary card refused, 1103 unknown card. Use the filter box to search and Export CSV to save the list.
How do you put your own logo on the Windows logon tile?
On the tab Logo & settings choose a picture. The Admin Console converts it to a 192 × 192 BMP in C:\ProgramData\CodeB\TileLogo.bmp and sets HKLM\SOFTWARE\WOW6432Node\CodeB\CP\TilePath; standard logo goes back to the CodeB logo. The same tab has the switches for:
- logon-screen system information and IP release/renew;
- card token protection (
ProtectCardTokens); - the card-removal action;
- NumLock when the CodeB tile is selected (
LogonNumLock); - the fallback account for one card on several AD accounts.
Press Save settings. All values are listed in the registry reference.
Why does it warn that a card is already linked to another account?
Linking a card that is already on another account shows a Yes/No question (default No): “Card … is already linked to: …”. Confirm it when you want one card on several accounts. The NFC → Active Directory linking tool asks the same; CodeBAdminCLI.exe /add2fa prints a WARNING line and links anyway, so scripts are not stopped. This is not the same as shared accounts (several people, each with their own card, on one account), which needs no warning.
Troubleshooting
The Admin Console cannot write to Active Directory
Run it as administrator with an account that may write altSecurityIdentities; see Active Directory permission.
The logon log is empty
The PC has not yet logged a CodeB logon, or the event log CodeB Credential Provider V2 was cleared. Log on once with a card and refresh.
Frequently asked questions
How do I see which NFC card belongs to which Active Directory user?
Open the CodeB Admin Console, tab Active Directory cards. It lists every user with CodeB cards, with card number, removal action, validity, Log On To and the raw altSecurityIdentities value.
How do I put our company logo on the Windows logon tile?
In the CodeB Admin Console, tab Logo & settings, choose a picture. It is converted to a 192 x 192 BMP in C:\ProgramData\CodeB\TileLogo.bmp and set with the registry value CP\TilePath.
Can I export the CodeB logon log?
Yes. The Logon log tab shows up to 5000 entries of the event log CodeB Credential Provider V2 and has an Export CSV button.
Where do I get the CodeB Admin Console?
It is included in the Tools edition (codeb_smartloginhelper.zip) and in the Systray download (codeb_tray.zip) on the Downloads page.