On startup a system with the SSPR Rich client installed posts "Unable to Launch Web Browser"

A system with the Self Service Password Reset Rich client posts an error, “Unable to Launch Web Browser …” on startup. It is expected to navigate to the SSPR portal prompting a user to register.

Research into this issue using Process Monitor from Sysinternals shows that two registry keys are utilized by the client,

HKCU\Software\Policies\Microsoft\Forefront Identity Manager\2010\Extensions\PasswordRegistrationPortal

HKCU\Software\Policies\Microsoft\Forefront Identity Manager\2010\Extensions\PasswordRegistrationPortalURL

The error will be posted if either of these two keys are missing, although apparently only the PortalURL needs to be populated.

A manual installation of the client will write these two entries. The issue in this case was that the end user has an imaging process which left out the SSPR entries.

Testing can be a bit of a hassle as the Service must be restarted each time to test, or a reboot accomplished. A way to avoid this is to leverage the information at

http://setspn.blogspot.com/2010/09/fim-2010-sspr-client-extension-advanced.html, which is to execute mspwdregistration -all   from a command prompt.