Solved

VPN and loggin into Windows domain

Posted on 2006-11-13
5
639 Views
Last Modified: 2011-09-20
I have a Sonicwall 3060 firewall with VPN capabilities.  I also am using the Sonicwall Global VPN Client on some of my mobile users' laptops.

I have seen before on a friends' laptop that they were able to connect to a VPN and login to a domain from the Windows login screen.  They hit ctrl-alt-delete to bring up the login window and then for the "Log on to" drop down list they had 3 options.  One was local login, one was domain login, and one was a domain/vpn login i think.

Basically what I am getting at is this....Is there a way (and how do I do it) to configure my laptop users' machines to login to the domain through a VPN from the windows login screen?  I do not want them to have to activate a VPN connection after logging in locally (or even after using cached credentials and their domain login).  
0
Comment
Question by:ryandale56
5 Comments
 
LVL 27

Assisted Solution

by:pseudocyber
pseudocyber earned 200 total points
ID: 17931625
I'm in a Nortel VPN shop.  The logon to Windows issue has to have the client integrate with the Winows Logon Manager, or GINA.  The Nortel client can have a setting called "Logon after Connect" in which it sends a CTRL-ALT-DEL through the VPN tunnel so the user is prompted with a Windows Logon after they connect with VPN - and the VPN stays up.

Why do you want them to logon but not have a VPN connection after?

I haven't used the Sonicwall - the client doesn't have any kind of logon after connection option?
0
 
LVL 4

Accepted Solution

by:
Smacky311 earned 200 total points
ID: 17931733
The Cisco VPN client software allows this.  Its called "Start before Login" and its a very simple option that allows you to login to the VPN without being logged into windows.  Then once logged in to the VPN, they can login to the domain without using cached account credentials.  The domain has to be listed in the "Drop down list".  This means the laptop has to be added to the domain before you will see it available in the drop down list.
0
 
LVL 6

Author Comment

by:ryandale56
ID: 17932092
pseudocyber - I do want them to have VPN connection after they login.  I am just interested in having them login to the VPN and the domain at the same time....this way they do not have to rely on their cached credentials, right?


smacky - I think that is exactly what I'm looking for...do you know if its possible with the sonicwall software?
0
 
LVL 27

Assisted Solution

by:pseudocyber
pseudocyber earned 200 total points
ID: 17932318
>>Its called "Start before Login" and its a very simple option that allows you to login to the VPN without being logged into windows.

The Nortel client allows this by default.  So, they can log on to the VPN and then they actually have to be configured to login to the Domain seperately.

Again, though, this is probably totally dependent on the client - and since I don't have a Sonicwall client, I can't really tell you how.
0
 
LVL 25

Assisted Solution

by:mikeleebrla
mikeleebrla earned 100 total points
ID: 17933181
whevever you are logging into windows (after you press ctrl+alt+del) did you ever notice that "log in using a dial up connection". this situaion is exactly what that checkbox is for.  Check it, then choose your 'dial up' AKA vpn connection.

if your VPN software shows up in "network connections' you should be able to use this checkbox to use your VPN before authenticating to windows.
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Short answer to this question: there is no effective WiFi manager in iOS devices as seen in Windows WiFi or Macbook OSx WiFi management, but this article will try and provide some amicable solutions to better suite your needs.
Resolve DNS query failed errors for Exchange
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now