Solved

Auto-Enrollment Group Policy

Posted on 2016-10-20
2
64 Views
Last Modified: 2016-10-25
We currently are undergoing a big wireless expansion for our Care Center onsite. To have dual authentication we have a machine certificate and a user certificate assigned. Having just the machine cert alone drops you in a limited VLAN while having both the User and the Machine cert drops you in a full access VLAN. The machine certificate processing is working as it should, however the user certificate is delayed and is only getting applied about 45-60 seconds after the user has logged in.
The problem I have is that I need it to apply during the initial login like my printers, mapped drives, etc. work. I have already moved it up Link Group Policy Objects list and have it enforced, but it still gets applied too late. I need it to be applied before their initial desktop comes up.

Any way to make this work?
0
Comment
Question by:Joe Lowe
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 16

Accepted Solution

by:
Michael Ortega earned 250 total points
ID: 41853204
I don't believe there is any method to speed up that process. It's an inherit delay.

MO
0
 
LVL 81

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 250 total points
ID: 41853208
If the user logs out then logs in then they will have the certificate and should have full access
0

Featured Post

NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article outlines the process to identify and resolve account lockout in an Active Directory environment.
In-place Upgrading Dirsync to Azure AD Connect
In this Micro Tutorial viewers will learn how to restore their server from Bare Metal Backup image created with Windows Server Backup feature. As an example Windows 2012R2 is used.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question