70 pts.
 Pre-boot VPN
We have about 3-400 mobile laptop users that never work on the company network. OS is windows xp. Does anyone know any pre-boot VPN solutions where the VPN connection is established before or during boot in such a way that it is semi seamless to the user and that works in such a way that the connection is up before the login prompt. The mobile user must be able to log in to AD from any network.

Software/Hardware used:
Windows XP, Lenovo ThinkPad
ASKED: April 13, 2011  10:55 AM
UPDATED: October 24, 2011  3:33 AM

Answer Wiki:
Cisco VPN client has an option to come up before they alt-ctrl-del to logon. Once connected to the VPN, it allows you to logon to the domain using that tunnel. We have ours set to save the username, but there may be an option to have it save the password also (don't know--never needed that). Worth checking out, especially if you already use Cisco equipment.
Last Wiki Answer Submitted:  April 13, 2011  8:53 pm  by  Koohiisan   5,005 pts.
All Answer Wiki Contributors:  Koohiisan   5,005 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _


 

I am not sure, but u may try “Active Directory Object Manager” !

 22,125 pts.

 

btw, our existing vpn gw is juniper srx. Does cisco vpn work with this hw or do we have to invest millions in new GWs for 9 countries?

 70 pts.

 

I found this regarding the juniper vpn client (which I’ve never used before):

“Using Juniper NC GINA should make the Juniper client dial-up VPN before the Windows Logon.”

Check it out and see if you have the option it mentions (“Require NC to start when logging into Windows”):

http://social.technet.microsoft.com/Forums/en/winserverDS/thread/67d40abf-820f-47bf-ad45-359e9cd96fb1

 5,005 pts.

 

Eww Juniper – Thats what you get for going with a “heathen brand”… :)

 8,500 pts.

 

Yes, I tend to agree with sixball, another thing I learned about the Juniper NC gina that it does not support two mode authentication, one or the other. And their latest vpn client replacing the NC client still doesn’t :(

 10 pts.