Cache Domain Credentials

[semperfistratordie]

Scenario:

remote user / remote pc (WinXP SP2)

PC was rebuilt remotely, and joined to AD through VPN.

User cannot logon at windows logon with their domain account because credentials are not cached locally on the remote PC, since it can only see the domain once a user is logged into the PC and has connected to the VPN.

Is there a way to export cached logon from another computer to this computer so that the user can logon with cached credentials prior to connecting to the VPN?

I was thinking of perhaps copying the users profile from another PC attached to the domain and perhaps exporting their HKEY_USERS key from another PC and importing it to the remote PC. Haven't tried it yet, and not sure if that would work. This seems like a scenario someone else would have run into and found a workaround for. Any ideas or suggestions?

 

[wdoellefeld]

Have tried connecting to VPN before logon?

(yay! shameless advertising. my side business)

http://www.frcp.net

 

[wdoellefeld]

To clarify...

Assuming your using a standard Windows VPN connection.. If you have a VPN connection entry, make sure it is available for all users, then click the option to use "Log on using dial-up connection".

(yay! shameless advertising. my side business)

http://www.frcp.net

 

[semperfistratordie]

Thanks. No this is not a Windows VPN connection. This is using Cisco VPN, which is only run after the user is logged into the machine.

 

[jmconsulting]

Please clarify your statement on "which is only run after the user is logged into the machine". If you have a true Cisco VPN "tunnel" created, it is a 24/7 connection. If you are using Cisco's VPN Client software, then you are correct with your statement. Was this machine ever connected prior to the rebuild? If it was, was the message at log on "Domain Controller not available, signing on with cached creditials" displayed and then the user initiated the VPN software? What functions are being attempted from the remote PC?

 

[wdoellefeld]

This is using Cisco VPN, which is only run after the user is logged into the machine.

This is a good thing, even easier.

From the Cisco VPN Client, select Options > Windows Logon Properties. The Windows Login Properties dialog box displays. Select the Enable start before logon option.


(yay! shameless advertising. my side business)

http://www.frcp.net