VPN Logon scripts

[Barry1]

Hi all,

I have set up a VPN on my Win2K domain server.

I want to be able to run a logon script for each member when they log in to the vpn.

They will be running the vpn from their desktop as an option, not signing into it when they boot up their PC's.

Is there any way to specify a dial-up / vpn script to be used for members accounts?

I can not find a way to do it.

Any assistance most welcomed.

Thanks,


Bary Smith
ASP, BKS, HTML, JS & CGI programmer.
BKS Graphic Design

 

[Jpoandl]

From another website:

The problem is this: the login script is run when the user logs into the domain. When the user VPN's in from home, they are not performing a 'domain logon'. If they are using a work laptop at home, then what they are doing is logging in locally using a cached domain login, and then creating a VPN connection to the office LAN. Neither of these will normally trigger a login script to run.

I would test this out:
when logging into the PC, click the checkbox for login using dial-up connection.
when prompted, select the VPN connection as the connection to use

This may allow you to do a VPN/domain login simultaneously, allowing your login script to run.

Otherwise, you need to trigger your logon script to run during a VPN connection.

http://www.winnetmag.com/Windows/Article/ArticleID/26694/26694.html

Joseph L. Poandl
MCSE 2003

If your company is in need of experts to examine technical problems/solutions, please check out

http://www.NJCOMPUTERNETWORKS.com

(Sales@njcomputernetworks.com)

 

[sorehead]

I'm trying to get this going myself to force the GPO's. Signing into the VPN on login is simply not possible, so please don't suggest this!!

Anyway, the way I'm thinking is this (and there's plenty of holes in it...). I use Cisco VPN client 3.6.3, it has an Application Launcher facility. This launches the App immediately the connection sequence is started, so what I am thinking is that if I use something like launch key (with a minute pause) to kick off gpupdate /force I could have them use the domain logon script when downloaded by the GPO.

This is all well and good, but...... the problems I've not solved yet include how to enforce the app launcher to launch the program (whatever it is) - my users would all be able to edit the app launcher settings. Any way I can bolt these settings down with something like a GPO?

Also, if you do gpupdate /force, can you prevent it asking if you want to log off for the settings to take effect? Even if the users had to wait until the next logon for the settings to update this would be something of a victory.

I'm not sure how realistic all this is - any ideas for improvement would be great.

Jim