Cached Credential Logon - Computer GPO not Applied after Making VPN

-

hi,
i've situation remote users log on cached credentials, go on make vpn don't computer gpos updated.  all of user type activity - accessing kerberos protected resources , receiving fresh user gpo, etc. works fine.
i've been reading through various newsgroup posts relating vpns , computer gpo suggest when logging on cached credentials there no way of getting fresh computer gpo applied , staff have "show @ office" (xp sp2) laptop.  the forest functional level windows server 2003 native.
i've seen contradictory advice suggesting computer gpo settings should work , clarification if possible know shape of beast dealing with.
any advice gratefully received.
regards, dave

first of all, assuming have standard "everything open" vpn connection.

to question; gpos applied on logon , every 90 minutes (except policies require relog, folder redirection). logon scripts not applied if computer isn't on domain while logging on, vpn clients nowadays offer option log on before logging computer (usually third choice in login screen: last logged in user, other user, vpn solution). have experience watchguard , cisco doing this, if using microsoft vpn solution, might time consider directaccess (sorry if sound salesman, enjoy directaccess myself , it's made life easier).



Windows Server  >  Group Policy



Comments

Post a Comment

Popular posts from this blog

NDES - Reusing a password for multiple devices

-
hi there, i have requirement use ndes issue certificates new blackberry 10 fleet via scep. appears blackberry server assumes challenge returned ndes never change. consequently have followed steps outlined in following article  to reuse same challenge password multiple devices.... doesn't work: configure service function in single-password mode creating reg_dword value usesinglepassword , setting 0x1. give full control permission account used run ndes hkey_local_machine\microsoft\cryptography\mscep registry key. step required if have installed kb959193 hotfix. in iis manager snap-in, navigate scep application pool , in advanced settings set load user profile true. if you’ve configured ndes run under user account, logon interactively user account onto machine ndes installed force creation of user profile account. one-time operation, user doesn’t need stay interactively logged on while ndes running. prepare ndes service account profile: on ndes server, open in...
Read more

Can no longer user MS Update - Files required to use Microsoft Update are no longer registered

-
hi, i'm new server 2003.  installed it.  removed enhanced ie security.  proceed download , install windows server 2003 sp1, of dot net (1.1, 2.0, 3.0, 3.5, , updates), , sp2. after downloaded , installed of above, tried windows update menu option in ie.  (ie 8 windows server 2003) , sits there "done" in lower left hand corner.  never brings in window. so try www.microsoft.com -> download , trails -> update.  received error message "files required use microsoft update no longer registered or installed on computer".  click on register or reinstall files me now.  window changes , "check latest version of windows updating software .... ".   sits there (last time sat there on hour). i went on internet , found instructions: regsvr32 wuapi.dll regsvr32 wups.dll regsvr32 wuaueng.dll regsvr32 wucltui.dll regsvr32 atl.dll regsvr32 msxml3.dll did not work either.  have other suggestions?...
Read more

CDPUserSvc_xxxxx has stopped working

-
since last patch kb4041688 message on every windows 2016 server. any idea? seems number xxxxx changes on every boot. says: <failed read description. error code: 15100 > hi, had confirmed relate department, , edited reply in order provide appropriate explanation.   working on problem, testing, confirmation , relate processes may need period of time. appreciate patience. if there update it, update , let know. also, can pay attention microsoft product blog, official website, newly released update in order obtain newest information. workaround, can disable via registry - change start value from 2 4 (hexadecimal or decimal) , re-start system: hklm\system\currentcontrolset\services\cdpusersvc_ xxxxx best regards, eve wang please remember mark replies answers if help. if have feedback technet subscriber support, contact tnmff@microsoft.com . Windows Serv...
Read more