5

I've just wiped my laptop and reinstalled Windows 8.1 and have connected it to the work domain by connecting to our VPN while logged into a local account.

I'm now trying to log into the laptop using my domain account but Windows can't connect to the domain controller as there is no VPN raised at the time at logging in.

I don't know an awful lot about the VPN itself - I'm connecting to it via the standard Windows VPN client and am using a server address that looks something like www.blah.com.

Is there anything I can do besides wait until I'm back in the office on Monday?

6

If you can log in with the local administrator account, you can then set a VPN connection to be able to be used by all users. This then enables it to be connected from the login screen so you can contact your DC.

You'll have to create a new VPN connection as an existing one can't be changed to a shared one.

To set up a shared one:

  1. Open the Network and Sharing Centre

  2. Click Set up a new connection or network

  3. Select Connect to a workplace

  4. If you're asked if you want to use a connection that you already have, select No, create a new connection

  5. Click Use my Internet connection (VPN)

  6. Fill in the relevant details for the Internet address, and make sure to tick Allow other people to use this connection - this is what makes it a shared one:

    Shared VPN Check Box

  7. Click Create

On the login screen going forward, you should see a network icon in the lower left. This will switch the screen to logging in over VPN.

3
  • I have local admin access, just not sure how I go about setting up a shared VPN connection.
    – CatBusStop
    Jul 12 '14 at 16:50
  • 1
    @TomAllen I've updated the answer with more details now I'm not on my phone :) Jul 12 '14 at 18:04
  • This still works in Windows 10. The VPN is created in a completely different way - as a virtual network adapter, whose properties you may need to alter. But after doing this, you get a new icon at the bottom of the login screen which uses the new VPN.
    – Greg Woods
    Aug 1 '19 at 8:57
2

This may work.

  1. Log in using your local account
  2. Connect to VPN
  3. Run notepad as different user (shift + right click on notepad icon > click Run as Different User)
  4. Enter your work credentials and wait until notepad is launched (this will create a new user profile)
  5. Log off from Windows
  6. Log in using your work credentials
0

Sorry nothing you can do I'm afraid its one of the downsides to client VPN, hardware VPN such as a device in the network that connects to the hardware VPN in the office would work but not client/software based VPN.

Effectively once you log in once Windows caches the credentials and then it does not have to contact the DC each time.

I think the 'pre-login' VPN feature was removed after Windows XP not sure of Microsoft's reasoning for removing this feature tbh.

Thanks

1
  • Hmmm... I guess I could try and set up my dd-wrt router's VPN client if I ever figure out how - first attempt didn't go well!
    – CatBusStop
    Jul 12 '14 at 16:33
0

Still Possible on Win 8 to 10

run gpedit.msc

go to local security policy go to security select interactive logon crt alt del and select disable

the vpn box will appear at logon

0

This answer may be helpful for those using Windows 10 Pro.

Login as local administrator. Create PPTP network, connect to VPN and join domain.

Reboot. Login as local admin. Connect to VPN using domain account with dial-up access in AD.
Press Ctrl+Alt+Del and select switch user. This will keep you connected to VPN and allow new account to cache on PC.

Windows 7 allowed for PPTP VPN to be connected before login attempt allowing connection to domain for validation of uncached profiles/logins. Too bad we went backwards.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.