Remote disconnected users and Active Directory

Hello,

We have many users that are part of our sales team that do not work out of
our offices but instead work out of their homes. They connect to our network
using a SSL based VPN connection to get mail and access our Intranet.
Currently they are not part of our Active Directory infrustucture because
they cannot authenticate to AD until the VPN connection is establish thus
they do not apply group policies, run log on scripts, or modify their last
logon timestamps. This causes passwords to expire without the users being
informed, computer objects to become stale and a slew of other interesting
senarios that become unacceptable for the users. In some cases we've had
users mail their machines so we could log on and send it back.

My question is what other options exist? Is there anyway to trigger Windows
authentication again afterthe user logs in and connects to our networkvia
VPN? What are other organizations doing for similar senarios?

I know we could put a DC on the DMZ but that is a hugh security risk in our
organization. We also thought about having the VPN connection connect prior
to logon so that the initial Windows authentication takes place after
connecting to our network but I do not have any documents/information on how
to accomplish it.

Ultimately we are concerned about the application of GPOs, passwords
policies and how the user could be informed about upcoming expiring
passwords.

Any suggestions?
Thanks
Ray
.

Relevant Pages

  • Re: Password hashes
    ... Usually you can safely set it to use NTLMV2/refuse lm ... > for network communications, encrypting data, etc. ... > With regards to super-complex passwords, I'm trying to address the fact ... > NTMLv2 and Kerberos authentication protocols. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: security of IP address
    ... bu PCs with user passwords are not. ... Even if it's lost after acquiring the DHCP lease, ... > mistakes such as connecting to the wrong network. ... minimal level of authentication necessary to connect to a hotel ...
    (comp.os.linux.networking)
  • Re: VPN Security Management Question
    ... capturing the passwords is trivial regardless ... The VPN should not bypass network or server security. ... > then they could call the vpn connection manager, and, if the passwords ...
    (microsoft.public.security)
  • Network account lockout
    ... my Network Passwords". ... >resources that require authentication my network account ... Does XP cache passwords? ...
    (microsoft.public.windowsxp.network_web)
  • Re: XP Home Edition
    ... XP Home is not very network friendly. ... XP Home and setup that same user ID on your domain (with the passwords being ... authentication. ... M/T Box Computers ...
    (microsoft.public.windows.server.sbs)