Re: Mapping a Networked drive letter over VPN

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Hi Chad,
I am sorry to keep hounding you. Whe I try to get to the Network Login
Button that you described for Win Vista I don't see it. Is there an update or
an option that I need to install to enable this feature?

"Chad A. Gross" wrote:

Actually, it's pretty simple:

First, you need to create your VPN connectoid on your XP / Vista / Win7 PC.
When you create the VPN connectoid, make sure you check the option to make
the VPN connection available to all users.

Now, when a user is remote and is looking at the login screen, they can
establish the VPN connection before actually logging in. The process is
slightly different between XP & Vista / Win7.

On XP: Hit Ctrl+Alt+Del to enter username & password. Click the "Options"
button, then click the option to Connect via Dial-Up Networking. This will
give you a list of global dial-up connections on the PC (including VPN
connections). Select the VPN connection you want, enter credentials for
that VPN connection and Windows will establish the VPN connection, THEN
process the user login - allowing the remote user to log in to the domain
directly.

On Vista / Win7: Hit Ctrl+Alt+Del. Windows will show you the last user who
logged in. Click the "Change User" button (even if the listed user is the
correct user). As soon as you click the Change User button - you will
notice a new Network Login button appears in the bottom right corner of the
screen next to the power button. Click the Network Login button - if only
one global VPN connection is defined, it will ask you for username &
password for that VPN connection, otherwise you will get a list of VPN
connections to pick which one you want to use. Enter the credentials for
the VPN and Windows will establish the VPN prior to processing the user
login, allowing the remote user to log in to the domain directly.

HTH!

--

Chad A. Gross
http://www.msmvps.com/blogs/cgross


"Donny" <Donny@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:BAD3A86F-8652-4D3B-92E0-E67A655E4AEC@xxxxxxxxxxxxxxxx
Hi Chad,
You wrote:
"FYI - Group Policy Preferences for mapping drives execute during login,
so
they will only apply if the roaming notebooks are joined to the domain AND
the users establish the VPN connection BEFORE they log in to the laptop."

How can a remote user connect to the domain over VPN before they log in?
If
they are off site do they need a local login, establish VPN then switch
user
and use their domain account?

"Chad A. Gross" wrote:

FYI - Group Policy Preferences for mapping drives execute during login,
so
they will only apply if the roaming notebooks are joined to the domain
AND
the users establish the VPN connection BEFORE they log in to the laptop.

The Death of IFMEMBER: (drive mapping w/ GPP in SBS 2008)
http://msmvps.com/blogs/cgross/archive/2008/12/16/the-death-of-ifmember.aspx

Installing Group Policy Preferences Client Side Extensions: (necessary
for
GPP to work on XP & Vista clients)
http://msmvps.com/blogs/cgross/archive/2008/12/16/installing-group-policy-preferences-client-side-extensions.aspx

Drive Mapping via Group Policy Preferences not working for Vista clients:
(registry fix if your GPP drive maps aren't working on Vista PCs)
http://msmvps.com/blogs/cgross/archive/2009/03/25/drive-mapping-via-group-policy-preferences-not-working-for-vista-clients.aspx

--

Chad A. Gross
http://www.msmvps.com/blogs/cgross


"Donny" <Donny@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5CB77FEF-F188-4C76-9D04-10AD91269F74@xxxxxxxxxxxxxxxx
Thank you for this post, can you further assist by advising where I
would
set
the GP rule. I frequently get mixed up and end up in the wrong portion
of
Group Policy.
The computers are mobile, as the users that need this are using
notebooks,
however, the notebooks are dedicated to the individual users.

"Chad A. Gross" wrote:

Are these roaming / individual remote machines, or is there a remote
office
with several machines at the same remote location?

If you have a remote office, the best solution is most likely going to
be
a
persistent router-to-router VPN. The specific setup will depend on
the
routers you are using.

If these are individual / roaming machines, you can definitely use the
native SBS VPN functionality. You basically have two options:

1) If the PCs are joined to the domain, you can create the VPN
connectoid
on these PCs and instruct users to establish the VPN connection before
they
sign in. Group Policy Preferences execute during login, so if you
have
these configured to map drives automatically, the drive will be mapped
during login as long as the VPN connection is already established.

2) If PCs are not joined to the domain, you can place a batch file
on
the
desktop that would create the drive mapping. This way the user could
open
the batch file to map the drive after the VPN is established. It's
been
a
while since I've done this, but I think you might be able to configure
the
batch file to both establish the VPN and then create the drive
mapping -
so
the user(s) would just need to open the batch file

HTH!

--

Chad A. Gross
http://www.msmvps.com/blogs/cgross


"Donny" <Donny@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:904B75AE-B107-40E9-862D-E083DBCB32F0@xxxxxxxxxxxxxxxx
I have been asked to set up a VPN connection for my customer who is
new
to
SBS. The application that they want to run requires a specfic drive
letter
for the database which resides on the server.
I need to setup Vista 32 bit machines (some are Ultimate and some
are
Business) to be able to map a drive letter for the SBS 2008 server
over
a
VPN
connection.
One person told me that this is only possible by using IPSec. I have
absolutely no experience inIPSec and I don't even know if this is
the
correct
route to follow.
Can anybody offer me some guidance on how to set this up and if I
need
to
setup and configure IPSec, then perhaps some suggestions of how to
do
it
or
where to find beginner information for us newbies to this type of
technology.




.

Relevant Pages

  • Re: Mapping a Networked drive letter over VPN
    ... The Network Login button is only available IF you have created a VPN ... establish the VPN connection before actually logging in. ... "FYI - Group Policy Preferences for mapping drives execute during ...
    (microsoft.public.windows.server.sbs)
  • Re: Mapping a Networked drive letter over VPN
    ... you need to create your VPN connectoid on your XP / Vista / Win7 PC. ... Now, when a user is remote and is looking at the login screen, they can establish the VPN connection before actually logging in. ... Select the VPN connection you want, enter credentials for that VPN connection and Windows will establish the VPN connection, THEN process the user login - allowing the remote user to log in to the domain directly. ... "FYI - Group Policy Preferences for mapping drives execute during login, ...
    (microsoft.public.windows.server.sbs)
  • Re: login script after setting up vpn connection
    ... objNetwork.UserName should be giving you the Windows login on their local ... > i want to run a login script after users make a connection to the 2003 ... > and not to the username used to setup the vpn connection. ...
    (microsoft.public.scripting.vbscript)
  • Re: Cached Credentials
    ... I have a salesman who is going to be working from home, VPN connection ... Client is Windows XP sp2, domain is Windows 2003 R2, He has been ... able to login with no direct contact with the DC.. ... How can I set this up, I am trying to avoid him logging in locally. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Integrating Domain and VPN Login
    ... > * Create the VPN connection in XP's Network Connections ... > * There should be a checkbox to authenticate using dial up ... Integrating Domain and VPN Login ...
    (Focus-Microsoft)