VPN connection before login

Troy Hergert

3 May 2010 3 May '10

8:40 p.m.

Is there a way to have a Windows XP machine which logs into a Server 2003 domain, first connect to a VPN before the login to Windows, or at the same time? Thanks. Troy

Show replies by date

chris hallsworth

3 May 3 May

8:39 p.m.

Hi, it could work, I guess if the 2003 machine is serving Remote Desktop connections. Chris Hallsworth E-mail and Facebook: christopherh40@googlemail.com MSN: ch9675@hotmail.com Skype: chrishallsworth7266 Twitter: http://twitter.com/christopherh40 On 03/05/2010 21:40, Troy Hergert wrote:

...

Is there a way to have a Windows XP machine which logs into a Server 2003 domain, first connect to a VPN before the login to Windows, or at the same time? Thanks. Troy _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

Scott Granados

8:48 p.m.

Yes, your VPN software should have an option for this. ----- Original Message ----- From: "Troy Hergert" To: "Blind system administrators" Sent: Monday, May 03, 2010 1:40 PM Subject: [Blind-sysadmins] VPN connection before login Is there a way to have a Windows XP machine which logs into a Server 2003 domain, first connect to a VPN before the login to Windows, or at the same time? Thanks. Troy _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

David McLean

9:04 p.m.

I work for Aetna and the software they use from Cisco does that. I use it all the time. It's just a checkbox in the Vpn options. It can be done but I'd imagine it depends on what client is being used. On May 3, 2010, at 4:40 PM, Troy Hergert wrote:

...

Is there a way to have a Windows XP machine which logs into a Server 2003 domain, first connect to a VPN before the login to Windows, or at the same time? Thanks. Troy _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

Andrew Hodgson

9:42 p.m.

Hi, Yes on Cisco Anyconnect and the earlier VPN clients at least this is an option. Moving forward a stage, is there any way to do this using one-time passwords (using RSA fobs or such)? Thanks. Andrew. -----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Troy Hergert Sent: 03 May 2010 21:41 To: Blind system administrators Subject: [Blind-sysadmins] VPN connection before login Is there a way to have a Windows XP machine which logs into a Server 2003 domain, first connect to a VPN before the login to Windows, or at the same time? Thanks. Troy _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

Scott Granados

9:45 p.m.

You can enable certificate based authentication with the Cisco products, not sure about onetime RSA keychains and the like. I would assume there's a way since this is a very common requirement. ----- Original Message ----- From: "Andrew Hodgson" To: "Troy Hergert" ; "Blind sysadmins list" Sent: Monday, May 03, 2010 2:42 PM Subject: Re: [Blind-sysadmins] VPN connection before login Hi, Yes on Cisco Anyconnect and the earlier VPN clients at least this is an option. Moving forward a stage, is there any way to do this using one-time passwords (using RSA fobs or such)? Thanks. Andrew. -----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Troy Hergert Sent: 03 May 2010 21:41 To: Blind system administrators Subject: [Blind-sysadmins] VPN connection before login Is there a way to have a Windows XP machine which logs into a Server 2003 domain, first connect to a VPN before the login to Windows, or at the same time? Thanks. Troy _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

Brent Harding

4 May 4 May

12:06 a.m.

I wonder how a blind person would use one of these key fob things anyways? I'm sure they're coming to online banking eventually as well. Will these things really lead to less employment available for blind people because it could give companies a simple way to be incompatible with anything we can do. I know Paypal is promoting these things, but we don't have the option. These days, I'm not sure how secure the sms alternative Paypal has is, but not every company can set up a short code for doing this. If your cell signal is bad, well, then maybe it may take a long time for that message to come, if it does. ----- Original Message ----- From: "Scott Granados" To: "Blind sysadmins list" ; "Troy Hergert" Sent: Monday, May 03, 2010 4:45 PM Subject: Re: [Blind-sysadmins] VPN connection before login

...

You can enable certificate based authentication with the Cisco products, not sure about onetime RSA keychains and the like. I would assume there's a way since this is a very common requirement.

----- Original Message ----- From: "Andrew Hodgson" To: "Troy Hergert" ; "Blind sysadmins list" Sent: Monday, May 03, 2010 2:42 PM Subject: Re: [Blind-sysadmins] VPN connection before login

Hi,

Yes on Cisco Anyconnect and the earlier VPN clients at least this is an option. Moving forward a stage, is there any way to do this using one-time passwords (using RSA fobs or such)?

Thanks. Andrew.

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Troy Hergert Sent: 03 May 2010 21:41 To: Blind system administrators Subject: [Blind-sysadmins] VPN connection before login

Is there a way to have a Windows XP machine which logs into a Server 2003 domain, first connect to a VPN before the login to Windows, or at the same time? Thanks. Troy _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

Scott Granados

12:26 a.m.

There are RSA onetime generators that can run under your PC so work at least should be covered. You can read the 6 digit code and punch it in directly. I believe enigma logic or someone similar makes such a beast. I think your bank is going to go biometric first before they have people carrying around expensive keychains. ----- Original Message ----- From: "Brent Harding" To: "Blind sysadmins list" Sent: Monday, May 03, 2010 5:06 PM Subject: Re: [Blind-sysadmins] VPN connection before login I wonder how a blind person would use one of these key fob things anyways? I'm sure they're coming to online banking eventually as well. Will these things really lead to less employment available for blind people because it could give companies a simple way to be incompatible with anything we can do. I know Paypal is promoting these things, but we don't have the option. These days, I'm not sure how secure the sms alternative Paypal has is, but not every company can set up a short code for doing this. If your cell signal is bad, well, then maybe it may take a long time for that message to come, if it does. ----- Original Message ----- From: "Scott Granados" To: "Blind sysadmins list" ; "Troy Hergert" Sent: Monday, May 03, 2010 4:45 PM Subject: Re: [Blind-sysadmins] VPN connection before login

...

You can enable certificate based authentication with the Cisco products, not sure about onetime RSA keychains and the like. I would assume there's a way since this is a very common requirement.

----- Original Message ----- From: "Andrew Hodgson" To: "Troy Hergert" ; "Blind sysadmins list" Sent: Monday, May 03, 2010 2:42 PM Subject: Re: [Blind-sysadmins] VPN connection before login

Hi,

Yes on Cisco Anyconnect and the earlier VPN clients at least this is an option. Moving forward a stage, is there any way to do this using one-time passwords (using RSA fobs or such)?

Thanks. Andrew.

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Troy Hergert Sent: 03 May 2010 21:41 To: Blind system administrators Subject: [Blind-sysadmins] VPN connection before login

Is there a way to have a Windows XP machine which logs into a Server 2003 domain, first connect to a VPN before the login to Windows, or at the same time? Thanks. Troy _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

Brent Harding

12:43 a.m.

well, fingerprint readers cost as well, not sure if they're as expensive as the RSA devices though. I suppose they'd have to supply them because it would seem that if I went to a branch and they took my print there, if I did it at home with a different brand of sensor, they could look different. I'm not sure on that one though. ----- Original Message ----- From: "Scott Granados" To: "Blind sysadmins list" Sent: Monday, May 03, 2010 7:26 PM Subject: Re: [Blind-sysadmins] VPN connection before login

...

There are RSA onetime generators that can run under your PC so work at least should be covered. You can read the 6 digit code and punch it in directly. I believe enigma logic or someone similar makes such a beast. I think your bank is going to go biometric first before they have people carrying around expensive keychains.

----- Original Message ----- From: "Brent Harding" To: "Blind sysadmins list" Sent: Monday, May 03, 2010 5:06 PM Subject: Re: [Blind-sysadmins] VPN connection before login

I wonder how a blind person would use one of these key fob things anyways? I'm sure they're coming to online banking eventually as well. Will these things really lead to less employment available for blind people because it could give companies a simple way to be incompatible with anything we can do. I know Paypal is promoting these things, but we don't have the option. These days, I'm not sure how secure the sms alternative Paypal has is, but not every company can set up a short code for doing this. If your cell signal is bad, well, then maybe it may take a long time for that message to come, if it does.

----- Original Message ----- From: "Scott Granados" To: "Blind sysadmins list" ; "Troy Hergert" Sent: Monday, May 03, 2010 4:45 PM Subject: Re: [Blind-sysadmins] VPN connection before login

...
You can enable certificate based authentication with the Cisco products, not sure about onetime RSA keychains and the like. I would assume there's a way since this is a very common requirement.

----- Original Message ----- From: "Andrew Hodgson" To: "Troy Hergert" ; "Blind sysadmins list" Sent: Monday, May 03, 2010 2:42 PM Subject: Re: [Blind-sysadmins] VPN connection before login

Hi,

Yes on Cisco Anyconnect and the earlier VPN clients at least this is an option. Moving forward a stage, is there any way to do this using one-time passwords (using RSA fobs or such)?

Thanks. Andrew.

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Troy Hergert Sent: 03 May 2010 21:41 To: Blind system administrators Subject: [Blind-sysadmins] VPN connection before login

Is there a way to have a Windows XP machine which logs into a Server 2003 domain, first connect to a VPN before the login to Windows, or at the same time? Thanks. Troy _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

Ryan Shugart

3 May 3 May

11:55 p.m.

Andrew: Do you know how difficult this is to do with Anyconnects? That's what we use, and unless the option has to be set by the VPN administrator I've never seen it. I'd love to know though, it'd be a big help for remote users around password change time. Ryan -----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Andrew Hodgson Sent: Monday, May 03, 2010 3:42 PM To: Troy Hergert; Blind sysadmins list Subject: Re: [Blind-sysadmins] VPN connection before login Hi, Yes on Cisco Anyconnect and the earlier VPN clients at least this is an option. Moving forward a stage, is there any way to do this using one-time passwords (using RSA fobs or such)? Thanks. Andrew. -----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Troy Hergert Sent: 03 May 2010 21:41 To: Blind system administrators Subject: [Blind-sysadmins] VPN connection before login Is there a way to have a Windows XP machine which logs into a Server 2003 domain, first connect to a VPN before the login to Windows, or at the same time? Thanks. Troy _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

Andrew Hodgson

4 May 4 May

12:42 p.m.

Hi, Here is the link I got from my bookmarks: http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect22/... Actually after reading this a bit more with the RSA administrator guide I think I can see a way of enabling this alongside the RSA security tokens. We are a long way from that though, as we haven't moved over to ASA hardware yet. I may look at doing this at home if I am sufficiently bored. Andrew. -----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Ryan Shugart Sent: 04 May 2010 00:55 To: Blind sysadmins list Subject: Re: [Blind-sysadmins] VPN connection before login Andrew: Do you know how difficult this is to do with Anyconnects? That's what we use, and unless the option has to be set by the VPN administrator I've never seen it. I'd love to know though, it'd be a big help for remote users around password change time. Ryan -----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Andrew Hodgson Sent: Monday, May 03, 2010 3:42 PM To: Troy Hergert; Blind sysadmins list Subject: Re: [Blind-sysadmins] VPN connection before login Hi, Yes on Cisco Anyconnect and the earlier VPN clients at least this is an option. Moving forward a stage, is there any way to do this using one-time passwords (using RSA fobs or such)? Thanks. Andrew. -----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Troy Hergert Sent: 03 May 2010 21:41 To: Blind system administrators Subject: [Blind-sysadmins] VPN connection before login Is there a way to have a Windows XP machine which logs into a Server 2003 domain, first connect to a VPN before the login to Windows, or at the same time? Thanks. Troy _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins -- 98% of our clients would recommend us Client Survey Jan 2010 Registered in England No. 02933191. UK VAT Reg. No. 666 9148 88. © 2009 - 2010 allpay Limited Fully compliant with the Payment Card Industry Data Security Standard (PCI DSS) Telephone: 0844 225 5729 Fax: 0844 557 8350 Website: www.allpay.net Email: enquiries@allpay.net This email, and any files transmitted with it, is confidential and intended solely for the use of the individual or entity to whom it is addressed. If you have received this email in error please notify the allpay Information Security Manager at the number above

Ryan Shugart

3 May 3 May

11:55 p.m.

Andrew Hodgson

9:42 p.m.

5254

Age (days ago)

5254

Last active (days ago)

List overview

Download

12 comments

8 participants

participants (8)

Andrew Hodgson
Andrew Hodgson
Brent Harding
chris hallsworth
David McLean
Ryan Shugart
Scott Granados
Troy Hergert