<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Connect to VPN before login to computer]]></title><description><![CDATA[<p dir="auto">Hello there,<br />
Is there a way to have OpenVPN connected before the user logs in to the computer?<br />
Since everyone working from home I can not push AD GPOs per machine.</p>
]]></description><link>https://forum.netgate.com/topic/161582/connect-to-vpn-before-login-to-computer</link><generator>RSS for Node</generator><lastBuildDate>Sat, 17 Oct 2026 09:30:21 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/161582.rss" rel="self" type="application/rss+xml"/><pubDate>Mon, 01 Mar 2021 15:34:48 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Connect to VPN before login to computer on Tue, 02 Mar 2021 14:12:14 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/piotres">@<bdi>piotres</bdi></a><br />
One option, add the following to the client's config:</p>
<p dir="auto">auth-user-pass pass.txt</p>
<p dir="auto">then add a 2 line text file called "pass.txt" in the same folder as the client's config using the following format:</p>
<p dir="auto">username<br />
password</p>
<p dir="auto">Another option, create a separate instance for auto-connect users that auth's from certificate only.</p>
<p dir="auto">Another option, create a service account for auto-connect users, so solutions similar to the above can be deployed without input from the end-user.  We did this at my last gig with Cisco AnyConnect.</p>
<p dir="auto">Another possible option, it looks like the "auth-user-pass" directive can be invoked via the command line, so it may be possible to add something like the following to the parameters section of the service instead of modifying the client config:</p>
<p dir="auto">--config C:\Program Files\OpenVPN\config\myvpnconfig.ovpn --auth-user-pass "C:\Program Files\OpenVPN\config\pass.txt"</p>
]]></description><link>https://forum.netgate.com/post/969589</link><guid isPermaLink="true">https://forum.netgate.com/post/969589</guid><dc:creator><![CDATA[marvosa]]></dc:creator><pubDate>Tue, 02 Mar 2021 14:12:14 GMT</pubDate></item><item><title><![CDATA[Reply to Connect to VPN before login to computer on Mon, 01 Mar 2021 18:29:56 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/marvosa">@<bdi>marvosa</bdi></a><br />
I am aware of running OpenVPN as a service, but how can I provide user's credentials?</p>
]]></description><link>https://forum.netgate.com/post/969370</link><guid isPermaLink="true">https://forum.netgate.com/post/969370</guid><dc:creator><![CDATA[piotres]]></dc:creator><pubDate>Mon, 01 Mar 2021 18:29:56 GMT</pubDate></item><item><title><![CDATA[Reply to Connect to VPN before login to computer on Mon, 01 Mar 2021 17:25:57 GMT]]></title><description><![CDATA[<p dir="auto">You would have to run the client as a service, so it starts with the OS before login:</p>
<p dir="auto"><a href="https://openvpn.net/cloud-docs/user-guide-openvpn-as-a-system-service-on-windows/" target="_blank" rel="noopener noreferrer nofollow ugc">https://openvpn.net/cloud-docs/user-guide-openvpn-as-a-system-service-on-windows/</a></p>
<p dir="auto"><a href="https://openvpn.net/cloud-docs/user-guide-openvpn-as-a-system-service-on-windows/" target="_blank" rel="noopener noreferrer nofollow ugc">https://openvpn.net/community-resources/running-openvpn-as-a-windows-service/</a></p>
]]></description><link>https://forum.netgate.com/post/969315</link><guid isPermaLink="true">https://forum.netgate.com/post/969315</guid><dc:creator><![CDATA[marvosa]]></dc:creator><pubDate>Mon, 01 Mar 2021 17:25:57 GMT</pubDate></item><item><title><![CDATA[Reply to Connect to VPN before login to computer on Mon, 01 Mar 2021 15:50:51 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/piotres">@<bdi>piotres</bdi></a></p>
<p dir="auto">It's certainly possible in Linux.  Not sure about Windows.</p>
]]></description><link>https://forum.netgate.com/post/969275</link><guid isPermaLink="true">https://forum.netgate.com/post/969275</guid><dc:creator><![CDATA[JKnott]]></dc:creator><pubDate>Mon, 01 Mar 2021 15:50:51 GMT</pubDate></item></channel></rss>