Start VPN before user login to machine
-
Hello there,
Can someone help me to setup OpenVPN on pfSense so it starts before user login to machine? Since everyone start working from home I can not push GPO per machine anymore - users login to VPN after they login to computers.
We create user for each VPN connection (in pfSense System/User Manager/Users) and then client is installed on user's laptop. -
@piotres I believe that OpenVPN can be run as a service but I have never tried.
-
@piotres
I think you mean start the openvpn on the client machine (Windows) , before logging on to the "Domain".
So you are not using "Casched Domain credentials".I remember Cisco VPN having a "Gina" that did excactly this.
But have no idea if OpenVPN has something like that.
To me this seems to be a "Client issue" , not a pfSense issue.
But someone still might have a tip.Seems like there are some good hits if you search for : openvpn windows start before logon
/Bingo -
We use SSL/TLS remote access with no user auth and run as a service. This setup works great on a domain as everything just works as if you were on the lan. Just make sure you set your ovpn dns servers to the DCs on your lan.
-
@panoptic
That is a good hint. Thanks!
How do you setup OpenVPN for remote user? I can not find any useful article online. -
You can use machine certificates for authentication. Certificates stored in local computer store or slipstreamed into openvpn config file. This makes vpn connection to establish with no authentication prompts.
