topic Re: GlobalProtect using wrong user in GlobalProtect Discussions

GlobalProtect using wrong user

JoergSchuetter — Sun, 17 Jan 2021 10:48:40 GMT

Hello

We are facing a strange issue on a small number of notebooks (Windows 10).

When the user connects via VPN, the user seen (and used) in GlobalProtect does not match the logged in (Windows OS) user. If he clicks on "logout user", the wrong user will be used again (no popup window where the user is asked to enter a different user).

All the "sticky" users belongs to users with local administrative permissions on all of these devices. These administrative users have installed/staged the notebooks and handed them over to the "normal" users once done.

The credentials could not be found in the credential manager of Windows (neither of the "normal" nor of the "administrative" user).

Any idea how this could be solved (besides re-installation of GlobalProtect)?

Best Regards

Joerg

Re: GlobalProtect using wrong user

reaper — Sun, 17 Jan 2021 22:49:27 GMT

check how the GPService is configured in the services, maybe the admins staged GlobalProtect in such a way that their username is bound to the service as the service account

Re: GlobalProtect using wrong user

JoergSchuetter — Wed, 20 Jan 2021 17:27:19 GMT

GP was installed via software distribution, not related to the logged in admin.

I have created a dedicated profile on GP portal, valid only for the admin users. In this profile I have set "Save User Credentials" to "No" and "Clear Single Sign-On Credentials on Logout" to "Yes" (which is the default, but we changed it to no in our environment).

Looks like this wipes the credentials, and the users are asked for their credentials (might require an additional reboot).

Re: GlobalProtect using wrong user

MP18 — Fri, 22 Jan 2021 22:49:59 GMT

@JoergSchuetter

By Best Practice

Clear Single Sign-On Credentials on Logout

(Windows Only)

Select No to keep single sign-on credentials when the user logs out. Select Yes (default) to clear them and force the user to enter credentials upon the next login.

Regards

Re: GlobalProtect using wrong user

wvenable — Tue, 07 Sep 2021 19:28:38 GMT

The solution to this problem is to open Internet Explorer 11 and clear the cache. It may be necessary to uncheck the option to preserve the session cache, logins, etc. This is what I did. After clearing the IE11 cache, launching Global Protect will give you the prompt for user name again.