Force what Global Protect Portal to use

[xen-pv]

Hello,

Our users will have 2 Global Protect Portals to choose from.

The users sometimes log in to windows with a smart-card and sometimes with a normal AD-account (Username and password).

Not sure if it's possible but can we force what portal they connect to based on what account they log in on? 

Theres one portal for smart-card users and one for the normal accounts.

Regards

xen-pv

[Mick_Ball]

I suppose you could do this by setting the GP portal in the local user registry, a domain member could be set to portal A and any other, portal B, you can then prevent user from changing portal address via the portal agent config.

[Mick_Ball]

Hmmmm... or are those settings for local computer and not user, i will have a play on Monday unles you find another option...

[xen-pv]

As a workaround at the moment we are guiding users to connect to the correct portal at first login. When that is done it seems to be saved in the local profile and they do not have to change it again.

This does not affect alot of users so the manual work is fine at the moment. Would just be nice to be able to get it to be handled automatically. 

The base portal is located in "local machine" and in "Current User" i found a sting value "LastUrl" that it changed when the user connect to the other portal. Not sure how these could be changed based on login.. 

[Mick_Ball]

Hmm,,, this may be possible via a GP pre logon script, perhaps a local test to check who has logged in and apply to portal reg setting.

not really my thing but may be something your into...

can i ask why 2 seperate portals?..