Global Protect on macs using active directory logins

[slinxy]

Hi

We use ad accounts for users to login to the macs (arrange of MacOS versions), but from a certain day we been told that users need to use global protect to VPN in our sister company to use certain resources, mainly email.

Once global protect is on and connected, if the users screen saver kicks in.. the machine will no longer verify their username and password.

I thought it might be a dns issue and got the sister company to register our ad servers into the global protect's DNS.  I can ping/tracert back to both our AD servers but the issue is still occuring.

I can bypass the issue, as I've enabled admin override on the lock screen and if we disconnect/disable the VPN connection, the lock screen works as normal.

It works fine on the our windows machines (so I've been told), and with macs with local accounts, just not macs using AD logins (non-mobile).

Any thoughts?

Thanks in advance...

[BPry]

My initial thought would be that, while you can rach the AD servers, the sister company has not actually allowed AD traffic through GP back to your AD servers for the users to log back into the device.