GlobalProtect Pre-Logon with Windows 8.1

[nthen]

I have been testing out a new GP portal/gateway on my firewalls for Pre-Logon/Always On as I would like to eventually like to move all remote workstations to this model.  With that said, I notice when I enabled the pre-logon and SSO a new icon shows up on the logon screen which is confusing my users.  Some click on it when logging in and others do not.  I tested and things seem to work the same if I click on it or not.  Can any one shed some light on the pre-logon process with Windows 8.1 and if users should or should not be using the GP icon at the login screen?

[Remo]

Hi nthen

Actually if you want wo use single sign on the users have to click the GP icon on the login screen. Without doing that the GP client does not get the usercredentials and cannot pass them directly to the firewall for the vpn login. If the users do not click the icon a GP login window should pop up where users have to fill in username and password.

In windows 7 Global Protect was doing the same in default configuration, it created his own login credential provider. But there it was possible wrap an existing credential provider so only the user appeared only once on the login screen. But with windows 8(.1) (correct me if I am wrong, because I am also searching a possiblity to do that), this isn't possible anymore because Microsoft totally changed the login process with the credential providers.

Regards,

Remo

[chrimie]

Hi All,

but if you select the GP icon you can not change the password.

I'm just testing this. If I force a password change at next login, the change is not possible

because the screen to change the password only shows one password field.

But if you want to change the password the normal change screen shows three password field.

The old one and twice for the new password.

I have to mention we are using a german windows branding.

I don't know if the behavior is different with an english version.

I will open a case for this.

Regards,

Christian

[Remo]

Hi Christian (chrimie )

A little late but now I finally got what you meant with the password change behaviour. I was able to reproduce the issue (I tested with GPA 2.3.1)

You mentionned that you opened a case for this: Do you have any results from that?

Regards,

Remo