A client has run into a strange intermittent issue with GP clients not connecting correctly on a new build of a Windows 10 laptop. The issue also randomly happens on some existing domain machines.
Basically, the GP client doesn't connect the first time when logging in with a domain account and a registry key needs to edited and / or the Windows credentials need to be added to Windows credential manager to resolve the problem.
I see an 'invalid portal' message in the PanGPA log and a message that the user cant open there Pan_PUAC (see below):
Failed to open file C:\Users\username\AppData\Local\Palo Alto Networks\GlobalProtect\PanPUAC_121620b54af6157948988a44540f448.dat
Client has provided the below workflow:
I just setup a new machine and the following occurred.
I logged into a machine Dell XPS 13”Win 10 latest edition as a new local user
Connected to VPN using duo auth
GP wanted to update and did. Then I reconnected GP.
Connected machine to work domain
Connected to VPN as local user
Locked machine using control alt del
Selected other user and typed in creds for new user
User profile created.
Logged in as new domain user and tried to access VPN.
Oops error occurs and you can’t login.
So you follow steps here https://goddamnpc.com/vpn-error-the-computer-must-be-trusted-for-delegation-and-the-current-user-acc... and reboot
Then VPN connects after password and duo verification and you get the success and green tick.
After that the grey world just has the dots running around for ever and you never connect.
Sometimes, disconnecting and reconnecting gives you a connection sometimes not.
If all else fails you then add the domain user and password to the cred manager windows and that seems to fix the problem.
This issue has only recently been happening. So I’m not sure where the issue lies.
Has anyone come across or experienced this issue before?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!