Home All Groups Group Topic Archive Search About

User dis-join from domain, how to re-join again

Author
17 Mar 2009 6:49 PM
Newbie
I have had instances where users disjoin their laptops from the work domain
when they try to set up whatever at home, then they have to wait till
getting back to the office to rejoin.  Our VPN allows rejoining the laptop
when signed in, but at the CTRL+ALT+DEL screen, user can't login to VPN
first before it authenticates, so how can I get around this?

Appreciate your inputs.

Author
17 Mar 2009 7:37 PM
Lanwench [MVP - Exchange]
Newbie <nom***@noserver.com> wrote:
> I have had instances where users disjoin their laptops from the work
> domain when they try to set up whatever at home, then they have to
> wait till getting back to the office to rejoin.  Our VPN allows
> rejoining the laptop when signed in, but at the CTRL+ALT+DEL screen,
> user can't login to VPN first before it authenticates, so how can I
> get around this?
> Appreciate your inputs.

Have them bring the laptop back to the office. Then take away their admin
rights after you rejoin their laptops to the domain, or at least make sure
they've been officially been made aware of what they must not touch on the
computer. I'd prefer the former, but I understand on laptops it's hard to
enforce that as they often need to install printers, etc.
Author
17 Mar 2009 7:52 PM
Newbie
I wish I had the power to do that!!!


"Lanwench [MVP - Exchange]"
<lanwe***@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message
Show quoteHide quote
news:OlYKhgzpJHA.996@TK2MSFTNGP03.phx.gbl...
> Newbie <nom***@noserver.com> wrote:
>> I have had instances where users disjoin their laptops from the work
>> domain when they try to set up whatever at home, then they have to
>> wait till getting back to the office to rejoin.  Our VPN allows
>> rejoining the laptop when signed in, but at the CTRL+ALT+DEL screen,
>> user can't login to VPN first before it authenticates, so how can I
>> get around this?
>> Appreciate your inputs.
>
> Have them bring the laptop back to the office. Then take away their admin
> rights after you rejoin their laptops to the domain, or at least make sure
> they've been officially been made aware of what they must not touch on the
> computer. I'd prefer the former, but I understand on laptops it's hard to
> enforce that as they often need to install printers, etc.
>
Author
17 Mar 2009 10:15 PM
Lanwench [MVP - Exchange]
Newbie <nom***@noserver.com> wrote:
> I wish I had the power to do that!!!

Well, there were two options given :-)
Show quoteHide quote
>
>
> "Lanwench [MVP - Exchange]"
> <lanwe***@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
> message news:OlYKhgzpJHA.996@TK2MSFTNGP03.phx.gbl...
>> Newbie <nom***@noserver.com> wrote:
>>> I have had instances where users disjoin their laptops from the work
>>> domain when they try to set up whatever at home, then they have to
>>> wait till getting back to the office to rejoin.  Our VPN allows
>>> rejoining the laptop when signed in, but at the CTRL+ALT+DEL screen,
>>> user can't login to VPN first before it authenticates, so how can I
>>> get around this?
>>> Appreciate your inputs.
>>
>> Have them bring the laptop back to the office. Then take away their
>> admin rights after you rejoin their laptops to the domain, or at
>> least make sure they've been officially been made aware of what they
>> must not touch on the computer. I'd prefer the former, but I
>> understand on laptops it's hard to enforce that as they often need
>> to install printers, etc.
Author
17 Mar 2009 8:16 PM
Phillip Windell
"Newbie" <nom***@noserver.com> wrote in message
news:eym8NEzpJHA.1172@TK2MSFTNGP04.phx.gbl...

> getting back to the office to rejoin.  Our VPN allows rejoining the laptop
> when signed in, but at the CTRL+ALT+DEL screen, user can't login to VPN
> first before it authenticates, so how can I get around this?

Login as the Local Administrator,...activate the VPN,...join the
Domain,...reboot,....check the "checkbox" to login with a dialup
connection",....use Domain Credentials at that point,....choose the correct
VPN connection

I'm not saying the user would know the local Admin credentials (they
shouldn't anyway),...but I am saying those are the steps to join the domain
over the VPN.


--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Author
18 Mar 2009 3:05 AM
Ace Fekay [Microsoft Certified Trainer]
In news:eq1YE2zpJHA.5900@TK2MSFTNGP04.phx.gbl,
Phillip Windell <philwind***@hotmail.com>, posted the following:
Show quoteHide quote
> "Newbie" <nom***@noserver.com> wrote in message
> news:eym8NEzpJHA.1172@TK2MSFTNGP04.phx.gbl...
>
>> getting back to the office to rejoin.  Our VPN allows rejoining the
>> laptop when signed in, but at the CTRL+ALT+DEL screen, user can't
>> login to VPN first before it authenticates, so how can I get around
>> this?
>
> Login as the Local Administrator,...activate the VPN,...join the
> Domain,...reboot,....check the "checkbox" to login with a dialup
> connection",....use Domain Credentials at that point,....choose the
> correct VPN connection
>
> I'm not saying the user would know the local Admin credentials (they
> shouldn't anyway),...but I am saying those are the steps to join the
> domain over the VPN.

Just to add, a remote tool can be used (logmein, teamviewer, techinline, and
many others out there) to remote into the user's laptop while they are at
home, and then perform this procedure.

One other additional suggestion is to configure the VPN software so it shows
up with an option to use it with the logon box. Many VPN client software
offers this capability. I use Cisco's VPN client which I configure this
setting for, this way they can logon into the VPN first which connects them
to the internal network first, then logon into the domain.


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer
ace***@mvps.RemoveThisPart.org

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Author
17 Mar 2009 9:31 PM
Meinolf Weber [MVP-DS]
Hello Newbie,

If you users are able to make that change s they have to many permissions,
so remove the local admin permission from them. Philipp mshow you the way
to rejoin.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Show quoteHide quote
> I have had instances where users disjoin their laptops from the work
> domain when they try to set up whatever at home, then they have to
> wait till getting back to the office to rejoin.  Our VPN allows
> rejoining the laptop when signed in, but at the CTRL+ALT+DEL screen,
> user can't login to VPN first before it authenticates, so how can I
> get around this?
>
> Appreciate your inputs.
>