> From: [email protected] [mailto:discuss-
> [email protected]] On Behalf Of Ryan Frantz
> 
> Unfortunately, we've had a few scenarios where users reset their Windows
> domain password and forgot what it was the next day, so they call the
> Support Desk for assistance.  We can remotely unlock/reset the FDE
> password, but FDE decouples from the Windows GINA, forcing the user to
> log in to Windows at least once (where before, the FDE handled
> this).  However, the user can't remember Windows password.  And if they
> can't log in, they can't connect securely via VPN so that we can assist
> remotely.  Very chicken-before-the-egg.

Assuming the user is able to get on a wired internet, or you have the wifi 
driver that allows them to join wifi before windows logon...  You can remote 
control their computer, login as yourself (or a local admin account) connect 
the VPN, and cache the user credentials.  (The way I like to cache the 
credentials is to use "Run As" on a shortcut to CMD.)  After that, the user 
will be able to login as themselves.

You also might consider a VPN software that's able to connect before windows 
logon.

One thing is certain:

You either need some other account credentials (such as yourself or a local 
admin user account) or you need the ability to connect VPN without login.  
There's no other way.

Well, there's one other way.  The user must carry the laptop to some place 
where you have a company internal network connection.

_______________________________________________
Discuss mailing list
[email protected]
https://lists.lopsa.org/cgi-bin/mailman/listinfo/discuss
This list provided by the League of Professional System Administrators
 http://lopsa.org/

Reply via email to