I thought the same thing on the domain login, but the vpn concentrator is supposed to pass windows credentials upon connection, isn't it? Since we have NT Logon enabled?

Start before logon won't work, this is for non-company owned equipment.

The Intranet page is not pingable as the server hostname won't immediately resolve, but does resolve on the second try... I read in one of the manuals that you can populate the host file with a hostname, but can't find any way to do it through the concentrator.

As towards the dns entry defined on the group, I don't follow. I have DNS setup for the group and the base group, but what do you mean by an 'entry'?

NO, the concentrator does not pass windows credentials to the domain controller or to any server, the user authentication performed is only for vpn authentication.

The host file will never be updated by the concentrator, the only modification the vpn concentrator does to the client is for the ip configuration of the virtual adapter and by entry I meant the DNS ip address defined on the Group.

Your only option is Start before logon or have them to log in twice.

Ok, thanks. Not what I wanted but hey, it is an outdated box.

Yeah... saddly I think none of the cisco box has the option of passing along the domain login to the domain, I am not sure if the ms client supports it though, I think that if you configure a pptp or l2tp over ipsec client you will be able to achieve it, just my 2 cents