we have been struggeling to find a solution to find a solution that pc's from our work kan only have full acces via vpn and if a user uses another machine, the can only use RDP.
we have 2 profiles which are given by our ACS. rdp and laptop.
we don;t want users to have 2 logins and tokens.
is there a way to do this? i know we could use cisco secure desktop, but I heard that this is not really suitable for older machines (performance wise)
another option it thought of is to create 2 connection profiles. one called laptop which always goes to the "laptop" profile and ignores the profile settings of the acs. but I can't find a way to ignore these profile settings.
I'm sure I'm not the only one facing this problem. what do you use as solution for this?