Check for computer domain membership

Unanswered Question
Aug 27th, 2010
User Badges:

Hi All,


  I would like some information on whether or not its possible to have the AnyConnect client check for Domain computer membership. As far as i can tell, the AnyConnect client needs to send some sort of attribute regarding what it views as its computer membership to the ASA, and then have the ASA authenticate this in the Active Directory domain.


Is this even possible to do? I cant find any documentation regarding this.


  Any help is appreciated!


Thanks!

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Przemyslaw Konitz Fri, 08/27/2010 - 02:15
User Badges:

I think that you need to use CSD  to check whether computer belongs to domain or not.

Then you could create DAP policies and organize connectivity policies according to attributes which CSD checks locally on machine.


CSD can check windows registry so you must find out which registry is responsible for it, Im not sure about it but try:


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Domain.


HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\CachePrimaryDomain


hope it helps


regards

Actions

This Discussion