Disable the "Enable start before logon" option

d-hite · ‎10-21-2005

Is there a way to disable/remove this checkbox on client PC's?

For the users that have the VPN client installed we want to make sure that they login to VPN first for group policy and login script purposes.

Or if there is an alternate method that's fine too.

Thanks

gfullage · ‎10-23-2005

In the vpnclient.ini file in the main install directory, there's a section as follows:

[main]

RunAtLogon=1

If this is "1" then the "Start before login" box is checked, 0 = unchecked. For this and any option in the .ini files, if you put a an exclamation mark at the start of the line that greys out the option via the GUI. So manually edit the file to look like this:

[main]

!RunAtLogon=1

Then load up the VPN client GUI and you'll see this option is now greyed out. You can have this file pre-configured when the client is installed by following the instructions here:

http://www.cisco.com/univercd/cc/td/doc/product/vpn/client/rel4_0/admin_gd/vcach2.htm#1171056

Of course a smart user will be able to get into this file, remove the exclamation mark and edit the checkbox, but it'll stop 99.99% of users.

jackko · ‎10-24-2005

thanks glenn, you are the star!