AutoPilot Hybrid Auth and Meraki Client VPN (VPN not working on lockscreen)

[FunT3ch]

Hey Everyone,

I've spent a lot of time searching this issue but can't seem to find much, so hoping someone here has gone through this.

My company is working to implement MS Autopilot, with Hybrid AD join. At this point, we get to the point where all of the functions run, and the last step is for a user to sign in with their AD creds. The step we have to complete before this is to sign into the VPN by clicking the network icon. The VPN has been configured with -AllUserConnection, so should theoretically work from the lockscreen, but we can't get it to connect. If we sign into the computer using a local account, all works as it should, but the actual connection from the lockscreen just doesn't work, and we can't authenticate a sign in.

TL;DR - Has anyone gotten their Client VPN to connect from the lock screen? Or have gotten Autopilot with Hybrid Auth to work well?

[PhilipDAth]

You can't use client VPN to authenticate from the login screen.  The Microsoft Client doesn't allow VPN connections that use PAP to authenticate to do this, and PAP is the only option available to us.

What you *might* be able to do is use the command line rasdial.exe to initiate the VPN and run that from a provisioning script (right after creating the VPN might be a good time).  You could use a hardcoded username/password used only for doing the AD join.