| Description | This article describes why the 'Remember Password' and 'Auto Connect' options for VPN appear locked or grayed out in FortiClient |
| Scope | FortiClient, Remote Access. |
| Solution |
In FortiClient, the 'Remember Password' and 'Auto Connect' checkboxes are normally available for end users to control.
However, when Auto-Connect is configured in the Remote Access Profile on EMS, these two options become locked/grayed out on the endpoint. This is expected behavior, as EMS-managed settings override local user preferences.
When Auto-Connect is enabled in EMS, FortiClient follows the tunnel behavior defined by the administrator. As a result, end users cannot modify Auto Connect or Remember Password from their client GUI.
The Always Up option, however, remains unlocked and can still be toggled by the user unless it is explicitly controlled in EMS.
To prevent users from enabling Always Up, disable the option under EMS Console -> Remote Access Profile -> Tunnel Configuration -> Always Up. |
