Skip to main content
Impulsion84
Impulsion84
New Member
February 26, 2019
Question

VPN Options (Enable VPN before logon)

  • February 26, 2019
  • 4 replies
  • 14577 views

Hi guys, 

We are using FortiClient 5.2.6.0664 in our network, and now, we want to enable the option "Enable VPN before lgon" for everybody, but without repacking the client and release it again via SCCM, we tough that we can create a gpo.

I found one entry in regedit, called: 

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Fortinet\FortiClient\FA_VPNSTARTER] "enabled"=dword:00000000 "vpn_before_logon_enabled"=dword:00000001

But, if i set it manually to 1, it still doesn't show up in the Sign-In options box, before loggin in to the domain. If i thick the box from the client options, and restart, it works, but nobody wants to connect remotely to 1000 clients and just tick that box.

Any help on this? Are there any other regedit entry's that modify once you tick that Enable VPN before logon, and click on OK?

 

 

Cheers!

    4 replies

    Bilal_Habib
    Bilal_Habib
    New Member
    March 3, 2020

    Hi did you ever figure this out? I have the same issue, i scanned some registry snapshots but have not found the magic key as of yet

    Impulsion84
    Impulsion84Author
    New Member
    March 3, 2020

    Yes i did! I've modified the .msi client with Flexera Admin Studio, and add the option by default, and then deploy it to everybody. 

     

    Noldiani
    Noldiani
    New Member
    July 14, 2020

    Heck, I came here to ask the exact same thing. A year old post. If no one knows, I guess I might need to open a ticket.

    dsvirskis
    dsvirskis
    New Member
    September 9, 2020

    Try setting these registry keys, seemed to work for me. Note the registry keys need to be changed using the 'system' account as the administrators group only has read access under HKEY_LOCAL_MACHINE\SOFTWARE\Fortinet\FortiClient.

     

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SOFTWARE\Fortinet\FortiClient\FA_VPNSTARTER] "vpn_before_logon_enabled"=dword:00000001

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Provider Filters\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7}] @="FortiCredentialProvider"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7}] @="FortiCredentialProvider"

    Terms & ConditionsAccessibility statement