cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 
cancel
3021
Views
0
Helpful
1
Replies

Check for computer domain membership

kim_pedersen
Level 1
Level 1

Hi All,

  I would like some information on whether or not its possible to have the AnyConnect client check for Domain computer membership. As far as i can tell, the AnyConnect client needs to send some sort of attribute regarding what it views as its computer membership to the ASA, and then have the ASA authenticate this in the Active Directory domain.

Is this even possible to do? I cant find any documentation regarding this.

  Any help is appreciated!

Thanks!

1 Reply 1

I think that you need to use CSD  to check whether computer belongs to domain or not.

Then you could create DAP policies and organize connectivity policies according to attributes which CSD checks locally on machine.

CSD can check windows registry so you must find out which registry is responsible for it, Im not sure about it but try:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Domain.

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\CachePrimaryDomain

hope it helps

regards