cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

2053
Views
0
Helpful
1
Replies
kim_pedersen
Beginner

Check for computer domain membership

Hi All,

  I would like some information on whether or not its possible to have the AnyConnect client check for Domain computer membership. As far as i can tell, the AnyConnect client needs to send some sort of attribute regarding what it views as its computer membership to the ASA, and then have the ASA authenticate this in the Active Directory domain.

Is this even possible to do? I cant find any documentation regarding this.

  Any help is appreciated!

Thanks!

1 REPLY 1

I think that you need to use CSD  to check whether computer belongs to domain or not.

Then you could create DAP policies and organize connectivity policies according to attributes which CSD checks locally on machine.

CSD can check windows registry so you must find out which registry is responsible for it, Im not sure about it but try:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Domain.

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\CachePrimaryDomain

hope it helps

regards

Content for Community-Ad