Check for computer domain membership

[kim_pedersen]

Hi All,

  I would like some information on whether or not its possible to have the AnyConnect client check for Domain computer membership. As far as i can tell, the AnyConnect client needs to send some sort of attribute regarding what it views as its computer membership to the ASA, and then have the ASA authenticate this in the Active Directory domain.

Is this even possible to do? I cant find any documentation regarding this.

  Any help is appreciated!

Thanks!

[Przemyslaw Konitz]

I think that you need to use CSD  to check whether computer belongs to domain or not.

Then you could create DAP policies and organize connectivity policies according to attributes which CSD checks locally on machine.

CSD can check windows registry so you must find out which registry is responsible for it, Im not sure about it but try:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Domain.

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\CachePrimaryDomain

hope it helps

regards