I noticed that the last VPN user name is not displayed when the user logs into Windows and then launches AnyConnect, but the last user name is displayed if AnyConnect is launched pre-login using SBL.
We would want either opposite so that nobody can see the user name before logging into Windows, but the user name is displayed after a user with Windows credentials logs in or else we would want it suppressed in both places.
Having a laptop thief be able to see the last user name via SBL, but at the same time requiring an authorized user who fully logs into Windows to manually type in this information makes no sense.
How can we fix this?