If you enable this ability, does it remove the ability to start VPN without logging out of Windows? In other words, can they log in both ways or does it take the place of starting the Cisco Anyconnect Secure Mobility Client 3.1 from within Windows XP or Windows 7?
There are some users who say if they are working locally on their laptop at home and then later decide to connect to VPN to access a file share or intranet web site, it will be a huge hassle for them to have to close all their open applications, log off and then log back on just to start the VPN.
What if they use SBL to start VPN and their connection gets dropped later? Will they have to log out of Windows to get reconnected?
It will be much easier to keep the local login credentials in sync with the domain and receive certain group policies if SBL is enabled, but if it adds a lot of other inconvenience, it may not be worth it.
Can we have users continue to connect they way they normally do from the Windows desktop and then use SBL whenever needed (such as if they forgot the old cached Windows password and needed to login with their current password)?
Pros and cons? Is it more or less convenient to have Start Before Login enabled?
