Stumped here with an issue. We're trying to make a case to dump MS directaccess in lieu of Anyconnect. We have anyconnect (4.4) working great with machine certificates. The problem we have is we need SBL to establish the VPN prior to the user logging in. We block cached credentials, so the machine has to be able to see the corporate lan prior to login. With MS DA this happens in the background without the user needed to do anything. We have TND enabled and working and i see the icon on the login screen for the VPN connection. I can manually fire it off there it just never connects on it's own like we want it to.
Anyone else have things working in this scenario on Windows 10?
