Azure AD Joined Hello for Business and NPS Radius Authentication
Hi guys, I am starting to roll out the Windows VPN client using L2TP to our computers which are a mixture of Hybrid Joined and Azure AD joined. All computers in the business have got Windows Hello for Business and this works well. The issue I am having is for the Azure AD joined machines only signing in with biometrics. They are unable to connect to the VPN with successfully when they use the '-UseWinlogonCredential' switch. This is not an issue with Hybrid Joined machines signing in with biometrics. I am struggling to find a solution to this problem, so for the interim those machines are simply prompting the user for their username and password which gets accepted. I suspect it's a certificate issue for Azure AD joined machines only but not too sure how to configure the NPS to allow these through. Any advice is greatly appreciated!
Prompted for credentials when accessing mapped drive via VPN
I have a strange issue that is happening for a few users. They have domain joined computers and when connecting to VPN and then opening a mapped drive they are getting prompted for their AD credentials. Myself and many other users do not have this issue. When I connect to VPN I can double click the mapped drive (although there is a red X at first) the drive opens up with no issues. NTFS and share permissions allow everyone Read permissions so I know the permissions are not the issue. Once the credentials are entered they stay connected until logout or reboot. Anyone have this issue before? Any help is greatly appreciated!! Thanks.