Using GlobalProtect VPN Pre‑Login Authentication: Windows
- Overview
- Why You May Need Pre-Login VPN
- Requirements
- Step 1 - Connect to the Internet
- Step 2 - Connect to GlobalProtect
- Step 3 - Sign In to Windows
- Video Demonstration
- See Also
Overview
Campus Active Directory (CAD) computers normally verify your NetID credentials by contacting the UW–Madison network. When you log in on campus, Windows stores a cached copy of your credentials so you can sign in later even when offline.
GlobalProtect’s Pre‑Login VPN feature allows your computer to reach the campus network before you sign in, enabling Windows to validate your NetID credentials remotely.
Why You May Need Pre-Login VPN
Use this procedure when:
- You are signing into a new or reimaged UW–Madison computer for the first time
- The device has no cached credentials and must contact CAD to validate your NetID.
- You recently changed your NetID password (or you may not remember your previous NetID password)
- Windows cannot authenticate you until it updates the cached password.
- You are working remotely and cannot physically connect to the UW–Madison network
- Pre‑Login VPN provides the secure connection needed for initial authentication. This ensures Windows can validate your credentials and create your user profile if needed.
- Pre‑Login VPN provides the secure connection needed for initial authentication. This ensures Windows can validate your credentials and create your user profile if needed.
- Your mapped drives or other network resources fail to reconnect when working remotely
- Pre‑Login VPN authenticates your computer to the Campus Active Directory before Windows loads your desktop, allowing mapped drives, departmental shares, and other CAD‑dependent resources to connect more smoothly. Without Pre‑Login VPN, these drives may appear as “disconnected” or require manual reauthentication after login.
For additional troubleshooting steps related to drive mapping issues, refer to the KB article Shared drives not mapping: Windows.
- Pre‑Login VPN authenticates your computer to the Campus Active Directory before Windows loads your desktop, allowing mapped drives, departmental shares, and other CAD‑dependent resources to connect more smoothly. Without Pre‑Login VPN, these drives may appear as “disconnected” or require manual reauthentication after login.
Requirements
- Windows operating system
- SoE/MERIT‑provided computer joined to the Campus Active Directory (CAD)
- Internet connection (wired or wireless)
Step 1 - Connect to the Internet
Before using Pre‑Login VPN, the computer must be online.
- Wired
- Plug in an Ethernet cable.
- Wireless
- Select the Network sign‑in icon.
- Choose your local Wi‑Fi network.
- Enter the Wi‑Fi password if prompted.
Step 2 - Connect to GlobalProtect
On the Windows sign‑in screen, you should see "Sign in to: AD" indicating that this device is joined ot the Campus Active Directory (CAD) domain.
Click the lock‑and‑key icon in the lower‑right corner.
This opens the GlobalProtect login window. Confirm the portal address is: uwmadison.vpn.wisc.edu
- Enter your NetID username and password.
- Click the right‑arrow icon to connect.
When prompted for Duo:
- Type "1" to receive a Duo Push
or - Enter a Duo passcode
- Click on the right arrow icon again.
The GlobalProtect window will show Connecting, then Connected when the VPN is established.
Once connected, click the Back button to return to the Windows sign‑in screen.
Step 3 - Sign In to Windows
Enter your NetID username and password as usual.
Windows will now validate your credentials against the Campus Active Directory through the VPN connection.
- If this is your first login on this device:
- Your account profile will be created, which will take a few extra minutes.
The VPN will remain connected after login.