Globalprotect client pre-logon tunnel disconnects after improper termination of RDP session
4656
Created On 05/27/22 13:11 PM - Last Modified 01/06/25 17:56 PM
Symptom
Pre-logon tunnel won't be established if the end user disconnects the RDP session prematurely
Environment
- Globalprotect (GP) App
- Supported GP App version
- Pre-logon Connect Method
- Windows OS
Cause
- A pre-logon tunnel is only established if there is no logged-in user
- The user connects to the remote machine via RDP and abruptly closes the RDP session without logging out of the Windows PC
- Since the Windows session remains active, the GlobalProtect App does not establish a pre-logon tunnel in this scenario
Resolution
- If pre-logon tunnel is required then the end user must log off from the windows machine manually.
- The remote users can be queried and logged out by using the commands below.
- Use QUser, command on windows to get a list of login sessions on the remote computer.
>QUser /server:ComputerName
- Remotely log off any users on the list, using the command line Logoff with the remote session ID collected from QUser command.
>Logoff sessionID /server:ComputerName
- Snippet of commands from Windows.