Use Pre-Login Connect (PLC) to establish a VPN connection before signing in to Windows. This is useful if your device needs access to network resources during login, such as in Active Directory environments or when running logon scripts.
Before you start
- Install OpenVPN Connect 3.9 or later
- Ensure you have administrator access
- Have your VPN profiles ready
Step 1: Enable Pre-Login Connect
- Open the Command Prompt as an administrator.
- Navigate to the OpenVPN Connect installation directory:
cd "%ProgramFiles%\OpenVPN Connect" - Install the PLC system service:
ovpn_system_service.exe install
- Configure the directory containing system profiles:
ovpn_system_service.exe set-config system-profiles "C:\TEMP\" - (Optional) Configure a custom log file location:
ovpn_system_service.exe set-config log "C:\TEMP\" - Start the PLC service:
ovpn_system_service.exe start
Step 2: Sign out or restart
Sign out of Windows or restart your computer to access the Windows sign-in screen.
Step 3: Connect from the sign-in screen
- On the Windows sign-in screen, click the Network Sign-in icon in the bottom-left corner.
- Select a VPN profile from the list.
- Authenticate as required.
- Once connected, proceed with Windows sign-in.
Step 4: Disconnect (if needed)
- Use the Disconnect button on the Windows sign-in screen, or
- Disconnect from within the OpenVPN Connect app after signing in to Windows.
Troubleshooting tips
- Ensure no VPN connection is active in Windows before using PLC.
- Verify that the OpenVPN system service is running:
- Open Services (
services.msc). - Locate the OpenVPN system service.
- Open Services (
- Review the PLC logs:
- Open the
ovpnsystemservice.logfile. - Check for connection or authentication errors.
- Open the
- If additional diagnostic information is needed, review the Windows Event Viewer:
- Open Event Viewer.
- Navigate to Windows Logs → Application.