sprkymrk wrote: We had a very similar situation here once. Users took the laptop to an offsite location 4 hours away without first logging on to our domain. I think we did something close to what you are trying but like this: Log in as local admin on the laptop. Reconfigure the VPN to launch at startup, this way they actually log into the VPN FIRST when the laptop starts with their domain username/pw. Restart the laptop, the VPN logon comes up rather than the laptop logon. Log into VPN with domain credentials. This caches their profile on the laptop. Reconfigure the VPN back to normal (so it doesn't start automatically). Restart or just log off/on. HTH