Always On ZTNA for Windows

The integration of the Always on ZTNA before Windows Logon feature for Secure Private Access service establishes pre-logon connectivity for the Secure Private Access users before they log on to the machine.

Always on ZTNA before Windows Logon capabilities: 

• An administrator can provide a one-time password to first time users working remotely using which users can connect to the domain controller to change their password.
• An administrator can remotely manage/enforce AD policies to the device even before the user logs in.
• Multiple users can use the same machine. Access to the resources is provided based on the user profile. For example, multiple users can use a machine in a kiosk without hassle.
• Users working remotely can connect to the domain controller to change their password.
• Windows machine can verify the user’s login credentials using the corporate active directory (AD) and Windows credentials on the machine are not cached. Also, new corporate AD users are enabled to seamlessly log on to the machine.
• ZTNA for a Windows machine remains connected even when different users log in or log out to the machine.