Skip to main content

Connect Before Windows Sign-in (Pre-Login Connect)

Abstract

Configure Pre-Login Connect in OpenVPN Connect for Windows to start a VPN connection before login and access network resources during sign-in.

Use Pre-Login Connect (PLC) to establish a VPN connection before signing in to Windows. This is useful if your device needs access to network resources during login, such as in Active Directory environments or when running logon scripts.

Before you start

  • Install OpenVPN Connect 3.9 or later

  • Ensure you have administrator access

  • Have your VPN profiles ready

Step 1: Enable Pre-Login Connect

  1. Open the Command Prompt as an administrator.

  2. Navigate to the OpenVPN Connect installation directory:

    cd "%ProgramFiles%\OpenVPN Connect"

  3. Install the PLC system service:

    ovpn_system_service.exe install

  4. Configure the directory containing system profiles:

    ovpn_system_service.exe set-config system-profiles <path-to-profiles>

  5. (Optional) Configure a custom log file location:

    ovpn_system_service.exe set-config log <path-to-log>

  6. Start the PLC service:

    ovpn_system_service.exe start

Step 2: Sign out or restart

Sign out of Windows or restart your computer to access the Windows sign-in screen.

Step 3: Connect from the sign-in screen

  1. On the Windows sign-in screen, click the Network Sign-in icon in the bottom-left corner.

  2. Select a VPN profile from the list.

  3. Authenticate as required.

    • Once connected, proceed with Windows sign-in.

Step 4: Disconnect (if needed)

  • Use the Disconnect button on the Windows sign-in screen, or

  • Disconnect from within the OpenVPN Connect app after signing in to Windows.

Troubleshooting tips

  1. Ensure no VPN connection is active in Windows before using PLC.

  2. Verify that the OpenVPN system service is running:

    • Open Services (services.msc).

    • Locate the OpenVPN system service.

  3. Review the PLC logs:

    • Open the ovpnsystemservice.log file.

    • Check for connection or authentication errors.

  4. If additional diagnostic information is needed, review the Windows Event Viewer:

    • Open Event Viewer.

    • Navigate to Windows Logs → Application.

Learn more

For detailed configuration options, supported authentication methods, and limitations, see:

In this section: