Network Training

Contents
Active Directory ............................................................................................................................................ 2
Unlock Account ......................................................................................................................................... 2
Password Change ...................................................................................................................................... 4
Check Group.............................................................................................................................................. 6
Checking the O Drive in AD ....................................................................................................................... 9
Cisco VPN .................................................................................................................................................... 12
Install/Reinstall Cisco AnyConnect 3.0.................................................................................................... 12
Connect to VPN ....................................................................................................................................... 19
Checking the VPN IP Address .................................................................................................................. 21
Configure VPN Logon on Connect ........................................................................................................... 22
Synchronize NT Credentials to System ....................................................................................................... 23
Change Windows NT Password .................................................................................................................. 24
Mapping the O Drive ................................................................................................................................... 26
Switching Users at Logon ............................................................................................................................ 28
Troubleshooting .......................................................................................................................................... 29
Renaming the Computer ......................................................................................................................... 29
VPN Network Trust Error ........................................................................................................................ 31
Gpupdate ................................................................................................................................................ 32
Network Training

Active Directory
Unlock Account
Verify the user is on the Internet, and disconnected from the VPN
Have user set iPad/iPhone to Airplane Mode
Open Active Directory on the HD computer

Right Click on the Ironwood domain and select Search

Search for the users name (Can search by last name, first name or both)

2|Page
Network Training

Right click on name and Reset Password

Uncheck User must change password at next logon

3|Page
Network Training

Check Unlock account and hit OK

Have use turn off Airplane Mode on iPad/iPhone

Password Change
Verify the user is on the Internet, and disconnected from the VPN
Have user set iPad/iPhone to Airplane Mode
Open Active Directory on the HD computer

Right Click on the Ironwood domain and select Find

4|Page
Network Training

2
Search for the users name (Can search by last name, first name or both)

Right click on name and Reset Password

Uncheck User must change password at next logon and set PW to System Default PW (Welcome#1)

5|Page
Network Training

Hit OK
Have user connect to the VPN with the System Default PW (Welcome#1)
Walk user through Synchronizing new NT Credentials to System
Press Ctrl+Alt+ Del
Lock Computer
Ctrl+Alt+Del
Unlock system with new NT PW
User can now set Windows NT Credentials (see KO) –OR– Keep System Default until PW Change
(complete steps 12 - 14)
On iPad/iPhone Turn Off Airplane mode
Open MobileIron
Hit Update Configuration Profile

Check Group
Open Active Directory on the HD computer (connected to internet and VPN)

6|Page
Network Training

Right Click on the Ironwood domain and select Search

Search for the users name (Can search by last name, first name or both)

Right click on name and Properties

7|Page
Network Training

Select the ‘Member Of’ Tab

8|Page
Network Training

Verify the Field Users have

Domain Users (irwd.corp/Users)
Employees Only (irwd.corp/Groups/Security Groups)
Ironwood Employees (irwd.corp/Groups/Security Groups)
Ironwood Read-Only (irwd.corp/Groups/Security Groups)
Sales (irwd.corp/Sales/Groups)
If the user is missing any of the 5 Groups Escalate

Checking the O Drive in AD

Open Active Directory Users and Computers on the HD computer (connected to internet and VPN)

9|Page
Network Training

Right Click on the Ironwood domain and hit Find

Search for the users name (Can search by last name, first name or both)

Right click on name from the search results and click Properties

10 | P a g e
Network Training

Select the Profile Tab

11 | P a g e
Network Training

Verify the User has the “Connect” radial is set for “O to \\server\people\Username”
If the radial is not selected or the path is different Escalate

Cisco VPN
Install/Reinstall Cisco AnyConnect 3.0
The zipped install folder for the Cisco 3.0.5075 VPN installer can be located on the C3i-
Ironwood Portal or through: https://irwd.box.com/s/xnnj7b3e1e1m26zo3a3g or
http://bos.ironwoodpharma.com/

12 | P a g e
Network Training

Access the Administrative Account. Check the Program Features (Control Panel > All
Control Panel Items > Programs and Features) verify that all elements of Cisco
AnyConnect are uninstalled

From within the Administrative Account, place the Zip Folder on the desktop

Extract the contents of the zip folder to the desktop

13 | P a g e
Network Training

Open the Extracted Folder

Click on the Setup

14 | P a g e
Network Training

Note that all of the components are selected

15 | P a g e
Network Training

Uncheck all but AnyConnect VPN, AnyConnect VPN Start Before Login,
AnyConnect Diagnostic And Reporting Tool and then press ‘Install Selected’

16 | P a g e
Network Training

Press OK to Proceed

Click Accept to agree to terms

17 | P a g e
Network Training

The install progress will be visible on the screen

Once completed it will prompt, press OK

18 | P a g e
Network Training

If available the program will update to the most recent version once run

Connect to VPN

19 | P a g e
Network Training

Verify user is connected to the internet

Click the VPN Icon on the Desktop

Click Connect Button (Address should pre-populated if not match to bos.ironwoodpharma.com)

Connect Button will check connection then prompt for login. Enter credentials and hit ok.

Verify the user is connected by clicking the “Upward Arrow” by the system clock and hovering over the
Globe w/ the Golden Lock icon. If connected it will read VPN Connected in the status popup.

20 | P a g e
Network Training

Checking the VPN IP Address

Click the “Upward Facing Arrow” by the System Clock, then click the Globe w\ the Golden Lock Icon to
bring up the Any Connect Connection Window

Select the Advanced Option

Click the Statistics Tab and Check the Second Column Under Address information for the “Client (IPv4)”

21 | P a g e
Network Training

Configure VPN Logon on Connect

Connect to the Cisco VPN

Click the “Upward Facing Arrow” by the System Clock, then click the Globe w\ the Golden Lock Icon to
bring up the Any Connect Connection Window

Select the Advanced Option

22 | P a g e
Network Training

Click the Preferences Tab and verify that the “Connect on Start-Up” is checked off.

Synchronize NT Credentials to System

Verify the user is connected to the Internet and VPN
Press Ctrl+Alt+ Del

23 | P a g e
Network Training

Lock Computer
Ctrl+Alt+Del
Unlock system with new NT PW

Change Windows NT Password

Verify that the user is connected to the internet and the VPN
Verify the user has switched iPhone/iPad to Airplane Mode
On Computer press Ctrl+Alt+Del.
In the Windows Security screen, click Change Password.

In the User name box, enter your full username (IRONWOODPHARMA\Username)

24 | P a g e
Network Training

In the Old Password box, enter your old password.

In the New Password box, enter your new password. Use the following criteria to create a secure
password:
8 character minimum
Capital Letter and Special Character mandatory
Expires every 3 months
Cannot re-use last 5 passwords
In the Confirm Password box, enter your new password again, and then click the white arrow.

Synchronize New NT Credentials to System

Press Ctrl+Alt+ Del
Lock Computer
Ctrl+Alt+Del
Unlock system with new NT PW
On iPad/iPhone Turn Off Airplane mode
Open MobileIron

25 | P a g e
Network Training

Hit Update Configuration Profile

Mapping the O Drive

Verify User is connected to the VPN

Open Computer (either Start > Computer or from the Desktop) and press the Map network drive Option
from the top Window.

Select O from the drive letter drop-down and Type ‘\\server\people\username\’ into the folder location.
Verify reconnect at logon is selected.

26 | P a g e
Network Training

When completed there will be a new Network Location

27 | P a g e
Network Training

Switching Users at Logon

Verify that the computer is connected to the internet either by hardwire cable or by wifi

Reboot the computer

When it reaches the login screen press Ctrl+Alt+Del then hit the “Switch User Button in the Center”

In the Lower right hand corner there will be two buttons, a power button and a network login button.
Have the user press the Network Login Button

Cisco VPN will pop up over the Login Screen with a connection window and a login window. Provide the
user with the appropriate Network Credentials to login

Once cisco has validated the login it will establish a VPN session and there will be an Other User login
prompt in the center of the screen and three buttons in the bottom left hand corner (Network Login,
Disconnect, Shutdown).

Verify that the Network Login, Disconnect, and Shutdown buttons (ensures the vpn connection is
established with the credentials provided)

Have the user click the Other User button and login with the same Network Credentials you provided
them to establish the Pre-Logon VPN Session

Windows will start normally

28 | P a g e
Network Training

Troubleshooting

Renaming the Computer

Check the Computer Name:
Regional Sales Manager: WSLW70900(+last 4 digits of the computer serial number)
All Other Accounts: WSLW70900(+last 4 digits of the Asset Tag)

* Requires admin access have user switch user accounts (Other User Login over the
VPN to Domain Admin Account)

Start > 'right click' Computer > 'left click' Property > Scroll to Computer, Name, Domain
Section > 'left click' Change Settings

Within the new window that pops up choose ‘Change’ to rename the computer

29 | P a g e
Network Training

Within the new window set the name to the appropriate naming convention:
WSLW70900(+last 4 digits)

Verify the Domain is set to: irwd.corp

30 | P a g e
Network Training

VPN Network Trust Error

Error Message: The trust relationship between this workstation and the primary domain failed

Description: While connected to the VPN the user is unable to unlock the computer and receives the
error message.

 When the user receives that error message there is a miscommunication between the server
and that particular computer.
o Disconnect the computer from the internet (unplug the network cable and disable the
wireless radio from Network Solution Center > Manage Networks)
o Reboot the Computer with no network access and have the user sign on with their
credentials
o Re-enable the Wireless Radio and connect to the internet either by Wireless or Ethernet
and connect back to the VPN
o Lock and then Unlock the computer and verify whether or not the Error is still occurring
 Check the Computer Name and Verify it follows the appropriate naming convention

*If the error persists capture the Computer Name and escalate to have the Workstation Refreshed in
Active Directory

31 | P a g e
Network Training

Gpupdate
Hit Start and use the search bar to locate CMD

Open up Command Prompt

Type ‘gpupdate /force’ and hit enter

32 | P a g e
Network Training

Verify that the gpupdate has completed

33 | P a g e