If you need the tunnel to be created when the machine starts (before windows logon), then you'll want to select either: Automatically when the machine starts. Machine credentials used for authenticationÑEnables machine authentication, which requires that Active Directory is used as the authentication server and that machine credentials are configured in Active Directory. Automatically when the machine starts. Connection is authenticated again when the user signs in into the desktopÑEnables machine authentication for the initial connection. After the user connects with user credentials, the machine authentication is dropped. When the user logs off, the machine authentication connection is restored. You can do this during the log in as well: Automatically at user loginÑThis option enables Pulse client interaction with the credential provider software on the endpoint. The user credentials are used to establish the authenticated Pulse connection to the network, login to the endpoint, and login to the domain server. For more details, you can refer to http://www.juniper.net/techpubs/en_US/uac5.0/topics/task/configuration/uac-access-control-connect-common-client-configuring.html
... View more