Hmmm... I was using a domain administrator account, which was able to create and push the accounts to the DC.
But I believe after that it then needs to go back to the DC and grab the configuration to make sure everyone agrees. That's the step that's failing. It's able to create and push the GPOs just fine, just not allowed to retrieve them from the domain controller. When I do a gpresult /r It shows that it applies none of my Computer Policies... It doesn't even show that any are found. In fact, it only shows me a USER SETTINGS section. Why can't I get my machine that has permissions to apply a GPO to do so for for the computer account for which it qualifies. Perhaps there is something in my DC GPO setting that needs to be changed to allow the DC to send the GPO? -R -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Kurt Buff Sent: Friday, April 24, 2015 11:42 AM To: [email protected] Subject: Re: [NTSysADM] Hey All, I'm having a mind boggling problem with Direct Access I assume, from your description, that you're trying to push the DA configuration to the GPOs that it's trying to set up? If that's the case, under what account are you doing the DA configuration? I used a standard-grade Domain User-only account when configuring DirectAccess that I set up to be an administrator on the box. If that's what you're doing, you will want to pre-create empty GPOs, then set security on them to allow your DirectAccess administrator account to update them. Kurt On Fri, Apr 24, 2015 at 9:49 AM, Robb Whiting <[email protected]> wrote: > I've set up Direct Access correctly as far as I know, but for some reason in > the Dashboard, no matter what I do, it says it can never get the > configuration from the Domain Controller. > > I can ping and access the domain controller just fine, but it still > refuses to get the GPO configuration even when I run a gpupdate /force > > If I get a report, gpreport /r it says that there are no Applied Group Policy > objects despite the fact that GP for Direct Access Server has the server > listed in it. > > Why the heck won't it get that darn GPO configuration. It seems it has sent > it to the server but cannot receive it back. > > I'm assuming this has some sort of effect that also makes it so when my > clients try to connect to direct access it just says connecting and spins > forever... > > Anyone know how to get this to work (my VPN settings work fine by the > way) > > -R > > > >
