I'm not sure what problem it is that your having here. However, I'm using DA on 2008R2, over UAG 2010 SP1, so what I say next might not apply:
My DA box is only a member of the group I called GatewayServers, which gets the Gateway GPO settings, and my box does indeed show that applied, when running 'gpresult /r'. Anything in the event logs after up do the 'gpupdate /force'? Kurt On Fri, Apr 24, 2015 at 11:51 AM, Robb Whiting <[email protected]> wrote: > Hmmm... > > I was using a domain administrator account, which was able to create and push > the accounts to the DC. > > But I believe after that it then needs to go back to the DC and grab the > configuration to make sure everyone agrees. > > That's the step that's failing. > > It's able to create and push the GPOs just fine, just not allowed to retrieve > them from the domain controller. > > When I do a gpresult /r It shows that it applies none of my Computer > Policies... > > It doesn't even show that any are found. In fact, it only shows me a USER > SETTINGS section. > > Why can't I get my machine that has permissions to apply a GPO to do so for > for the computer account for which it qualifies. > > Perhaps there is something in my DC GPO setting that needs to be changed to > allow the DC to send the GPO? > > -R > > > > -----Original Message----- > From: [email protected] [mailto:[email protected]] > On Behalf Of Kurt Buff > Sent: Friday, April 24, 2015 11:42 AM > To: [email protected] > Subject: Re: [NTSysADM] Hey All, I'm having a mind boggling problem with > Direct Access > > I assume, from your description, that you're trying to push the DA > configuration to the GPOs that it's trying to set up? > > If that's the case, under what account are you doing the DA configuration? > > I used a standard-grade Domain User-only account when configuring > DirectAccess that I set up to be an administrator on the box. > > If that's what you're doing, you will want to pre-create empty GPOs, then set > security on them to allow your DirectAccess administrator account to update > them. > > Kurt > > On Fri, Apr 24, 2015 at 9:49 AM, Robb Whiting <[email protected]> wrote: >> I've set up Direct Access correctly as far as I know, but for some reason in >> the Dashboard, no matter what I do, it says it can never get the >> configuration from the Domain Controller. >> >> I can ping and access the domain controller just fine, but it still >> refuses to get the GPO configuration even when I run a gpupdate /force >> >> If I get a report, gpreport /r it says that there are no Applied Group >> Policy objects despite the fact that GP for Direct Access Server has the >> server listed in it. >> >> Why the heck won't it get that darn GPO configuration. It seems it has >> sent it to the server but cannot receive it back. >> >> I'm assuming this has some sort of effect that also makes it so when my >> clients try to connect to direct access it just says connecting and spins >> forever... >> >> Anyone know how to get this to work (my VPN settings work fine by the >> way) >> >> -R >> >> >> >> > >
