Cannot get group policies to work over WAN

  • Thread starter Thread starter cbr900rrderrick
  • Start date Start date
C

cbr900rrderrick

I have a couple of installations in which I have one or
two workstations connected via VPN routers.

The machines join Active directory OK but do not
receive Group Policies for the Domain or OU.

I've tried disabling slow link detection via group policy. No luck.

Thanks in advance
 
cbr900rrderrick said:
I have a couple of installations in which I have one or
two workstations connected via VPN routers.

The machines join Active directory OK but do not
receive Group Policies for the Domain or OU.

I've tried disabling slow link detection via group policy. No luck.
Click to expand...

Are the subnets at the "WAN site" defined and assigned to a site in AD Sites
and Subnets? If they're not, you'll get this issue.
 
Some of the CSEs have slow-link settings as well as the generic slow link
detection option.

Also, slow link is dependent on ICMP (ping). Are there any routers or
firewalls possibly discarding pings?

--

Paul Williams

http://www.msresource.net
http://forums.msresource.net


I have a couple of installations in which I have one or
two workstations connected via VPN routers.

The machines join Active directory OK but do not
receive Group Policies for the Domain or OU.

I've tried disabling slow link detection via group policy. No luck.

Thanks in advance
 
The remote subnets contain only 1 or 2 PC's.

Defining a Site requires a Domain controller within both ends
of a Site.

How do I overcome this?
 
The remote subnets contain only 1 or 2 PC's.

Defining a Site requires a Domain controller within both ends
of a Site.

How do I overcome this?
Click to expand...

No, a site does not need a domain controller. If a site has no domain
controllers, the domain controllers from the closest site (as defined by
your site links) will publish their records as the "local" domain controller
for the orphan site.

Plus, your group policies will work.
 
Back
Top