locked
Install SCCM Client via GPO through a VPN RRS feed

  • Question

  • Having some troubles installing the client manager via a GPO on a remote machine that connects through a VPN.  

    GPO has been created an confirmed that it works on workstations that are directly connected to the domain.

    When connecting via a VPN, the GPO does apply (gpresult /r confirms that), but the ccmsetup.exe never actually executes and the program doesn't even try to install. There is no log file on the remote computer to reference.  

    • Performing an NSlookup verifies that the computer has the proper IP Address that is within the domain.  
    • Confirmed, the Boundary Group does have the correct IP Range used for VPN access. 
    • I can successfully push the the client manager from the SCCM Management console and have it install. 

    Some thoughts would be appreciated. 

    Thursday, May 12, 2016 8:38 PM

Answers

  • GPO software installation only happens at system startup time at which point the client won't/.can't be connected to the network via VPN so this isn't ever going to work.


    Jason | http://blog.configmgrftw.com | @jasonsandys

    • Marked as answer by cdomansky Monday, May 16, 2016 1:22 PM
    Friday, May 13, 2016 1:35 AM

All replies

  • GPO software installation only happens at system startup time at which point the client won't/.can't be connected to the network via VPN so this isn't ever going to work.


    Jason | http://blog.configmgrftw.com | @jasonsandys

    • Marked as answer by cdomansky Monday, May 16, 2016 1:22 PM
    Friday, May 13, 2016 1:35 AM
  • Dear Sir,

    This is mostly like a GPO issue. Searching and get below:

    https://technet.microsoft.com/en-us/library/cc782152(v=ws.10).aspx

    " The Group Policy Software installation CSE only processes during startup and logon, never during periodic refresh. By default, it also does not process over a slow link (this behavior can be changed)."

    So if it failed at PC startup or logon, it will not rerun the action.

    The GPO Forum link is below, you can also try to post there for more better option:

    https://social.technet.microsoft.com/Forums/office/en-US/home?forum=winserverGP

    Thanks in advance

    Best regards

    Frank


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Friday, May 13, 2016 1:43 AM