none
How to configure DA client's for out of office users. RRS feed

  • Question

  • So we have configured Win 2012 DA properly,

    I have added some WIN 7 and 8 machines to GP and they work fine.

    However we have lot of users who always work out of office and only connects via VPN.

    How would I configure Direct access on their machine? Since they don't come to office GP will not be pushed to them.

    Thanks

    Beadmin

    Tuesday, June 25, 2013 11:52 AM

Answers

  • With Windows 2008 domain controllers, DJOIN feature is not available.

    GPUPDATE /Force should work. Just check that computer have enrolled their certificate.


    BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx

    • Marked as answer by Beadmin Wednesday, June 26, 2013 12:32 PM
    Wednesday, June 26, 2013 8:07 AM

All replies

  • Hi

    For Windows 8, the Offiline Domain Join feature will be usefull to you. You only need a Windows Server 2012 domain controller to generate the blob file. For Windows 7, it's a little bit more complicated as DJOIN features does not include group membership and GPOS. Your clients must connect with VPN/SSL and force a GPUPDATE /FORCE (and maybe a KLIST -purge).


    BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx

    Tuesday, June 25, 2013 6:42 PM
  • Thanks for the reply,

    My users machine are already part of win 2008 sp2 Domain controller.

    They connect over Microsoft RAS VPN, does it push the Group policy over VPN via GPUPDATE /force?

    I thought its only possible after they are connected via Direct access.

    Wednesday, June 26, 2013 7:52 AM
  • With Windows 2008 domain controllers, DJOIN feature is not available.

    GPUPDATE /Force should work. Just check that computer have enrolled their certificate.


    BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx

    • Marked as answer by Beadmin Wednesday, June 26, 2013 12:32 PM
    Wednesday, June 26, 2013 8:07 AM