Cannot get group policies to work over WAN

[cbr900rrderrick]

I have a couple of installations in which I have one or
two workstations connected via VPN routers.

The machines join Active directory OK but do not
receive Group Policies for the Domain or OU.

I've tried disabling slow link detection via group policy. No luck.

Thanks in advance

 

[Doug Frisk]

I have a couple of installations in which I have one or
two workstations connected via VPN routers.

The machines join Active directory OK but do not
receive Group Policies for the Domain or OU.

I've tried disabling slow link detection via group policy. No luck.

Are the subnets at the "WAN site" defined and assigned to a site in AD Sites
and Subnets? If they're not, you'll get this issue.

 

[ptwilliams]

Some of the CSEs have slow-link settings as well as the generic slow link
detection option.

Also, slow link is dependent on ICMP (ping). Are there any routers or
firewalls possibly discarding pings?

--

Paul Williams

http://www.msresource.net
http://forums.msresource.net


I have a couple of installations in which I have one or
two workstations connected via VPN routers.

The machines join Active directory OK but do not
receive Group Policies for the Domain or OU.

I've tried disabling slow link detection via group policy. No luck.

Thanks in advance

 

[Guest]

The remote subnets contain only 1 or 2 PC's.

Defining a Site requires a Domain controller within both ends
of a Site.

How do I overcome this?

 

[Doug Frisk]

The remote subnets contain only 1 or 2 PC's.

Defining a Site requires a Domain controller within both ends
of a Site.

How do I overcome this?

No, a site does not need a domain controller. If a site has no domain
controllers, the domain controllers from the closest site (as defined by
your site links) will publish their records as the "local" domain controller
for the orphan site.

Plus, your group policies will work.