We have recently changed an server with ISA 2004 for the newer 2006 version, and there are some problems. While trying to set up the ISA 2006 for VPN remote access, when we check the "Enable VPN client access", the ISA responds with the following message box:
"This computer cannot be added to the list of valid access servers in the Active Directory. Before a computer can be used as a remote access server, the domain administrator must complete this task."
The helps says that in the ISA 2006 computer must be a member of "RAS and IAS Server" security group. I have checked in the AD and the ISA 2006 computer is a memer of the group. I have erased the computer, created it again and joined it to the group, but nothing happens.
In the location choices we can see the domain, however when we add the VPN group (which exists in the AD) it can't be recognized and the VPN configuration can't go further.
Anyone knows what can be wrong? I'm wondering if the ISA 2006 is 100% compatible with the AD, because we had some issues with OWA access trough the ISA. Or perhaps some permits are missing?
Any help will be wellcome.
< Message edited by Igor Sotelo -- 21.Feb.2007 9:57:16 PM >
The problem was the stub DNS configuration of the ISA 2006. The DNS wasn't able to transfer the zones from the DNS master. After the corrections, the access to the Active Directory objects information went without problems.