Group policy not updating over SSL VPN

Question

We have an active directory set up in an AWS instance connected to our office location using site-to-site VPN. Group policies are getting updated for on-premise PCs, but users working from home are not getting updates. RDP connections to the server are established. Running "gpupdate /force" on these systems shows an error message:

"The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated once the machine gets connected to the domain controller and Group Policy has successfully processed. If you do not see a success message for several hours, then contact your administrator."

When running "GPRESULT /H," a warning that says "fast link detected" is the only notification displayed. Additional logs from the Event Viewer include:

"A fast link was detected. The Estimated bandwidth is 595 kbps. The slow link threshold is 500 kbps."

And this:

System Provider [Name] Microsoft-Windows-GroupPolicy [Guid] {aea1b4fa-97d1-45f2-a64c-4d69fffd92c9} EventID 5314 Version 0 Level 4 Task 0 Opcode 0 Keywords 0x4000000000000000 TimeCreated [SystemTime] 2024-03-12T06:49:34.1409381Z EventRecordID 285186 Correlation [ActivityID] {ee46fd95-8a09-4cea-b6be-84086748a8ce} Execution [ProcessID] 8664 [ThreadID] 14836 Channel Microsoft-Windows-GroupPolicy/Operational Computer KOC-043.corp.***.** Security [UserID] S-1-5-21-1498088425-2479129898-2865167936-1418 EventData BandwidthInkbps 595 IsSlowLink false ThresholdInkbps 500 PolicyApplicationMode 0 ErrorCode 0 LinkDescription %%4113

Can anyone help me with this issue?

Answer 1

Hi @vishnu unnikrishan

There are GPO setting allows you to improve performance in low bandwidth scenarios

For more information please read the following article:

https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.RemoteAssistance::RA_Optimize_Bandwidth

---

Please don't forget to accept helpful answer