Install LAPS through VPN connection

Question

I'm deploying LAPS (local administrator password solution), I've three different scenarios:

• Workstations wired connected in the office: It works perfectly.
• Workstations wireless connected in the office: I doesn't work.
• Workstations at home connected using a VPN: I doesn't work.

Installation GPO is quiet simple:

The source is a shared accesible folder through wirelees and VPN.
Nowadays 90% of the company is working at home with VPN connection. All other GPOs are working fine.

Answer 1

Hi,
Not all Group Policy extensions are processed during a background refresh.
Some of the group policies require a foreground (restar or logoff /login) to process .Such as software installation (need restart ), startup script.
If the VPN or Wireless can't be connected at start up, then the group policies (Startup scripts ,software installation) won't process.

I would recommend you talk to your network teams and confirm if the VPN or the wireless can be set to be connected at startup.
Have no idea how did you configure the VPN, following link just for your reference:
https://learn.microsoft.com/en-us/windows-server/remote/remote-access/vpn/vpn-device-tunnel-config

Best Regards,

Answer 2

Hi,
If there are any updates, welcome to share here!
Best Regards,

Answer 3

There is a solution to the wireless issue. There is a setting to wait until the wireless connection is completed before processing the gpo. I use this for LAPS workstation installs over wireless.

Computer Configuration -> Administrative Templates -> System -> Group Policy -> Specify startup policy processing wait time

This will fix your wireless issue but not the vpn issue.