Unable to update IAS server configuration - AzureMFA

Question

There is still a common issue in RDS deployments, especially when using the AzureMFA Plugin, where you encounter the "Unable to update IAS server configuration. Your current configuration maybe in an inconsistent state." on the RDS Gateway when trying to modify Central RD CAP settings. I've realized that the only threads which exist on the subject are on social.technet which is no longer accepting replies, so I just wanted to share an easier way to resolve this issue without requiring you to rebuild your RDS deployment like the aforementioned threads suggest (and the issue will pop up again anyhow):

Instead of trying to change the Central RD CAP settings in the RDS Gateway, open the Network Policy Server application on the RDS Gateway machine and just add/modify/remove the information in the "TS GATEWAY SERVER GROUP" under NPS Root\RADIUS Clients and Servers\Remote RADIUS Server Groups. The Gateway service reads from these settings, so once you make the change, you will see the settings update in the Gateway after you refresh. Hope that helps someone!

-CraigG

Answer 1

There is still a common issue in RDS deployments, especially when using the AzureMFA Plugin, where you encounter the "Unable to update IAS server configuration. Your current configuration maybe in an inconsistent state." on the RDS Gateway when trying to modify Central RD CAP settings. I've realized that the only threads which exist on the subject are on social.technet which is no longer accepting replies, so I just wanted to share an easier way to resolve this issue without requiring you to rebuild your RDS deployment like the aforementioned threads suggest (and the issue will pop up again anyhow):

Instead of trying to change the Central RD CAP settings in the RDS Gateway, open the Network Policy Server application on the RDS Gateway machine and just add/modify/remove the information in the "TS GATEWAY SERVER GROUP" under NPS Root\RADIUS Clients and Servers\Remote RADIUS Server Groups. The Gateway service reads from these settings, so once you make the change, you will see the settings update in the Gateway after you refresh. Hope that helps someone!

-CraigG