VPN GPO and Wapt enterprise

Questions about WAPT Packaging / Requests and help regarding Wapt packages.
Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
User avatar
sfonteneau
WAPT Expert
Messages: 2318
Registered: July 10, 2014 - 11:52 PM
Contact :

November 12, 2020 - 11:34

mouka wrote: Nov 12, 2020 - 11:20 AM The PCs in question underwent a manual installation and uninstallation of Waptagent. That might be the problem... a messy uninstallation in the Windows registry?
No, that's not a problem at all

If you manually launch waptdeploy on a mobile device, does it work? Does Wapt install?
mouka
Messages: 33
Registration: May 14, 2019 - 3:13 p.m.

November 24, 2020 - 11:43

Yes.
I found a solution. Since we use OpenVPN, the startup/shutdown GPOs don't work. The VPN client is started by the user (it's not automatic when the PC boots). For your information: Microsoft's solution for startup/shutdown GPOs to work over VPN is to use DirectAccess, but we don't want to use that. My solution is: I created an "immediate scheduled" task + GPO.
An immediate scheduled task is essentially a live GPO update for clients connected via VPN (or on the lab network), so the task runs immediately when the GPO is updated. To control everything, i.e., who is on VPN and who isn't, I have my PowerShell scripts.

There you go, if this can be useful to your clients.

Thank you and have a good day,
Mr.

These commands can be useful:
`gpresult /r /scope computer`
`gpresult /r /scope user` `
gpupdate.exe /target:user /force`

Or, from a domain controller:
`Invoke-GPUpdate -Computer ClientPCName -RandomDelayInMinutes 0`
Locked