RAS and IAS Servers Group membership

Question

_{Wednesday, September 30, 2015 2:59 PM}

Hello!

Does anyone know if it is right to add another global security group to the RAS and IAS Servers? Will it work properly?

I'm inspired! Are you? Где смекалка и сноровка, там и палка что винтовка.

All replies (7)

_{Friday, October 2, 2015 2:18 AM}

Hi,

I am not sure what the function you want to realize. It would be helpful if you could provide more information about the deployment or infrastructure. 

Besides, you may check to see if it is what you need via below link(last section)：
https://technet.microsoft.com/en-us/library/cc772401(v=ws.10).aspx 

Best Regards,
Eve Wang

Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected].

_{Friday, October 2, 2015 6:14 AM}

Usually we have to add MS VPN servers to the RAS and IAS Servers group. But if we add these servers to another global group "X" and then we add "X" group to the RAS and IAS Servers group will this solution work properly?

I'm inspired! Are you? Где смекалка и сноровка, там и палка что винтовка.

_{Friday, October 2, 2015 8:15 AM}

Dear Eve, where do you see a relationship between RAS and IAS Group membership and Certificates?

My question is about a membership of RAS and IAS Servers security group. Could you please be more attentive. And please do not delete my posts further.

I'm inspired! Are you? Где смекалка и сноровка, там и палка что винтовка.

_{Tuesday, October 6, 2015 6:36 AM}

Hi,

Sorry for my misunderstanding about your question. And thank you for your additional information. 

In general, to use AD DS, you must join the RRAS(VPN) server to a domain, and then add the computer account of this server to the RAS and IAS Servers security group in the domain of which this server is a member. 

Whether adding a VPN server group(global) to RAS and IAS Servers is wording, I will try to do a test lab and confirm you the result, as soon as possible.

Thank you for your understanding.

Best Regards,
Eve Wang

Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected].

_{Tuesday, October 6, 2015 6:38 AM}

Ok, thank you, please keep me in touch.

I'm inspired! Are you? Где смекалка и сноровка, там и палка что винтовка.

_{Wednesday, October 7, 2015 5:39 AM}

Hi,

Based on my test, it works if add a manually defined global VPN server group to RAS and IAS servers.

In general, when you running RRAS configuration wizard with domain administrator, the VPN computer account will be added to the RAS and IAS Servers security group automatically.

Best Regards,
Eve Wang

Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected].

_{Wednesday, October 7, 2015 8:08 AM}

Hello, Eve.

Could you please describe your test with more details. What exact steps your test included?

I'm inspired! Are you? Где смекалка и сноровка, там и палка что винтовка.