我正在使用向导在 Windows Server 2012 上安装 DirectAccess，但是我不断收到错误消息：
错误：无法从 DirectAccess 服务器 GPO 检索配置设置。
我已经在线搜索过，但似乎没有太多关于 DirectAccess 的信息（有些人提到它很容易安装，其他人则说远离它因为它是一场噩梦）或特别是这个错误消息。
以下是屏幕截图：
以下是完整的安装日志：
Initializing operations before applying configuration
Preparing to apply configuration changes...
Backing up GPOs...
Configuring Remote Access settings
Retrieving server GPO details...
Clearing existing stale configuration settings. This might take a few minutes...
Checking the specified adapters...
Deploying the Remote Access server behind NAT...
Checking the network location server certificate...
Checking the specified adapters...
Checking for a native IPv6 deployment...
Verifying the IP-HTTPS certificate...
Generating a self-signed IP-HTTPS certificate on server DC1.example.local...
Retrieving internal network DNS settings...
Verifying the GPO to write settings...
Creating the GPO. Linking the GPO to the domain...
Checking for a client GPO to write settings...
Creating the GPO. Linking the GPO to the domain...
Checking for permissions to apply DirectAccess client policies to the GPO...
Identifying all domains...
Identifying infrastructure servers in domain example.local...
Registering the DNS entry used to check client connectivity...
Registering the web probe in DNS...
Clearing existing stale configuration settings...
Creating DirectAccess client policies...
Updating client policies...
Initializing accounting settings...
Writing settings to the server GPOs...
Writing settings to the client GPOs...
Updating local settings...
Applying GPOs on the Remote Access servers...
Updating Network Connectivity Assistant settings
Setting DirectAccess client settings in the client GPO...
Finishing operations after applying configuration
Finalizing configuration changes...
Error: Configuration settings cannot be retrieved from the DirectAccess server GPO.
Information: Attempting to roll back the configuration...
答案1
您在初始配置期间是否收到此错误？或者您正在更新现有配置？
如果您是第一次安装 DirectAccess，则如果您没有在 Active Directory 中创建 GPO 的权限，则会出现此消息。解决此问题的方法是让 AD 管理员创建 GPO 并将其完全权限委托给您。
如果您正在更新现有配置，则可能是由于缺少 DirectAccess 客户端或服务器 GPO 导致的。请确保 GPO 仍存在于 AD 中。DirectAccess 存在已知问题，可能导致 GPO 被无意中删除（请参阅https://technet.microsoft.com/en-us/library/dn464274.aspx#Anchor_0）。如果是这种情况，您必须从备份中恢复 GPO 或删除并重新配置 DirectAccess。