Configuring server groups in SP1

  • Article

Updated: February 1, 2011

Applies To: Unified Access Gateway

This topic describes how to select Forefront UAG DirectAccess servers that receive Forefront UAG DirectAccess server Group Policy. When Group Policy is generated from the Forefront UAG DirectAccess Configuration Wizard, the UAG DirectAccess: Gateways GPO must be applied on all the Forefront UAG DirectAccess servers. For this to happen you need to specify the names of Organizational Units (OU) or select the server names list that contain the names of the Forefront UAG DirectAccess servers.

When selecting the server names list, the UAG DirectAccess: Gateways GPO is linked to the root of the domain, and the security filtering is the Forefront UAG DirectAccess array computer accounts. In some organizations, company policy does not permit the linking of GPOs to the root of the domain. When you select an OU containing the Forefront UAG DirectAccess array computer accounts, the UAG DirectAccess: Gateways GPO is linked to the OU and not to the root of the domain, and there is no security filtering.

To assign server groups

  1. Under Step 2, under Optional Settings, click Server Groups. The Server Groups page appears.

  2. If your Forefront UAG DirectAccess servers are members of OUs:

    1. Click Organizational units (OU), and then click Add.

    2. In the Select Organizational Units dialog box, from the list of OUs, select the OU that contain the Forefront UAG DirectAccess servers, and then click Add.

      Note

      The OUs selected must contain all the Forefront UAG DirectAccess servers that should receive the Forefront UAG DirectAccess server Group Policy, and must not contain any other computers.

    3. When you have finished adding all the required OUs, click Close, and then click Finish. The main Forefront UAG DirectAccess Configuration page appears.

    Note

    Click Remove to remove the currently selected OU from the list.

  3. To select Server names:

    1. Click Server names.

      Note

      All of the computers in the Forefront UAG DirectAccess array are added automatically in the security group mode.

    2. Ensure that all the Forefront UAG DirectAccess servers appear in the list, and then click Finish. The main Forefront UAG DirectAccess Configuration page appears.

    Note

    When using server names, when you add another Forefront UAG DirectAccess server to the array, the new Forefront UAG DirectAccess server is automatically added to the server names list, however you must Generate Policies again so the UAG DirectAccess: Gateways GPO is applied on the new array member.