Server must be registered in Active Directory using an account with domain admin

Applies To: Forefront Threat Management Gateway (TMG)

Cause

Before you can use this server to authenticate domain accounts, it must be registered in Active Directory using an account with domain admin permissions.

Solution

  1. Log on to the computer with an account that has domain admin permissions.

  2. Launch the Active Directory Users and Computers MMC snap-in, and then double-click the domain name.

  3. Double-click the Users folder, and then double-click the RAS and IAS Servers security group.

  4. Select the Members tab, and add the server to this group. You will receive a message informing you whether registration is successful.