We are running a Windows 2008 Domain with Windows 7 Laptops that are primarily in the field. We use the standard Windows VPN and have an ISA Server 2004 as a firewall. The ISA Server is simply routing the traffic. DHCP on the Windows 2008 Domain Controller handles IP addresses.
GPUpdate /Force runs fine if the laptops are on the network but when they access the network over the VPN (including if we use the DialUp Networking/PreLogin execution of the VPN) the GPUpdate /Force results in a failure due to Windows not being able to resolve the user name or computer name. When we review the GPResults, the Sids are not translated into User Names or Computer Names on the report. If we execute the same steps while on the internal network, User Names and Computer Names are reported accurately on the GPReport.
We have set RRAS to broadcast and reviewed every switch we can find from the client to the ISA Server to the Domain Controller.
What are we missing?