Return
-
Title
Does Offline Domain Join for VPN-connected machines require PING to work? -
Description
When running the Cache Credentials job, it will ping the target domain. If PING (ICMP) over VPN is now allowed, the Cache Credentials progress will get stuck, causing the Cache Credentials pop-up to never appear in the device. -
Cause
PING (ICMP) over VPN is not allowed. -
Resolution
The PING is needed to inform the utility it can successfully run and that it is on the internal network.
If ICMP cannot be allowed, we have two possible options as a workaround:
- Enable ICMP Echo Requests over the VPN (at least to the target DCs).
Ex.
- Use 127.0.0.1 for the IP address in the cache credential profile, instead of the target DC IP address. This will always result in a successful ping and the cache credentials prompt will launch.
Ex.