Month: June 2022

Situation: When a user tries to establish VPN using GloablProtec, he gets this message: could not verify the server certificate of the gateway.

Troubleshooting: Make sure the PA Firewall has corrected certificate setup.

1. Go to Device>Certificates, make sure you have corrected certificate installed.

2. Go to Network>GloablProtect>Portals>Agent. Make sure you add the corrected certificate.

 

 

 

Situation: The user has assigned full permissions, Sens as and Send on behalf. However, she tries to send email behalf another user, she gets undeliverable message:

Your message did not reach some or all of the intended recipients.

Subject:     RE: Administrative Copy: Welcome! | 246594

Sent:  6/8/2022 10:12 AM

The following recipient(s) cannot be reached:

 

‘Bob Smith’ on 6/8/2022 10:12 AM

This message could not be sent. You do not have the permission to send the message on behalf of the specified user.

Troubleshooting 1: When she sends email behalf another user, she may need to select the user From. For example

If you don’t see the From, select the Options tab and press the “Show From” button to enable the from field for all sent emails

Troubleshooting 2: In our cases, the user has two email addresses, user@Aemail.com as default email address and user@Bemail.com. The From should be user@Aemail.com instead of user@Bemail.com.

Situation: The client has a PA Firewall. After they added a domain account into Administrator, the user can’t login.

Troubleshooting:

After adding a domain account into Administrator under Device, you also need to add it into Authentication Profile under Device.

 

 

Situation: The client has deployed Microsoft LAPS. However some of computers don’t show the administrator password when checking local administrator under User’s Property>Attribute Editor.

Troubleshooting 1: Run gpdaute /force or restart the computer to apply the GPO.

Troubleshooting2: The local administrator account is disabled. Enable it.

Troubleshooting 3: GPO can’t install the LAPS software as showing gpupdate /R:

Computer Policy update has completed successfully.

The following warnings were encountered during computer policy processing:

The Group Policy Client Side Extension Software Installation was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may result in slow startup and boot performance.
User Policy update has completed successfully.

For more detailed information, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.

Certain Computer policies are enabled that can only run during startup.

OK to restart? (Y/N)

If the gpupdate /force doesn’t install LAPS, please install it manually.