Hi Daniel Friedhoff No, you don't need all of your DCs listed as authentication servers on your XG. STA collectors will need to be added to the XG's list of authentication servers, however STA Agents will not. Regarding your lockout issue related to failed VPN logins, removing some DC servers from your list will simply result in the XG not checking those servers (less fault tolerance). For reference regarding setting up fault tolerance for STAS, check out the note here . Regards,
↧