Troubleshooting

A domain connection test fails

1. Open Settings, Domains and check the controller address.
2. Confirm the correct forest has an enrolled Agent.
3. Confirm the Agent can reach the domain controller with its service account.
4. Retry the test.

Desktop does not use LDAP to test the domain. The selected Agent performs the directory-side work.

An Agent will not enroll

1. Mint a new enrollment token from Settings, Agents.
2. Copy the token before closing the page.
3. Paste it into the Agent MSI token page or the Agent tray setup.
4. Check that the token is for the intended forest.

An action is unavailable or denied

Ask an Owner to review your Velauth role and permissions. If Velauth accepts the request but Active Directory rejects it, ask the AD administrator to check the Agent gMSA permissions for the target.

Windows warns about the installer

The installers are not code-signed yet, so SmartScreen shows an unknown publisher warning. Download installers and SHA256SUMS from velauth.com/downloads and compare the SHA-256 hash before proceeding.

Generate a diagnostic bundle

1. Open Settings.
2. Choose Support.
3. Select Generate bundle.
4. Choose a file name and location for the ZIP.

See also: What to turn on for each feature