Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm interested in using Direct Access mainly so I can apply GPO to mobile clients and control the "domain experience" these users have.

Q: Does Direct Access allow end users to transparently work this way?

I'm in the process of setting up a test lab, learning PKI, and IPV6 since they are requirements of DA.

share|improve this question
up vote 1 down vote accepted

Theoretically yes,

The client (Win7 Ent Only) will connect behind the scenes back to the DA server(s) to essentially establish a pseudo-vpn connection. This is all supposed to happen before the user logs in, so theoretically yes it looks just like they were sitting in the office.

I'm pretty sure you meant mobile clients such as laptops, right?

share|improve this answer
Yes, mobile is my key scenario... – LamonteCristo Jun 6 '12 at 17:17
OK, just making sure you weren't going for Phones. – Brent Pabst Jun 6 '12 at 17:17

Yes, this is exactly what DirectAccess was designed for! Kind of like automatic VPN. DirectAccess clients can be Windows 7 Enterprise or Windows 7 Ultimate, or even Server 2008 R2 if you have a need to do so. Also, if you utilize UAG as the DirectAccess platform you do not need anything on your internal network to be IPv6, you can be completely IPv4 and it will still work. Let me know if you have any further questions, DA is my day job :)

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.