Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm interested in using Direct Access mainly so I can apply GPO to mobile clients and control the "domain experience" these users have.

Q: Does Direct Access allow end users to transparently work this way?

I'm in the process of setting up a test lab, learning PKI, and IPV6 since they are requirements of DA.

share|improve this question

2 Answers 2

up vote 1 down vote accepted

Theoretically yes,

The client (Win7 Ent Only) will connect behind the scenes back to the DA server(s) to essentially establish a pseudo-vpn connection. This is all supposed to happen before the user logs in, so theoretically yes it looks just like they were sitting in the office.

I'm pretty sure you meant mobile clients such as laptops, right?

share|improve this answer
Yes, mobile is my key scenario... –  makerofthings7 Jun 6 '12 at 17:17
OK, just making sure you weren't going for Phones. –  Brent Pabst Jun 6 '12 at 17:17

Yes, this is exactly what DirectAccess was designed for! Kind of like automatic VPN. DirectAccess clients can be Windows 7 Enterprise or Windows 7 Ultimate, or even Server 2008 R2 if you have a need to do so. Also, if you utilize UAG as the DirectAccess platform you do not need anything on your internal network to be IPv6, you can be completely IPv4 and it will still work. Let me know if you have any further questions, DA is my day job :) Jordan.Krause@ivonetworks.com

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.