3,120 reputation
62953
bio website
location
age
visits member for 5 years, 11 months
seen Jan 12 at 20:37

Feb
8
awarded  Notable Question
Jan
5
comment Will DirectAccess clients renew workstation certificates off-site?
Thanks CryptoGuy. Your answer is great and I appreciate the screenshot very much. I'm accepting mfinni's answer because it also addresses the DA aspect. Wish I could accept both!
Jan
5
accepted Will DirectAccess clients renew workstation certificates off-site?
Jan
5
comment Will DirectAccess clients renew workstation certificates off-site?
Thanks Jim - I think that the more important part of my question then is: when is the renewal period? I realize that's not specific to DA, though I think I should leave my question as is because this is an important consideration in a DA implementation for those not already setup to do machine certificates.
Jan
5
comment Will DirectAccess clients renew workstation certificates off-site?
mfinni - this is good info! However, that GPO setting indicates that it will log and show notifications. It does not (based on the description) indicate that this is when machines will attempt to renew. CryptoGuy's answer states that the renewal "setting" is in the certificate template. Can someone clarify? I'm glad to learn that my assumption was correct, and that we'll need to make sure that all of our DA machines come online within their renewal periods....seems likely they would, but!
Jan
5
asked Will DirectAccess clients renew workstation certificates off-site?
Dec
9
awarded  Famous Question
Sep
18
awarded  Notable Question
Aug
26
awarded  Famous Question
Aug
22
awarded  Good Question
Jul
2
awarded  Curious
Jul
2
awarded  Inquisitive
Jun
12
awarded  Popular Question
Jun
10
awarded  Famous Question
May
7
awarded  Yearling
Apr
17
awarded  Popular Question
Mar
28
awarded  Famous Question
Mar
7
awarded  Notable Question
Feb
17
awarded  Nice Question
Feb
3
comment Microsoft DirectAccess server in the cloud (Rackspace)?
Well that's a good point and relates to the second piece of my question, thanks. That said, the primary purpose of DA is management, not so much access to resources/applications so performance might not be so critical. I could also argue that adding a server is a more significant point of failure than a tunnel, and then we'd have to consider additional UPS capacity, local backup, etc.