Does a machine (e.g., mobile laptop) have to be domain joined in order to use Direct Access (DA)? Or does DA allow the user to provide credentials just like VPN does when setting up DA?


"DirectAccess clients must be members of an Active Directory domain."


  • Thx. Does it have to be the same domain as the server providing DA? E.g. can consultants use DA from their machine which might be joined to their consulting companies AD rather than the customer's AD? – Philipp Schmid May 7 '10 at 16:41
  • The DA and the clients should belong to the same domain. – Sharjeel Aziz May 7 '10 at 16:57
  • Yes they would need to be on the same domain. You might be able to provide access to resources on both domains/networks using one DA Server if there was an existing VPN/trusted sites configuration between the two locations in place, however I am unable to verify or prove that. – iainlbc May 7 '10 at 17:14

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.