Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [direct-access]

Direct Access is a new technology from Microsoft Available for Windows 7 Enterprise and Ultimate working with Windows Server 2008 R2 that provides seemless network connectivity not matter if you are in your Lan or in the Internet.

0
votes
0answers
19 views

Direct Access support for IoT Enterprise [duplicate]

The company where I work has a set of kiosk devices which we install at remote sites. For the new version of these devices, we are looking at running Windows IoT Enterprise as the OS. With this ...
0
votes
0answers
244 views

Automatically renewing let's encrypt for Access Anywhere using “certify the web”

I followed this tutorial in order to automatically renew a "Let's Encrypt" certificate using the free software "Certify the web" on a Windows Server 2016 Essentials. The certificate is renewed ...
0
votes
1answer
209 views

DirectAccess Certificate Authentication Breaks After New Certificate Authority Deployed

An environment had two Windows Certificate Authorities, publishing a computer certificate via auto-enrollment for DirectAccess authentication. Customer CA 1 Customer CA 2 The Certificate authorities ...
0
votes
0answers
476 views

Troubleshooting Direct Access on Windows Server 2016

To get in compliance with the new NIST 800-171 standard, we are re-evaluating our VPN for remote employees, and the head honcho would really like to use DirectAccess for any employees that will come ...
1
vote
0answers
124 views

Direct Access and RSA Authentication

We're having ongoing issues trying to setup DirectAccess with RSA SecureID OTP. On it's own DirectAccess is working great, however after I configure the OTP authentication I can't get my client to ...
0
votes
0answers
114 views

Direct Access on Sever 2012R2 - SSL Certificate

I have a question in regards to certificates when implementing Direct Access on a Server with 2 NICs. One directly connected to internet and the other internally configured. I have *.domain.com ...
0
votes
1answer
1k views

DirectAccess install error: Error: Configuration settings cannot be retrieved from the DirectAccess server GPO

I am installing DirectAccess on Windows Server 2012 using the wizard however I keep getting the error message: Error: Configuration settings cannot be retrieved from the DirectAccess server GPO. ...
-1
votes
1answer
2k views

DirectAccess DNS warning: Enterprise DNS servers (192.168.100.33,::1) used by DirectAccess clients for name resolution are not responding

I'm attempting to set up DirectAccess Remote Access on a standalone Windows Server 2012 server (DC, DHCP, DNS etc.) are handled on another server. I used the wizard but DNS kept throwing warning ...
0
votes
1answer
582 views

RemoteApps over DirectAccess. Login Failed?

In our company most of our employees are mobile, so we have a DirectAccess environment setup to allow for access to the internal network remotely. We also have a RemoteApp setup so we can easily ...
1
vote
1answer
487 views

DirectAccess and renewing SSL with new PKI?

We have deployed DirectAccess in our network for our Windows 7/10 clients which works great. The issue is, the DA server/client certificates are based on a internal PKI we are retiring; we have build ...
0
votes
1answer
3k views

Clients unable to connect to DA-server

I just setup a new server for directaccess. This domain previously had directaccess but it has been removed if it makes any difference. Anyway, everything is green checked in server manager. Public ...
0
votes
2answers
159 views

Put a server or two behind a proxy

A little background on why I'm asking this question. We've been recently getting DDoS and other attacks on our Direct Access servers, and when these attacks come in, it dramatically slows down the ...
1
vote
1answer
377 views

DirectAccess status codes

does anyone know if there exists information on the possible Status en Substatus connection states in Microsoft Direct Access? The information on MSFT_DAConnectionStatus class (Windows) | msdn....
0
votes
1answer
507 views

Windows 7 Ent DirectAccess client cannot browse over SMB

Environment is IP-HTTPS DirectAccess with a 2012 DA server and a mix of Windows 7 Enterprise and Windows 10 Pro clients. I have one Windows 7 Enterprise client that shows up as connected to DA and ...
0
votes
1answer
139 views

What counts as a 'valid http response' for testing an NLS server?

Direct Access detects you are inside the network by making an SSL connection to a system within your network. The steps to validate include resolving the name, making an https connect, validating the ...
0
votes
1answer
2k views

DirectAccess in DMZ - internal firewall rules

I'm looking at deploying DirectAccess in our network but have some concerns over the requirement to have the DirectAccess server be domain joined, particularly because it's going to be in the DMZ. The ...
0
votes
3answers
6k views

How to join Windows 10 Mobile to a domain?

We are currently experimenting with Microsoft Lumia 950 running Windows 10 Mobile and Microsoft's Display Dock. Now I am wondering how I can join this mobile device to the existing lab Domain. ...
0
votes
0answers
148 views

Does anyone have a procedure for deploying Microsoft Direct Access that actually works?

I have been struggling for months to get Microsoft's Direct Access working in our environment (Server 2012 r2 servers, Win 10 Enterprise clients). All the procedures I have found on-line are out of ...
1
vote
1answer
2k views

What is “Maximum Client Connections” on Remote Access (DirectAccess) dashboard

I was hoping someone might be able to enlighten me regarding the value of 'Maximum client connections' on the Remote Access Dashboard. Is this a hard limit or simply the most concurrent connections to ...
4
votes
1answer
542 views

Should DirectAccess be deployed to all Windows clients that support it?

As our organization is slowly rolling out Windows 10, I made the observation of a DirectAccess GPO linked to the Windows 10 PCs OU (which contain internal desktops, laptops, and even VMs for VDI). ...
1
vote
0answers
648 views

The remote procedure call failed during applying Remote Access Setup Wizard Settings

I have a DirectAccess server with Windows Server 2012 R2 in the DMZ and other services such as Active Directory (located on a subdomain) and the PKI infrastructure in the internal area. And I get ...
1
vote
3answers
2k views

DirectAccess: Client receiving icmp error from Ipv6 address

Pardon my naivety but I have never setup DirectAccess before, I've done some research prior and was unable to find a relevant resource. Let me provide a little background and then I'll jump into the ...
1
vote
0answers
91 views

Direct Access Stacking network filter driver before iphttpsinterface

Is there any way I can stack up my NDIS filter driver on top of iphttpsinterface, which is a virtual tunnel adapter provided by Microsoft for Direct Access. With this, I would like network traffic ...
1
vote
0answers
2k views

DirectAccess clients cannot browse network shares but can access them via mapped drive

OK, this is my first Microsoft DirectAccess deployment, so maybe I'm just lost in translation. I have Windows 8.1 clients connecting to a 2012 R2 multisite DirectAccess setup (2 DA servers for global ...
1
vote
1answer
192 views

Force ipv4 server identification using DNS64

I have a requirement that my direct access client should always get the IPv4 address of the server (Server will always have an IPv4 address). I know that, DNS64 sends two DNS queries to the corporate ...
1
vote
0answers
2k views

DirectAccess client (Windows 8.1 Ent) unable to connect to DirectAccess server (Server 2012)

This is my first time setting up a DirectAccess Server. I've completed the wizard on the server& everything is completed & running without errors. My laptop is unable to connect successfully. ...
3
votes
1answer
1k views

Windows DirectAccess - Server 2012 R2, Windows 8.1 Client, “No SAs match the specified criteria”

I put this question on SuperUser, but judging from the lack of response I think I picked the wrong place, so I'm cross-posting here. I'm trying to get DA set up and it is being a major pain. I have ...
0
votes
1answer
206 views

DirectAccess default MultiSite location but still allow user to select alternative site

We configured MultiSite for each different location of our offices. DA setup only allows the option between preconfigured location or automatically and allowing the user to change the location. ...
2
votes
3answers
2k views

Will DirectAccess clients renew workstation certificates off-site?

I setup MS DirectAccess nearly a year ago, which required configuring computer certificate auto-enrollment. The first computer certificate is going to expire in about a month, and now I'm wondering ...
0
votes
1answer
646 views

What is the relationship between DirectAccess, Web Application Proxy, and Forefront UAG?

We're exploring the feasibility of deploying DirectAccess to our off-campus laptops as a more seamless alternative to our TS-Gateway server, and I would like to know the benefits and relationship ...
1
vote
1answer
113 views

End-to-Edge Protection on DirectAccess

Learning about DirectAccess. This is a diagram of End-to-Edge protection Once the data goes in the corporate network, it doesn't matter whether the corporate network is running on IPv4 or IPv4. Is ...
0
votes
0answers
60 views

How can I set up DirectAccess so that I only need a single physical server?

In a bid to minimise hardware complexity and overall cost for the small network I look after, I'd like to know how best to get DirectAccess up and running as simply as possible. We currently have a ...
-1
votes
1answer
171 views

DirectAccess Setup on a Home ISP [closed]

I have a home office and I would like to setup DirectAccess from WS2012R2 for the client so their laptops are always able to VPN and connect home to access files and more. From the ISP side I've ...
1
vote
0answers
683 views

Configuring HAProxy for RPC, only one host

I've tried several ideas on how to get this to work, including Squid, Pound, and now HAProxy, which seems to be the closest yet, so far. I have an NGinx server which I have set to be the primary web ...
19
votes
2answers
3k views

Outlook fails to connect to a load-balanced Exchange 2013 cluster through Direct Access 2012 R2

We have a load-balanced Exchange 2013 SP1 cluster, running MAPI over HTTP. Client connectivity inside our own network works just fine, while clients connected over Direct Access does not connect. The ...
0
votes
1answer
1k views

Windows 7 with Direct Access and bridging a connection to a local RHEL VM

My company provided laptop is a Windows 7 machine configured to Microsoft Direct Access on the domain controller so that even remotely it will always be available on the domain without having to ...
1
vote
1answer
989 views

Can I build an Azure Only infrastructure for my small business?

I have small business, 63 people now, but we are growing slowly. We have no Active Directory, we use Office 365 for email, and about 25% use Macs. We are kind of spread out, 3 offices with more than 5 ...
6
votes
1answer
1k views

Direct Access Certificates

I want to know if I can use a single certificate for all the direct access functionality. I am working at actually setting up DirectAccess on a relatively small network. Since this is a small ...
0
votes
0answers
208 views

Microsoft DirectAccess server in the cloud (Rackspace)?

We're considering implementing DirectAccess via Windows Server 2012 R2. While considering the hardware requirements (which aren't very great of course), the question came up: "can we implement the DA ...
-2
votes
1answer
824 views

DirectAccess & VPN on Windows Server 2012 Essentials

This is supposed to be very simple - deploy WS2012E on server, install the DirectAccess and VPN role and that should be about it. But it seems that its not, tried this method with no success, Not ...
1
vote
1answer
3k views

DirectAccess Server firewall rules blocking ports

I have configured DirectAccess on my Server 2012 Essentials box and most of it works great - I can remotely access the server via RDP and the default IIS website on port 80. However, I can't access ...
0
votes
0answers
393 views

PKI and Direct Access UAG

I have a two tier PKI infrastructure with an offline root CA and two Enterprise Intermediate Certification Authorities setup to auto enroll certificates. I have setup auto enrollment in default ...
0
votes
1answer
245 views

UAG Direct Access 2 node Array wipes the IIS web site for NLS that is configured on the same box when DA is Activated

any help would be awesome, I have created a two node UAG Direct Access array, although not best practice I have setup NLS website on the UAG DA servers. Every time I click Activate on the Forefront ...
0
votes
1answer
166 views

Location for Network Location Server

I am working on setting up Direct Access, and a network location server is required. Is there a best practice on where to install it? The requirement are that it only be accessible from the intranet. ...
3
votes
3answers
2k views

Forefront UAG vs. Server 2012 Direct Access

So I'm working on bringing my company into the 21'st century, with virtual servers, active directory, ADFS, SSO etc. Its a huuuuge project, with a future goal of ISO 27001 cerification. The current ...
2
votes
1answer
1k views

NAT not working after enabling DirectAccess

following test setup is given: server1 - 1 network card connected to internal network (10.0.0.2/24) + gateway 10.0.0.1 server2 - 2 network cards (1. connected to internal network (10.0.0.1/24) / 2. ...
1
vote
1answer
2k views

Direct Access on Server 2012

Scenario: Windows Server 2012 with the Remote Access role installed. IP set to static, registered DNS. 3 domain controllers, all running Server 2003 (I suspect this may be the issue) Done so far: ...
8
votes
1answer
22k views

DirectAccess client can't connect

I've set up a DirectAccess server on Windows Server 2012 at my workplace. I'm using a Windows 8 Enterprise client to connect to it. It works fine over a mobile connection, but it fails when connecting ...
3
votes
1answer
2k views

Use a separate Teredo server and Teredo relay in Windows

All documentation (including microsoft's) about Teredo mentions the existance of Teredo Servers and Teredo Relays (and host-specific relays). Microsoft itself even runs public Teredo Servers (but no ...
0
votes
2answers
120 views

Using Direct Access to allow mobile users to have GPO and the Domain experience

I'm interested in using Direct Access mainly so I can apply GPO to mobile clients and control the "domain experience" these users have. Q: Does Direct Access allow end users to transparently work ...