DirectAccess Configuration Load Error after Enabling NLB in Hyper-V
When the Windows Server 2012 R2 DirectAccess server is deployed on a virtual machine running in Microsoft Hyper-V, a complete loss of network connectivity immediately after enabling Network Load...
View ArticleConfigure DirectAccess with OTP Authentication
Introduction DirectAccess in Windows Server 2012 R2 provides significantly improved authentication over traditional client-based VPN solutions. When configured to use certificate authentication (a...
View ArticleHotfix Available for DirectAccess OTP Configuration Issues
If you’ve ever tried configuring DirectAccess to use One-Time Password (OTP) authentication, you’ve no doubt discovered that the native Microsoft Remote Access Management console would return the...
View ArticleDirectAccess Client and Server Settings GPOs Deleted
For DirectAccess deployments where domain controllers are running Windows Server 2003 or Windows Server 2003 R2 using the File Replication Service (FRS) for replication, DirectAccess client and server...
View ArticleDirectAccess DNS Not Working Properly
Name resolution and proper DNS server configuration is vital to the functionality of DirectAccess. When performing initial configuration of DirectAccess, or making changes to the DNS server...
View ArticleWindows Clients Do Not Receive DirectAccess Configuration Changes
A scenario can occur in which changes to the DirectAccess configuration made using the Remote Access Management console or at the command line using PowerShell are not reflected on the DirectAccess...
View ArticleDirectAccess IP-HTTPS Preauthentication using F5 BIG-IP
Note: For information about configuring the Citrix NetScaler to perform IP-HTTPS preauthentication, click here. For information about configuring Windows Server 2012 R2 to perform IP-HTTPS...
View ArticleDirectAccess Troubleshooting and Configuration Training at TechMentor Redmond...
I’m really excited to announce that I have once again been invited to speak at the upcoming TechMentor event in Redmond, WA August 7-11, 2017! This year I’ll be presenting two important deep-dive...
View ArticleUninstalling and Removing DirectAccess
This web site is primarily dedicated to installing, configuring, managing, and troubleshooting DirectAccess on Windows Server 2012 R2 and Windows Server 2016. However, there’s little documentation on...
View ArticleDirectAccess Network Connectivity Assistant (NCA) Configuration Guidance
The DirectAccess Network Connectivity Assistant (NCA), first introduced in Windows 8, provides DirectAccess connectivity status information as well as diagnostic support on the client. The NCA...
View ArticleRenew DirectAccess Self-Signed Certificates
Important! Updated July 15, 2019 to support all versions of Windows Server including Windows Server 2012 and 2012 R2. Also added functionality to renew self-signed certificates individually. When...
View ArticleError Importing Windows Server RRAS Configuration
Windows Server and the Routing and Remote Access Service (RRAS) is a popular choice for Windows 10 Always On VPN deployments. It is easy to implement and support, offers flexible scalability, and is...
View ArticleAlways On VPN DNS Registration Update Available
When configuring Always On VPN, administrators have the option to enable DNS registration for VPN clients. When this option is set, VPN clients will register the IP address assigned to their VPN...
View ArticleAlways On VPN RRAS Monitoring and Reporting
Windows Server with the Routing and Remote Access Service (RRAS) role installed is a popular choice for Windows 10 Always On VPN deployments. Configuring RRAS is commonly performed using the RRAS...
View ArticleAlways On VPN Device Tunnel Operation and Best Practices
Unlike DirectAccess, Windows 10 Always On VPN settings are deployed to the individual user, not the device. As such, there is no support for logging on without cached credentials using the default...
View ArticleAlways On VPN DPC with Intune
In the past, I’ve written about PowerON Platforms’ Always On VPN Dynamic Profile Configurator (DPC), a software solution administrators can use to provision and manage Always On VPN client...
View ArticleAlways On VPN RADIUS Configuration Missing
Windows Server Routing and Remote Access Service (RRAS) is a popular choice for administrators deploying Always On VPN. It is easy to configure and scales out easily. Most commonly, RRAS servers are...
View ArticleAlways On VPN Error 13868
The Internet Key Exchange version 2 (IKEv2) VPN protocol is the protocol of choice for Microsoft Always On VPN deployments where the highest levels of security and assurance are required. However, as...
View ArticleAlways On VPN May 2023 Security Updates
Hey, Always On VPN administrators! It’s the second Tuesday of the month, which means security updates for Windows have been released. This month’s batch includes an update to address a critical...
View Article10 PowerShell Commands Always On VPN Administrators Should Know
Managing a secure and reliable VPN infrastructure is critical for supporting today’s highly mobile workforce. For Always On VPN administrators, PowerShell is an indispensable tool for achieving this...
View Article