Install the RRAS Role Service

Updated: February 29, 2012

Applies To: Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2

A Microsoft VPN server is a NAP enforcement server for the VPN enforcement method. To deploy a VPN server for NAP, you must install the RRAS role service. For more information, see VPN Enforcement Configuration.

This topic explains how to install the RRAS role service in Windows Server® 2012, Windows Server® 2008 R2, and Windows Server® 2008.

Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at Local and Domain Default Groups (

PowerShell Logo This topic includes sample Windows PowerShell cmdlets that you can use to automate some of the procedures described. For more information, see How to Run a Windows PowerShell Cmdlet.

  1. Open a Windows PowerShell session with elevated rights. To do this, right-click the Windows PowerShell or Command Prompt Start menu object that you are using to start your Windows PowerShell sessions, and then click Run as administrator.

    Because of security restrictions imposed by User Account Control, you must use a Windows PowerShell session with elevated rights when adding server roles and role services.

  2. Load the Server Manager module into the Windows PowerShell session before working with Server Manager cmdlets. Type the following, and then press Enter.

    Import-Module Servermanager
    Windows PowerShell cmdlets are not case-sensitive.

  3. Type the following to install the HRA role service:

    Install-windowsfeature -name directaccess-vpn
  4. Verify via the Windows PowerShell console that the installation succeeded. Under Success, the result should be True.

  1. In Server Manager, click Manage and click Add Roles and Features.

  2. On the Before you begin page, click Next.

  3. On the Select installation type page, click Role/Feature Based Install and then click Next.

  4. On the Select destination server page, click Select a server from the server pool, click the names of the server where you want to install RRAS and then click Next.

  5. On the Select server roles page, click Remote Access, and then click Next three times. On the Select role services page, click Direct Access and VPN (RAS), and then click Next.

  6. On the Confirm installation selections page, click Install.

  7. On the Results page, verify Installation succeeded.

  1. In Server Manager, under Roles Summary, click Add Roles, and then click Next.

  2. On the Select Server Roles page, select the Network Policy and Access Services check box, and then click Next twice.

  3. On the Select Role Services page, select the Routing and Remote Access Services check box. If desired, you can clear the Routing check box, click Next, and then click Install.

  4. On the Installation Results page, verify that all roles and features were installed successfully, and then click Close.

Community Additions