DirectAccess for Windows Server 2008 R2

Applies To: Windows Server 2008 R2

DirectAccess is a new feature of Windows 7 and Windows Server 2008 R2 that enables remote users to securely access shared resources, websites, and applications on an internal network without connecting to a virtual private network (VPN). DirectAccess establishes bi-directional connectivity with an internal network every time a DirectAccess-enabled computer is connected to the Internet. Users never have to think about connecting to the internal network, and IT administrators can manage remote computers outside the office, even when the computers are not connected to the VPN.

DirectAccess requires clients running Windows 7 Enterprise, Windows 7 Ultimate, or Windows Server 2008 R2 and at least one DirectAccess server running Windows Server 2008 R2.

The DirectAccess Learning Roadmap can help you build your understanding of DirectAccess. It includes prerequisite topics that cover a variety of networking and infrastructure fundamentals and resources that help you learn introductory, intermediate, and advanced technical details about DirectAccess.

The DirectAccess Design Guide provides information about advantages, disadvantages, requirements, recommendations, and design considerations for deploying DirectAccess. Use this guide to answer the “What,” “Why,” and “When” questions a deployment design team might ask before deploying DirectAccess in a production environment.

This guide, combined with the DirectAccess Deployment Guide and Troubleshooting Guide, is also available as a Microsoft Word file (https://go.microsoft.com/fwlink/?LinkId=163662) in the Microsoft Download Center.

For DirectAccess in Microsoft Forefront Unified Access Gateway (UAG), see the Forefront UAG DirectAccess Design Guide (https://go.microsoft.com/fwlink/?LinkId=179988).

The DirectAccess Deployment Guide provides checklists and step-by-step procedures for deploying DirectAccess servers and DirectAccess client settings. Use this guide to answer the “How” questions a deployment team might ask before implementing a DirectAccess design.

This guide, combined with the DirectAccess Design Guide and Troubleshooting Guide, is also available as a Microsoft Word file (https://go.microsoft.com/fwlink/?LinkId=163662) in the Microsoft Download Center.

For DirectAccess in Microsoft Forefront UAG, see the Forefront UAG DirectAccess Deployment Guide (https://go.microsoft.com/fwlink/?LinkId=179989).

The DirectAccess Troubleshooting Guide provides task-oriented information to help you identify and resolve problems quickly. Use this guide to assist you while performing root-cause analysis of incidents and problems with the elements of a DirectAccess infrastructure.

This guide, combined with the DirectAccess Design Guide and Deployment Guide, is also available as a Microsoft Word file (https://go.microsoft.com/fwlink/?LinkId=163662) in the Microsoft Download Center.

The Test Lab Guide: Demonstrate DirectAccess (https://go.microsoft.com/fwlink/?Linkid=150613) provides step-by-step instructions to set up and demonstrate DirectAccess in a test lab with a simulated Internet, intranet, and home network.

The Test Lab Guide: Troubleshoot DirectAccess (https://go.microsoft.com/fwlink/?LinkId=181160) describes DirectAccess troubleshooting tools, the results of the tools in a working DirectAccess test lab, and how to troubleshoot common problems in the DirectAccess test lab.

The DirectAccess with Network Access Protection (NAP) provides overview technical information and guidance to deploy DirectAccess with NAP to enforce system health requirements before allowing intranet access.

The Test Lab Guide: Demonstrate DirectAccess with NAP (https://go.microsoft.com/fwlink/?LinkId=186697) provides step-by-step instructions to set up and demonstrate NAP enforcement for intranet access in the DirectAccess test lab.

The Test Lab Guide: Troubleshoot DirectAccess with NAP (https://go.microsoft.com/fwlink/?LinkId=193603) describes NAP troubleshooting tools, the results of the tools in the working DirectAccess with NAP test lab, and three NAP health validation troubleshooting scenarios.

The Deploying, Managing, and Using the DirectAccess Connectivity Assistant describes how to configure, deploy and use the DirectAccess Connectivity Assistant (DCA). The DCA is a program that appears in the notification area to let the user know when DirectAccess is working, and what to do when it is not working. It provides an easy way for the user to send detailed log information back to the DirectAccess administrators to help them diagnose and correct any problems.

DirectAccess web Page (https://go.microsoft.com/fwlink/?Linkid=140994)