Implementing Your DirectAccess Design Plan

Updated: October 7, 2009

Applies To: Windows Server 2008 R2

Important

This topic describes deployment of DirectAccess in Windows Server 2008 R2. For deployment of DirectAccess in Microsoft Forefront Unified Access Gateway (UAG), see the Forefront UAG DirectAccess Deployment Guide (https://go.microsoft.com/fwlink/?LinkId=179989).

Consider the following factors before you implement your design plan:

  • Staging strategy You can also use small-scale pilot or lab deployments to become familiar with DirectAccess processes, update your infrastructure, and refine your criteria for compliance. For more information about the phases of a DirectAccess deployment, see Checklist: Staging a DirectAccess Deployment.

  • Server placement A DirectAccess server infrastructure includes DirectAccess servers, network location servers, and CRL distribution points. For more information about planning placement, load balancing, and redundancy for these servers, see the DirectAccess Design Guide.

  • Documenting your DirectAccess deployment Documenting your DirectAccess deployment helps you to set clear goals and record whether these goals are met. For more information, see Appendix C: Documenting Your DirectAccess Design.

How to implement your DirectAccess design using this guide

The next step in implementing your design is to determine in what order each of the deployment tasks must be performed. This guide uses checklists to help you walk through the various infrastructure and server requirements, configuration of a specific access model, and then more advanced optional configurations. The following illustration shows the order in which checklists for a specific DirectAccess access model must be followed.

Use the following checklist to become familiar with the options for staging a DirectAccess deployment in your organization:

Use the following checklist to become familiar with the deployment tasks to prepare your infrastructure for DirectAccess:

Use the following checklist to become familiar with preparing your DirectAccess server prior to configuring the DirectAccess feature for your organization's DirectAccess access model:

Use the following checklists to become familiar with the deployment tasks when implementing your organization's access model:

Use the following checklists to become familiar with the deployment tasks for implementing optional DirectAccess configuration options: