Direct Access

[mrbios]

Hello chaps and chapettes,

 

So i only noticed this little feature the other day when someone else on edugeek asked about it, so i've come to trying to set it up but i could do with some advice.

 

I've got the server setup, certificates in place and everything is happy except for DNS (DNS64 says it's fine though), i get the following error in operation status:

Error:

None of the enterprise DNS servers fdc5:ec27:10a4:7777::ac12:4219 used by DirectAccess clients for name resolution are responding. This might affect DirectAccess client connectivity to corporate resources.

 

Cause:

Enterprise DNS servers fdc5:ec27:10a4:7777::ac12:4219 are not responding

 

I followed a pretty simple guide in setting up the direct access server initially so i can only assume it's something unrelated. The only area i didn't notice until after i'd configured the server is that i needed to unblock ISATAP on DNS on the DCs. So i did that afterwards, could that be an issue?

 

Also in the past I've turned off the windows firewall by default in servers, so this is the first time i've found something that actually needs it turned on, does it need to be on on the DCs or just the DA server and the clients?

 

All the guides i can find relate to setting up the actual DA server, but that part seems to have been relatively straight forward, i can't find any guides that focus on the rest, anyone able to direct me to one?

 

EDIT: should i be able to ping that IPv6 address of the DC from any machine and get a reply? (all this 6to4 stuff is confusing me) Should i set that address on the DC manually?

Edited January 20, 2015 by mrbios

[mrbios]

Never mind! I got it working, i took the DNS server setting to be literally setting my DNS server, seems it wanted me to set it to the IP of the DA server and that redirects requests.

 

All working with a client connected through my phones hotspot using mapped drives, yay!

 

(I need to stop making threads and answering them myself )

 

FYI anyone that comes across this thread looking for help, this was very useful: http://www.windowsnetworking.com/articles-tutorials/trouble/7-Steps-Troubleshooting-DirectAccess-Clients.html

 

EDIT: Maybe someone cna answer this one for me though...it's working, i cna access mapped drives while outside the network and it's quick too. I've installed the network connectivity assistent program on a windows 7 client though and it's saying I'm not connected, does this need setting up separately?

 

EDIT2: Ok i can get the DCA app to work ok but only if i only enter a ping option in the corporate resources section. If i add a http option directed at an internal server (which i can access as soon as the device connects outside the network) it says FAIL. If i remove that and have a ping only option alongside a http option then it still says it's failed to connect. Very annoying, anyone know what i may be doing wrong there?

Edited January 20, 2015 by mrbios