Search the Community

I've added the "OR VERSION LIKE '6.4%" to the WMI but still get a false wmi filter on the GPO do I need to update the OperatingsystemSKU for education edition as well? current Filter Select * from Win32_OperatingSystem WHERE (ProductType = 3) OR ((Version LIKE '6.2%' OR Version LIKE '6.3%' OR VERSION LIKE '6.4%') AND (OperatingSystemSKU = 4 OR OperatingSystemSKU = 27 OR OperatingSystemSKU = 72 OR OperatingSystemSKU = 84)) OR (Version LIKE '6.1%' AND (OperatingSystemSKU = 4 OR OperatingSystemSKU = 27 OR OperatingSystemSKU = 70 OR OperatingSystemSKU = 1 OR OperatingSystemSKU = 28 OR OperatingSystemSKU = 71))

Hello, all.. My workplace relatively recently introduced DirectAccess in a fairly big way (blanket hit of all schools with WiFi). We now have round about 2200 wireless laptops configured for use with DA. Which is splendid. Except.. I've spotted a few issues which I'm hoping someone will confirm is not right (we've no basis for comparison, y'see). FYI - the DirectAccess setup we have means that an IPV4 PC can't talk to a DA laptop either via IP or by FQDN. And vice versa. We have a list of servers which the DA laptops are permitted to talk to. Oh, and they're Windows 7 Enterprise laptops. PING If I attempt to PING a laptop that's connected via DA, I get an unknown host error. As in, it doesn't even attempt to resolve the IP address (be it the IPV6 or the IPV4 one). This happens if I try the ping from a wired IPV4 workstation, or another DA laptop. I don't mean I can't get a reply (suggesting the firewall is stopping PING replies). I mean it doesn't recognise the host name. Certificates When the laptop is configured to be in the correct AD group and the OU which says it gets the necessary DA settings, it gets a machine certificate. That certificate lasts a year. My understanding is that the certificate should be able to renew itself OVER DIRECT ACCESS. Currently, when it expires, we need to hook the laptop up WIRED to get a new year long cert. SCCM PUSH I'm assuming this is related to the lack of host name resolving.. We've recently installed an SCCM environment. The server is currently pushing out the agent to any/all PCs which it can locate. It does not push out to DirectAccess clients. Any advice on any of the above would be gratefully received. Even if it's so I can present the information to my Infrastructure bods to say "this bit SHOULD work". Cheers, Gerard

Afternoon, I was wondering if anyone has any guides on setting up DirectAccess? I am currently having issues with the Network Location Services being non accessible when I add it into the DirectAccess wizard even though I have created a internal cert and setup a IIS page for it. The internet seems to have fragments of guides all over the place but mostly focus on the two adaptor solution but I am using only one. Regards

When I bring up the Direct Access panel in settings, it says connecting under the connection name but goes no further than that. It is definitely not working as I cannot open any networked drives etc. There are no errors on the remote management tool on Server 2012. Any suggestions for troubleshooting this issue will be much appreciated! Thanks a bunch .

Hello, all.. Our local authority has being using DirectAccess for the last few years, and it's got us out of a fairly massive hole over the last year what with "one thing and another" (points if you get the reference). DA works well enough for file access (shared folders, network home folders). However - when we have clients hitting the WWW via our ForcePoint proxy over DirectAccess, the results are terrible. Users see a variety of errors like "The server reset", "ERR_EMPTY_RESPONSE". The result for the users is pages not loading properly (CSS missing, images missing etc). If they hit F5 often enough, the page will load properly - but it's far from good. The dead obvious solution of letting them go out direct is a complete no-go security wise. While all of these WWW issues are going on, the client has no issues at all connecting and staying connected to the network - 0 dropped PINGs of authority based servers. It does the same with different releases of Windows 10. On IE, Chrome, Edge, Edge Chromium. While these issues are happening for DA clients, if I remote onto a WIRED desktop or an 8021x laptop INSIDE the school, WWW browsing is absolutely fine. Is any of this ringing any bells for people who have used DA? Thanks! Gerard PS - our Infra team are looking at implementing Always On VPN, but that's likely to be a long(!) way off.