none
Windows 8 and DirectAccess 2008 / UAG 2010 RRS feed

  • Question

  • Hi:

    Will Win8 (any version) work with DirectAccess UAG 2010 / Server 2008R2 / and TMG as a NLB?  We are not using UAG Application publishing, just DirectAccess.  Everthing is running the most recent SP and Rollup.

    I don't want to start up a Server 2012 DA project unless it's realy needed.

    Thanks

    Friday, November 2, 2012 2:09 PM

Answers

  • Hi,

    The offical answer is probably that it is not supported.

    "A Forefront UAG DirectAccess client must be:

    • Running Windows 7 Enterprise, or Windows 7 Ultimate.
    • Joined to an Active Directory domain."

    Quoted from http://technet.microsoft.com/en-us/library/ff955234.aspx

    On the other hand I was personally using the Beta of Windows 8 against a Forefront UAG 2010 setup without any major issues.
    The only problem I know of is that you will not see the connection when looking at networks in the GUI and therefore will not be able to generate logfiles or select "Use local DNS".

    Something important though, your clients need to use Windows 8 Enterprise to be able to use DirectAccess.


    Jonas Blom | Relevo AB | http://blog.nrpt.se

    • Proposed as answer by Jonas Blom Friday, November 2, 2012 8:09 PM
    • Marked as answer by Da' Woz Thursday, November 29, 2012 3:45 PM
    Friday, November 2, 2012 8:08 PM

All replies

  • Hi,

    The offical answer is probably that it is not supported.

    "A Forefront UAG DirectAccess client must be:

    • Running Windows 7 Enterprise, or Windows 7 Ultimate.
    • Joined to an Active Directory domain."

    Quoted from http://technet.microsoft.com/en-us/library/ff955234.aspx

    On the other hand I was personally using the Beta of Windows 8 against a Forefront UAG 2010 setup without any major issues.
    The only problem I know of is that you will not see the connection when looking at networks in the GUI and therefore will not be able to generate logfiles or select "Use local DNS".

    Something important though, your clients need to use Windows 8 Enterprise to be able to use DirectAccess.


    Jonas Blom | Relevo AB | http://blog.nrpt.se

    • Proposed as answer by Jonas Blom Friday, November 2, 2012 8:09 PM
    • Marked as answer by Da' Woz Thursday, November 29, 2012 3:45 PM
    Friday, November 2, 2012 8:08 PM
  • Jonas:

    Thanks, that's what I inferred from the lack of documentation from MS. 

    Saturday, November 3, 2012 2:51 AM
  • Hi,

    The offical answer is probably that it is not supported.

    "A Forefront UAG DirectAccess client must be:

    • Running Windows 7 Enterprise, or Windows 7 Ultimate.
    • Joined to an Active Directory domain."

    Quoted from http://technet.microsoft.com/en-us/library/ff955234.aspx

    On the other hand I was personally using the Beta of Windows 8 against a Forefront UAG 2010 setup without any major issues.
    The only problem I know of is that you will not see the connection when looking at networks in the GUI and therefore will not be able to generate logfiles or select "Use local DNS".

    Something important though, your clients need to use Windows 8 Enterprise to be able to use DirectAccess.


    Jonas Blom | Relevo AB | http://blog.nrpt.se

    I haven't seen an official statement on support, but it works just fine with Windows 8 RTM.

    The old DCA options are still accessible in Windows 8 if you dig deep enough ;)


    Jason Jones | Microsoft MVP | Silversands Ltd | My Blogs: http://blog.msedge.org.uk and http://blog.msfirewall.org.uk

    Monday, November 5, 2012 11:51 AM
    Moderator
  • Jason:
    It would be really interesting to learn how you get the UAG DA information to show itself in the GUI on Windows 8 like the Windows Server 2012 DA does.
    Have you written it down somewhere and can provide us with a link to it? (If you rather send it by e-mail you can reach me at, jonas.blom_at_relevoDOTse)

    Jonas Blom | Relevo AB | http://blog.nrpt.se

    Wednesday, November 7, 2012 11:09 AM
  • Jason:
    It would be really interesting to learn how you get the UAG DA information to show itself in the GUI on Windows 8 like the Windows Server 2012 DA does.
    Have you written it down somewhere and can provide us with a link to it? (If you rather send it by e-mail you can reach me at, jonas.blom_at_relevoDOTse)

    Jonas Blom | Relevo AB | http://blog.nrpt.se

    Click on LAN/Wireless icon in system tray to open the Networks side bar, right click on the DirectAccess network connection (called Workplace Connection by default) and then choose the View connection properties option to show the following:

    DirectAccess Properties


    Jason Jones | Microsoft MVP | Silversands Ltd | My Blogs: http://blog.msedge.org.uk and http://blog.msfirewall.org.uk

    Wednesday, November 7, 2012 11:33 PM
    Moderator
  • P.S. You can also run daprop.exe ;)

    Jason Jones | Microsoft MVP | Silversands Ltd | My Blogs: http://blog.msedge.org.uk and http://blog.msfirewall.org.uk

    Thursday, November 8, 2012 1:31 AM
    Moderator
  • Ah, glad to find out that I was totally wrong then.. :)

    The last time I had it connected was when it was running the Consumer Preview version where it didn't show up even though all settings and functionality were there in the background.

    Was so certain that something else had to be done that I had to revert my W8 machine back to a UAG 2010 setup just to check. ;)
    But great to know that it works just like you said...


    Jonas Blom | Relevo AB | http://blog.nrpt.se

    Saturday, November 10, 2012 7:35 PM
  • Ah, glad to find out that I was totally wrong then.. :)

    The last time I had it connected was when it was running the Consumer Preview version where it didn't show up even though all settings and functionality were there in the background.

    Was so certain that something else had to be done that I had to revert my W8 machine back to a UAG 2010 setup just to check. ;)
    But great to know that it works just like you said...


    Jonas Blom | Relevo AB | http://blog.nrpt.se


    Not wrong, you just hadn't found it yet ;)

    Jason Jones | Microsoft MVP | Silversands Ltd | My Blogs: http://blog.msedge.org.uk and http://blog.msfirewall.org.uk

    Saturday, November 10, 2012 8:45 PM
    Moderator
  • Microsoft UAG 2010 SP3 is expected Q1 2013 and should fix the Windows 8 issue plus more features

    http://blogs.technet.com/b/edgeaccessblog/archive/2012/11/26/uag-2010-service-pack-3-is-in-the-works.aspx
    Wednesday, November 28, 2012 12:43 PM
    Moderator
  • Hi Ahmed:

    I did not see DA explicitly listed in the UAG SP3 features list so i cross posted on the UAG Sp3 blog for more details.

    This may be a better Christmas present than a red bicycle J

    That's fantastic news, Thanks!

    Wednesday, November 28, 2012 2:53 PM
  • UAG SP3 is all about getting the UAG portals to work on Windows 8 with IE10. Windows 8 clients already work with DirectAccess. They do have to be Windows 8 Enterprise, that is the only version of Win8 that comes with the DA client components. As long as you are running that, you can connect through a UAG DirectAccess or Server 2012 DirectAccess server.
    Wednesday, November 28, 2012 7:26 PM
  •  Jordan:

    Thank you for your response, but my question is about DA only with TMG/UAG for DirectAccess and Win8

    <rant=on>

    We are currently running 6 separate environments with 16+ TMG/UAG 2010 servers for DA spread all over the world.   Because of the introduction of Server 2012 and loss of TMG the internal business requirements to upgrade to 2012 to support Win8 is considerable ( Engineering, Security Concepts, 3rd party Pen Tests, Client Upgrades, GPO's). 

    While the 2012 product looks very promising, I find the design decision to not support UAG/DA 2010 for Windows 8 very short sighted and or the upgrade effort for a 2012 server migration for the enterprises vastly understood by MS.

    </rant=off>

    Thursday, November 29, 2012 3:45 PM
  •  Jordan:

    Thank you for your response, but my question is about DA only with TMG/UAG for DirectAccess and Win8

    <rant=on>

    We are currently running 6 separate environments with 16+ TMG/UAG 2010 servers for DA spread all over the world.   Because of the introduction of Server 2012 and loss of TMG the internal business requirements to upgrade to 2012 to support Win8 is considerable ( Engineering, Security Concepts, 3rd party Pen Tests, Client Upgrades, GPO's). 

    While the 2012 product looks very promising, I find the design decision to not support UAG/DA 2010 for Windows 8 very short sighted and or the upgrade effort for a 2012 server migration for the enterprises vastly understood by MS.

    </rant=off>

    There are no changes in DA functionality within the Service Pack, but I haven't seen anything yet that says Windows 8 clients are not supported with UAG 2010 DA. As I said above, it works just fine, so you shouldn't have to worry. It would be good if MS could clarify if Windows 8 clients are supported with UAG 2012 DA though; let me try and find out!

    Jason Jones | Microsoft MVP | Silversands Ltd | My Blogs: http://blog.msedge.org.uk and http://blog.msfirewall.org.uk


    Thursday, November 29, 2012 3:50 PM
    Moderator
  •  Jordan:

    Thank you for your response, but my question is about DA only with TMG/UAG for DirectAccess and Win8

    <rant=on>

    We are currently running 6 separate environments with 16+ TMG/UAG 2010 servers for DA spread all over the world.   Because of the introduction of Server 2012 and loss of TMG the internal business requirements to upgrade to 2012 to support Win8 is considerable ( Engineering, Security Concepts, 3rd party Pen Tests, Client Upgrades, GPO's). 

    While the 2012 product looks very promising, I find the design decision to not support UAG/DA 2010 for Windows 8 very short sighted and or the upgrade effort for a 2012 server migration for the enterprises vastly understood by MS.

    </rant=off>

    There are no changes in DA functionality within the Service Pack, but I haven't seen anything yet that says Windows 8 clients are not supported with UAG 2010 DA. As I said above, it works just fine, so you shouldn't have to worry. It would be good if MS could clarify if Windows 8 clients are supported with UAG 2012 DA though; let me try and find out!

    Jason Jones | Microsoft MVP | Silversands Ltd | My Blogs: http://blog.msedge.org.uk and http://blog.msfirewall.org.uk


    Good news! Just heard back from Microsoft that Windows 8 DA clients will be supported with UAG 2010 SP3...


    Jason Jones | Microsoft MVP | Silversands Ltd | My Blogs: http://blog.msedge.org.uk and http://blog.msfirewall.org.uk

    Thursday, November 29, 2012 4:23 PM
    Moderator
  • Hi, i was just wondering could W8 work on a DA 2008 infrastructure without UAG.

    i've been trying for a week to setup the DirectAccess TLG wich worked fine and now trying to put a W8 client which is not working at all. Could the problem be that i dont have a UAG 2010 server?

    There's really very little doc on W8/W2008R2 DirectAccess not to say non at all...

    im trying to avoid having to install W2012.

    Thanks.

    Tuesday, February 26, 2013 3:20 PM