Delegated administration (troubleshooting) on DirectAccess for Server 2012 R2

All replies

  • Hi,

    I dont think it's possible throught the GUI. Maybe in remonte powershell. At last, datas are stored in NPS logs files or SQL database, it's possible to have a better RBAC approch

    BenoitS - Simple by Design

    Tuesday, May 20, 2014 7:26 AM
  • Similarly,  without some sort of server-side delegation even basic cmdlets like this cannot be run.

     Get-DAClientDnsConfiguration -ComputerName xyz-da-01

    That severely limits the ability of other teams to change the client NRPT settings.   It's a pretty significant gap in the security design of an internet-facing product.

    Wednesday, October 15, 2014 8:27 PM