locked
Configuring a remote Windows 7 pc for DirectAccess RRS feed

  • Question

  • Hi,

    Our scenario is that we have a Windows 7 Enterprise workstation in a WORKGROUP at a remote site that is not connected to our network (only has internet connection).

    We would like to first join that workstation to our Active Directory domain (2008 R2) and then configure that machine with DirectAccess which we already have deploy in our environment.

    I first attempted to join the workstation to our domain using a checkpoint mobile client but even though it said it successfully joined, the machine account does not show in AD.

    How can I go about achieving this these objectives?

    Thursday, July 17, 2014 3:19 PM

All replies

  • Hi,

    make sure that the VPN connection allows full access to all required ports for domian join:
    http://support.microsoft.com/kb/832017/en-us


    regards Marc Grote aka Jens Baier - www.it-training-grote.de - www.forefront-tmg.de - www.galileocomputing.de/3570

    Thursday, July 17, 2014 4:09 PM
  • Hi,

    We'll need more information about the AD process join and it's result. from a technical point of view the VPN solution is the good one. There is an offline join domain process available in Windows 7 (require a Windows 2012 domain level) but it only cover computer membership to the domain, not certificate provisioning or Group Policy in the packages. These features are only available in Windows 8.


    BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx

    Sunday, July 20, 2014 3:55 PM
  • thanks. I realized that I could not get the cert provisioning and gp packages for DirectAccess with Windows 7. I ended up using DJOIN to provision the Windows 7 machine on the domain.

    I then connected to the VPN to cache the credentials as suggested in the below blog:

    http://myitforum.com/myitforumwp/2012/04/05/pre-caching-domain-profiles-windows-2/

    thanks again to all for your advice.

    Tuesday, July 22, 2014 2:15 AM