none
Windows 10 1607 LTSB wont connect via Direct access RRS feed

  • Question

  • We have a Windows Server 2012 DA server setup which is working fine. We have a few clients which for whatever reason stop connecting via DA and the only fix seems to be to re-install the OS. I've tried removing/joining to the domain, resetting the winsock ... but nothing seems to work.

    If i go into control panel there is also no Direct Access icon at all.

    The below is from a problematic machine. Any tips on what i can try

    Windows PowerShell
    Copyright (C) 2016 Microsoft Corporation. All rights reserved.

    PS C:\Windows\system32> Get-DAClientExperienceConfiguration


    Description                      : DA Client Settings
    CorporateResources               :
    IPsecTunnelEndpoints             :
    CustomCommands                   :
    PreferLocalNamesAllowed          : False
    UserInterface                    : False
    PassiveMode                      : False
    SupportEmail                     :
    FriendlyName                     :
    ManualEntryPointSelectionAllowed : True
    GslbFqdn                         :
    ForceTunneling                   : Enabled



    PS C:\Windows\system32> Get-DAConnectionStatus


    Status    : ConnectedLocally
    Substatus : None

    PS C:\Windows\system32> Get-DAConnectionStatus


    Status    : Error
    Substatus : MissingDAClientExperienceConfiguration




    PS C:\Windows\system32> Get-DAConnectionStatus


    Status    : Error
    Substatus : MissingDAClientExperienceConfiguration



    PS C:\Windows\system32> netsh dnsclient show state

    Name Resolution Policy Table Options
    --------------------------------------------------------------------

    Query Failure Behavior                : Always fall back to LLMNR and NetBIOS
                                            if the name does not exist in DNS or
                                            if the DNS servers are unreachable
                                            when on a private network

    Query Resolution Behavior             : Resolve only IPv6 addresses for names

    Network Location Behavior             : Let Network ID determine when Direct
                                            Access settings are to be used

    Machine Location                      : Outside corporate network

    Direct Access Settings                : Configured and Enabled

    DNSSEC Settings                       : Not Configured

    PS C:\Windows\system32> netsh int https show int
    There are currently no active IP-HTTPS profiles. To view the configured
    IP-HTTPS profiles, execute the following Powershell command -
    'Get-NetIPHTTPSConfiguration'.

    Interface IPHTTPSInterface (Group Policy)  Parameters
    ------------------------------------------------------------
    Role                       : client
    URL                        : https://RAServer.com:443/IPHTTPS
    Last Error Code            : 0x10df
    Interface Status           : IPHTTPS interface creation failure

    PS C:\Windows\system32> netsh dns show state

    Name Resolution Policy Table Options
    --------------------------------------------------------------------

    Query Failure Behavior                : Always fall back to LLMNR and NetBIOS
                                            if the name does not exist in DNS or
                                            if the DNS servers are unreachable
                                            when on a private network

    Query Resolution Behavior             : Resolve only IPv6 addresses for names

    Network Location Behavior             : Let Network ID determine when Direct
                                            Access settings are to be used

    Machine Location                      : Outside corporate network

    Direct Access Settings                : Configured and Enabled

    DNSSEC Settings                       : Not Configured


    PS C:\Windows\system32> netsh name show effective

    DNS Effective Name Resolution Policy Table Settings


    Settings for DAserver.com
    ----------------------------------------------------------------------
    DirectAccess (Certification Authority)  :
    DirectAccess (IPsec)                    : disabled
    DirectAccess (DNS Servers)              :
    DirectAccess (Proxy Settings)           : Use default browser settings



    • Edited by alokin123 Wednesday, September 12, 2018 5:11 AM errors
    Wednesday, September 12, 2018 5:09 AM

All replies