MCTS 70-680: Windows 7 DirectAccess

DirectAccess is a technology implemented in Windows 7 to allow a computer to automatically create a secure connection back to head office from remote without any user interaction. This video looks at how to configure DirectAccess on Windows 7.

DirectAccess configuration demo 05:00
Netsh 07:12

Requirements
Windows 7 Enterprise or Ultimate Edition
Windows Server 2008 R2 for DirectAccess
Windows server 2008 or above for DC's and DNS
Public key infrastructure. (Certificates)
Network Access Protection (NAP) optionally

IPv6 and DirectAccess
DirectAccess requires IPv6 to operate. Between the client and the server there may not be a fully functional IPv6 network. For this reason, DirectAccess also supports transition technologies. If no transition technologies are available, DirectAccess can use IP over HTTPS.

If your computer has a public IPv4 address, DirectAccess will attempt to create a connection using 6to4. If this fails, remember that 6to4 does not support IPv4 Nat devices, DirectAccess will then attempt to use Terdeo. If this fails, possibly due to being blocked by a firewall, DirectAccess will attempt to create an IP HTTPS connection back to the server.

Group Policy DirectAccess
In order for DirectAccess to operate it muse be able to locate the Server that is configured with DirectAccess using DNS. In order to do this the group policy settings are found under the following.
Computer Configuration-Windows Settings-Name Resolution Policy
The settings for DirectAccess can be found under the DNS settings for Direct Access tab. From here you can configure the DNS servers that DirectAccsss will use to locate servers in your company. If they are publicly available you can just enter in the IP address, otherwise you can configured a proxy server or and IPSec connection back to your DNS servers if they have been set up.

Group policy IPv6 Transition Technologies
Since DirectAccess requires IPv6 to operate and you may not have a complete IPv6 network between your client and server, DirectAccess does support transition technologies. These setting can be found under
Computer Configuration-Administrative templates-Network-TCPIP settings-IPv6 Transition Technologies

NetSH commands
netsh interface IPv6 set teredo EnterpriseClient (IPAddress) (Port)
netsh interface IPv6 set teredo disable
Netsh interface 6to4 set relay (IPAddress)
netsh interface 6to4 set relay disable
netsh interface httpstunnel add interface client (http address)
netsh interface httpstunnel delete interface
netsh namespace show policy
netsh namespace show effectivepolicy
netsh interface httpstunnel show interfaces
netsh interface teredo show state
netsh interface 6to4 show state

See http://YouTube.com/ITFreeTraining or http://itfreetraining.com for are always free training videos. This is only one video from the many free courses available on YouTube.

Category:

Education

Tags:

• DirectAccess
• 70-680
• MCITP
• MCTS
• Windows 7
• ITFreeTraining

[eltonpiko]

hi i took my exam today and pass, so again many thanx again for those great vid.hope you do more video for the 70-640.

[itfreetraining]

@eltonpiko Great to hear that you passed, we will be releasing more videos for Active Directory soon.

[eltonpiko]

again many thanks for those great videos.Im planning on sitting the exam next week hope you'll be done with the last chapter.iv actually learn more on your video than in the actual Microsoft official course book for they have some details that they leave out but are asked in the exam.

[itfreetraining]

@eltonpiko Good luck with the exam. I would suggest you try some practice questions first. Unfortunately we don't have any on the web site as yet but may be you can find some somewhere.

[eltonpiko]

im about to do my 70-680 exam in a couple of days great video, clear explanation looking forward to have the final chapter of your vid

[itfreetraining]

@eltonpiko Good luck in the exam, hopefully we will have the course done before you sit the exam. Should not be to much longer.

[itsisco1]

jaajaaaja