Does a machine have to be domain joined in order to use Direct Access

Question

Does a machine (e.g., mobile laptop) have to be domain joined in order to use Direct Access (DA)? Or does DA allow the user to provide credentials just like VPN does when setting up DA?

score 5 · Accepted Answer · edited Aug 20 '15 at 04:44

5

"DirectAccess clients must be members of an Active Directory domain."

Sources:

MS DirectAccess Technical Overview Doc: http://www.microsoft.com/downloads/details.aspx?FamilyID=64966e88-1377-4d1a-be86-ab77014495f4&displaylang=en
https://web.archive.org/web/1/http://blogs.techrepublic%2ecom%2ecom/10things/?p=1371

edited Aug 20 '15 at 04:44

Community

1

answered May 07 '10 at 16:14

iainlbc

2,694
18
19

Thx. Does it have to be the same domain as the server providing DA? E.g. can consultants use DA from their machine which might be joined to their consulting companies AD rather than the customer's AD? – Philipp Schmid May 07 '10 at 16:41
The DA and the clients should belong to the same domain. – Sharjeel Aziz May 07 '10 at 16:57
Yes they would need to be on the same domain. You might be able to provide access to resources on both domains/networks using one DA Server if there was an existing VPN/trusted sites configuration between the two locations in place, however I am unable to verify or prove that. – iainlbc May 07 '10 at 17:14

Does a machine have to be domain joined in order to use Direct Access

1 Answers1