Quantcast
Channel: Forefront Edge Security – DirectAccess, UAG and IAG フォーラム
Viewing all articles
Browse latest Browse all 1485

Windows 10 1607 LTSB wont connect via Direct access

$
0
0

We have a Windows Server 2012 DA server setup which is working fine. We have a few clients which for whatever reason stop connecting via DA and the only fix seems to be to re-install the OS. I've tried removing/joining to the domain, resetting the winsock ... but nothing seems to work.

If i go into control panel there is also no Direct Access icon at all.

The below is from a problematic machine. Any tips on what i can try

Windows PowerShell
Copyright (C) 2016 Microsoft Corporation. All rights reserved.

PS C:\Windows\system32> Get-DAClientExperienceConfiguration


Description                      : DA Client Settings
CorporateResources               :
IPsecTunnelEndpoints             :
CustomCommands                   :
PreferLocalNamesAllowed          : False
UserInterface                    : False
PassiveMode                      : False
SupportEmail                     :
FriendlyName                     :
ManualEntryPointSelectionAllowed : True
GslbFqdn                         :
ForceTunneling                   : Enabled



PS C:\Windows\system32> Get-DAConnectionStatus


Status    : ConnectedLocally
Substatus : None

PS C:\Windows\system32> Get-DAConnectionStatus


Status    : Error
Substatus : MissingDAClientExperienceConfiguration




PS C:\Windows\system32> Get-DAConnectionStatus


Status    : Error
Substatus : MissingDAClientExperienceConfiguration



PS C:\Windows\system32> netsh dnsclient show state

Name Resolution Policy Table Options
--------------------------------------------------------------------

Query Failure Behavior                : Always fall back to LLMNR and NetBIOS
                                        if the name does not exist in DNS or
                                        if the DNS servers are unreachable
                                        when on a private network

Query Resolution Behavior             : Resolve only IPv6 addresses for names

Network Location Behavior             : Let Network ID determine when Direct
                                        Access settings are to be used

Machine Location                      : Outside corporate network

Direct Access Settings                : Configured and Enabled

DNSSEC Settings                       : Not Configured

PS C:\Windows\system32> netsh int https show int
There are currently no active IP-HTTPS profiles. To view the configured
IP-HTTPS profiles, execute the following Powershell command -
'Get-NetIPHTTPSConfiguration'.

Interface IPHTTPSInterface (Group Policy)  Parameters
------------------------------------------------------------
Role                       : client
URL                        : https://RAServer.com:443/IPHTTPS
Last Error Code            : 0x10df
Interface Status           : IPHTTPS interface creation failure

PS C:\Windows\system32> netsh dns show state

Name Resolution Policy Table Options
--------------------------------------------------------------------

Query Failure Behavior                : Always fall back to LLMNR and NetBIOS
                                        if the name does not exist in DNS or
                                        if the DNS servers are unreachable
                                        when on a private network

Query Resolution Behavior             : Resolve only IPv6 addresses for names

Network Location Behavior             : Let Network ID determine when Direct
                                        Access settings are to be used

Machine Location                      : Outside corporate network

Direct Access Settings                : Configured and Enabled

DNSSEC Settings                       : Not Configured


PS C:\Windows\system32> netsh name show effective

DNS Effective Name Resolution Policy Table Settings


Settings for DAserver.com
----------------------------------------------------------------------
DirectAccess (Certification Authority)  :
DirectAccess (IPsec)                    : disabled
DirectAccess (DNS Servers)              :
DirectAccess (Proxy Settings)           : Use default browser settings




Viewing all articles
Browse latest Browse all 1485

Trending Articles