DirectAccess client enables IPHTTPS interface when inside corporate network at remote sites

Question

We have 4 offices connected via an MPLS network. I've installed the DA server in the main office. We're using a PKI for NLS and IPsec certs and a self-signed cert for IPHTTPS. For the most part everything works great. When a DA client is in the main office
all DA settings are disabled and the client acts as it should. When on the internet the IPHTTPs tunnel is established and remote access works.
My problem is when the same DA client connects at one of the remote offices. When at a remote office the IPHTTPS interface is active. The NRPT is not. No tunnel is actually established but I find Event 4012, NCSI event logs showing that the Inside/Outside probe
failed. This in and of itself would not be a big deal as the tunnel is never established however it does seem to cause Outlook to prompt for a password. I know this has something to do with our OWA site being resolvable inside the network, but I'm at a loss
as to why this only happens with the IPHTTPS interface is active with no tunnel established.
The NLS site appears to be working from the remote offices. I can ping NLS via DNS name and can open the https NLS website in a browser.
Anyone have any ideas as to why this would be happening?

Answer 1

Event Logs:
Log Name:      Microsoft-Windows-NCSI/Operational
Source:        Microsoft-Windows-NCSI
Date:          4/22/2013 8:26:58 AM
Event ID:      4012
Task Category: Check Corporate Inside/outside Location
Level:         Warning
Keywords:      (17179869184)
User:          NETWORK SERVICE
Computer:      N30504-EDUENSIN.miac.local
Description:
Inside/Outside probe failed for interface 0x8300000F000000.
Error: A connection with the server could not be established (12029)
Host: directaccess-nls.miac.local//insideoutside
Next retry: 128 second(s).
Log Name:      Microsoft-Windows-NCSI/Operational
Source:        Microsoft-Windows-NCSI
Date:          4/22/2013 8:26:58 AM
Event ID:      4010
Task Category: Check Corporate Inside/outside Location
Level:         Information
Keywords:      Response Time,(35184372088832)
User:          NETWORK SERVICE
Computer:      N30504-EDUENSIN.miac.local
Description:
Inside/Outside detection finished for interface 0x8300000F000000 (OUTSIDE).
netsh dns show state
Name Resolution Policy Table Options
Query Failure Behavior                : Always fall back to LLMNR and NetBIOS
                                        if the name does not exist
in DNS or
                                        if the DNS servers are
unreachable
                                        when on a private network
Query Resolution Behavior             : Resolve only IPv6 addresses for names
Network Location Behavior             : Let Network ID determine when Direct
                                        Access settings are to
be used
Machine Location                      : Inside corporate network
Direct Access Settings                : Configured and Disabled
DNSSEC Settings                       : Not Configured
netsh namespace show effectivepolicy
DNS Effective Name Resolution Policy Table Settings
Note: DirectAccess settings would be turned off when computer is inside corporat
e network
netsh interface httpstunnel show interfaces
Interface IPHTTPSInterface (Group Policy)  Parameters
Role                       : client
URL                        :
https://***********:443/IPHTTPS
Last Error Code            : 0x0
Interface Status           : IPHTTPS interface active