DirectAccess & Multi-Site (Windows Server 2012 R2)

Hello everyone,
Currently, I have a single working DirectAccess servers (Windows Server 2012 R2). Since I only have Windows 7 Enterprise clients, I'm using internal certificates. In short, this solution is working properly.
I'm interested in setting up Multi-Site and I have a couple of questions. From the research I've done, it looks like I'm going to need a publicly generated certificate for IP-HTTPS. According to some videos I've watched regarding Multi-Site configuration,
I should use a wildcard certificate.
Is this because this certificate must be loaded on two servers DirectAccess servers?
Our company domain is, say, mycompany.com - Will there be an issue if I get say,
*.directaccess.mycompany.com certificate? I just want to make sure that DirectAccess will handle this properly.
Thanks!

Hi,
>>If I purchase a multi-domain certificate and apply it to both DA servers, will this work?
According to the official document, certificate requirements for IP-HTTPS certificates:
For a single CA that issues SSL certificates that are installed on DirectAccess servers for IP-HTTPS connections:
In the Subject field, either an IPv4 address of the Internet interface of the site-specific DirectAccess server or the FQDN (recommended) of the IP-Secure Hypertext Transfer Protocol (HTTPS) URL
In the Enhanced Key Usage field, the Server Authentication OID
In the CRL Distribution Points field, the organization-wide CRL distribution points on the Internet
For per-site CAs that issue SSL certificates that are installed on DirectAccess servers for IP-HTTPS connections:
In the Subject field, either an IPv4 address of the Internet interface of the site-specific DirectAccess server or the FQDN (recommended) of the IP-HTTPS URL
In the Enhanced Key Usage field, the Server Authentication OID
In the CRL Distribution Points field, the site-specific CRL distribution points on the Internet
The official document doesn't show that we can put the FQDN of the DA server into SAN, therefore it may not work.
Best Regards.
Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Similar Messages

DirectAccess Client not connecting without error code on Windows Server 2012 R2 and Windows 8.1

Hello,
we are currently migrating from Windows Server 2012 to 2012 R2 and are not able to get the new Direct Access Service up and running. Our goal is to establish DirectAccess connection for a handful of clients using the IPHTTPS-adapter on the default port 443.
Errors:
There is actually no error showing up. It seems the infrastructure tunnel cannot be created but none of the IPv6-transition adapters is connecting (teredo and 6-to-4 are down) and the IPHTTPs adapter gives no informations about a problem:
>Get-DAConnectionStatus
Status : Error
Substatus : CouldNotContactDirectAccessServer
>Get-NetIPHttpsState
LastErrorCode : 0x0
InterfaceStatus : Failed to connect to the IPHTTPS server; waiting to reconnect
Setup:
Our setup is a virtualized Windows Server 2012 R2 Standard running on Hyper-V. It is located behind a NAT having the Port 443 mapped to the server. The only role installed after the basic install is RRAS including DirectAccess and VPN. The assistants completed
successfully (running the configuration for DirectAccess and VPN). Operation Status says everything is green und working (for multiple days in the meanwhile). A previous direct access installation (on a different machine running Windows Server 2012) has
been removed before installing the new server. The new installation is using a different router, so this might also be the cause of a problem.
The client is a Windows 8.1 notebook located outside the company network accessing the internet through another NAT-device. The client has been able to connect to the previous DirectAccess setup but has never been able to establish a connection after the
setup of the new Direct Access server. The device has no outbound constraints concerning the NAT-device and is only running the integrated Windows Firewall.
Diagnosis:
So far I've done some basic DNS and connectivity checks. The DNS-name can be resolved correctly and the router even responds to pings. The port forward is working and HTTPs connections are generally possible (temporarily routed the port to
access the NLS-Website located on the server, which worked fine).
Network monitor shows that both computers are communicating, traffic on the expected Port 443 is incoming on the server and responses from the server reach the client.
Opening the IPHTTPs-url and in an endless page load. Sometime the browser page closes but I've never seen any result. Using telnet on the port shows that the server is accepting connections. I've even build a small test application that does a GET-Request
on the URL returning HTTP-200 and no content.
I'm currently running out of ideas what to do and since no error occurs this is kind of a bit frustrating. Any help appreciated.
Regards
Matthias

Hi,
In addition, have you disabled the DA client components on the DA client? If no, please also check
the settings on the Name Resolution Policy Table.
More information:
DirectAccess
Client Location Awareness – NRPT Name Resolution
In addition, error 0x4C9 means the remote computer refused the network connection. It may be due to the invalid
registry or corrupt drivers. For more detailed information, please refer to the link below:
Error 1225 - Error Code 0x4C9
Note:
Microsoft is providing this information as a convenience to you. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
Best regards,
Susie

DirectAccess Windows Server 2012 R2 and Windows 8.1 - status connecting

I've successfully deployed DirectAccess on Windows Server 2012 R2 in a 2 node NLB cluster. Everything in the console is green and I can see clients connecting.
Windows 7 clients can connect and with the DirectAccess connectivity assistant installed show as connected and I can access resources.
On a Windows 8.1 client I can access resource and run the troubleshooting tool which reports no errors, but if I look at connections it shows as connecting and the status never changes to connected. Clients work correctly when on the internal network.
I've looked at available hotfixes, but not found anything for when the status is incorrectly shown.
Any ideas before I raise a support call?
James Saunders

Hi,
You current information hardly determine which part may occur error, I found the similar symptom on the following third party article, may can give you some help.
The similar issue third party article:
Windows 8 DirectAccess client keeps saying "Connecting"
http://tfs.letsblog.it/post/2013/07/10/Windows-8-DirectAccess-client-keeps-saying-Connecting.aspx
More information:
The Network Connection Status Icon
http://blogs.technet.com/b/networking/archive/2012/12/20/the-network-connection-status-icon.aspx
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

What is the best practice to connect 2 sites and replicate ADDS between 2 different sites using windows server 2012 r2?

I found that there is new features remote access inside windows server 2012 r2 which is much more easier. Is there anybody can suggest me how to connect 2 different sites and it will be the tunnel to replicate ADDS (RW) between both sites.

See this
https://social.technet.microsoft.com/Forums/windowsserver/en-US/133e7780-6a59-4bd7-906b-70830bea48d0/sites-connections-best-practice?forum=winserverDS
Regards,
Biswajit
MCTS, MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, Enterprise Admin, ITIL F 2011
Blog:
Script Gallary:
LinkedIn:
Note: Disclaimer: This posting is provided & with no warranties or guarantees and confers no rights..

How to make directaccess windows server 2012 access the IPv4 link

HI all,
I have built a directaccess for win7 with IPv4 only intrant successfully,and it work's good.but here is a problem that I can't access the IPv4 link,for example I can access
http://www.test.com ,but I can't access the url http://192.168.13.13 .I have many links use IPv4 address,so I can't access these resources through directaccess,what should
I do to make it works.

Hi,
Direct Access is an IPv6 technology. Clients send only IPv6 packets to DirectAccess server. We need an IPv6/IPv4 translator here.
Choose Solutions for IPv4-only Intranet Resources
http://technet.microsoft.com/en-us/library/ee382298(v=ws.10).aspx
And in windows server 2012 we have built-in NAT64 and DNS64.
Windows Server 2012 Direct Access – Part 1 What’s New
http://blogs.technet.com/b/meamcs/archive/2012/05/03/windows-server-2012-direct-access-part-1-what-s-new.aspx
Hope this helps.

DirectAccess in Windows Server 2012 R2

DirectAccess related questions:
1. Does DirectAccess have API and scripting support for integration with BigIP for Loadbalancing.
2. Can DirectAccess be implemented as "Software as a Service" model where the same infrastructure can be used to give service to multiple customers? Can
DirectAccess solution can be delivered as a shared solution (Common implementation)?
3. Can DirectAccess Server be integrated with Active Directories of multiple customers?

Hi,
Direct Access is a remote connection technology introduced in windows 7 and windows server 2008r2. It is similar in concept to traditional VPN but has several advantages.
Direct Access rely on AD DS, but install Direct Access on DC is not recommended.
For your information:
How to Configure DirectAccess in Windows Server 2012 to Work with an External Hardware Load Balancer
http://blogs.technet.com/b/mspfe/archive/2013/01/24/how-to-configure-directaccess-in-windows-server-2012-to-work-with-an-external-hardware-load-balancer.aspx
Using DirectAccess
http://technet.microsoft.com/en-in/windows/dn168168.aspx
Hope this helps.

Multi-Hypervisior Manager support for Windows Server 2012 R2

Hi,
I am attempting to connect to a Windows Server 2012 R2 Hyper-V and am getting the following error message.
"Unable to Connect to host hyper01"
I have tested and can connect to a Windows Server 2012 without issue. Checking the documentation for support and whilst Windows Server 2012 is not supported I wanted to ensure I wasn't making an error.
If it is indeed not supported at this moment, is there a viable alternative?
Many Thanks
Tristan

Hi,
Windows 2012 R2 is not supported by MHM 1.x. Please take a look at http://www.vmware.com/pdf/vcenter-multi-hypervisor-manager-11-guide.pdf, page 9, "vCenter Multi-Hypervisor Manager Software Requirements" section.
For you convenience I'm pasting the list of supported third-party hypervisors:
Microsoft Hyper-V Server 2012
Microsoft Hyper-V for Windows Server 2012
Microsoft Hyper-V Server 2008 R2
Microsoft Hyper-V for Windows Server 2008 R2
Microsoft Hyper-V for Windows Server 2008
Regards,
-Ilko

Site to site VPN with windows server 2012

I am trying to connect our server to cisco site-to-site IPSec VPN with one of our partners servers, they asked us to implement the settings they gave us into our router, but actually we don't have access to the router, we are just connected directly with
our ISP. alternatively, we were informed that we can use software VPN instead, and yes we found a working one, tested and verified, but we have to pay for it to keep running.
Now my question is, having that we are running windows server 2012 R2, how can we establish this VPN connection directly from windows without the need to use third parties tools?
The only parameter that we have to connect are:
Gateway IP: xxx.xxx.xxx.xxx
Authentication Pre-shared Key: ######
Encryption: 3DES
Hash authentication: MD5
DH: Group1
No username or password is needed with this type of VPN.
Any help is appreciated.
Best regards, Abed

Hi,
You may try to configure the Windows Server 2012 (RRAS) as VPN router to connect to the 3rd party VPN server(compatible with Windows Server VPN).
Some samples just for your reference:
Checklist: Implementing a Site-to-Site Connection Design
https://technet.microsoft.com/en-us/library/ff687867(v=ws.10).aspx
TMG Configuring site-to-site VPN access
http://technet.microsoft.com/en-us/library/bb838949.aspx
More about how to deploy the RRAS on TMG please post in the TMG forum:
Forefront support forum
http://social.technet.microsoft.com/Forums/forefront/en-us/home?category=forefront
Best Regards,
Eve Wang
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Question on Quorum : Windows Server 2012 R2 + SQL 2014 AlwaysOn AG

OS on all nodes : Windows Server 2012 R2
SQL on all nodes : SQL Server 2014 CU2
2 cluster nodes in primary data center and AlwaysOn AG doing Sync Transfer between these nodes with auto failover.
2 cluster nodes in DR data center(Different subnet) and AlwaysON AG doing an Async Transfer between primary replica and these nodes with manual failover.
As this is a multi sub-net cluster we are giving DR nodes 0 vote. 2 nodes on primary DC has votes and a file share on the primary DC has a vote.
If the primary DC is gone,then should we re-assign node votes to the 2 nodes in DR site and again manually configure a file share witness and give it a vote?
Whats the best strategy here? Any recommendation is highly appreciated.
Thank you,

Anup,
Think if we have network issues between Primary DC and DR DC. DR node might think…Hey, I’m the only one running now. I can take all the resources. We do not want nodes in the secondary site to contribute to a decision to take the cluster offline
when there is nothing wrong with the primary site. Do you mean to say Dynamic Quorum is smart enough to handle this situation?
Is it smart enough on it's own? No. That's why someone has to determine which site they want to stay up.
If you're using dynamic quorum, a new property was introduced called "LowerQuorumPriorityNodeID" which is set at the cluster level. Give it the node of one and only one of the secondary site servers. Set a fileshare witness (if possible) as the
odd vote and make sure both sites can see it equally well. Set this property on the cluster for a node on the secondary site.
http://technet.microsoft.com/en-us/library/dn265972.aspx#BKMK_TieBreak
Assume that the fileshare goes down and you have 2 nodes at the local site and 2 nodes at the DR site. Suddenly, communicates between the two are severed. If you have dynamic quorum set and the property I mentioned above, the secondary site will shut down
and the local site will stay up as the secondary site is set for a lower precedence.
Please note, the only reason I brought this up was because you're on Windows Server 2012R2 as this is when it was first introduced.
-Sean
Sean Gallardy | Blog | Microsoft Certified Master

Just FYI, new Windows Server 2012 R2 RRAS Multitenant Gateway Deployment Guide

New! Windows Server 2012 R2 RRAS Multitenant Gateway Deployment Guide
This new guide is available on the Web at
http://technet.microsoft.com/en-us/library/dn641937.aspx. It is also available for download in Word format at TechNet Gallery at
http://gallery.technet.microsoft.com/Windows-Server-2012-R2-37eb8e17
If you work for a Cloud Service Provider (CSP) or an organization that's planning on deploying cloud technologies, you might be interested in the new Windows Server 2012 R2 RRAS Multitenant Gateway Deployment Guide.
You may already know that in Windows Server® 2012 R2, the Remote Access server role includes the Routing and Remote Access Service (RRAS) role service. (It also includes DirectAccess and Web Application Proxy, however those role services will not be discussed
in this article.)
The new deployment guide demonstrates how to use Windows PowerShell to deploy RRAS as a virtual machine (VM)-based multitenant software gateway and Border Gateway Protocol (BGP) router that allows CSPs and Enterprises to enable datacenter and cloud network
traffic routing between virtual and physical networks, including the Internet.
You can use the gateway with VM networks by using either Hyper-V Network Virtualization or Virtual Local Area Networks (VLANs) - but using Network Virtualization is recommended due to VLAN limitations such as difficult management and a limited number of
available VLAN IDs.
If you're using System Center Virtual Machine Manager (SC VMM), you can use SC VMM to deploy Windows Server Gateway; however even if you are using SC VMM, you can manage the gateway with the same Windows PowerShell commands that are used for the RRAS Multitenant
Gateway. (Some Windows Server Gateway features are configurable only with Windows PowerShell.)
For information on deploying Windows Server Gateway with SCVMM, see the Test Lab Guide: Windows Server 2012 R2 Hyper-V Network Virtualization with System Center 2012 R2 VMM, at
http://www.microsoft.com/download/details.aspx?id=39284
With the RRAS Multitenant Gateway, you can create site-to-site VPN connections between your tenants' physical locations and your cloud datacenter. You can also provide tenants with point-to-site VPN connections that allow tenant Administrators to access
and manage their VM resources from anywhere. The RRAS Multitenant Gateway also allows you to configure Network Address Translation (NAT), so that tenant VMs can access the Internet, and you can deploy dynamic routing by configuring the gateway and tenant gateways
with BGP.
Thanks -
James McIllece

Hi,
It is very useful , thanks for your sharing .
Best Regards
Elton Ji
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Hosting SharePoint 2013 and content separation (Windows Server 2012)

I have a windows 2012 server which hosts a ASP.NET 4.5 MVC website.
I am interested in installing SharePoint 2013 on the same standalone server (which is a virtual cloud server, and easily scalable). I would like to be able to create separate instances of sharepoint for each of my customers (around 10), and provide them
with a custom URL ie. customer.abc.com (where abc.com is my domain). These sites will be created programmatically when a user signs us to my site (they only require basic SharePoint functionality, i.e. the creation of team sites, notifications etc.)
So:
1) Can I install SharePoint 2013 at no extra cost on windows server 2012? (what are the limitations)
2) Is it possible to create separate instances of sharepoint 2013 (in terms of config and content DB's)
3) I'm sure there are many but what are some other considerations

1) With SharePoint Foundation, SharePoint itself does not cost anything, but you must purchase User CALs for employees of your company, and User CALs for non-employees or a Windows External Connector license.
2) No, you need to use multi-tenancy instead - http://www.harbar.net/articles/sp2010mt1.aspx
Note that you must have Active Directory in this environment and the Server 2012 VM you currently have must be joined to the Active Directory domain.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Windows Server 2012 - Direct Access clients and the Windows 8 firewall

Hi,
We're running a simple proof-of-concept for Server 2012 Direct Access, we have a single DA server behind a firewall using NAT. We have a number of client devices setup for DA and running Windows 8.
Our issue is that we can only get the Windows 8 direct access clients to connect (when outside the corporate network) and work with the windows firewall disabled (public network profile).
With the windows firewall disabled everything works exactly as expected. When outside the corporate network the client detects the network state (public network profile), connects via DA and all internal resources can be accessed successfully...fantastic.
Is there some specific guidance on manually configuring the windows 8 firewall for Direct Access ? We've tried the obvious TCP:443 with edge traversal enabled but without success.
Much of the information we have found relates to UAG rather than Windows 2012 DA.
Any assistance is appreciated.

Hi,
There isn’t any specific configuration on the firewall.
Just confirm that port 443 can be forwarded to DirectAccess server.
Of course, make sure you are using IPsec first.
Check the links:
STEP 6: Test DirectAccess Client Connectivity from Behind a NAT Device
http://technet.microsoft.com/en-us/library/hh831524.aspx#TeredoCLIENT1
DirectAccess for Windows Server 2012 Installation & Configuration Guide
http://syscomlab.blog.com/2012/09/directaccess-for-windows-server-2012-guide/
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

SharePoint Foundation 2013 installed on Windows Server 2012 not sending out email notification

I have a server where i installed SP Foundation 2013 on top of Windows Server 2012. I have configured the SMTP as well as the outgoing SMTP in Central Administration
of SharePoint. When i create an alert on a document library, its did not sent any email notification on the changes made to the document in the document library. So, i created a workflow to send out email using SPD2013. The workflow run, but it cannot sent
out email with error saying that outgoing email is not configured correctly. I have checked with another server which i installed SP foundation 2013 on top of Windows Server 2008 R2 - its sending out email just fine using same configuration and outgoing SMTP.
I need help to resolve this issue or at least the cause of the problem.
Any help is greatly appreciated.

Try below:
http://social.technet.microsoft.com/wiki/contents/articles/13771.troubleshooting-steps-for-sharepoint-alert-email-does-not-go-out.aspx
Go to Central Admin ---->Operations----->outgoing email settings and verify that SMTP server is mentioned correctly
2) Test the connectivity with the SMTP server.
In order to do that follow these steps:
Open cmd
telnet <SMTP server name> 25 ( We connect smtp server to the port 25)
you should see a response like this 220 <servername> Microsoft ESMTP MAIL Service, Version: 6.0.3790.3959 ready at date and time
Beware that different servers will come up with different settings but you will get something
If you dont get anything then there could be 2 possible reasons, either port 25 is blocked or
the smtp server is not responding.
For testing response from your server
For testing response say ehlo to it.
Type :
ehlo <servername>
output:
250 <servername> Hello [IP Address]
Now a test mail can be sent from that SharePoint server.
Now we need to enter the From address of the mail.
Type :
mail from: [email protected]
output:
250 2.1.0 [email protected]….Sender OK
It's time to enter the recepient email address.
Type : rcpt to: [email protected]
output:
250 2.1.5 [email protected]
Now we are left with the data of the email. i.e. subject and body.
Type : data
output:
354 Start mail input; end with <CRLF>.<CRLF>
Type:
subject: this is a test mail
Hi
This is test mail body
I am testing SMTP server.
Hit Enter, then . and then Enter.
output:
250 2.6.0 <<servername>C8wSA00000006@<servername>> Queued mail for delivery
Type: quit
output:
221 2.0.0 <servername> Service closing transmission channe
3) Check alerts are enabled for your web application
verify if the windows timer service is running or not.
Run this stsadm command to check that
Stsadm.exe -o getproperty -url http://SharePoint-web-App-URL -pn alerts-enabled
This should return <Property Exist="Yes" Value="yes" />
If you don’t get this, Enable alerts by:
stsadm.exe -o setproperty -pn alerts-enabled -pv "true" -url http://SharePoint-web-App-URL
If its already enabled, try turn off and turn on it back.
4) Check the Timer job and Properties
Go to
MOSS 2007: Central Administration > Operations > Timer Job Definitions (under Global Configuration)
In SharePoint 2010: Central Administration > Monitoring > Review Job Definitions
Check whether the "Immediate Alerts" job is enabled for your web application. check these properties:
job-immediate-alerts
job-daily-alerts
job-weekly-alerts
stsadm.exe -o getproperty -url "http://Your-SharePoint-web-App-URL" -pn job-immediate-alerts
The expected output is:
<Property Exist="Yes" Value="every 5 minutes between 0 and 59"/>.
If you don’t get this, run the following command to set its value.
stsadm.exe -o setproperty -pn job-immediate-alerts -pv “every 5 minutes between 0 and 59" -url http://Your-SharePoint-web-App-URL
5) Check whether the account is subscribed for alerts and it has a valid email account. This should be the first thing to check if the problem persists for some users not for all.
6) Then check if at all those users have at least read permission for the list. Because the first mail should go out for every user without security validation but the next ones won't be delivered unless the user has at least read
permission.
7) If it is happening for one user, can also try to delete and re add the user in the site.
8) Most importantly , you should try this one.
Run this SQL query to the content db < Select * from Timerlock>
This will give you the name of the server which is locking the content database and since when.
In order to get rid of that lock
Go to that server which is locking the content db and then restart the windows timer service.
within some time it should release the lock from content db, if not then at the most stop the timer job for some time
Once the lock will be released then try to send some alerts
You will surely get the email alert.
I found this is the most probable reason for alert not working most of the time. We should start troubleshooting with above steps before coming to this step for any alert email issue but from step 1 to step 7 are best for new environments or new servers.
If the issue is like this ,alert was working before and suddenly stopped working without any environmental change then above conditions in step 1-7 should be ideally fine.
Even after this if it is not working, then you can try these few more steps too
9) Try re-registering the alert template:
stsadm -o updatealerttemplates -url http://Your-SharePoint-Web-App-URL -f "c:\Program Files\Common Files\Microsoft Shared\web server extensions\12\TEMPLATE\XML\alerttemplates.xml" -LCID 1033
10) Try to clear the configuration cache
If this helped you resolve your issue, please mark it Answered

Windows Server 2012 R2 RDS + User profile Disks + App-V = Explorer.exe crashing all of the time

I have built a new RDS farm on Windows Server 2012 R2 with two Session Hosts and a combined Connect Broker/Web Access server. I had the farm up and running with User Profile Disks and all seemed OK. However, as soon as I installed the App-V 5.0 SP2 RDS
client on the session hosts, the explorer.exe process started crashing for any user logging in via the Web Access site. The process crashes and restarts every five to ten seconds. It's the same for administrators. If they log in via Web Access explorer.exe
crashes, but if they RDP directly to one of the session hosts explorer.exe is fine. If I reboot the session hosts, then the first user to log in via Web Access has a stable desktop session (and appears to have a new profile as well). However, if that user
logs out and back in again, explorer.exe starts crashing again. The only applications I have packaged at the moment are Office 2013 and Firefox.
I tried disabling User Profile Disks, but this caused a whole bunch of other problems and I eventually lost the ability to log in at all via Web Access (errors about the user profile service). As this is a small pre-production environment I completed scrapped
all of the servers and rebuilt from scratch. Again, everything appeared fine until I installed the App-V client, then explorer.exe started crashing repeatedly for all users.
Has anyone come across this issue before? I have tried installing the App-V 5.0 SP2 Hotfix Package 2, but this didn't help. I have read in a few forums that App-V doesn't work very well with User Profile Desks, but I have not heard of this particular issue.
Similarly, SP2 seems to have a lot of problems, so I am going to try removing App-V RDp Client SP2 and installing SP1. I ahev also deleted User Profile Disks for the test users to recreate their profiles, but this didn't help either.
Any other suggestions welcome!

I forgot to include the application event log entry for explorer.exe crashing:
Faulting application name: explorer.exe, version: 6.3.9600.17039, time stamp: 0x53156588
Faulting module name: KERNELBASE.dll, version: 6.3.9600.17055, time stamp: 0x532954fb
Exception code: 0xc06d007e
Fault offset: 0x0000000000005bf8
Faulting process id: 0xae8
Faulting application start time: 0x01cfab3a273787fd
Faulting application path: C:\Windows\explorer.exe
Faulting module path: C:\Windows\system32\KERNELBASE.dll
Report Id: 69210d77-172d-11e4-80c6-0050560102d1
Faulting package full name:

Windows Server 2012 Essentials (not R2) - all client computers offline

The server is Windows Server 2012 Essentials (not R2). I have had this problem ever since I first installed the Windows Server 2012 Essentials server in the summer of 2013 (before R2 was released). The Windows Server 2012 Essentials server shows offline
for all Devices under Dashboard. (Allow me to add that I just installed another site with Windows Server 2012 Essentials R2, and it was a breeze - all of the computers at the second install site are online.) I have one Windows 8.1 Pro client and the rest
are Windows 7 Pro clients. The problem occurs on ALL client computers.
I have removed computers from Devices in Dashboard on the server, rebooted the server, changed the client computer to a workgroup, rebooted the client computer, and reinstalled the connector software on the client computer. Same result. I
have tried this on a Windows 7 Pro client and a Windows 8.1 Pro client with the same results.
After running the connector on a client computer and waiting for the server to update its Devices status, if I look under Devices on the server Dashboard, the Windows 8.1 client computer will say online but within 24 hours it goes offline again. The
Windows 7 client computers never show online. Both computers stay offline - they NEVER show an online status (referring to the status under Devices in Dashboard).
I should make it clear that the clients can access the server shares with no problem. File synchronization works great. The clients can ping the server and the server can ping the clients. But client backups on the server fail.
One of the most troublesome things about this problem is that it prevents the client computers from being accessed remotely using the website setup by Anywhere Access. I can login to get remote access to the shared files on the server, but
the only computer that says "online" is the server. All of the other computers are "offline".
The server and clients are only using Windows firewall. The clients all use Microsoft Security Essentials for their anti-virus.
I used a troubleshooting tool that tells me that there are problems with port 6602 on the server, but the clients are all fine with port 6602. I know port 6602 is important for using Anywhere Access but I am still trying to find out more details on that.
I have checked all of the firewall settings related to port 6602 on the server, and the firewall settings look like the standard Windows settings for this port. I used netstat to find the PID associated with the port, and I looked up the PID to find the service.
That all looked standard, too.
I have been working on this problem since the summer of 2013!! Does anyone have ANY suggestions?!!
HELP!

Hi,
Just addition, please check if all necessary Windows updates are installed on those
“Offline” client computer.
When connect client computers to the Windows Server 2012 Essentials server by using the Connector software, there
will be LAUNCHPAD on the client computer. Was this LAUNCHPAD grayed out? Please check if can access Shared Folders via this LAUNCHPAD. Meanwhile, please ping the Windows Server 2012 Essentials via IP address and server name when client computers show as
Offline. Any find?
Get Connected in Windows Server Essentials
In addition, please follow the path on Server and client computer:
%programdata%\Microsoft\Windows Server\Logs. Did you check any relevant Server-side logs and
Client-side Logs if find more clues?
Windows
Server Essentials 2012/2012 R2 Log Files
If any update, please feel free to let us know.
Hope this helps.
Best regards,
Justin Gu
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

DirectAccess & Multi-Site (Windows Server 2012 R2)

Similar Messages

Maybe you are looking for