NAP on 2008 R2 with DirectAccess 2012 RC

I'm running IPsec NAP on two indentically configured Windows 2008 R2 servers that are also standalone CAs for NAP.
I'm in the testing phases of a Windows 2012 RC DirectAccess server that is behind a NAT. Certificates from our domain CA (not the standalone ones for NAP) are used so Win7 clients can also connect. When the computer establishes a DirectAccess connection
it's unable to connect to any resource that are part of NAP (only non-NAP resources, exceptions are available). napstat reveals that the client is healthly (it also has the health certificate).
Here's how the Connection Security Rules look on a client:
The first four were automatically generated by the DirectAccess server, the other four are for NAP purposes (before a DA test server was introduced).
It appears these settings don't coexist all that well. If I go to my DA server and click "Enforce corporate compliance for DirectAccess with NAP" I have even less connectivity (unable to reach DA server from clients in DA...).
What am I doing wrong, are additonal logs, information needed to better assist me.

Hi,
Thanks for your post.
You may check the following article to troubleshoot this issue. Hope it helps.
The Cable Guy: DirectAccess with Network Access Protection (NAP)
http://technet.microsoft.com/en-us/magazine/ff758668.aspx
DirectAccess with NAP Troubleshooting Guidance
http://technet.microsoft.com/en-US/library/ff621421(v=ws.10).aspx
DirectAccess with NAP Architecture Overview
http://technet.microsoft.com/en-us/library/ff528481(v=ws.10).aspx
Best Regards,
Aiden
Aiden Cao
TechNet Community Support

Similar Messages

WSUS 3.2 on Server 2008 R2 with SQL 2012 STD

Hi
I have a Windows 2008 Server R2 with SQL server 2012 STD on it, his is a VM(hyper v) and not connected to the internet machine.
I want to install the WSUS Role on it an it fails every time..
When installing the Role it fails with this error:
"he update could not be found. there may be a network connection issue."
I tried installing it using the installation .exe from Microsoft website
and also faild with this message:
"Windows server upate services 3.0 sp2 setup cannot continue. please resolve the following issues, and the run the setup again.Internet Information Services (IIS) or additional IIS role service
must be installed.
please refer to windows server update services 3.0 sp2 release notes for more information about prerequisites"
I must point that IIS IS INSTALLED and running on this server.
Does anyone knows how to solve this problem?
Thank you!!

I want to install the WSUS Role on it an it fails every time..
While not directly related to your situation, it's important to note that SQL2012 is
not a supported platform for WSUS v3.2. Be sure to install with the Windows Internal Database instead.
When installing the Role it fails with this error:
"The update could not be found. there may be a network connection issue."
The key here is in understanding HOW the WSUS role gets installed on a Server 2008 R2 system. The binaries used to install the role are NOT present on the OS image, they must be either downloaded from the Internet or obtained from another WSUS server with
the Dynamic Installer approved.
My guess would be that this system does not have Internet access. If you don't have another operational WSUS server, then this system will need to have Internet access to download the required binaries from MU, or else you'll need to download the standalone
installer and install it manually.
I tried installing it using the installation .exe from Microsoft website and also faild with this message:
"Windows server upate services 3.0 sp2 setup cannot continue. please resolve the following issues, and the run the setup again. Internet Information Services (IIS)
or additional IIS role service must be installed.
I must point that IIS IS INSTALLED and running on this server.
Ahhh.. was it previously installed for some other application. Have you *verified* that it is installed in a configuration that is compatible with WSUS?
HINT: WSUS is, fundamentally, an IIS6/ASP.NET v2 application. My first guess would be that your existing installation of IIS7.5 does not have the IIS6 components enabled.
Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
SolarWinds Head Geek
Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
http://www.solarwinds.com/gotmicrosoft
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

OTP 2FA Problems with DA 2012 R2 and Windows 8.1 Client - Not prompting or OTP Code

Hi
Just seeing if anyone has come across the same issue with their WIn 8.1 clients not prompting for 2FA once configured with DirectAccess 2012 R2?
I have created the 2x OTP certificates, enabled OTP via PowerShell and set up the RADIUS server but whatever happens the Win 8.1 client does not get prompted for 2FA - They connect seamlessly?
I have also configured the DAProbeUser on the RADIUS server
Any help appreciated
Thanks

I was afraid that you'll said that
I hate to be the annoying guy but take a look at this KB article:
http://support.microsoft.com/kb/2787534
Applied to: Windows 8\2012,
Doesn't Apply to: Windows 8.1\2012 R2
and - for a fact, doesn't include in Windows 8.1\2012 R2 as this bug still exists in those operating systems.
another annoying fact - No other update was released for these version yet.
this example approves that not every hotfix \ updates that was released for 8\2012 before 8.1\2012 R2, is already included in 8.1\2012 R2
and allow me to add another fact.
when you configure DirectAccess via the remote access wizard it creates a WMI query called
DirectAccess - Laptop Only WMI Filter.
after you create it in Windows Server 2012 R2 - look at the WMI Query and you'll see that by default it doesn't apply to version 6.3! the version for Windows 8.1.
if you want to add the support for Windows 8.1 you have to modify manually the query which is of course, not supported by Microsoft.
That is just another symptom that makes me wonder if Microsoft did ANY change or update to DirectAccess 2012 R2
Tamir Levy

Upgrade of Integation Services (Windows 2012 R2) on Windows 2008 R2 with Exchange 2013 SP1 DAG fails

Here is the scenario:
Legacy Host: Windows 2008 R2
Guest VM: Windows 2008 R2 with Exchange 2013 SP1 DAG cluster.
After importing the VM (2008 R2 and Exchange 2013 DAG) into a 2012 R2 host (Cluster). (copy VM files to new 2012 R2host) Everything works fine.
Then upgrading "Installation Services" (for Windows 2012 R2 host) on the imported VM runs fine with no errors to the "Restart" prompt. VM than shows: "Configuring Windows updates 32% complete. Do not turn
of your computer." Hangs there for about 20 minutes until is says "shutting down". Hangs there for 20 minutes until power off. Restart to normal start; "Preparing to configure Windows. Do not turnoff your computer." proceeds slowly
to "Configuring Windows updates 32% complete. Do not turn of your computer." hangs there again indefinite. Sometime hangs at shutdown cycle and "Configuring Windows updates 32% complete. Do not turn of your computer." indefinitely.
I moved 20 other machines from a 2008 R2 host to new Windows 2012 R2 hosts all of these machines install the 2012 R2 Integration services just fine on the 2008 R2 VM. Just the 2008 R2 VMs clustered (DAG) and Exchange 2013 SP1 do not take the Integration
Services upgrade.
Any advise from Microsoft? I know I could decommission the DAG and Exchange machines and install Integration services on the native box before Exchange and DAG and that would sure work, but I'd rather avoid that amount of work for a simple integration layer
upgrade.
Thanks
Gerhard Waterkamp ACSLA Inc.

Hi,
Could you try use the following method to fix this issue first?
1. Run the System Update Readiness Tool, then check if there is any error in the Checksur.log and checksur.persist.log.
1. Please run the System Update Readiness Tool on this affected server. Please download this tool from the following Microsoft article:
Description of the System Update Readiness Tool for Windows Vista, for Windows Server 2008, and for Windows 7
http://support.microsoft.com/kb/947821/en-us
2. The System Update Readiness Tool creates the log files that captures any issues that the tool found or fixed. The log files are located at the following location:
%SYSTEMROOT%\Logs\CBS\
3. Please paste the checksur.log here for analysis.
If there is no error found, please try the following step.
==================================
2. Use Fix it tool to reset the Windows Update components.
1. Open the following link.
http://support.microsoft.com/kb/971058/en-nz
2. Select Windows 8.1, Windows 8 and Windows 7 in the product selection box.
3. Click “Run Now” to reset the Windows Update components.
Note: We can reset the Windows Updates manually by following the steps in the KB above.
3. Use the System File Checker tool to repair missing or corrupted system files
1. Open the command promote with Administrators.
2. At the command prompt, type the following command, and then press ENTER:
sfc /scannow
Any errors are found in the steps above, please let me know.
Hope this helpful.
Best Regards,
Jason Zeng
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

[Forum FAQ]How to upgrade Windows Server 2008 R2 with a GUI to Windows Server 2012 Server Core

We found that some customers willing to upgrade Windows Server 2008 R2 GUI to Windows Server 2012 Server Core recently. This article provides detailed steps to perform the upgrade.
Analysis
Upgrading from Windows Server 2008 R2 with a GUI installation to Windows Server 2012 with Server Core directly
is not supported. If you do that, you will receive the error message below(Figure 1) in Compatibility report:
Figure 1.
In these scenario, you can upgrade to Windows Server 2012 firstly. After the upgrade process is completed, you can switch freely between Server Core and Server with a GUI modes.
Produces
You can follow the steps below to perform an upgrade from Windows Server 2008 R2 with a GUI installation to Windows Server 2012 Server Core mode:
1. Upgrade to Windows Server 2012 with a GUI mode
1) Firstly, please boot into Windows Server 2008 R2 with a Windows Server 2012 installation DVD inserted.
2) Select the operating system you want to install with a GUI mode.
We can see 2 options (Server Core Installation or Server with a GUI) for each operating system version. (Figure 2)
Figure 2.
Note: Please make sure you have enough disk space on system partition. Or you will get such an error in Compatibility report.(Figure 3)
Figure 3.
After the Compatibility check, the installation will continue. It will take several minutes until upgrading is done.(Figure 4)
Figure 4.
2. Switch the GUI mode to Server Core
Method 1: Using Server Manager
1) Open Server Manager, click
Manger and select “Remove Roles and Features” to start the
Remove Roles and Features Wizard.
2) In Features,
uncheck the box next to the “User Interfaces and Infrastructure” option, and then click “Next”. (Figure 5)
Figure 5.
Now tick the “Restart the destination Server automatically if required” box, then click “Remove”. (Figure 6)
Figure 6.
Method 2: Using Windows PowerShell
There are multiple ways to remove the GUI via Windows PowerShell, we introduce the way of using the ServerManager module.
You can also run the commands in Windows PowerShell with an administrator to remove the GUI feature:
“Import-Module ServerManager”
“Uninstall-Windowsfeature Server-Gui-Shell –Restart”
or
“Uninstall-WindowsFeature Server-Gui-Shell, Server-Gui-Mgmt-Infra –Restart”
It will take a period of time to remove the GUI feature and reboot. When the system boots up, you will get into the Windows Server 2012 with Server Core mode. (Figure 7)
Figure 7.
More information:
Switch between Full and Server Core in Windows Server 2012 using PowerShell 3.0
http://blogs.technet.com/b/puneetvig/archive/2012/10/16/switch-between-full-and-core-in-windows-server-2012-using-powershell-3-0.aspx
Windows Server Installation and Upgrade
http://technet.microsoft.com/en-us/windowsserver/dn527667.aspx
Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

Hi,
Brian is right, for mange the Server 2008r2 sp1 we recommend use the Windows 7 or 7.1 platform.
More information:
Remote Server Administration Tools for Windows 7 with Service Pack 1 (SP1)
http://www.microsoft.com/en-us/download/details.aspx?id=7887
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Can't remote connect to Integration Services 2008 r2 with 2012 Management Studio

I am getting a Connect to Server error "Class not registered" followed by the trying to connect to 2005 information. It is not a named instance. I don't get the error when connecting with Management Studio 2008. Any ideas. Everything else is
all set up properly..

Can you try this workaround and see if it works?
http://www.ssistalk.com/2012/03/21/connecting-to-a-pre-sql-2012-ssis-instance-with-sql-2012-ssms/
Please Mark This As Answer if it helps to solve the issue Visakh ---------------------------- http://visakhm.blogspot.com/ https://www.facebook.com/VmBlogs

Migrate SQL 2008 Analysis database to 2012 AS database along with data level security defined in current production cube

I want to migrate Analysis Services 2008 database to 2012 AS database along with data level security defined in current production cube
Note: Only Production environment have security, while no security is defined in development environment
Potential Approach:
1 - Using Synchronization Wizard: Gives me error : "The OLAP element at line1 can not appear under envelope......" and this is because Synchrinzation works only for same version
and in my case, there are different versions of SQL (SQL 2008 and 2012)
2 - Using Visual studio conversion wizard - Convert SQL 2008 AS project to 2012 and then process cube, so I can get the cube working but then how can I get data level security since 100's of data level security is defined in production Cube, so how can I
migrate that across
3 - Script out XMLA and deploy cube - But then again having issues with how can i script SSAS security
4 - Would taking backup of SSAS 2008 database and restore to SSAS 2012 will help ?
Any suggestions would be appreciated
Thanks,
Mihir

Hi Mihir,
According to your description, you want to migrate the SQL Server Analysis Services (SSAS) 2008 database which have some security setting with it to SSAS 2012, right? We can migrate existing Analysis Services databases either during Setup, by upgrading an
existing instance of Analysis Services, or after Setup, by running the Migration Wizard. Generally, when migrating a database to another server, all the setting will be migrated. So in your scenario, you can refer to the steps on the links below to migrate
your SSAS database.
How to: Migrate Analysis Services Databases
Migrating Existing Analysis Services Databases
Regards,
Charlie Liao
TechNet Community Support

Sql 2008 r2 cluster side by side with sql 2012 cluster on Windows 2008 R2

We have a SQL 2008R2 active/passive SQL cluster running on Windows 2008 R2 cluster.
I would like to add a SQL 2012 clustered instance to the same Winows 2008 R2 cluster.
Are there any issues involved having a SQL 2008 R2 clustered instance running side by side with a SQL 2012 instance in same Windows 2008 R2 cluster?
Are there any pitfalls/"gotchas" to watch for with SQL 2012 cluster install?
Thank you so much!

Hello,
Two instances, one SQL Server 2008 and the other SQL Server 2012, side-by-side, is fully supported.
I would like to recommend you to assign a different port (not port 1433) to the non-default instance
to avoid an IP address conflict between both instances.
Hope this helps.
Regards,
Alberto Morillo
SQLCoffee.com

How to Upgrade Service Manager 2012 SP1 with Windows 2008 R2 to SCSM 2012 R2 with Windows 2012 R2

Hi,
We are using Service Manager 2012 SP1 UR2 with Windows 2008 R2.
I am planning to upgrade Service Manager to R2 with Windows 2012 R2. I found the steps to upgrade SCSM 2012 Sp1 to R2 but need assistance to upgrade with 2012 R2 OS.
Please suggest how to achieve the above mentioned objective.
Regards, Syed Fahad Ali

Virtualization solves this problem handily, by allowing you to create a new server to run the new program on the same hardware. it also solves the related problem of moving off unsupported hardware without changing OS or application. VMware is my personal
favorite, but Hyper-V, Xen, and VirtualBox all have similar capabilities.
Compare the cost of work and confidence in success of a upgrade, where any of thousands or millions of uncontrolled settings could cause an issue, to the cost of work and confidence in success of installing a new OS instance and configuring a known state
for the new environment.
In short, upgrades should no longer be a thing. there are just too many ways they can go wrong, and it's far too easy to create a new OS with minimal expense and effort.

Upgrade from 2012 to 2012 R2 with DirectAccess

I have read a few posts here and there about doing an in-place upgrade of 2012 to 2012 R2 with DirectAccess. I'm wondering what people in the forum have to say about doing an in-place upgrade. I realize that there are no new features but I would
like to make sure most of our servers are 2012 R2 instead of 2012 since it is much friendlier.
What I was hoping to do was just mount the 2012 R2 ISO and run setup. I have done this with AD and it worked in my home lab but I have not tried DA hence me asking.
Thank you,
Kent

I have read a few posts here and there about doing an in-place upgrade of 2012 to 2012 R2 with DirectAccess. I'm wondering what people in the forum have to say about doing an in-place upgrade. I realize that there are no new features but I would
like to make sure most of our servers are 2012 R2 instead of 2012 since it is much friendlier.
What I was hoping to do was just mount the 2012 R2 ISO and run setup. I have done this with AD and it worked in my home lab but I have not tried DA hence me asking.
Thank you,
Kent

Security/Firewall recommendations for DirectAccess 2012 (Dual-NIC Edge Configuration)

Hello all,
We have installed and configured DirectAccess 2012 with the Edge Configuration with the thought that we would be able to install TMG directly on this server (as we did with the original 2008 DirectAccess/UAG). It appears that we cannot install TMG on Server
2012 R2, so now we have a server directly connected to the outside world with public IP's assigned to it and no firewall other than Windows Firewall. I know that most organizations choose to configure DirectAccess behind an Edge device (hindsight being perfect,
we should have as well) however we did not and it appears that we can't easily change this without completely reconfiguring DirectAccess (which took several days to get it right).
So my question: What are the security/firewall recommendations for a DirectAccess server in an Edge scenario? I've Googled this and have not found much. Thanks in advance,
Brad
-Brad

Its always good to have a Firewall infront of a domain joined machine and of course DA Server is not an exception.
Server 2012 can work behind a Firewall with NAT functionality enabled or disabled.
if you have a fully functional DA with EDGE profile enabled, still you can configue any firewall(without NATing functionality) without changing the configuration settings in DA.
Also you can have TMG protecting your existing DA setup. Below is the link for it.
http://www.isaserver.org/articles-tutorials/general/implementing-windows-server-2012-directaccess-behind-forefront-tmg-part1.html
Please let me know, how it goes.

How can I Create a Client Configuration File for RemoteApp and Desktop Connection with Server 2012?

I have a working RDS RemoteApp site and looking to test out the feature in Windows 7 Control Panel\All Control Panel Items\RemoteApp and Desktop Connections
I came across this link: Create a Client Configuration File for RemoteApp and Desktop Connection and I believe this is what I need to do first, but these instructions are for
Server 2008, and I'm running 2012.
Any suggestions or tips on how I can begin testing this with Server 2012?

Hi,
You can manually enter the path to the 2012 feed and it will connect and download the RemoteApps and Desktop connections.
If you need a sample .wcx file I have posted one here a couple of times. If you want I will look for it and post a link.
-TP
I tried adding my URL's below, these are sample links that work for me right now for when I log into the web page, but neither of these work. And I'm not sure what I would need to do with or how to create a .wcx file.
When I type in my URL of: https://connect.mydomain.org/RDWeb, I get redirected to:
https://connect.mydomain.org/RDWeb/Pages/en-US/login.aspx?ReturnUrl=/RDWeb/Pages/en-US/Default.aspx

Ssrs 2008 r2 or ssrs 2012 place moving graphics in report while it is executing

In a new ssrs 2008 r2 or ssrs 2012 report application, I want to add some graphics to
the report(s). I know that you can embedded a graphic in the ssrs report. However I would like to be able to do one or more of the items I am listing below:
1. In one or two spots, I would like to have the pictures change. The picture would display for 5 to 60 seconds and then a new graphic would show up.
2. I would like the possibility of one graphic being displayed while the entire ssrs report is executing. The next time the report is executing, a new graphic would be displayed.
3. I would like a 'slideshow' of graphics being displayed. The slideshow would be dsiplayed in in the same sequence.
4. I would like to obtain the graphics from an open show (free) location for a non profit public school system.
Thus can you tell me if any of the options I listed above are possibly? If so, can you tell me what option I can embed in a report and how to accomplish the goal in the ssrs report?
Also if you have any other ideas about graphics in the report, can you tell me what thse option(s) are and how would I accomplish this goal?

Hi wendy,
In Reporting Services, if we want to only display one graphic in some time, and display other graphics in other times in a report. So that the all graphics are alternatively displayed in the report. In this scenario, we can set the AutoRefresh property of
the report to x number of seconds for the changes to occur, then set the visibility property of graphics based on AutoRefresh length we have set. For more details, please see the steps below:
Set the AutoRefresh property of the report to 15 seconds (supposing there are 4 graphics in the report (60/4=15)).
Insert all graphics in the report.
Use the following expressions to control the visibility of graphics.
Graphic 1:=IIf(Second(Now()) < 15, False, True) the first graphic will show if the AutoRefresh occurred during the first 15 second block of the current minute, all other times during that minute it will be hidden.
Graphic 2:=IIf(Second(Now()) >= 15 AND Second(Now()) < 30, False, True) the second graphic will show if the AutoRefresh occurred during the second 15 second block of the current minute, all other times during that minute it will
be hidden.
Graphic 3:=IIf(Second(Now()) >= 30 AND Second(Now()) < 45, False, True) the third graphic will will show if the AutoRefresh occurred during the third 15 second block of the current minute, all other times during that minute it will
be hidden.
Graphic 4:=IIf(Second(Now()) >= 45, False, True) the fourth graphic will show if the AutoRefresh occurred during the fourth 15 second block of the current minute, all other times during that minute it will be hidden.
Besides, we cannot display the image with dynamic form by using External Image Option, it will be replaced with static form. So if we want to show slideshow in the report, we can also refer to the following thread:
http://social.msdn.microsoft.com/Forums/sqlserver/en-US/62b0317b-1458-4d91-9fdd-00c4bbe791f7/ssrs-report-slideshow-on-autorefrsh?forum=sqlreportingservices
Hope this helps.
Thanks,
Katherine Xiong
If you have any feedback on our support, please click
here.
Katherine Xiong
TechNet Community Support

Error while deploying Windows 2008 R2 using SCCM 2012 R2

I am trying to deploy Window 2008 R2 image (captured from a reference machine) using SCCM 2012 R2. I have integrated MDT 2013 with SCCM 2012 R2 and created an MDT task sequence. During deployment, towards the end of Applying image.wim, it gives me
an error that task sequence failed with the error code 0x80070002. And then the system reboots. After reboot, I am able to login to the Windows Server. It seems to work fine, but there are no applications etc installed. Also the _SMSTS log folder is still
present in the C drive. And in the smsts.log file, i can see errors like failed to copy unattend.xml file. Please help me.

Hi,
Error code 0x80070002, it means the system cannot find file specified.
For more information, please review the link below:
Task Sequence Failed with the Error Code 0x80070002
http://prajwaldesai.com/task-sequence-failed-error-code-0x80070002/
Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

I am running OSX 10.5.8 on a 2008 Imac with Intel Core 2 duo am I compatible with OSX 10.6 snow leopard, much less Lion and Mountain Lion?

I want to link all my apple products so I can use icloud with ease but I am running OSX 10.5.8 on a 2008 imac with intel core 2 duo and not sure it's going to be beneficial or compatible. Is my desktop really just an external hard drive alreadt in 5 years? I just purchased a mac book pro 2012 and also have a 3Gs iphone I just want to have a happy apple family ; )

Your computer is compatible with all of those OSes, but may need more RAM to run 10.7 or 10.8. As the RAM requirement is the same for both 10.7 and 10.8, don't bother with 10.7 unless you're using software incompatible with 10.8.
(71851)

NAP on 2008 R2 with DirectAccess 2012 RC

Similar Messages

Maybe you are looking for