Server 2012 R2 DirectAccess - 2008 R2 Client

I have things working for Server 2012 R2 Direct Access and Windows 8.1 Enterprise machines. Now moving on to Server 2008 R2 as a client, the environment is not working.
I just tried turning on Windows 7 support and applying but still no luck.  I am not seeing much on this, so I suspect it usually just works for Server 2008 R2?
Mike

So I forged ahead with an actual fresh Windows 7 machine, all service packed up, instead of the existing 2008 R2 machine that we need to keep for sometime.
I've installed the DCA 2.0, made the Group Policy edits on the domain.  The Windows 7 machine has received the updates and DCA appears happy when on the private network.
However when the Windows 7 machine is switched over to the public network, no connection.  Not really much of a hint as to what the problem is.
RED: Corporate connectivity is not working.
"Your computer cannot connect to the DirectAccess server. If the problem persists, contact your administrator.
The Probes FAIL, DTEs FAIL.
The 2012 R2 DirectAccess server has no knowledge of the failed connection attempts.
This is quite the challenge... 
Mike

Similar Messages

  • The MS15-10 Security Update for Windows Server 2012/R2 Essentials and the Client Restore Functionality

    The MS15-10 Security Update for Windows Server 2012/R2 Essentials and the Client Restore Functionality - The Windows Server Essentials and Small Business Server Blog - Site Home - TechNet Blogs:
    http://blogs.technet.com/b/sbs/archive/2015/03/13/the-ms15-10-security-update-for-windows-server-2012-r2-essentials-and-the-client-restore-functionality.aspx
    FYI

    Hi Susan.  I hope there's a better 'fix' coming to replace this "uninstall the updates, restore, then reinstall the updates after the restore".  This kind of workaround requires that all of us remember that there's a problem
    with KB3023562 and KB3004375 from now until the end of WS2012E.  Not sure I'll remember this 6 months from now when the problem crops up during a restore.   -:(
     Merv Porter
    =========================

  • New server 2012 - some NT4 /98/W2K clients

    Hi,
    Have a bit of a challenge here.... I have a scenario were we are running a full 2003 AD with 2003R2 DC and a couple of virtual servers...
    Time has come to move forward and upgrade to 2012 seems like the only option using Hyper-V. The particular scenario has a big challenge: more than 50 machines with legacy machines running from NT4, Windows 98, Windows 2000 pro...
    Getting rid of these machines is just not an option. They will have to dump data to shared folders with lots of security permissions configured.
    Will NT4 be able to authenticate to 2012 DC (I would be very surprised)? If not,
    Should I create  a new domain and leave the machines authenticating on the old domain.
    Would a trust work 2003 <--> 2012?
    If a trust works, What would be the minimum AD level on the 2012 server?
    The challenge is really to have a modern infrastructure running Hyper-V for the more modern clients, but, at the same time, to keep those really old machines running...
    Thanks for sharing your ideas on this!

    Hi
    This is tricky, for sure you will not have definite answer, and for sure you will encounter some problems, i know this from same case but with server 2008 dc, i recommend that you set up lab and test it thoroughly.
    Getting rid of these machines is just not an option? 
    Why, maybe this is the easiest and best way to go. Probably someone should have done it long ago
    Yes you can create  a new domain and leave the machines authenticating on the old domain, but that i think will just prolong inevitable, saying bye to the old os's.
    Yes you can create trust between server 2003 domain and server 2012 domain
    http://technet.microsoft.com/en-us/library/cc738955(v=ws.10).aspx
    Windows Server 2012 requires a Windows Server 2003 forest functional level
    http://technet.microsoft.com/en-us/library/cc771294.aspx
    And at last you can't have modern infrastructure and at the same time have those really old machines running... :)

  • Windows Server 2012 Essentials (not R2) - all client computers offline

    The server is Windows Server 2012 Essentials (not R2). I have had this problem ever since I first installed the Windows Server 2012 Essentials server in the summer of 2013 (before R2 was released). The Windows Server 2012 Essentials server shows offline
    for all Devices under Dashboard. (Allow me to add that I just installed another site with Windows Server 2012 Essentials R2, and it was a breeze - all of the computers at the second install site are online.) I have one Windows 8.1 Pro client and the rest
    are Windows 7 Pro clients. The problem occurs on ALL client computers.
    I have removed computers from Devices in Dashboard on the server, rebooted the server, changed the client computer to a workgroup, rebooted the client computer, and reinstalled the connector software on the client computer. Same result. I
    have tried this on a Windows 7 Pro client and a Windows 8.1 Pro client with the same results.
    After running the connector on a client computer and waiting for the server to update its Devices status, if I look under Devices on the server Dashboard, the Windows 8.1 client computer will say online but within 24 hours it goes offline again. The
    Windows 7 client computers never show online. Both computers stay offline - they NEVER show an online status (referring to the status under Devices in Dashboard).
    I should make it clear that the clients can access the server shares with no problem. File synchronization works great. The clients can ping the server and the server can ping the clients. But client backups on the server fail.
    One of the most troublesome things about this problem is that it prevents the client computers from being accessed remotely using the website setup by Anywhere Access. I can login to get remote access to the shared files on the server, but
    the only computer that says "online" is the server. All of the other computers are "offline".
    The server and clients are only using Windows firewall. The clients all use Microsoft Security Essentials for their anti-virus.
    I used a troubleshooting tool that tells me that there are problems with port 6602 on the server, but the clients are all fine with port 6602. I know port 6602 is important for using Anywhere Access but I am still trying to find out more details on that.
    I have checked all of the firewall settings related to port 6602 on the server, and the firewall settings look like the standard Windows settings for this port. I used netstat to find the PID associated with the port, and I looked up the PID to find the service.
    That all looked standard, too.
    I have been working on this problem since the summer of 2013!! Does anyone have ANY suggestions?!!
    HELP!

    Hi,
    Just addition, please check if all necessary Windows updates are installed on those
    “Offline” client computer.
    When connect client computers to the Windows Server 2012 Essentials server by using the Connector software, there
    will be LAUNCHPAD on the client computer. Was this LAUNCHPAD grayed out? Please check if can access Shared Folders via this LAUNCHPAD. Meanwhile, please ping the Windows Server 2012 Essentials via IP address and server name when client computers show as
    Offline. Any find?
    Get Connected in Windows Server Essentials
    In addition, please follow the path on Server and client computer:
    %programdata%\Microsoft\Windows Server\Logs. Did you check any relevant Server-side logs and
    Client-side Logs if find more clues?
    Windows
    Server Essentials 2012/2012 R2 Log Files
    If any update, please feel free to let us know.
    Hope this helps.
    Best regards,
    Justin Gu
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Migrating Certificate Services to Server 2012 in a 2008 R2 AD Domain

    We have a Windows 2008 R2 SP1 Active Directory domain. Our Enterprise Certificate server is running on Windows 2003 R2. We'd like to introduce a Windows 2012 server into our existing domain and migrate the Certificate Services to that new box. Are there
    any 'gotchas' to implementing Certificate Cervices on a Windows Server 2012 system in a Windows 2008 R2 SP1 domain that we should be concerned with?
    Orange County District Attorney

    Hi,
    You can migrate Certificate Services to another server but server name should be same. Also changing the server name which has CA role installed is not recommended.
    AD CS Migration: Preparing to Migrate
    Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012
    http://technet.microsoft.com/en-us/library/ee126102(v=ws.10).aspx
    Also I would request to post this question in security forum :
    http://social.technet.microsoft.com/Forums/en-US/winserversecurity/threads
    Also you consider, Windows Server 2012 General forum :
    http://social.technet.microsoft.com/Forums/en-US/winserver8gen/thread
    Best regards,
    Abhijit Waikar.
    MCSA | MCSA:Messaging | MCITP:SA | MCC:2012
    Blog: http://abhijitw.wordpress.com
    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees and confers no rights.

  • Push Data From Sql server 2012 (Express) to Sql Server 2012 (Standard) (i.e. Client to Server)

    Hi all,
    I’m new to this new idea /task/work.
    My Idea: To push data to server (Sql Server 2012 Standard or Enterprise Edition).
    What I’m having? :
    1.A server pc (Windows  Server 2012 + Sql Server 2012 Standard or Enterprise Edition installed).
    2.Two or three Client pc in number (lets us say Windows Server 2012 + Sql Server 2012 with Express Edition installed).
    3.These 3  machines (1 server + 2 client pc) are in communication with one and another(LAN).
    4.Assume that, I'm having one database let us say “Company_DB” with single table “Tbl_Employee”(as of now) in server and similarly in both reaming client PC too.
    i.e.
    Server is having Company_DB (Database), is having table Tbl_Employee
    Client A is having Company_DB (Database) , is having table
    Tbl_Employee
    Client B is having  Company_DB (Database) , is having table
    Tbl_Employee
    What I did ?:
    Step 1: Suppose that, today I entered/created  10 employee details in Client A (say 1 to 10).
    Step 2: On the next day, I created some more employees (say 5 employees i.e 1 to 5)
     in Client B.
    What I need?
    I need to push/send/store these records (i.e. total 15 employees details) should be present in my SERVER PC.
    I googled for the same, found some suggestions like SSIS or
    Import/Export wizard etc…
    How can I achieve this?, and this should happen for some regular intervals like 3/5 hours without any duplicate data.

    sounds like Merge replication to me
    http://www.databasejournal.com/features/mssql/article.php/1438231/Setting-Up-Merge-Replication-A-Step-by-step-Guide.htm
    Please Mark This As Answer if it helps to solve the issue Visakh ---------------------------- http://visakhm.blogspot.com/ https://www.facebook.com/VmBlogs

  • DirectAccess on Server 2012 R2 with Single NIC behind NAT on IPv4 only Corporate Network Results in "DNS Not Working Properly"

    I hit this problem at a customer site and can re-produce it in a simple lab.  Lab environment: servers:
    1x Server 2012 R2 DC and DNS server - DC1 - 10.0.0.1
    1x Server 2012 R2 DirectAccess (DA) server - DA1 - 10.0.0.100
    Servers are running "Update" (KB2919355) and following DA hotfixes:
    KB2929930
    KB2966087
    I configured DA (via advanced wizard) as follows:
    DA and remote access
    AD group
    directaccess-webprobehost DNA (A) record pointing to 10.0.0.100
    behind an edge device (with a single network adapter)
    SSL certificate from enterprise root CA issued to directaccess.contoso.com
    NLS on remote server using https://nls.corp.contoso.com
    DNS: corp.contoso.com = 10.0.0.1; nls.corp.contoso.com = ""
    DNS suffix search list = corp.contoso.com
    The DNS server validates successfully in the configuration UI.
    With this configuration, I get a static IPv6 address of fd79:7a37:cbd9:3333::1/128 assigned to the NIC
    The operations status is all green apart from DNS which displays the following error:
    "DNS: Not Working Properly"
    Error:
    None of the enterprise DNS servers fd79:7a37:cbd9:7777::a00:1 used by DirectAccess clients for name resolution are responding. This might affect DirectAccess client connectivity to corporate resources.
    Causes:
    Enterprise DNS servers fd79:7a37:cbd9:7777::a00:1 are not responding.
    I can, however ping fd79:7a37:cbd9:7777::a00:1 (which is the DNS64 translation of 10.0.0.1)
    I would like to know what checks are failing as there are no failures in Event Viewer.
    I have come across forums where people have the same issue and fix it by specifying the local IP (in this case 10.0.0.100) as the DNS server, however Richard Hicks has confirmed with me that the DNS server should be set to the DNS server, not the DA server's
    IP.

    Thanks for the post Matt,
    ISATAP has been disabled on my DA server, so the results of a "ROUTE PRINT -6" command yields:
    ===========================================================================
    Interface List
     12...00 15 5d 01 03 64 ......Microsoft Hyper-V Network Adapter
      1...........................Software Loopback Interface 1
     14...00 00 00 00 00 00 00 e0 IPHTTPSInterface
    ===========================================================================
    IPv6 Route Table
    ===========================================================================
    Active Routes:
     If Metric Network Destination                           Gateway
      1    306 ::1/128                                               On-link
     12    261 fd79:7a37:cbd9::/48                         On-link
     14    306 fd79:7a37:cbd9:1000::/64                On-link
     14    306 fd79:7a37:cbd9:1000::/128              On-link
     14    306 fd79:7a37:cbd9:1000::1/128            On-link
     14    306 fd79:7a37:cbd9:1000::2/128            On-link
     14    306 fd79:7a37:cbd9:1000:814c:28be:46b5:52c1/128     On-link
     12    261 fd79:7a37:cbd9:3333::1/128            On-link
     12    261 fd79:7a37:cbd9:7777::/96                On-link
     12    261 fe80::/64                                           On-link
     14    306 fe80::/64                                           On-link
     12    261 fe80::20c0:e848:d304:9f01/128       On-link
     14    306 fe80::814c:28be:46b5:52c1/128      On-link
      1    306 ff00::/8                                               On-link
     12    261 ff00::/8                                              On-link
     14    306 ff00::/8                                             On-link
    ===========================================================================
    Persistent Routes:
     If Metric Network Destination                            Gateway
      0 4294967295 fd79:7a37:cbd9:1000::/64       On-link
      0 4294967295 fd79:7a37:cbd9::/48                On-link
      0 4294967295 fd79:7a37:cbd9:7777::/96       On-link
    ===========================================================================

  • 2012 R2 DirectAccess with very low client throughput

    I have a three-node Windows NLB Server 2012 R2 DirectAccess farm.  These three single purpose servers have good specs (8 cores, 32GB RAM, etc etc).  The problem that I am seeing is that the clients all have very low throughput on each session (between
    6 and 8 MBit "aka 1 MByte" per second).  This performance spec is linear since for each concurrent client that you add their throughput is also in that range.  Clients are all high-spec notebooks with Windows 8.1 Enterprise x64.  Performance
    on these clients is excellent except when transiting the DirectAccess server.  If the same client connects through AnyConnect VPN their throughput is excellent.  Additionally, when clients connect to the DA server plugged into the external traffic
    switch (aka same network as the DA external interface) the performance is identical so this isn't a WAN performance issue.  The utilization on all devices (DA servers, DA clients, network hardware) is very low so it does not appear to be a resource problem. 
    I confirmed that NULL CIPHER is used on clients so the traffic isn't being double encrypted.  This NLB started life 2 years ago as a Windows Server 2012 environment on different hardware and I've had the exact same issue.  It works "ok"
    but not the throughput that the capacity planning documentation indicates.
    Any ideas?
    Thanks,
    Mark Ringo

    Hi Mark,
    Which transition technologies does the client use to connect the DirectAccess Server?
    Using IP-HTTPS for DirectAccess connectivity has higher overhead and lower performance than Teredo. If the DirectAccess client is using IP-HTTPS instead of Teredo, the DirectAccess client will have a lower performance connection.
    When examining performance issues, one of the first places to look is the display of the
    ipconfig command on the DirectAccess server, which indicates the type of encapsulation based on the interface that has a global IPv6 address assigned.
    For detailed information, please refer to the link below,
    DirectAccess Client Connection is Slow
    http://technet.microsoft.com/en-us/library/ee844161(v=WS.10).aspx
    Best Regards.
    Steven Lee
    TechNet Community Support

  • Server 2012 Group Policy Templates installed on Server 2008 R2

    Setup: 2 x Domain Controllers running Server 2K8 R2 SP1
    We are currently running our environment with IE9 and want to upgrade to IE11. However 2K8 R2 group policy doesnt support IE11 unless you upgrade your DC's to this version of IE. We are not going to deploy IE11 all at once but instead as we reimage or replace
    PC's. 
    My question is can install http://www.microsoft.com/en-us/download/details.aspx?id=36991 Server 2012 templates on 2008 R2 and have the ability to apply GP objects to both versions of the browser? Will it's possibly make some of the current GP's ineffective
    by erasing some settings?
    Maybe there is a better was for me to do this? Any help on this would be appreciated! Thanks in advance. 
    I will monitor this thread very closely and reply to any questions as soon as I can. Thanks!
    BCU

    Yes this can be done and its advisable to install the latest and greatest admx templates, please be aware that from IE10 upwards IE maintenance is deprecated and applied via a GPP, id advise you create a central store for your Admx and adml files if not
    already done so
    http://support.microsoft.com/kb/929841
    http://support.microsoft.com/kb/929841

  • Client installation is not successful & not showing activity in SCCM Server 2012

     Environment : SCCM Server 2012 Configured successfull and installed clients using client push method , successfully Completed . I have seen Active, And push software to corresponding clients . installed successfully
    We have internal & external networks in our environment . Internal network in data center , the sccm server is also in data center . All client systems is getting software's from sccm in internal network ( done successful) .
    i have opened the ports in firewall 135,139,80,443,445, etc (TCP,UDP)
    When iam trying to push the client from SCCM server to  external network client system. it is not installing the  Ccm setup ,
    not showing "Active" in SCCM server .
    I have added a Account in Client push , Same account i added in Client system Administrator group .
    Info : All systems in Device collection 
    please updated the suggestions, to solve this issue . 
    Thanks in advance 

    Client push requires more than just those handful of ports as it uses RPC and SMB to push the initial required files -- thus, you need to open the dynamic high ports required for RPC.
    You can easily see this activity in the ccm.log.If you are unable/unwilling to open the RPC high ports, then you should choose an alertnate client install method.
    Jason | http://blog.configmgrftw.com

  • Server 2012 Direct Access Single NIC cant get it to work

    Hi,
    I am having some real issues with setting up Direct Access with Server 2012 and a Windows 8 client, it simply won’t work at all.
    First of all I should describe my setup:
    I have an internet connection with a static IPv4 address on the external network adapter of the router
    The internal network address (the address of the router which has the internet connection) is 192.168.1.1
    Server1 (windows 2008 R2 Standard) has a static IPv4 address 192.168.1.2 and has some ports forwarded from the router (443, 25, 80) this server is a domain controller, email server, and has the DNS, DHCP and
    certificate services
    Server 2 (Windows 2008 R2 standard) has static IPv4 address 192.168.1.3 it has no ports forwarded from the router as it has no services accessed externally, it is used as a file server and print server, backup
    domain controller and backup DNS.
    Server 3 (Windows 2012) has static IPv4 address 192.168.1.4 and has the Remote Access server role installed along with all the other default features and roles it requires in the setup process.
    These servers have all got an IPv6 address which I assume the server has configured automatically, there has been no deliberate configurations made to disable IPv6
    I have no UAG or proxy server or anything else to route packets to internal servers. Just this router which has the option for port forwarding (I assume that’s NAT isn’t it?) sorry don’t know much about that
    area.
    I go through the setup wizard in remote access to configure direct access, in the external URL I have entered da.mydomain.com and created a host A record in my external domain name providers DNS which points
    the da record to my external IP address. The wizard creates all the GPO’s, scoped correctly, and applied to a Windows 8 client. The operational status shows its all working and I got green ticks. However, when I connect the client to the internal network it
    doesn’t seem to have correctly got the DA settings. I run the following in powershell
    Get-DnsClientNrptPolicy
    Nothing displays – at all
    Get-NCSIPolicyConfiguration
    Description                   
    : NCSI Configuration
    CorporateDNSProbeHostAddress  
    : fdd8:dd4a:ea42:7777::7f00:1
    CorporateDNSProbeHostName     
    : directaccess-corpConnectivityHost.mydomain.local
    CorporateSitePrefixList       
    : {fdd8:dd4a:ea42:1::/64, fdd8:dd4a:ea42:7777::/96, fdd8:dd4a:ea42:1000::1/128,
    fdd8:dd4a:ea42:1000::2/128}
    CorporateWebsiteProbeURL      
    : http://directaccess-WebProbeHost.mydomain.local
    DomainLocationDeterminationURL : https://DirectAccess-NLS.mydomain.local:62000/insideoutside
    Get-DAConnectionStatus
    Get-DAConnectionStatus : Network Connectivity Assistant service is stopped or not responding.
    At line:1 char:1
    + Get-DAConnectionStatus
    + ~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo         
    : NotSpecified: (MSFT_DAConnectionStatus:root/StandardCi...onnectionStatus) [Get-DAConnect
       ionStatus], CimException
    + FullyQualifiedErrorId : Windows System Error 1753,Get-DAConnectionStatus
    I go into services.msc and find that the network connectivity assistant is not started, it wont start either something must trigger it but I have no idea how to get it triggered to start… this might be my only
    source of problem perhaps but on a more network level question:
    If I have such ports as 80, and 443 (which I assume DA uses in some form with a public IPv4 internet address) directed at server 1, how does the DA connection get to server 3 which has the DA role installed?
    I could create another record on the server which also opens port 443 to server as well as for server 1, but then how would the router know which server to pass the DA connection to if the same port is open for two different servers?
    Either way, this first issue is that the client doesn’t seem to have the ability to connect internally correctly yet, so maybe this connectivity service is a good place to start? My understanding is that the
    networks icon in the system tray should show that there is a corporate connection, but it doesn’t. also, the client seems to have the NLS certificate in the computer certificate store, so the cert side of things is working and the GPO side is working.
    Many thanks
    Steve

    ahh i see, so just to enlighten me even further...
    If a company has two web servers that would mean they would need two different public facing IP addresses so they can route to each internal web server. If, like the big companies have, they
    may have many web servers (possibly more than 100) I’m assuming that simply buying more public IP addresses would have a limit, especially since the IPv4 address space is pretty much exhausted. So is this where proxy systems come into play like ISA and Forefront,
    is this what they do?
    I assume if such a product was implemented you could go down to just one or two public IP addresses, point all traffic to the ISA server and that in turn would do all the routing of packets
    to each server behind the NAT/router (probably based on some sort of domain name or sub domain namespace as it’s parameter for forwarding?)
    Secondly, what I have done is installed windows server 2012 and used that as a direct access client (I read on another forum that the windows 8 RP doesn’t have the enterprise bits to make this
    work). I have got much further with the 2012 server acting as a client (installed on laptop, installed desktop experience and wireless LAN), 
    but when I run the following command on my DA client I get the following status
    Get-DAConnectionStatus
    Status:                 
    connectedlocally
    Substatus:          
    none
    This appears to work fine, when im connected to the local network. But then I disconnect and run the command again and I get the following:
    Status:                 
    Error
    Substatus:          
    NameResolutionFailure
    On my router what I did is temporarily disable port 443 going to my original server and instead opened it up pointing to my other server, so 443 traffic should be going to my DA server now, but I don’t understand why its giving the name resolution failure
    status. I have a host A record called “da” with my domain hoster, and entered the full domain namespace in the DA wizard as da.mydomain.com (the Host A record has been up there for more than a week so it’s propagated through the net)
    So, a bit further but stuck again.

  • Windows Server 2012 very slow performance executing files

    Hello,
    I am running windows server 2012 as dc with 2 clients connected running win7 pro x64, this is a new setup.
    Whenever i try to open a large file from the client or an application from the client it takes forever to startup or to load. The performance monitor indicates a maximum workload of 15% at all times.
    I have tried all the following potential solutions i found, however none of them seem to do the trick.
    - enable write cache = http://social.technet.microsoft.com/Forums/en-US/a76f6e97-3266-4ba1-ba90-ad5318ec4937/slow-file-sharing-performance-on-windows-server?forum=winservergen
    - change group policy = http://support.microsoft.com/kb/829700/nl
    - change group policy as = http://social.technet.microsoft.com/Forums/en-US/bcb4b580-50ef-4f10-bc9b-16db1bf24804/slow-network-file-execution-on-windows-server-2012?forum=winserverfiles
    Does anyone have any ideas?
    With kind regards

    Hi,
    You could disable SMBv3 on server 2012 to check if the issue related to SMB protocol. 
    How to enable and disable SMBv1, SMBv2, and SMBv3 in Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012
    http://support.microsoft.com/kb/2696547/en-us
    Warning: We do not recommend that you disable SMBv2 or SMBv3. Disable SMBv2 or SMBv3 only as a temporary troubleshooting measure. Do not leave SMBv2 or SMBv3 disabled.
    Please also refer to the Forum FAQ to troubleshoot the slow performance issue:
    [Forum FAQ] Troubleshooting Network File Copy Slowness
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/7bd9978c-69b4-42bf-90cd-fc7541ccb663/forum-faq-troubleshooting-network-file-copy-slowness?forum=winserverPN
    Regards,
    Mandy
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • 2012 R2 DirectAccess multi domain forest: Is it possible Limit Auto-discovery of domain controllers?

    I've just successfully implemented Multisite server 2012 R2 DirectAccess in a child domain of a global company with numerous sub domains.  I'd like to limit the scope of the auto discovery of management servers in 2012 R2 DA is anyone aware of
    any way of doing this?
    During the default initial configuration of DirectAccess Auto-discovery of domain controllers is performed for all domains in the same forest as the DirectAccess server and client computers.
    In my scenario the number of sub domains and multinational nature of the company means that the DA servers cannot contact all DCs for every child domain in the forest.
    This means the Operations Status page in the Remote Access Management console always shows the status of the Domain Controller check as "critical" leaving a red X amongst my nice green ticks. It's untidy and at first glance it looks like there
    are major problems with the service.
    The DA servers, Client machines and users are in a single sub domain so we have no need to contact the other child domain DCs.
    I looked into using the Remove-DAMgmtServer PowerShell cmdlet however this is not applicable since it cannot be used to remove automatically configured management servers such as DCs.
    Also the child domain DCs don't actually appear in the management servers list.

    Hi, a colleague of mine had the same problem in a DirectAccess deployment in a large organization tat have a multi-domain forest. He had no choice to open network flow to have at least one domain controller per domain in the forest.  
    BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx

  • VLM 3.1 on Windows Server 2012 R2

    Looking at the supported operating systems for VLM 3.1 I see Windows Server 2012 R2 is not on the list.  Will VLM 3.1.1 run on Windows Server 2012 R2?  
    We are in need of replacing our license server and my IT team is asking what OS I need.  I can use 2008 R2, but if this will run on 2012 R2, it would be preferred.
    Thanks
    Troy
    Troy

    You are correct, VLM 3.1 is not supported by Windows Server 2012 R2. However, 2008 R2 is supported. If you have acces to 2008, this is the course you should take. 
    Regards,
    Samuel S.
    Applications Engineer
    National Instruments
    www.ni.com/support
    (866) 275-6964

  • Sql Server 2012 Clustering ?

    Dear Friends, I want to configure clustering for SQL Server 2012 on windows 2008 R2 Sp2. I have two big questions:
    1) Domain controller configuration is mandatory for SQL Server clustering?
    2) Please share any link "if possible share best one"
    Hopes you will support.
    Regards
    Irfan Ahmad

    Hi Irfan_Lhr,
    You post same question 3 times.Please avoid this practice on Forum, I  have merged the same threads  .
    When you setup VM/host for cluster, you require installing Windows Operating System in nodes and Domain Controller. And domain controller is necessary because of domain environment. About SQL Server clustering, for setting up domain environment, you should
    do the following things.
     •Installing Active Directory on Domain Controller;
    •Setting up DNS Server;
    •Joining Cluster Nodes in Domain Environment.
    You also need to note if there are no pre-existing Active Directory when you can deploy cluster nodes in an environment, there is detail about
    how to configure at least one of the cluster nodes as a domain controller.
    There is videos about setting up SQL Server 2008 cluster on Windows 2008, you can review them.
    http://www.sqlserver-training.com/sql-server-2008-clustering-on-windows-2008-video-2/-
    Regards,
    Sofiya Li
    Sofiya Li
    TechNet Community Support

Maybe you are looking for