install and configure Direct Access on Windows Server

I will tell you how to install and configure the shortcut in Windows Server

This post will explain how to install and configure Direct Access on Windows Server. DirectAccess allows users to seamlessly access internal network resources whenever they are connected to the Internet without any user intervention or need to provide credentials. This feature provides a convenient and secure way for users to access company resources remotely.

How to install and configure shortcut in Windows Server

What is DirectAccess in Windows Server?

DirectAccess is a Windows Server feature that allows remote users to connect to an organization's network without initiating a traditional virtual private network (VPN) connection. Unlike a VPN, DirectAccess provides always-on connectivity, so once the client is connected to the Internet, it is automatically connected to the organization's network. This feature offers remote administration and superior security.

How to Install and Configure Direct Access on Windows Server

To install and configure Direct Access on Windows Server, follow the steps below.

Install Remote Access Management Role
Configure Static IP Address
Create a new security group, grant permissions and enroll certificates
Create DirectAccess-NLS A record

Enable DirectAccess

1] Install Remote Access Management Role

First, we will install the Remote Access Management role and feature to have the tools we need to use the access.

Open Server Manager.
Now, click Add Roles and Features under Configure Local Server section.
This will open the Add Roles and Features wizard, click Next.
Select Role-based or Feature-based installation and click Next.
Click Select a server from the server group, select the server and click Next.
We need to skip the Server Roles section by clicking Next.
Now, install the Remote Access Management tools and all the checkboxes below it. After installing all the features, close the wizard.

Read: How to remove roles and features in Windows Server?

2] Configure Static IP Address

You cannot have a dynamic IP address on a server that you want to use for passthrough. To configure your server's IP address as a static IP, follow the steps mentioned below.

In Server Manager, go to Local Server and click on the hyperlink next to Ethernet.
Right-click on your network adapter and click on Properties.
Find Internet Protocol Version 4 (TCP/IPv4), select it and click on Properties.
Now, you need to check Use the following IP address and Use the following DNS server addresses.
In the Preferred DNS Server section, enter the IP address of your server.
Click on OK.

After configuring a static IP, we move on to the next step.

3] Create a new security group, grant permissions and enroll certificates.

Next, we need to create a new security group for passthrough client computers. For this, follow the steps mentioned below.

Open Server Manager.
Go to Tools > Active Directory Users and Computers.
Now, expand your server name, go to Users, right-click and click New > Group.
Take a name of the group and keep all the options as default, then click OK.

This has created a new group, but we need to grant full permissions to the authenticated users for the web server certificate template.

To achieve this, follow the steps given below.

Open Server Manager.
Click Tools > Certification Authority.
Right-click on Certificate Template and click Manage.
Find Web Server, right-click on it and click Properties.

Now, select the users you want to access and check the Full Control section.

Click OK.

Now, open PowerShell as administrator and run Restart-Service certsvc.
Now, let’s enroll in the NLS server certification. We will create a name alias for the certificate that cannot be resolved from the external network.

For the next attainment of this effect you can follow the steps mentioned below. What will I search for and open “Manage User Certificates”?

Expanded Staff, right click on Certificates and click All Tasks > Request New Certificate.

Click Next > Next.

Check Web Server and then click More information is required to enroll for the certificate. Click here to configure the settings.

Set the Type section to Common Name, enter “DirectAccess-NLS.domain.local” in the Value field and click Add.

Click OK and once you are in Enroll

4] Create DirectAccess-

NLS A Record To create a host A record for the network location server:

In Server Manager, go to Tools > DNS Manager.
Right-click on your local domain and select the New Host (A or AAAA) option.
Name it “DirectAccess-NLS” and enter the IP of your server.
Click on Add Host.
You will get a confirmation message, so click OK.

Read: How to Install, Uninstall, and Restore Windows Server Backup

5] Enable Shortcut

Now we can enable the shortcut from the Remote Access Management utility. To do so, follow the steps mentioned below.

In Server Manager, go to Tools > Remove Access Management.
If you see any error, just ignore it and continue with the Settings tab.
Here, you need to select Enable DirectAccess

How to install and configure Direct Access on Windows Server