Click to edit Master title style
DirectAccess with Windows 7:
No More VPN!!
Dan Stolts, MCT, MCITP, MCSE, TS...
IT Pro Evangelist
Microsoft Corporation
http://blogs.technet.com/DanStolts
TechNet goes virtual
Click to edit Master title style
• 8:30am – Introduction and Welcome
• 8:45am – Session 1: Migrating Windows XP to Windows 7: Get it
done using Microsoft Deployment Tools
• 9:30 – Break
• 9:45 – Session 2: DirectAccess with Windows 7: No More VPN!!
• 10:30 – Break
• 10:45 – Session 3: Optimizing Your Environment with Remote
Desktop Services (RDS) and Virtual Desktop Infrastructure (VDI)
• 11:45ish – Drawing
• 12:00 – Clean up
• Afternoon MSDN will be here so stick around if you can 
TechNet goes virtual
Click to edit Master title style
• DirectAccess Technical Overview
• How to Configure the DirectAccess Server
• How to Configure and Connect a Windows
7 Client Using DirectAccess
• Managing a Windows 7 Remote Client
Using DirectAccess
TechNet goes virtual
Click to edit Master title style
Authentication
Encryption
Access Control
Integration with NAP
Split-Tunnel Routing
TechNet goes virtual
Click to edit Master title style
Difficult for users to access corporate resources from outside the office
Challenging for IT to manage, update, patch mobile PCs while
disconnected from company network
App Servers
DC/ DNS
Direct Access
Server
Bi-directional connection
using IPSec and IPv6
New paradigm enables same experience inside and outside the office
Ubiquitous resource access increases productivity of mobile users
Infrastructure also makes it easier to service and update mobile PCs
TechNet goes virtual
Click to edit Master title style
Direct connectivity
to IPv6-based
intranet resources
IPv6 Devices
IPv4 Devices
IT desktop
management
Support IPv4 via 6to4
transition services or
NAT-PT
Native IPv6
with IPSec
IPv6 Transition
Services
AD Group Policy,
NAP, software
updates
DirectAccess
Server
IPSec encryption and
authentication. 2 Tunnels
are established DirectAccess Server acts
as gateway
Internet
Supports variety of
remote network Windows 7
protocols
Client
TechNet goes virtual
Click to edit Master title style
We will look at the
experience on the
corporate network and
from the Internet
TechNet goes virtual
©2009 Microsoft Corporation. All Rights Reserved.
Click to edit Master title style
Demo
Configuring the
DirectAccess Server
TechNet goes virtual
Click to edit Master title style
• Client/server
– Microsoft Windows 7 clients
– Microsoft Windows Server 2008 R2
• Application servers
– Windows Server 2008 (for native IPv6 support)
– Exception: When Windows Firewall Authentication policy is used,
application servers must be Windows Server 2008 R2
• DC/DNS servers
– Windows Server 2008 SP2 or Windows Server 2008 R2
• NAT-PT server if IPv4 access is desired
TechNet goes virtual
Click to edit Master title style
Client
– Receives configuration while directly connected
to corporate network (provisioning) via Group Policy
– NAP used to check configuration and health
when remotely connected (optional)
Server
– DirectAccess wizard to set up DirectAccess Server(s)
– Policies controlled via Group Policy
TechNet goes virtual
Click to edit Master title style
Demo
Connect a Windows 7 Client
Using DirectAccess
Manage a Windows 7 Remote
Client Using DirectAccess
TechNet goes virtual
Click to edit Master title style
Corporate
Network
Trusted, compliant,
healthy machine
DirectAccess
Server
Optional
NATPT
Internet
DC & DNS
(Win 2008)
Domain
clients
Windows 7 client
Application
Servers
IPsec ESP tunnel using machine cert (DC/DNS access)
IPsec ESP tunnel using machine cert and user credentials (App server access)
TechNet goes virtual
Click to edit Master title style
Corporate
Network
Trusted, compliant,
healthy machine
DirectAccess
Server
Optional
NATPT
Internet
DC & DNS
(Win 2008)
Domain
clients
Windows 7 client
Application
Servers
IPsec ESP tunnel using machine cert and user credentials (App server access)
TechNet goes virtual
Click to edit Master title style
• DirectAccess provides seamless access into corporate resources
• Can utilize NAP for Health enforcement
• Better together – a NEW feature of Windows 7 working with
Windows Server 2008R2
TechNet goes virtual
Click to edit Master title style
TechNet goes virtual