Connect Remotely Using Windows® 7 Direct Access
- 2. Do Not Delete This SlideWe appreciate hearing from you. To send your feedback, click the following link and type your comments in the message body. Note: The subject-line information is used to route your feedback. If you remove or modify the subject line we may be unable to process your feedback.Send feedback
- 3. Connect Remotely Using Windows® 7 DirectAccessLevel 300
- 4. What Will We Cover?The Value and Benefits of DirectAccessConfiguring DirectAccessUsing Network Access Protection (NAP) and DirectAccess
- 5. AgendaDirectAccess Capabilities Configuring DirectAccess on Windows Server 2008 R2Configuring and Connecting Clients to DirectAccess ServerConfiguring NAP on Windows Server 2008 R2Connecting Windows 7 Clients to NAP Servers through DirectAccess
- 6. DirectAccess: BenefitsMore manageable and cost effectiveMore productivityMore secureAlways-on access to corporate network while roamingNo explicit user action required – it just worksSame user experience on premises and offSimplified remote management of mobile resources as if they were on the LANLower total cost of ownership (TCO) with an “always managed” infrastructure Unified secure access across all scenarios and networksIntegrated administration of all connectivity mechanismsHealthy, trustable host regardless of networkFine grain per app/server policy controlRicher policy control near assetsAbility to extend regulatory compliance to roaming assetsIncremental deployment path toward IPv6
- 7. DirectAccess: AdvantagesDirectAccess overcomes the limitations of VPNs by automatically establishing a bi-directional connection from client computers to the corporate network. DirectAccess is built on a foundation of proven, standards-based technologies: Internet Protocol security (IPSec) and Internet Protocol version 6 (IPv6).
- 8. AgendaDirectAccess Capabilities Configuring DirectAccess on Windows Server 2008 R2Configuring and Connecting Clients to DirectAccess ServerConfiguring NAP on Windows Server 2008 R2Connecting Windows 7 Clients to NAP Servers through DirectAccess
- 9. Deploying DirectAccessClientReceives configuration while directly connectedto corporate network (provisioning) via Group PolicyNAP used to check configuration and healthwhen remotely connected (not required)ServerDirectAccess wizard to set up DirectAccess server(s)
- 10. Policies controlled via Group PolicyDirectAccess on Windows Server 2008 R2AuthenticationEncryptionAccess ControlIntegration with NAPSplit-Tunnel Routing
- 11. DirectAccess Deployment RequirementsClient/ServerWindows 7 clientsWindows Server 2008 R2Application Servers Windows Server 2008 (for native IPv6 support)Exception: When Windows Firewall Authentication policy is used, application servers must be Windows Server 2008 R2DC/DNS ServersWindows Server 2008 SP2 or Windows Server 2008 R2NAT-PT Server if IPv4 Access Is Desired
- 12. DirectAccess Deployment RequirementsClient/ServerWindows 7 clientsWindows Server 2008 R2Application Servers Windows Server 2008 (for native IPv6 support)Exception: When Windows Firewall Authentication policy is used, application servers must be Windows Server 2008 R2DC/DNS ServersWindows Server 2008 SP2 or Windows Server 2008 R2NAT-PT Server if IPv4 Access Is Desired
- 13. Deployment Scenario : End-to-Edge AuthenticationCorporate NetworkTrusted, compliant,healthy machineDirectAccess serverOptional NATPTDC & DNS(Win 2008)Domain clientsInternetWindows 7 clientApplication ServersIPSec ESP tunnel using machine cert (DC/DNS access)IPSec ESP tunnel using machine cert and user credentials (App server access)
- 14. Deployment Scenario: End-to-End AuthenticationCorporate NetworkTrusted, compliant,healthy machineDirectAccess serverOptional NATPTDC & DNS(Win 2008)Domain clientsInternetWindows 7 clientApplication ServersIPSec ESP tunnel using machine cert and user credentials (App server access)
- 16. Configure DirectAccess ServerConnect a Windows 7 Client Using DirectAccessManage a Windows 7 Remote Client Using DirectAccessDemonstration: Introducing DirectAccess
- 17. AgendaDirectAccess Capabilities Configuring DirectAccess on Windows Server 2008 R2Configuring and Connecting Clients to DirectAccess ServerConfiguring NAP on Windows Server 2008 R2Connecting Windows 7 Clients to NAP Servers through DirectAccess
- 18. DirectAccess in Windows 7Network connectionThe client detects the network connectionIs client on intranet?If client is on intranet, DirectAccess connection stopsIf not on intranet, use DirectAccessThe client attempts to use various methods to connect to DirectAccess server
- 19. Configuring Windows 7 for DirectAccessVerify certificateAdd Client to DirectAccess Security GroupSet client as an ISATAP HostVerify name resolution and IPv6 access to the domain controller
- 20. AgendaDirectAccess Capabilities Configuring DirectAccess on Windows Server 2008 R2Configuring and Connecting Clients to DirectAccess ServerConfiguring NAP on Windows Server 2008 R2Connecting Windows 7 Clients to NAP Servers through DirectAccess
- 21. Configuring NAPFactors in configuring NAPStaging strategyServer placementSystem health and complianceReporting mode
- 23. Full enforcementA NAP server infrastructure includes NAP health policy servers and NAP enforcement pointsYou must define which client configuration will be considered compliant and which will be considered noncompliant with health requirements
- 24. Configuring NAP - NotesFactors in configuring NAPStaging strategyServer placementSystem health and complianceReporting mode
- 26. Full enforcementA NAP server infrastructure includes NAP health policy servers and NAP enforcement pointsYou must define which client configuration will be considered compliant and which will be considered noncompliant with health requirements
- 27. Create Connection Request PolicyConfigure the Windows Security Health ValidatorsCreate Health PoliciesDemonstration: Configuring Network Policy and Access Services
- 28. AgendaDirectAccess Capabilities Configuring DirectAccess on Windows Server 2008 R2Configuring and Connecting Clients to DirectAccess ServerConfiguring NAP on Windows Server 2008 R2Connecting Windows 7 Clients to NAP Servers through DirectAccess
- 29. Windows 7, DirectAccess, and NAPNAP on the ClientWindowsClientDirectAccess serverNAP Policy ServersCorporate Network
- 30. Configure DirectAccess IPSec RulesConfigure DirectAccess Client for NAPEnforce NAP Protection through DirectAccessDemonstration: Integrating NAP with DirectAccess
- 31. Session SummaryConfiguring DirectAccess on Windows Server 2008 R2Configuring Windows 7 to Use DirectAccessAdding a NAP Server to Your DirectAccess Topology
- 32. Where to Find More Information?Visit TechNet at technet.microsoft.comAlso check out TechNet Edge edge.technet.comOr just visit http://go.microsoft.com/?linkid=9662639for additional information on this session.
- 33. For more titles, visithttp://go.microsoft.com/?linkid=9662639Supporting Publications©2009 Microsoft Corporation. All Rights Reserved.
- 34. For more training information http://go.microsoft.com/?linkid=9662636http://www.microsoft.com/directaccess Training Resources©2009 Microsoft Corporation. All Rights Reserved.
- 35. Become a Microsoft Certified Professional What Are MCP Certifications?Validation in performing critical IT functions.Why Certify?Worldwide recognition of skills gained via experience.More effective deployments with reduced costsWhat Certifications Are There for IT Pros?MCTS, MCITP.www.microsoft.com/certification
- 36. Microsoft TechNet PlusTechNet Plus is an essential premium web-enabled and live support resource that provides IT Professionals with fast and easy access to Microsoft experts, software and technical information, enhancing IT productivity, control and planning. Evaluate & LearnPlan & DeploySupport & Maintain2 complimentaryProfessional Support incidents for use 24/7 (20% discount on additional incidents)Access over 100 managed newsgroups and get next business day response--guaranteedUse the TechNet Library to maintain your IT environment with security updates, service packs and utilitiesUse the TechNet Library to plan for deployment using the Knowledge Base, resource kits, and technical trainingUse exclusive tools like System Center Capacity Planner to accurately plan for and deploy Exchange Server and System Center Operations ManagerEvaluate full versions of all Microsoft commercial software for evaluation—without time limits. This includes all client, server and Office applications.Try out all the latest betas before public releaseKeep your skills current with quarterly training resources including select Microsoft E-Learning coursesGet all these resources and more with a TechNet Plus subscription.For more information visit: technet.microsoft.com/subscriptions
- 37. Your potential. Our Passion
- 38. Do Not Delete This SlideWe appreciate hearing from you. To send your feedback, click the following link and type your comments in the message body. Note: The subject-line information is used to route your feedback. If you remove or modify the subject line we may be unable to process your feedback.Send feedback
- 39. Session CreditsAuthor:Editor: Resources OnlineMS Producer: Alan Le MarquandTechnical Specialists[Reviewer 1][Reviewer 2]Microsoft Reviewers