Well, the time has finally come. Microsoft DirectAccess, first introduced in Windows Server 2008 R2, will be removed from the next release of Windows Server. This means that Windows Server 2025 is officially the end of the line for DirectAccess.
Why Is This Happening?
DirectAccess has had a good run, no doubt. However, DirectAccess is built on legacy technologies, making it difficult to implement and support in modern environments. For example, DirectAccess requires the following:
- Domain-joined servers and clients
- Active Directory group policy management
- NTLMv2 for authentication
- Complex IPv6 transition and translation technologies
Further, DirectAccess does not support:
- Modern endpoint management using Microsoft Intune
- Integration with Entra ID and Entra Conditional Access
- Fine-grained user access control (zero trust)
- Windows Professional or other non-Microsoft endpoints
Microsoft’s strategic focus has shifted toward cloud-native identity, device management, and Zero Trust access solutions, making DirectAccess increasingly difficult to align with modern enterprise requirements and ultimately resulting in Microsoft discontinuing DirectAccess.
What’s Next
Organizations should consider migrating from DirectAccess to Always On VPN or Entra Private Access. Always On VPN provides a traditional VPN-based remote access solution with broad deployment flexibility, while Entra Private Access offers a cloud-native Zero Trust approach for accessing private applications and resources.
Migration Path
Organizations currently relying on DirectAccess should begin planning their migration strategy now. Although Windows Server 2025 continues to support DirectAccess, future Windows Server releases will not, making proactive migration planning essential.
Get Expert Guidance on DirectAccess Migration
Every DirectAccess deployment is different. The right migration strategy depends on your existing infrastructure, identity platform, management approach, and security requirements. Complete the form below to discuss your environment and receive guidance on transitioning to Always On VPN or Entra Private Access.
Additional Information
Microsoft DirectAccess Deprecation on Future Windows Server Releases