DirectAccess and the Microsoft Surface Pro

With the recent release of the Microsoft Surface Pro, many people have been asking me about DirectAccess connectivity for these devices. One of the requirements for DirectAccess connectivity is that the device be joined to a domain, a capability that the Surface RT lacked. Although the Surface Pro runs the full version of Windows 8, it is Windows 8 Professional. Sadly, DirectAccess connectivity is only supported for Windows 8 Enterprise edition clients, along with Windows 7 Enterprise and Ultimate editions.

Windows Server 2012 DirectAccess Client Requirements

So, if you have just purchased a new Microsoft Surface Pro and are hoping to configure it as a DirectAccess client, I’m afraid you’re out of luck. In my opinion, the lack of DirectAccess support for Windows 8 and Windows 7 Professional is a serious flaw, especially when you consider all of the great use cases you can imagine when you have a full featured tablet with always-on, secure remote network connectivity. It’s a shame, really. Let’s hope this changes in the future!

Update: Read my post on how to install Windows 8 Enterprise and configure DirectAccess on the Microsoft Surface Pro here.

Microsoft Windows 8 and Windows Server 2012 VPN Compatibility and Interoperability

Implementing client-based remote access or site-to-site VPN with Windows 8 or Windows Server 2012? Then you’ll definitely want to review the latest Windows 8 and Windows Server 2012 Compatibility and Interoperability document. This document outlines the application compatibility of many third-party VPN clients such as Cisco, Citrix, Juniper, Sonicwall and others running on Windows 8 or Windows Server 2012. It also provides compatibility information for third-party remote access VPN clients and supported site-to-site VPN settings when connecting to Windows Server 2012 Remote Access Server (RAS) VPN.

You can download the Windows 8 and Windows Server 2012 VPN Compatibility and Interoperability document here.

Cannot Connect a DirectAccess Client to a Corporate Network in Windows 8 or Windows Server 2012

Microsoft has released a hotfix to address an issue where a DirectAccess client fails to connect to a corporate network using Windows 8 or Windows Server 2012. The issue can occur when you deploy DirectAccess in single tunnel mode with Network Access Protection (NAP) integration enabled. The hotfix to resolve this issue can be downloaded here.