Remove DirectAccess?

Posted on 2014-03-28
Last Modified: 2014-06-20
Against my better judgement, I rushed through a test to install RRAS (Direct Access) from 2012 Server R2.  When I got an error after installation, I tried to back out and remove it, only to have to remove DirectAccess separately via the cmdlet.  No problems, right?

Wrong.  It appears that our 2 Win 8 Ent. laptops, once they received the Group Policy update, are trying to connect to it.  And it still shows up in Group Policy.  How can I remove it completely from our AD/Group Policy?  I'm planning on doing the right thing and starting with a test environment first before pushing into production (yes, I should have done that first and normally would but ...) but I'd like to make sure that our AD is "pure" again.

Thanks for any and all help - greatly appreciate it.

Question by:fcummins
  • 3
  • 3
LVL 17

Expert Comment

by:Brad Bouchard
ID: 39962209
Try having the users come in and directly connect to your network and run a gpupdate/force.  Then remove any traces of it in GP.  AD doesn't need any maintenance on it to remove/clean things up.

Author Comment

ID: 39962220
Thanks.  I'm extremely rusty in GP - anything I need to watch out for?
LVL 17

Expert Comment

by:Brad Bouchard
ID: 39962237
Nope, simply right click the GPO and uncheck the "Link Enable" option so it isn't working.  Then update the clients.  Also, if you need to manually remove it here are two great links:
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.


Accepted Solution

fcummins earned 0 total points
ID: 39976282
So the issue was actually only on two machines - both of which were running Windows 8 Enterprise which has the direct access client already installed.  They were due for upgrades so I took the opportunity to go ahead and upgrade them with new machines running Windows 8 Pro.

Brad, I'll check out those links about removing it from GPO once I finish with the current project.  Thanks for the help.
LVL 17

Expert Comment

by:Brad Bouchard
ID: 39976335
Brad, I'll check out those links about removing it from GPO once I finish with the current project.  Thanks for the help.

Sounds good, keep my posted.

Author Closing Comment

ID: 39997126
Closing question as I resolved it by upgrading the affected computers.

Expert Comment

ID: 40146998
For others looking at this post you may find that GPUpdate won't work.

If the client machines have DA settings but the DA infrastructure has been removed they will think they are offsite.
NRPT will still attempt to route any traffic destined to the internal domain over the DA tunnel which will fail stopping communication with DCs.

Remove the domain name Reg_Multi_SZ from under one of the keys under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DnsClient\DnsPolicyConfig

Run gpupdate and then check that registry to see if it's been cleaned up (not sure if settings will be removed as I was replacing them with fresh settings).

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

The reason that corporations and businesses use Windows servers is because it supports custom modifications to adapt to the business and what it needs. Most individual users won’t need such powerful options. Here I’ll explain how you can enable Wind…
This is an article about my experiences with remote access to my clients (so that I may serve them) and eventually to my home office system via Radmin Remote Control. I have been using remote access for over 10 years and have been improving my metho…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now