Hi,

In My IT-infra, there is multiple machines that is out my Office network & Domain..

Can we join these machines in domain via Direct Access implementation ? or for implementing Direct Access we required to join those non domain & out of office network machine to Domain first ?

secondly, can we implement the Direct access without any public certificate purchase, and without any IPV6 configuring in internal network,machines and in servers .currently i am using IPv4  IP on all Machines & Servers.

I have gone through the Direct Access Technet guide but i feel very complex document there ...can you please brief me about direct access implementation in simpale way, i want to implement direct access to join the internet based client machines  to domain and manage via/for SCCM ...

Hi,

DirectAccess client computers must be joined to a domain and you can add the clients to the domain firstly. Windows RRAS can provide traditional VPN connectivity for non-domain joined clients.

DirectAccess requires computer certificates to be installed on the DirectAccess server and DirectAccess clients. You can use an internal CA to issue certificates. For more detailed information, please refer to the link below:

Step 1: Configure the DirectAccess Infrastructure

Best regards,

Susie