Hi Forum

So I have been building and testing Direct Access in Server 2012 R2 with Windows 8 Client.

I seem to have been given the option in my Windows 8 Client for the User to disconnect the Direct Access using a Disconnect button the same as if it was a VPN. Direct Access has been enabled as a VPN also, which I pushed to the machine using a GPO with Network Preferences. Option is still there without the Adapter present.

I thought the only way to disconnect Direct Access was to stop a couple of services. Network Connectivity Assistant etc.

I mean the option to have a disconnect button is great, but I want to know how it came about so that I can control its use.
Does any one have any ideas how I enabled this?

I can physically connect and disconnect my Direct Access connection using this:

Please let me know and thanks in advance.
Hopefully I have stumbled on to something good here.

NN

In Step 1 of the DirectAccess wizards, on the screen where you are configuring the NCA (Network Connectivity Assistant), if you check the option for "Allow users to prefer local names" (that syntax might not be exact), it enables this option.

It's important to note that "Disconnecting" DirectAccess doesn't actually turn it off. The tunnels will still exist in the background, which is important because it means that IT can still manage the machine, even if the user turns DA "off". What this button actually does it disable the NRPT, temporarily setting it so that all name resolution happens locally on the ISP's DNS, rather than through DirectAccess DNS.