I have a question regarding the full access that Direct Access gives. I have never used it but from reading about it it seems the ease of use is much more prominent than the security of it in that if I can log on to a user account then I can access the VPN files. Am I incorrect in assuming this or is there something I'm missing? The only other security aspect of this is requiring a smart card. So I guess a second question that arises is does IKEv2 with reconnect enabled supply a better sense of security since there can be another set of user credentials that have to be entered that are generally stored on the remote server and not the computer? Thanks ahead of time.

Hi, DirectAccess is a function of Windows 7 [client] and Windows Server 2008 R2 [server], allows remote users to securely access enterprise shares, web sites, and applications without connecting to a virtual private network (VPN). DirectAccess establishes bi-directional connectivity with a user’s enterprise network every time a user’s DirectAccess-enabled portable computer connects to the Internet, even before the user logs on. Users never have to think about connecting to the enterprise network and IT administrators can manage remote computers outside the office, even when the computers are not connected to the VPN. Forefront Unified Access Gateway (UAG) 2010 extends the benefits of DirectAccess across your infrastructure, enhancing scalability and simplifying deployment and ongoing management. More detail, you can refer: http://technet.microsoft.com/en-us/network/dd420463 And about your second question about IKEv2 and set credential stored on remote server or on client, I suggest to contact Windows Server Forum for further help: http://social.technet.microsoft.com/Forums/en-US/category/windowsserver The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding. Regards, Leo Huang Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.