Hi,

Remote Management can be enabled from a LAN client to a DirectAccess client connected on Internet. It just requires IPv6 end to end connectivity. With UAG, your client just need to be an ISATAP client of the ISATAP router (UAG Lan interface). It's possible but complex. I developped another solution based on DirectAccess client requesting assistance from another DirectAccess client when both are located on Internet. Have a look at it and tell me if it can fit to your need. I will adapte it to UAG :

http://danstoncloud.com/blogs/simplebydesign/archive/2014/07/30/windows-remote-assistance-between-directaccess-clients-made-easy-and-simple.aspx

Hi

When the "experts" domain account is a member of the local admin group unsolicited assistance request work fine. The computer can be off the network connected to the local domain and the result is the same.

We would like domain users to be able to offer unsolicited help requests to our direct access clients but I get access denied unless they are in the local admin group of the remote computer.

When the computer is back in the office the firewall is turned off by GP
There is a GP that has domain users as helpers and users can offer assistance to any of the other computers on the domain, just not the computers enabled for direct access.

Has anyone got any ideas what might be wrong

Thanks for you time

Laurie