question

Razzi29 avatar image
1 Vote"
Razzi29 asked HectorAbreu-4162 commented

DirectAccess disappears in Windows 10

My org has been using Microsoft DirectAccess for 2 years or so. Our clients are on Windows 10 Enterprise (1803,1809, 1909), recently in the last weeks since we sent people to work from home, we are experiencing that Windows Enterprise is downgrading by itself without warning to Windows Pro, and by doing that it removes DirectAccess which in turn no longer the client connects to our network. I done deep dive logging collection and analysis, and I am at lost where else to check. Our environment is hybrid, we have everything on Prem and we only use Office 365 and Azure for identity, no VM loads or anything on that platform other than Azure Active Directoy in hybrid. We also use MDM on our Windows 10 fleet. We are in desperate need to a solution as this is happening randomly on machines, but more and more we are getting this type of issues.

azure-active-directorywindows-10-setup
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

We have several Windows 10 machines that randomly get reset back to Windows 10 Pro, and as a consequence Direct Access gets disconnected / stops working. I suspect an issue not with a Windows update but with the license. How can I verify this? Is there a task that I can create that would log an event when the change happens?

I have a PS script that, on start-up, checks to make sure the machine is running Win 10 Enterprise, and then checks every 6 hours for the same. If the OS all of a sudden changes to Win 10 Pro, the VLK is updated, user gets alerted of a critical reboot needed. Upon reboot the system is back to Enterprise. Is there a more elegant way of doing this?

Thanks

Hector

0 Votes 0 ·
DSPatrick avatar image
1 Vote"
DSPatrick answered

Might check the application event log for related warnings / errors

https://docs.microsoft.com/en-us/windows/deployment/volume-activation/monitor-activation-client





5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

TeemoTang-2039 avatar image
1 Vote"
TeemoTang-2039 answered

Welcome to Microsoft Q&A Platform.

If your organization use Windows 10 Enterprise E3 in CSP for clients Enterprise activation, current situation is possible.

I found this on the E3 page:

Roll back to Windows 10 Pro at any time. When a user’s subscription expires or is transferred to another user, the Windows 10 Enterprise device reverts seamlessly to Windows 10 Pro edition (after a grace period of up to 90 days).

This Microsoft doc might point you in the right direction

https://docs.microsoft.com/en-us/windows/deployment/windows-10-enterprise-e3-overview


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SSengupta-4080 avatar image
0 Votes"
SSengupta-4080 answered

If DirectAccess does not appear in the list, open an elevated PowerShell window and restart the Network Connectivity Assistant service (NcaSvc) using the following command.

Restart-Service NcaSvc

If you receive the error “Failed to start service ‘Network Connectivity Assistant (NcaSvc)‘”, ensure that the client operating system is Enterprise or Education edition. The NCA service will always fail to start on Professional edition as it is not a supported DirectAccess client.

Log Collection

The DirectAccess NCA also provides access to crucial troubleshooting information. Clicking on the Collect button creates a detailed diagnostic log file that is often helpful for troubleshooting DirectAccess connectivity issues.
If you cannot collect log:

To resolve this issue, open an elevated PowerShell window and enter the following command.

New-ItemProperty -Path “HKLM:\SYSTEM\CurrentControlSet\Services\NcaSvc\” -Name SvcHostSplitDisable -PropertyType DWORD -Value 1 -Force

The computer must be restarted for this change to take effect

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.