DirectAccess with Network Access Protection (NAP)

Updated: October 1, 2010

Applies To: Windows Server 2008 R2

The DirectAccess feature in Windows 7 and Windows Server 2008 R2 allows DirectAccess client computers to directly connect to intranet-based resources without the complexity of establishing a virtual private network (VPN) connection. The user has the same connectivity experience both in and out of the office. DirectAccess is designed as a seamless, always-on remote access solution that removes user complexity, gives you easy and efficient management and configuration tools, and does not compromise the secure aspects of remote connectivity.

The Network Access Protection (NAP) feature in Windows Server 2008 R2 and Windows 7 enforces health requirements by monitoring and assessing the health of client computers when they attempt to connect or communicate on a network. Client computers that are not in compliance with system health requirements can be provided with restricted network access until their configuration is updated and brought into compliance.

DirectAccess can be used with NAP to verify that DirectAccess client computers meet your system health requirements before allowing them access to the entire intranet. This Windows Server 2008 R2 solution is the combination of DirectAccess with NAP to provide seamless intranet access for DirectAccess clients that comply with system health requirements.

See the following topics for additional information about this solution.

Topic Description

DirectAccess with NAP Solution Overview

Provides a more detailed explanation of IT and security benefits.

DirectAccess with NAP Architecture Overview

Provides a complete list of infrastructure elements required to implement the DirectAccess with NAP solution.

DirectAccess with NAP Deployment Roadmap

Describes the major deployment phases of the DirectAccess with NAP solution in their recommended order.

Advanced Deployment for DirectAccess with NAP

Describes automating operational tasks and using system information streams for operational and business intelligence.

Test Lab Guides for DirectAccess with NAP

Provides links to several guides that demonstrate how to implement and troubleshoot DirectAccess with NAP in a test lab environment.

DirectAccess with NAP Troubleshooting Guidance

Describes the most effective way to troubleshoot a client in the DirectAccess with NAP solution, with links to additional troubleshooting resources.

To learn more about DirectAccess, see the following resources:

To learn more about NAP, see the Network Access Protection Product Information Web site (