| Server IP : 180.180.241.3 / Your IP : 216.73.216.252 Web Server : Microsoft-IIS/7.5 System : Windows NT NETWORK-NHRC 6.1 build 7601 (Windows Server 2008 R2 Standard Edition Service Pack 1) i586 User : IUSR ( 0) PHP Version : 5.3.28 Disable Function : NONE MySQL : ON | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /Windows/Help/Windows/en-US/ |
Upload File : |
MZ @ PE L ! @ 0 @ .rsrc @ @.its @ @ 0 H X | |4 V S _ V E R S I O N _ I N F O S t r i n g F i l e I n f o 0 4 0 9 0 4 b 0 b ! F i l e V e r s i o n 1 . 0 0 . 0 0 l " F i l e D e s c r i p t i o n C o m p i l e d M i c r o s o f t H e l p 2 . 0 T i t l e B F i l e S t a m p 8 5 B A 7 1 4 8 0 1 C A 0 4 1 F 4 J C o m p i l e r V e r s i o n 2 . 5 . 7 1 2 1 0 . 0 8 5 7 9 V C o m p i l e D a t e 2 0 0 9 - 0 7 - 1 4 T 0 1 : 0 7 : 5 6 > T o p i c C o u n t 4 1 0 0 0 0 0 0 0 0 0 0 0 0 A L e g a l C o p y r i g h t 2 0 0 5 M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . C C C C C C C C C C C C C D V a r F i l e I n f o $ T r a n s l a t i o n ti ) Hq Õ-ITOLITLS ( X쌡^
V` x < CAOL P HH C ITSF # Ҽ -Y쌡^
VY쌡^
VIFCM AOLL < IFCM AOLL / /$FXFtiAttribute/ /$FXFtiAttribute/BTREEj/$FXFtiAttribute/DATA /$FXFtiAttribute/PROPERTYN /$FXFtiMain/ /$FXFtiMain/BTREEK/$FXFtiMain/DATAc9/$FXFtiMain/PROPERTY N/$Index/$ATTRNAMEP/$Index/$PROPBAGz/$Index/$STRINGS` /$Index/$SYSTEMb
/$Index/$TOC/ /$Index/$TOC/$da_snap @/$Index/$TOPICATTRP /$Index/$TOPICSx /$Index/$URLSTR`P/$Index/$URLTBL0H/$Index/$VTAIDXhx/$Index/AssetId/ /$Index/AssetId/$LEAVES` /$OBJINST@ /assets/ 0/assets/1326e2b8-80d0-4528-a979-845080e353a7.xml t(0/assets/258acc73-4f0b-4016-a1a2-b5043eadaade.xml h0/assets/2f5ff4e1-3c30-434e-9fc1-1d2bea6271be.xml 0/assets/4326c738-9a48-4163-95c6-8cfec2f434e9.xml ?0/assets/4acdb444-bd72-465c-b651-096d840117b4.xml F0/assets/4bac45a3-385e-4aaf-9b31-b857f2ee7775.xml L*0/assets/5b760f0b-07d1-4f1e-8f1b-d9078175578c.xml v%0/assets/61fb90b0-27ad-4728-904c-8d1320452326.xml 0/assets/66aab1fa-3f57-4254-8c20-a99608c738a9.xml #d0/assets/73935766-228a-465f-906c-5f5d131ebfc9.xml F0/assets/80804f5b-78af-46c4-951c-6d9213ce226e.xml M0/assets/8ec2d220-eef2-4fc3-91c9-890d6b13f08c.xml O!0/assets/9d09c482-57c6-4608-91a6-fff05d869039.xml pU0/assets/a2786de8-cac8-44c5-9f48-449c00889921.xml E}0/assets/a9228f5c-1a4f-48c8-b413-90b49885c006.xml B-0/assets/b0c4f126-7d92-4f4b-b3ba-8042a34b8e64.xml o0/assets/bba98946-c8ab-488c-b080-f753fb7e40f0.xml 0/assets/c17ef9f1-d277-43ff-b899-6338ead04b1d.xml
80/assets/d26beb27-2465-420c-a538-e46fc6dadee6.xml E#0/assets/d81e40e9-3097-4a0d-949c-e16a7f317f2f.xml h@ /da_snap.h1c ( /da_snap.H1F 3 /da_snap.H1T (S /da_snap.H1V I_/da_snap_AssetId.H1K {k/da_snap_BestBet.H1K fk/da_snap_LinkTerm.H1K Ql/da_snap_SubjectTerm.H1K =o::DataSpace/NameList <(::DataSpace/Storage/MSCompressed/Content ,$,::DataSpace/Storage/MSCompressed/ControlData T )::DataSpace/Storage/MSCompressed/SpanInfo L/::DataSpace/Storage/MSCompressed/Transform/List <_::DataSpace/Storage/MSCompressed/Transform/{8CEC5846-07A1-11D9-B15E-000D56BFE6EE}/InstanceData/ i::DataSpace/Storage/MSCompressed/Transform/{8CEC5846-07A1-11D9-B15E-000D56BFE6EE}/InstanceData/ResetTable PP3::Transform/{8CEC5846-07A1-11D9-B15E-000D56BFE6EE}/ k|iVEQ p < U n c o m p r e s s e d M S C o m p r e s s e d FX쌡^
V|# LZXC HH <maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>DirectAccess Overview</maml:title><maml:introduction>
<maml:para>DirectAccess allows remote users to securely access internal network file shares, Web sites, and applications without connecting to a virtual private network (VPN). An internal network is also known as a <maml:newTerm>private network</maml:newTerm> or <maml:newTerm>intranet</maml:newTerm>. DirectAccess establishes bi-directional connectivity with an internal network every time a DirectAccess-enabled computer connects to the Internet, even before the user logs on. Users never have to think about connecting to the internal network and IT administrators can manage remote computers outside the office, even when the computers are not connected to the VPN.</maml:para>
<maml:para>You can use the DirectAccess Management Console to set up a DirectAccess infrastructure by performing the following tasks: </maml:para>
<maml:list class="unordered">
<maml:listItem><maml:para>Specify the client computers that can use DirectAccess by selecting the security groups to which they belong</maml:para></maml:listItem>
<maml:listItem><maml:para>Configure the network adapters on the DirectAccess server that are connected to your internal network and the Internet and the certificates that you want to use for authentication</maml:para></maml:listItem>
<maml:listItem><maml:para>Configure the location of an internal Web site so that DirectAccess client computers can determine when they are located on the internal network</maml:para></maml:listItem>
<maml:listItem><maml:para>Configure the Domain Name Service (DNS) names that must be resolved by internal network DNS servers</maml:para></maml:listItem>
<maml:listItem><maml:para>Identify infrastructure servers (network location, DNS, and management servers)</maml:para></maml:listItem>
<maml:listItem><maml:para>Identify application servers for optional authentication</maml:para></maml:listItem></maml:list>
<maml:para>When you monitor DirectAccess, use the DirectAccess Management Console to determine the state of DirectAccess components that are running on the server.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction>
<maml:para><maml:navigationLink><maml:linkText>Understanding DirectAccess Components</maml:linkText><maml:uri href="mshelp://windows/?id=2f5ff4e1-3c30-434e-9fc1-1d2bea6271be"></maml:uri></maml:navigationLink></maml:para>
<maml:para><maml:navigationLink><maml:linkText>Understanding DirectAccess Deployment Models</maml:linkText><maml:uri href="mshelp://windows/?id=c17ef9f1-d277-43ff-b899-6338ead04b1d"></maml:uri></maml:navigationLink></maml:para>
<maml:para>For more information, see the DirectAccess home page on Microsoft Technet (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=142598</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=142598"></maml:uri></maml:navigationLink>).</maml:para>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Checklist: Before You Configure DirectAccess</maml:title><maml:introduction><maml:para>This checklist provides the tasks needed to ensure that your internal network meets the requirements for a DirectAccess deployment.</maml:para><maml:table>
<maml:tableHeader><maml:row><maml:entry><maml:para>Task</maml:para></maml:entry><maml:entry><maml:para>Reference</maml:para></maml:entry></maml:row></maml:tableHeader><maml:row><maml:entry><maml:para>Deploy an Active Directory Domain Services (AD DS) domain on your internal network and ensure that at least one domain controller in the domain containing user accounts is running Windows Server 2008 or later.</maml:para></maml:entry><maml:entry><maml:para>Active Directory Domain Services Home page on Microsoft Technet (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?Linkid=127814</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?Linkid=127814"></maml:uri></maml:navigationLink>)</maml:para></maml:entry></maml:row><maml:row><maml:entry><maml:para>Deploy a public key infrastructure (PKI) with Active Directory Certificate Services (AD CS) and configure autoenrollment for computer certificates.</maml:para></maml:entry><maml:entry><maml:para>Active Directory Certificate Services Home page on Microsoft Technet (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?Linkid=127816</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?Linkid=127816"></maml:uri></maml:navigationLink>)</maml:para></maml:entry></maml:row><maml:row><maml:entry><maml:para>Configure a certificate revocation list (CRL) distribution point that is reachable from the Internet.</maml:para></maml:entry><maml:entry><maml:para>Specify CRL Distribution Points (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?Linkid=137744</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?Linkid=137744"></maml:uri></maml:navigationLink>)</maml:para></maml:entry></maml:row><maml:row><maml:entry><maml:para>Install Windows 7 on your DirectAccess clients and join them to your AD DS domain.</maml:para></maml:entry><maml:entry><maml:para><maml:navigationLink><maml:linkText>Understanding DirectAccess Components</maml:linkText><maml:uri href="mshelp://windows/?id=2f5ff4e1-3c30-434e-9fc1-1d2bea6271be"></maml:uri></maml:navigationLink></maml:para></maml:entry></maml:row><maml:row><maml:entry><maml:para>Create AD DS security groups that contain the computer accounts of your DirectAccess clients.</maml:para></maml:entry><maml:entry><maml:para>Create a New Group (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?Linkid=133523</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?Linkid=133523"></maml:uri></maml:navigationLink>)</maml:para></maml:entry></maml:row><maml:row><maml:entry><maml:para>Configure your Internet firewall to allow DirectAccess traffic.</maml:para></maml:entry><maml:entry><maml:para><maml:navigationLink><maml:linkText>Understanding DirectAccess Components</maml:linkText><maml:uri href="mshelp://windows/?id=2f5ff4e1-3c30-434e-9fc1-1d2bea6271be"></maml:uri></maml:navigationLink></maml:para></maml:entry></maml:row><maml:row><maml:entry><maml:para>Configure and deploy Windows Firewall settings for Teredo traffic.</maml:para></maml:entry><maml:entry><maml:para><maml:navigationLink><maml:linkText>Understanding DirectAccess Components</maml:linkText><maml:uri href="mshelp://windows/?id=2f5ff4e1-3c30-434e-9fc1-1d2bea6271be"></maml:uri></maml:navigationLink></maml:para></maml:entry></maml:row><maml:row><maml:entry><maml:para>If your DirectAccess server is not acting as the network location server, determine or create an HTTPS-based uniform resource locator (URL) on a highly available Web server on your internal network. DirectAccess clients use this URL to determine whether they are located on the Internet or the internal network.</maml:para></maml:entry><maml:entry><maml:para><maml:navigationLink><maml:linkText>Identify Infrastructure Servers for DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=80804f5b-78af-46c4-951c-6d9213ce226e"></maml:uri></maml:navigationLink></maml:para></maml:entry></maml:row><maml:row><maml:entry><maml:para>For each of your Domain Name System (DNS) servers that are running Windows Server 2008 or later, remove the ISATAP name from the global query block list. </maml:para></maml:entry><maml:entry><maml:para>Update the Global Query Block List (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=146153</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=146153"></maml:uri></maml:navigationLink>)</maml:para></maml:entry></maml:row></maml:table></maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding DirectAccess Components</maml:title><maml:introduction><maml:para>This topic provides information about the components of a DirectAccess deployment, DirectAccess client connectivity methods, firewall configuration for DirectAccess traffic, and integration with smart cards.</maml:para></maml:introduction><maml:content><maml:sections><maml:section><maml:title>DirectAccess components</maml:title><maml:introduction><maml:para>A DirectAccess deployment consists of the following components:</maml:para><maml:list class="unordered"><maml:listItem><maml:para>DirectAccess clients</maml:para></maml:listItem><maml:listItem><maml:para>At least one DirectAccess server</maml:para></maml:listItem><maml:listItem><maml:para>An Active Directory® Domain Services (AD DS) domain</maml:para></maml:listItem><maml:listItem><maml:para>A public key infrastructure (PKI)</maml:para></maml:listItem><maml:listItem><maml:para>Network location server</maml:para></maml:listItem><maml:listItem><maml:para>An Internet Protocol version 6 (IPv6)-capable internal network and applications or Network Address Translation-Port Translation (NAT-PT) devices</maml:para></maml:listItem></maml:list></maml:introduction><maml:sections><maml:section><maml:title>DirectAccess clients</maml:title><maml:introduction><maml:para>A DirectAccess client is a computer running Windows 7 or Windows Server 2008 R2 that is joined to an AD DS domain and uses IPv6 and Internet Protocol security (IPsec) to automatically initiate and maintain remote connectivity to an internal network from the Internet.</maml:para><maml:para>Computers that are not joined to an AD DS domain or computers running Windows Vista or earlier versions of Windows do not support DirectAccess.</maml:para></maml:introduction></maml:section><maml:section><maml:title>At least one DirectAccess server</maml:title><maml:introduction><maml:para>A DirectAccess server is a computer running Windows Server 2008 R2 that is joined to an AD DS domain and uses IPv6 and IPsec to respond to DirectAccess clients on the Internet and transparently connect them to an internal network.</maml:para><maml:para>Computers that are not joined to an Active Directory domain or computers running Windows Server 2008 or earlier versions of Windows Server do not support DirectAccess server functionality.</maml:para><maml:para>To install DirectAccess, see <maml:navigationLink><maml:linkText>Install DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=b0c4f126-7d92-4f4b-b3ba-8042a34b8e64"></maml:uri></maml:navigationLink>. </maml:para><maml:para>Do not host any other primary functions on DirectAccess servers. DirectAccess servers should be dedicated to DirectAccess. Depending on your deployment and scalability requirements, you might need more than one DirectAccess server or to use manual configuration to separate DirectAccess functions between multiple servers. For more information about multiple-server deployments, see the DirectAccess home page on Microsoft Technet (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=142598</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=142598"></maml:uri></maml:navigationLink>).</maml:para><maml:para>For more information about the requirements of the DirectAccess server, see <maml:navigationLink><maml:linkText>Checklist: Before You Configure DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=258acc73-4f0b-4016-a1a2-b5043eadaade"></maml:uri></maml:navigationLink>.</maml:para></maml:introduction></maml:section><maml:section><maml:title>An AD DS domain</maml:title><maml:introduction><maml:para>DirectAccess relies on AD DS for authentication credentials, autoenrollment of computer certificates, and centralized Group Policy-based configuration of IPsec, IPv6, and other settings. DirectAccess clients and servers must be members of an AD DS domain.</maml:para></maml:introduction></maml:section><maml:section><maml:title>PKI</maml:title><maml:introduction><maml:para>DirectAccess relies on computer certificates issued by an Active Directory Certificate Services (AD CS) certification authority for authentication of IPsec sessions and IP-HTTPS-based connections.</maml:para></maml:introduction></maml:section><maml:section><maml:title>Network location server</maml:title><maml:introduction><maml:para>A <maml:newTerm>network location server</maml:newTerm> is an internal network server that hosts an HTTPS-based uniform resource locator (URL). DirectAccess clients access the URL to determine whether they are located on the internal network. The DirectAccess server can be the network location server but a high-availability Web server is recommended. The Web server does not have to be dedicated as a network location server.</maml:para></maml:introduction></maml:section><maml:section><maml:title>IPv6-capable internal network and applications or a NAT-PT device</maml:title><maml:introduction><maml:para>DirectAccess clients exclusively use IPv6 to access internal network resources. Therefore, DirectAccess clients can only communicate with internal network servers and resources that are reachable by using IPv6. There are three ways to achieve IPv6 connectivity to an internal network:</maml:para><maml:list class="unordered"><maml:listItem><maml:para>Configure your internal network routing infrastructure to support native IPv6. Internal network servers and applications that support IPv6 are then reachable. Computers running Windows 7, Windows Server 2008 R2, Windows Vista, or Windows Server 2008 are configured to use IPv6 by default.</maml:para></maml:listItem><maml:listItem><maml:para>Deploy the Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) on your internal network. By using ISATAP, IPv6-capable internal network servers and applications can tunnel IPv6 traffic over your IPv4-only internal network. Computers running Windows 7, Windows Server 2008 R2, Windows Vista, or Windows Server 2008 support ISATAP host functionality. ISATAP allows these computers to use IPv6 without requiring native IPv6 routing. The DirectAccess server will automatically configure itself as an ISATAP router in the absence of IPv6 connectivity on your internal network.</maml:para></maml:listItem><maml:listItem><maml:para>Use a Network Address Translation-Protocol Translation (NAT-PT) device to translate traffic between your DirectAccess clients that are using IPv6 and servers and applications that can only use IPv4. Windows Server 2008 R2 does not provide NAT-PT functionality. NAT-PT devices are typically available from Layer 2 and Layer 3 switch and router vendors. See your switch and router documentation for information about NAT-PT capabilities and configuration.</maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:section><maml:section><maml:title>DirectAccess client connectivity methods</maml:title><maml:introduction><maml:para>The following table lists possible DirectAccess client configurations and their corresponding method of sending IPv6 traffic to the DirectAccess server.</maml:para><maml:table>
<maml:tableHeader><maml:row><maml:entry><maml:para>Client configuration</maml:para></maml:entry><maml:entry><maml:para>Preferred connectivity method</maml:para></maml:entry></maml:row></maml:tableHeader><maml:row><maml:entry><maml:para>Assigned a global IPv6 address</maml:para></maml:entry><maml:entry><maml:para>Global IPv6 address</maml:para></maml:entry></maml:row><maml:row><maml:entry><maml:para>Assigned a public IPv4 address (addresses that are not in the ranges 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16)</maml:para></maml:entry><maml:entry><maml:para>6to4, an IPv6 transition technology that provides IPv6 connectivity across the IPv4 Internet for hosts or sites that have a public IPv4 address.</maml:para></maml:entry></maml:row><maml:row><maml:entry><maml:para>Assigned a private IPv4 address (addresses that are in the ranges 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16)</maml:para></maml:entry><maml:entry><maml:para>Teredo, an IPv6 transition technology that provides IPv6 connectivity across the IPv4 Internet for hosts that are assigned a private IPv4 address and are located behind an IPv4 network address translation (NAT) device that does not support 6to4 router functionality.</maml:para></maml:entry></maml:row><maml:row><maml:entry><maml:para>The client cannot connect using 6to4 or Teredo</maml:para></maml:entry><maml:entry><maml:para>IP-HTTPS, a new protocol for Windows 7 and Windows Server 2008 R2 that allows hosts behind a Web proxy server or firewall to establish connectivity by tunneling IPv6 packets inside an IPv4-based secure Hypertext Transfer Protocol (HTTPS) session. IP-HTTPS is typically used only if the client cannot connect to the DirectAccess server by using the other IPv6 connectivity methods.</maml:para></maml:entry></maml:row></maml:table></maml:introduction></maml:section><maml:section><maml:title>Firewall configuration for DirectAccess traffic</maml:title><maml:introduction><maml:para>External firewalls between the Internet and your perimeter network must be able to pass the following types of traffic to and from the DirectAccess server:</maml:para><maml:list class="unordered"><maml:listItem><maml:para>For native IPv6 traffic, Internet Control Message Protocol for IPv6 (ICMPv6) traffic (IPv6 protocol 58) and IPsec Encapsulating Security Payload (ESP) traffic (IPv6 protocol 50).</maml:para></maml:listItem><maml:listItem><maml:para>For 6to4 traffic, IPv4 traffic that encapsulates IPv6 traffic (IPv4 protocol 41).</maml:para></maml:listItem><maml:listItem><maml:para>For Teredo traffic, IPv4 traffic with the User Datagram Protocol (UDP) port 3544.</maml:para></maml:listItem><maml:listItem><maml:para>For IP-HTTPS traffic, IPv4 traffic with the Transmission Control Protocol (TCP) port 443.</maml:para></maml:listItem></maml:list><maml:para>For example, the exceptions on your external firewall’s Internet interface will be in the following format:</maml:para><maml:list class="unordered"><maml:listItem><dev:code>Input filter: [Any] allowed inbound to [IPv4 address of Internet-facing adapter on DirectAccess server] for [IPv4 or IPv6] with [IPv4/IPv6 protocol number or UDP/TCP port]</dev:code></maml:listItem><maml:listItem><dev:code>Output filter: [IPv4 address of Internet-facing adapter on DirectAccess server] for [IPv4 or IPv6] with [IPv4/IPv6 protocol number or UDP/TCP port] allowed outbound to [Any]</dev:code></maml:listItem></maml:list><maml:para>Internal firewalls between the perimeter network and the internal network must be able to pass the following types of traffic to and from the DirectAccess server:</maml:para><maml:list class="unordered"><maml:listItem><maml:para>For native IPv6 traffic, all types of IPv6 traffic.</maml:para></maml:listItem><maml:listItem><maml:para>For ISATAP traffic, IPv4 traffic that encapsulates IPv6 traffic (IPv4 protocol 41).</maml:para></maml:listItem><maml:listItem><maml:para>For IPv4 and NAT-PT traffic, all TCP, UDP, and UDP 500 Internet Key Exchange (IKE)/AuthIP traffic.</maml:para></maml:listItem></maml:list><maml:para>To allow Teredo-based connectivity, you must configure and deploy the following additional Windows Firewall with Advanced Security rules for all of the domain member computers in your organization:</maml:para><maml:list class="unordered">
<maml:listItem><maml:para>Inbound ICMPv6 Echo Request messages (required)</maml:para></maml:listItem><maml:listItem><maml:para>Outbound ICMPv6 Echo Request messages (recommended)</maml:para></maml:listItem></maml:list><maml:para>Do not use the predefined <maml:ui>File and Printer Sharing (Echo Request – ICMPv6-In)</maml:ui> inbound rule or the <maml:ui>File and Printer Sharing (Echo Request – ICMPv6-Out)</maml:ui> outbound rule for this purpose. If you use these predefined rules, they can be disabled by turning off file and printer sharing within an organization, which will result in a lack of Teredo-based connectivity.</maml:para><maml:para>The easiest way to deploy these Windows Firewall settings to all of the member computers in your organization is through the Default Domain Group Policy object (GPO). For more information, see Checklist: Implementing a Basic Firewall Policy Design (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=147688</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=147688"></maml:uri></maml:navigationLink>).</maml:para>
<maml:para><maml:phrase>Rule 1: Inbound ICMPv6 Echo Request messages</maml:phrase></maml:para><maml:para>Create and enable a custom inbound rule with the following settings:</maml:para><maml:list class="unordered">
<maml:listItem><maml:para>All programs</maml:para></maml:listItem><maml:listItem><maml:para>ICMPv6 protocol type with the Echo Request message</maml:para></maml:listItem><maml:listItem><maml:para>Any local and remote IP addresses</maml:para></maml:listItem><maml:listItem><maml:para>Allow action</maml:para></maml:listItem><maml:listItem><maml:para>All profiles (domain, work, public)</maml:para></maml:listItem></maml:list><maml:para>This rule is required.</maml:para><maml:para><maml:phrase>Rule 2: Outbound ICMPv6 Echo Request messages</maml:phrase></maml:para><maml:para>Create and enable a custom outbound rule with the following settings:</maml:para><maml:list class="unordered">
<maml:listItem><maml:para>All programs</maml:para></maml:listItem><maml:listItem><maml:para>ICMPv6 protocol type with the Echo Request message</maml:para></maml:listItem><maml:listItem><maml:para>Any local and remote IP addresses</maml:para></maml:listItem><maml:listItem><maml:para>Allow action</maml:para></maml:listItem><maml:listItem><maml:para>All profiles (domain, work, public)</maml:para></maml:listItem></maml:list><maml:para>This rule is recommended as a best practice unless you are using Windows Firewall to block all outbound traffic, in which case this rule is required.</maml:para></maml:introduction></maml:section><maml:section><maml:title>Integration with smart cards</maml:title><maml:introduction><maml:para>You can require the use of smart cards when DirectAccess clients make a connection to the DirectAccess server. Users can log on to their computers and access the Internet without a smart card, but require smart card authentication to access any internal network resources.</maml:para></maml:introduction></maml:section><maml:section><maml:title>Additional resources</maml:title><maml:introduction><maml:para>For information about DirectAccess integration with server and domain isolation and Network Access Protection (NAP), see the DirectAccess home page on Microsoft Technet (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=142598</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=142598"></maml:uri></maml:navigationLink>).</maml:para></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Configuring DirectAccess</maml:title><maml:introduction>
<maml:para>This section describes how to install and configure DirectAccess.</maml:para>
<maml:list class="unordered">
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Install DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=b0c4f126-7d92-4f4b-b3ba-8042a34b8e64"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Open the DirectAccess Snap-in</maml:linkText><maml:uri href="mshelp://windows/?id=9d09c482-57c6-4608-91a6-fff05d869039"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Use the DirectAccess Snap-in to Configure DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=d26beb27-2465-420c-a538-e46fc6dadee6"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Use Netsh to Configure DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=bba98946-c8ab-488c-b080-f753fb7e40f0"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Use Group Policy to Configure DirectAccess Clients</maml:linkText><maml:uri href="mshelp://windows/?id=61fb90b0-27ad-4728-904c-8d1320452326"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Use Scripts to Configure DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=4acdb444-bd72-465c-b651-096d840117b4"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Use Scripts to Configure DirectAccess</maml:title><maml:introduction>
<maml:para>DirectAccess scripting allows you to use a PowerShell script to run a combination of Network Shell (Netsh) and PowerShell commands to configure DirectAccess with all of the required Group Policy objects and settings.</maml:para>
<maml:para>The DirectAccess snap-in generates an Extensible Markup Language (XML) data file whenever you save or apply settings. The default location for this file is %windir%\DirectAccess\DirectAccessConfig.xml. You can modify and customize this XML file by using the XML tags in the file. For example, the <InternalNetworkInterface> tag allows you to manually specify the name and ID of the internal network interface on the DirectAccess server. The customized XML file can then be passed as an input to a PowerShell script named Engine.ps1 to configure a DirectAccess server and all of the required Group Policy settings.</maml:para>
<maml:para>The Engine.ps1 PowerShell script is available at the Script Center Script Repository on Microsoft Technet (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=145944</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=145944"></maml:uri></maml:navigationLink>).</maml:para>
<maml:para>The syntax for executing the script is the following:</maml:para>
<dev:code>engine.ps1 –mode {serveronly|gpsettingonly|all} [–data <dataFilePath>] [-log <logFilePath>]</dev:code>
<maml:list class="unordered">
<maml:listItem><maml:para>The <maml:computerOutputInline>mode</maml:computerOutputInline> parameter is required, and you must specify one of the following:</maml:para><maml:list class="unordered">
<maml:listItem><maml:para><maml:computerOutputInline>serveronly</maml:computerOutputInline>: This value configures only the DirectAccess server and does not create or configure Group Policy objects and settings.</maml:para></maml:listItem>
<maml:listItem><maml:para><maml:computerOutputInline>gpsettingonly</maml:computerOutputInline>: This value configures only the Group Policy objects and settings and does not create or configure the DirectAccess server.</maml:para></maml:listItem>
<maml:listItem><maml:para><maml:computerOutputInline>all</maml:computerOutputInline>: This value configures both the DirectAccess server and the Group Policy objects and settings. This is equivalent to clicking <maml:ui>Apply</maml:ui> from the DirectAccess Review page.</maml:para></maml:listItem>
</maml:list></maml:listItem>
<maml:listItem><maml:para>The <maml:computerOutputInline>data</maml:computerOutputInline> parameter is the path to the customized XML file. This is optional. If a location is not specified, the script runs the DirectAccessConfig.xml file in the %windir%\DirectAccess folder.</maml:para></maml:listItem>
<maml:listItem><maml:para>The <maml:computerOutputInline>log</maml:computerOutputInline> parameter is the path to the log file. This is optional. If a location is not specified, the script creates the DirectAccess_log.txt file in the folder from which you run the script.</maml:para></maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Additional references</maml:title>
<maml:introduction>
<maml:list class="unordered">
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configuring DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=4326c738-9a48-4163-95c6-8cfec2f434e9"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para>Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>)</maml:para></maml:listItem>
</maml:list>
</maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Checklist: Install and Configure Single-Server DirectAccess</maml:title><maml:introduction>
<maml:para>This checklist provides the tasks required to install DirectAccess on a single server.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row><maml:entry><maml:para>Task</maml:para></maml:entry>
<maml:entry><maml:para>Reference</maml:para></maml:entry></maml:row></maml:tableHeader>
<maml:row><maml:entry><maml:para>Ensure that your network meets the requirements for DirectAccess.</maml:para></maml:entry>
<maml:entry><maml:para><maml:navigationLink><maml:linkText>Checklist: Before You Configure DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=258acc73-4f0b-4016-a1a2-b5043eadaade"></maml:uri></maml:navigationLink></maml:para></maml:entry></maml:row>
<maml:row><maml:entry><maml:para>Install two network adapters (interfaces) on your DirectAccess server. Connect the internal network interface to your internal network.</maml:para></maml:entry>
<maml:entry><maml:para>See your hardware documentation.</maml:para></maml:entry></maml:row>
<maml:row><maml:entry><maml:para>From the Network Connections folder, configure your network connections (interfaces) with meaningful names indicating the network to which they are attached, such as “Internet” and “Internal network.” </maml:para></maml:entry>
<maml:entry><maml:para></maml:para></maml:entry></maml:row>
<maml:row><maml:entry><maml:para>Configure your internal network interface with a static IPv4 address configuration.</maml:para></maml:entry>
<maml:entry><maml:para>IPv4 General tab (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=145843</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=145843"></maml:uri></maml:navigationLink>)</maml:para></maml:entry></maml:row>
<maml:row><maml:entry><maml:para>Join your DirectAccess server to your Active Directory Domain Services (AD DS) domain.</maml:para></maml:entry>
<maml:entry><maml:para>Active Directory Domain Services Home page on Microsoft Technet (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?Linkid=127814</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?Linkid=127814"></maml:uri></maml:navigationLink>)</maml:para></maml:entry></maml:row>
<maml:row><maml:entry><maml:para>Ensure that your DirectAccess server is not a domain controller.</maml:para></maml:entry>
<maml:entry><maml:para></maml:para></maml:entry></maml:row>
<maml:row><maml:entry><maml:para>Connect the Internet interface to the Internet. Verify that a domain controller is not reachable from the Internet interface.</maml:para></maml:entry><maml:entry><maml:para>See your Internet hardware documentation.</maml:para></maml:entry></maml:row>
<maml:row><maml:entry><maml:para>On the Internet interface, configure at least two consecutive, static, public IPv4 addresses that are resolvable and reachable on the Internet. Addresses within the address ranges 10.0.0.0/8, 172.16.0.0/12, or 192.168.0.0/16 are not public IPv4 addresses.</maml:para></maml:entry>
<maml:entry><maml:para>IPv4 General tab (<maml:navigationLink><maml:linkText> http://go.microsoft.com/fwlink/?LinkId=145843</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=145843"></maml:uri></maml:navigationLink>)</maml:para></maml:entry></maml:row>
<maml:row><maml:entry><maml:para>Configure connection-specific DNS suffixes on your Internet and internal network interfaces.</maml:para></maml:entry>
<maml:entry><maml:para>IPv4 and IPv6 Advanced DNS tab (<maml:navigationLink><maml:linkText> http://go.microsoft.com/fwlink/?LinkId=145844</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=145844"></maml:uri></maml:navigationLink>)</maml:para></maml:entry></maml:row>
<maml:row><maml:entry><maml:para>Ensure that the DirectAccess server has a computer certificate installed with the computer authentication Enhanced Key Usage (EKU).</maml:para></maml:entry>
<maml:entry><maml:para>View Certificates (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=145845</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=145845 http://technet.microsoft.com/en-us/library/cc732324.aspx"></maml:uri></maml:navigationLink>)</maml:para></maml:entry></maml:row>
<maml:row><maml:entry><maml:para>If the DirectAccess server is acting as the network location server, install Internet Information Services (IIS).</maml:para></maml:entry>
<maml:entry><maml:para><maml:navigationLink><maml:linkText>Identify Infrastructure Servers for DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=80804f5b-78af-46c4-951c-6d9213ce226e"></maml:uri></maml:navigationLink>;</maml:para>
<maml:para>Installing IIS 7.0 on Windows Server 2008 (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=145846</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=145846"></maml:uri></maml:navigationLink>)</maml:para></maml:entry></maml:row>
<maml:row><maml:entry><maml:para>Install DirectAccess on the DirectAccess server.</maml:para></maml:entry>
<maml:entry><maml:para><maml:navigationLink><maml:linkText>Install DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=b0c4f126-7d92-4f4b-b3ba-8042a34b8e64"></maml:uri></maml:navigationLink></maml:para></maml:entry></maml:row>
<maml:row><maml:entry><maml:para>Run the DirectAccess Setup wizard and apply the settings.</maml:para></maml:entry>
<maml:entry><maml:para><maml:navigationLink><maml:linkText>Use the DirectAccess Snap-in to Configure DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=d26beb27-2465-420c-a538-e46fc6dadee6"></maml:uri></maml:navigationLink></maml:para></maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Identify Application Servers for DirectAccess</maml:title><maml:introduction><maml:para>In this step of the DirectAccess Setup wizard (step 4), you configure settings for end-to-end authentication and protected communication with application servers on your internal network. For the initial configuration of DirectAccess application server settings from the DirectAccess snap-in, expand the <maml:ui>DirectAccess</maml:ui> node, click the <maml:ui>Setup</maml:ui> node, and then click <maml:ui>Configure</maml:ui> for step 4. You cannot click <maml:ui>Configure</maml:ui> for step 4 until you have completed the configuration for step 3. To change application server settings, click <maml:ui>Edit</maml:ui> for step 4.</maml:para><maml:para>Before doing step 4, determine the following:</maml:para><maml:list class="unordered"><maml:listItem><maml:para>Whether you want DirectAccess clients to perform end-to-end authentication and data protection for specific internal network servers. If so, create security groups that contain the computer accounts of those internal network servers.</maml:para></maml:listItem><maml:listItem><maml:para>Whether you want to restrict communication from DirectAccess clients to only those servers that are members of specific security groups.</maml:para></maml:listItem><maml:listItem><maml:para>Whether you have network equipment that cannot forward IPsec-protected traffic.</maml:para></maml:listItem></maml:list><maml:para>On the DirectAccess Application Server Setup page, if you do not want DirectAccess clients to perform end-to-end authentication with internal network servers, select <maml:ui>Require no additional end-to-end authentication</maml:ui>.</maml:para><maml:para>If you want DirectAccess clients to perform end-to-end authentication for internal network servers, select <maml:ui>Allow selected servers to perform end-to-end authentication and traffic protection for the specified servers</maml:ui>, and then click <maml:ui>Add</maml:ui> to specify the security groups that contain the internal network servers.</maml:para><maml:para>To restrict the access of DirectAccess clients to the set of servers that are the members of the specified security groups, select <maml:ui>Allow access to only those servers in the selected security groups</maml:ui>. </maml:para><maml:para>It is not possible to use the DirectAccess Setup wizard to configure limited access to a specific set of servers without end-to-end authentication and optional data protection. To configure this scenario, you must modify the resulting connection security rules that are applied to DirectAccess clients. For more information, see the DirectAccess home page on Microsoft Technet (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=142598</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=142598"></maml:uri></maml:navigationLink>).</maml:para><maml:para>If you have network equipment that discards or cannot analyze IPsec-protected traffic, select <maml:ui>Configure the IPsec connection security rules on these servers to perform authentication without traffic protection</maml:ui>. With this setting enabled, DirectAccess clients and the specific internal network servers perform end-to-end IPsec authentication, but do not use IPsec protection to provide data integrity or privacy for the packets sent between DirectAccess clients and internal network servers.</maml:para></maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Use the DirectAccess Snap-in to Configure DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=d26beb27-2465-420c-a538-e46fc6dadee6"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Use Group Policy to Configure DirectAccess Clients</maml:title><maml:introduction>
<maml:para>Group Policy provides an object-based method to create, distribute, and apply DirectAccess settings to clients. The DirectAccess Setup wizard automatically creates Group Policy objects (GPOs) with the appropriate settings and applies them to the specified security groups.</maml:para>
<maml:para>For more information about using GPOs and settings in a customized or scripted setup, see the DirectAccess home page on Microsoft Technet (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=142598</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=142598"></maml:uri></maml:navigationLink>).</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Additional references</maml:title>
<maml:introduction>
<maml:list class="unordered">
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configuring DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=4326c738-9a48-4163-95c6-8cfec2f434e9"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
</maml:list>
</maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Troubleshooting DirectAccess</maml:title><maml:introduction>
<maml:para>This topic lists some common issues you might encounter when setting up or using DirectAccess.</maml:para>
<maml:para>For the most up-to-date troubleshooting information, see the DirectAccess home page on Microsoft Technet (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=142598</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=142598"></maml:uri></maml:navigationLink>).</maml:para>
<maml:para></maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>What problem are you having?</maml:title>
<maml:introduction>
<maml:list class="unordered">
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>I get the “The Internet interface must not be classified as a domain network” error message in step 2.</maml:linkText><maml:uri href="mshelp://windows/?id=66aab1fa-3f57-4254-8c20-a99608c738a9#BKMK_classified"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>A DirectAccess client does not have access to the internal network.</maml:linkText><maml:uri href="mshelp://windows/?id=66aab1fa-3f57-4254-8c20-a99608c738a9#BKMK_client_access"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>A DirectAccess client cannot access a resource on the internal network.</maml:linkText><maml:uri href="mshelp://windows/?id=66aab1fa-3f57-4254-8c20-a99608c738a9#BKMK_client_resource"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_classified">
<maml:title>I get the “The Internet interface must not be classified as a domain network” error message in step 2.</maml:title>
<maml:introduction>
<maml:list class="unordered">
<maml:listItem><maml:para><maml:phrase>Cause</maml:phrase>: A domain controller for the domain of which the DirectAccess server is a member is reachable on the network to which the selected Internet interface is attached.</maml:para></maml:listItem>
<maml:listItem><maml:para><maml:phrase>Solution</maml:phrase>: This error is most commonly encountered when the DirectAccess server is also configured as a domain controller, and then you try to run the DirectAccess Setup wizard. The DirectAccess server cannot be a domain controller. If the DirectAccess server is not a domain controller, select the correct Internet interface or determine why a domain controller can be located on network to which the selected Internet interface is attached. For more information, see <maml:navigationLink><maml:linkText>Checklist: Before You Configure DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=258acc73-4f0b-4016-a1a2-b5043eadaade"></maml:uri></maml:navigationLink> and <maml:navigationLink><maml:linkText>Checklist: Install and Configure Single-Server DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=4bac45a3-385e-4aaf-9b31-b857f2ee7775"></maml:uri></maml:navigationLink>.</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section address="BKMK_client_access">
<maml:title>A DirectAccess client does not have access to the internal network.</maml:title>
<maml:introduction>
<maml:list class="unordered">
<maml:listItem><maml:para><maml:phrase>Cause #1</maml:phrase>: The DirectAccess client is not a member of the configured security groups for DirectAccess clients.</maml:para></maml:listItem>
<maml:listItem><maml:para><maml:phrase>Solution #1</maml:phrase>: Verify that the correct security groups are configured in step 1 of the DirectAccess wizard and that the computer account of the DirectAccess client computer is a member of one of the configured groups. For more information, see <maml:navigationLink><maml:linkText>Configure DirectAccess Clients</maml:linkText><maml:uri href="mshelp://windows/?id=d81e40e9-3097-4a0d-949c-e16a7f317f2f"></maml:uri></maml:navigationLink>.</maml:para></maml:listItem>
<maml:listItem><maml:para><maml:phrase>Cause #2</maml:phrase>: Your Internet or internal network firewalls are blocking traffic to and from the DirectAccess server.</maml:para></maml:listItem>
<maml:listItem><maml:para><maml:phrase>Solution #2</maml:phrase>: See <maml:navigationLink><maml:linkText>Understanding DirectAccess Components</maml:linkText><maml:uri href="mshelp://windows/?id=2f5ff4e1-3c30-434e-9fc1-1d2bea6271be"></maml:uri></maml:navigationLink> for information about configuring your Internet and internal network firewalls.</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section address="BKMK_client_resource">
<maml:title>A DirectAccess client cannot access a resource on the internal network.</maml:title>
<maml:introduction>
<maml:list class="unordered">
<maml:listItem><maml:para><maml:phrase>Cause #1</maml:phrase>: The resource on the internal network is not Internet Protocol version 6 (IPv6)-capable.</maml:para></maml:listItem>
<maml:listItem><maml:para><maml:phrase>Solution #1</maml:phrase>: To access a resource on the internal network, the resource must either be IPv6-capable, which requires that the computer and the application making the resource available are both IPv6-capable, or that you use a Network Address Translation-Port Translation (NAT-PT) device between the DirectAccess client and the resource. For more information, see <maml:navigationLink><maml:linkText>Understanding DirectAccess Components</maml:linkText><maml:uri href="mshelp://windows/?id=2f5ff4e1-3c30-434e-9fc1-1d2bea6271be"></maml:uri></maml:navigationLink>.</maml:para></maml:listItem>
<maml:listItem><maml:para><maml:phrase>Cause #2</maml:phrase>: The Name Resolution Policy Table (NRPT) is configured incorrectly.</maml:para></maml:listItem>
<maml:listItem><maml:para><maml:phrase>Solution #2</maml:phrase>: To determine where to send Domain Name System (DNS) name query requests, the DirectAccess client uses the NRPT. If the name of an internal network resource server is not matched to an entry in the NRPT, the DirectAccess client uses Internet-facing DNS servers and other methods to resolve the name. Verify the NRPT has the correct entries as configured in step 3 of the DirectAccess Setup wizard. For more information, see <maml:navigationLink><maml:linkText>Identify Infrastructure Servers for DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=80804f5b-78af-46c4-951c-6d9213ce226e"></maml:uri></maml:navigationLink>.</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections></maml:section></maml:sections></maml:content><maml:relatedLinks type="seeAlso"><maml:title>See Also</maml:title><maml:navigationLink><maml:linkText>Understanding DirectAccess Components</maml:linkText><maml:uri href="mshelp://windows/?id=2f5ff4e1-3c30-434e-9fc1-1d2bea6271be"></maml:uri></maml:navigationLink><maml:navigationLink><maml:linkText>Checklist: Before You Configure DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=258acc73-4f0b-4016-a1a2-b5043eadaade"></maml:uri></maml:navigationLink><maml:navigationLink><maml:linkText>Checklist: Install and Configure Single-Server DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=4bac45a3-385e-4aaf-9b31-b857f2ee7775"></maml:uri></maml:navigationLink></maml:relatedLinks></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Configure the DirectAccess Server</maml:title><maml:introduction>
<maml:para>In this step of the DirectAccess Setup wizard (step 2), you configure settings for the DirectAccess server. For the initial configuration of DirectAccess server settings in the DirectAccess snap-in, expand the <maml:ui>DirectAccess</maml:ui> node, click the <maml:ui>Setup</maml:ui> node, and then click <maml:ui>Configure</maml:ui> for step 2. You cannot click <maml:ui>Configure</maml:ui> for step 2 until you have finished the configuration for step 1. To change DirectAccess server settings, click <maml:ui>Edit</maml:ui> for step 2.</maml:para>
<maml:para>Before performing step 2, see <maml:navigationLink><maml:linkText>Checklist: Install and Configure Single-Server DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=4bac45a3-385e-4aaf-9b31-b857f2ee7775"></maml:uri></maml:navigationLink> for DirectAccess server hardware and configuration requirements.</maml:para>
<maml:para>When you click <maml:ui>Configure</maml:ui> or <maml:ui>Edit</maml:ui> for step 2, there are pages in the wizard to configure connectivity, IPv6 prefixes for your organization if you have already deployed IPv6, and certificate use.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Connectivity</maml:title>
<maml:introduction>
<maml:para>On the Connectivity page, you must specify the network connection (interface) that is attached to the Internet and the network connection that is attached to your internal network. You can click <maml:ui>Details</maml:ui> to obtain the configuration of the selected network connection.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title><maml:para>If you are testing DirectAccess on your internal network, the Internet network connection must not be connected to a network that contains a domain controller.</maml:para></maml:alertSet>
<maml:para>On the Connectivity page, you can also specify whether you require remote users to use smart cards when performing authentication with the DirectAccess server. For more information about smart cards, see Windows Authentication (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=146076</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=146076"></maml:uri></maml:navigationLink>).</maml:para>
</maml:introduction>
</maml:section><maml:section>
<maml:title>Prefix configuration</maml:title>
<maml:introduction>
<maml:para>If you already have native IPv6 deployed on your network, the Prefix Configuration page allows you to specify the 48-bit IPv6 address prefix that your entire internal network uses. You must use a 48-bit prefix.</maml:para>
<maml:para>The DirectAccess Setup wizard determines a default prefix based on the first global IPv6 address that is assigned to your internal network interface. If your internal network interface has multiple IPv6 addresses assigned and you do not want to use the prefix of the first address that is assigned to your internal network interface, you can manually specify the correct prefix. To view the set of IPv6 addresses assigned to your internal network interface, click <maml:ui>Details</maml:ui> on the Connectivity page.</maml:para>
<maml:para>The DirectAccess Setup wizard also determines a 64-bit prefix for IP-HTTPS connections. You must use a 64-bit prefix. The DirectAccess Setup wizard determines a default prefix based on the 48-bit internal network prefix, and then chooses a value for the Subnet ID portion of the prefix (the fourth block of the 64-bit prefix). You can also manually specify the correct 64-bit prefix based on your subnetting scheme. The 64-bit prefix must be based on the 48-bit prefix for the internal network.</maml:para>
</maml:introduction>
</maml:section><maml:section>
<maml:title>Certificate components</maml:title>
<maml:introduction>
<maml:para>On the Certificate Components page, you must specify the following:</maml:para>
<maml:list class="unordered">
<maml:listItem><maml:para>The certificate for the root or intermediate certification authority (CA) in the certification path of the computer certificates that are installed on DirectAccess clients. The DirectAccess server uses this root or intermediate CA certificate to validate the computer certificates sent by the DirectAccess client computers during the initial connection to the DirectAccess server.</maml:para></maml:listItem>
<maml:listItem><maml:para>A certificate that the DirectAccess server uses for connectivity over IP-HTTPS. Because DirectAccess clients perform certificate revocation checking on the HTTPS certificate submitted by the DirectAccess server, you must ensure that the certificate revocation list (CRL) distribution points configured in this certificate are accessible and available from the Internet. If these CRL distribution points are not accessible to DirectAccess clients, authentication fails for IP-HTTPS-based DirectAccess connections. For information about configuring CRL distribution points for Active Directory Certificate Services (AD CS), see Specify CRL Distribution Points (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=145848</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=145848"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem>
</maml:list>
</maml:introduction>
</maml:section><maml:section>
<maml:title>Additional references</maml:title>
<maml:introduction>
<maml:list class="unordered">
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Use the DirectAccess Snap-in to Configure DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=d26beb27-2465-420c-a538-e46fc6dadee6"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
</maml:list>
</maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Identify Infrastructure Servers for DirectAccess</maml:title><maml:introduction><maml:para>In this step of the DirectAccess Setup wizard (step 3), you configure settings for infrastructure servers. For the initial configuration of DirectAccess server settings in the DirectAccess snap-in, expand the <maml:ui>DirectAccess</maml:ui> node, click the <maml:ui>Setup</maml:ui> node, and then click <maml:ui>Configure</maml:ui> for step 3. You cannot click <maml:ui>Configure</maml:ui> for step 3 until you have finished the configuration for step 2. To change infrastructure server settings, click <maml:ui>Edit</maml:ui> for step 3.</maml:para><maml:para>Before performing step 3, determine the following:</maml:para><maml:list class="unordered"><maml:listItem><maml:para>Whether a highly available internal network Web server can act as the DirectAccess network location server and has an HTTPS-based uniform resource locator (URL) on that Web server. This is optional but highly recommended. </maml:para></maml:listItem><maml:listItem><maml:para>The set of Domain Name System (DNS) namespaces that correspond to internal network resources (for example, contoso.com).</maml:para></maml:listItem><maml:listItem><maml:para>The Internet Protocol version 4 (IPv4) or Internet Protocol version 6 (IPv6) addresses of the internal network DNS servers that you want answering name queries for DirectAccess clients.</maml:para></maml:listItem><maml:listItem><maml:para>The host names, IPv4 addresses, or IPv6 addresses of the management servers on your internal network that you want to initiate communications with DirectAccess clients. Management servers can include servers that distribute updates or perform software or hardware inventories.</maml:para></maml:listItem></maml:list><maml:para>When you click <maml:ui>Configure</maml:ui> or <maml:ui>Edit</maml:ui> for step 3, there are pages in the wizard to configure the network location server, DNS and domain controllers, and management servers.</maml:para></maml:introduction><maml:content><maml:sections><maml:section><maml:title>Location</maml:title><maml:introduction><maml:para>On the Location page, you specify the network location server, which is a server that a DirectAccess client uses to determine whether it is located on the internal network or the Internet. If the DirectAccess client can reach the network location server and access a specified Web page, the DirectAccess client determines that is on the internal network and DirectAccess functionality is not used.</maml:para><maml:para>You can specify whether the network location server function is on the DirectAccess server or another server on your internal network.</maml:para><maml:list class="unordered"><maml:listItem><maml:para>If the network location server function is not on the DirectAccess server (recommended), you must type an HTTPS-based URL of a Web page on that server.</maml:para></maml:listItem><maml:listItem><maml:para>If the network location server function is on the DirectAccess server, you must specify the certificate that is used for authentication of HTTPS-based connections between DirectAccess clients and the DirectAccess server.</maml:para></maml:listItem></maml:list><maml:para>In both cases, the network location server must be highly available and is a critical element of the DirectAccess infrastructure. If the network location server cannot be reached on the internal network, DirectAccess clients will enable DirectAccess functionality while they are located on the internal network, which can impair their ability to reach internal network resources.</maml:para></maml:introduction></maml:section><maml:section><maml:title>DNS and domain controller</maml:title><maml:introduction><maml:para>On the DNS and Domain Controller page, you configure the Name Resolution Policy Table (NRPT) and DirectAccess client name resolution behavior.</maml:para></maml:introduction><maml:sections><maml:section><maml:title>NRPT</maml:title><maml:introduction><maml:para>The NRPT is a table that DirectAccess clients use to determine where to send their DNS name requests. Entries consist of a DNS domain name that can represent the fully qualified domain name (FQDN) of a specific computer (such as emailsrv21.europe.contoso.com) or a portion of the DNS namespace (such as contoso.com) and a corresponding set of addresses for DNS servers that serve the FQDN or namespace. If no DNS server addresses are specified, the entry is an exemption entry. If a DNS name matches an entry in the NRPT containing the addresses of DNS servers, the DirectAccess client sends the name query to the specified internal network DNS servers. If a DNS name matches an entry in the NRPT that does not contain addresses of DNS servers or does not match an entry in the NRPT, the DirectAccess client sends the name query to an Internet-facing DNS server. </maml:para><maml:para>The NRPT might have an existing entry based on the DNS suffix and DNS server configuration of the DirectAccess server. The NRPT might also have an exemption entry corresponding to the network location server. This entry is added so that DirectAccess clients that are on the Internet never attempt to resolve the name of the network location server by using an internal network DNS server.</maml:para><maml:para>To add more entries, right-click an empty row, and then click <maml:ui>New</maml:ui>. Alternately, you can double-click an empty row. In the <maml:ui>Namespace Access Information</maml:ui> dialog box, type the DNS suffix and specify the set of IPv4 or IPv6 addresses for the internal network DNS servers that resolve names ending with the DNS suffix. After you specify the IPv4 or IPv6 addresses, click <maml:ui>Validate</maml:ui> to test whether the DNS servers are running and reachable from the DirectAccess server.</maml:para><maml:para>To edit an entry in the NRPT, right-click the entry, and then click <maml:ui>Edit</maml:ui>. Alternately, you can double-click the existing entry. To delete an entry from the NRPT, right-click the entry, and then click <maml:ui>Delete</maml:ui>.</maml:para></maml:introduction></maml:section><maml:section><maml:title>Name resolution behavior</maml:title><maml:introduction><maml:para>On the DNS and Domain Controller page, you can also specify the local name resolution behavior of DirectAccess clients. <maml:newTerm>Local name resolution</maml:newTerm> is the use of name resolution techniques that do not include checking the entries in the DNS resolver cache and the querying of internal network DNS servers. These techniques include using Internet-facing DNS servers and querying the local subnet.</maml:para><maml:para>You have three options:</maml:para><maml:list class="unordered"><maml:listItem><maml:para><maml:ui>Use local name resolution only if the internal network DNS servers determined that the name does not exist</maml:ui></maml:para><maml:para>This is the most secure option because the DirectAccess client will only send DNS queries to Internet-facing DNS servers for server names that cannot be resolved.</maml:para></maml:listItem><maml:listItem><maml:para><maml:ui>Use local name resolution if the internal network DNS servers determined that the name does not exist or if the internal network DNS servers are not reachable and the DirectAccess client computer is on a private network</maml:ui></maml:para><maml:para>This option is recommended because it allows the resolution of names on a separate internal network.</maml:para></maml:listItem><maml:listItem><maml:para><maml:ui>Use local name resolution if there is any type of error when attempting to resolve the name using internal network DNS servers</maml:ui></maml:para><maml:para>This is the least secure option because the names of internal network servers that the DirectAccess client is attempting to resolve can be sent out to Internet-facing DNS servers, allowing an eavesdropper between the DirectAccess client and the Internet-facing DNS server to determine the names of internal network servers.</maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:section><maml:section><maml:title>Management</maml:title><maml:introduction><maml:para>On the Management page, you configure the list of IPv4 or IPv6 addresses of internal network servers that you want to initiate communications with DirectAccess clients. These servers are typically management servers that contact DirectAccess client computers to perform management functions such as software or hardware inventory assessments or to install updates. Only the DirectAccess clients that are members of the security groups specified in step 1 of the DirectAccess Setup wizard can be contacted by the management servers specified on the Management page.</maml:para><maml:para>To add a management server, right-click an empty row, and then click <maml:ui>New</maml:ui>. Alternately, you can double-click an empty row. In the <maml:ui>IPv4 Address</maml:ui> or <maml:ui>IPv6 Address/Prefix</maml:ui> dialog boxes, you can obtain an IPv4 or IPv6 address from the host name of the server or type it manually:</maml:para><maml:list class="unordered"><maml:listItem><maml:para>To obtain an IPv4 or IPv6 address from the host name, select <maml:ui>Host name of the specific machine</maml:ui>, and then type the name of the server. Click <maml:ui>Check Name</maml:ui> to resolve the name to its registered addresses. Click one of the addresses, and then click <maml:ui>OK</maml:ui>.</maml:para></maml:listItem><maml:listItem><maml:para>To manually specify an IPv4 address, select <maml:ui>IPv4 address</maml:ui> in the <maml:ui>IPv4 Address</maml:ui> dialog box, and then type the address. When you are done, click <maml:ui>OK</maml:ui>.</maml:para></maml:listItem><maml:listItem><maml:para>To manually specify an IPv6 address or prefix, select <maml:ui>IPv6 address or IPv6 prefix</maml:ui> in the <maml:ui>IPv6 Address/Prefix</maml:ui> dialog box, and then type the address or prefix. When you are done, click <maml:ui>OK</maml:ui>.</maml:para></maml:listItem></maml:list><maml:para>To edit an IPv4 address or an IPv6 address or prefix entry in the list, right-click the entry, and then click <maml:ui>Edit</maml:ui>. To delete an entry, right-click the entry, and then click <maml:ui>Delete</maml:ui>.</maml:para></maml:introduction></maml:section><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Use the DirectAccess Snap-in to Configure DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=d26beb27-2465-420c-a538-e46fc6dadee6"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Resources for DirectAccess</maml:title><maml:introduction>
<maml:para>For more information, see the DirectAccess home page on Microsoft Technet (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=142598</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=142598"></maml:uri></maml:navigationLink>).</maml:para>
<maml:para>For links to additional DirectAccess resources, see the Microsoft DirectAccess Web page (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?Linkid=140994</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?Linkid=140994"></maml:uri></maml:navigationLink>).</maml:para>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Open the DirectAccess Snap-in</maml:title><maml:introduction>
<maml:para>Use these procedures to open the DirectAccess Microsoft Management Console (MMC) snap-in.</maml:para>
<maml:para>Membership in the local <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure.</maml:para>
<maml:procedure><maml:title>To open the DirectAccess snap-in by using Server Manager</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To start Server Manager, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Server Manager</maml:ui>.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>Expand <maml:ui>Features</maml:ui>, and then click <maml:ui>DirectAccess</maml:ui>.</maml:para></maml:section></maml:sections></maml:step></maml:procedure>
<maml:procedure><maml:title>To open the DirectAccess snap-in as a stand-alone console</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>Click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DirectAccess Management</maml:ui>.</maml:para></maml:section></maml:sections></maml:step></maml:procedure>
<maml:procedure><maml:title>To open the DirectAccess snap-in from the Windows shell</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>Click <maml:ui>Start</maml:ui>, type <maml:userInput>damgmt.msc</maml:userInput>, and then press ENTER.</maml:para></maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configuring DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=4326c738-9a48-4163-95c6-8cfec2f434e9"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Use the DirectAccess Snap-in to Configure DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=d26beb27-2465-420c-a538-e46fc6dadee6"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
</maml:list>
</maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Use the DirectAccess Snap-in to Monitor DirectAccess</maml:title><maml:introduction>
<maml:para>The DirectAccess snap-in in Windows Server® 2008 R2 allows you to monitor the components of DirectAccess that are running on a DirectAccess server. To view the components and their status, click the <maml:ui>Monitoring</maml:ui> node in the DirectAccess snap-in. The contents pane displays the overall status of the server and the status of the following DirectAccess components:</maml:para>
<maml:list class="unordered">
<maml:listItem><maml:para>Teredo Relay</maml:para></maml:listItem>
<maml:listItem><maml:para>Teredo Server</maml:para></maml:listItem>
<maml:listItem><maml:para>6to4</maml:para></maml:listItem>
<maml:listItem><maml:para>IP-HTTPS</maml:para></maml:listItem>
<maml:listItem><maml:para>ISATAP</maml:para></maml:listItem>
<maml:listItem><maml:para>Network Security</maml:para></maml:listItem>
<maml:listItem><maml:para>DNS Server</maml:para></maml:listItem>
</maml:list>
<maml:para>The status of each component is refreshed every 10 seconds. The refresh interval is not configurable. For all of the components except the DNS Server component, click <maml:ui>Details</maml:ui> to view the Performance Monitor snap-in with preconfigured counters for the selected component.</maml:para>
<maml:para>Each of the components can be in one of the following states: Active, idle, warning, error, or unconfigured. The system state reflects the worst state of its components. For example, if both warning and error states are reported by components, the system state is in the error state.</maml:para>
<maml:para>To configure DirectAccess monitoring settings, right-click the <maml:ui>Monitor</maml:ui> node, and then click <maml:ui>Configure</maml:ui>. In the <maml:ui>DirectAccess Monitoring Setup</maml:ui> dialog box, you can configure the Internet and internal network interfaces and the Internet Protocol version 6 (IPv6) addresses of internal network Domain Name System (DNS) servers.</maml:para>
<maml:para>For more information about the states of the DirectAccess server components and the Performance Monitor counters, see the DirectAccess home page on Microsoft Technet (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=142598</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=142598"></maml:uri></maml:navigationLink>).</maml:para>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>DirectAccess</maml:title><maml:introduction>
<maml:para>DirectAccess enables remote users to securely access shared resources, Web sites, and applications on an internal network without connecting to a virtual private network (VPN). DirectAccess establishes bi-directional connectivity with an internal network every time a DirectAccess-enabled computer is connected to the Internet.</maml:para>
<maml:list class="unordered">
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>DirectAccess Overview</maml:linkText><maml:uri href="mshelp://windows/?id=1326e2b8-80d0-4528-a979-845080e353a7"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Understanding DirectAccess Components</maml:linkText><maml:uri href="mshelp://windows/?id=2f5ff4e1-3c30-434e-9fc1-1d2bea6271be"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Understanding DirectAccess Deployment Models</maml:linkText><maml:uri href="mshelp://windows/?id=c17ef9f1-d277-43ff-b899-6338ead04b1d"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Checklist: Before You Configure DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=258acc73-4f0b-4016-a1a2-b5043eadaade"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Checklist: Install and Configure Single-Server DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=4bac45a3-385e-4aaf-9b31-b857f2ee7775"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configuring DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=4326c738-9a48-4163-95c6-8cfec2f434e9"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Use the DirectAccess Snap-in to Monitor DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=a2786de8-cac8-44c5-9f48-449c00889921"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Troubleshooting DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=66aab1fa-3f57-4254-8c20-a99608c738a9"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Resources for DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=8ec2d220-eef2-4fc3-91c9-890d6b13f08c"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Install DirectAccess</maml:title><maml:introduction>
<maml:para>You can install DirectAccess by using the Add Features wizard in Server Manager or in the <maml:ui>Initial Configuration Tasks</maml:ui> window.</maml:para>
<maml:para>Membership in the local <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure.</maml:para>
<maml:procedure><maml:title>To install DirectAccess</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>Perform one of the following two steps to open the Add Features Wizard:</maml:para>
<maml:list class="unordered">
<maml:listItem><maml:para>Open Server Manager. In the main window, under <maml:ui>Features Summary</maml:ui>, click <maml:ui>Add features</maml:ui>.</maml:para></maml:listItem>
<maml:listItem><maml:para>In the <maml:ui>Initial Configuration Tasks</maml:ui> window that appears when you first log on, under <maml:ui>Customize This Server</maml:ui>, click <maml:ui>Add features</maml:ui>.</maml:para></maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>On the <maml:ui>Select Features</maml:ui> page, select <maml:ui>DirectAccess Management Console</maml:ui>.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the <maml:ui>Add Features Wizard</maml:ui> window, click <maml:ui>Add Required Features</maml:ui>.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>On the <maml:ui>Select Features</maml:ui> page, click <maml:ui>Next</maml:ui>.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>On the <maml:ui>Confirm Installation Selections</maml:ui> page, click <maml:ui>Install</maml:ui>.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>On the <maml:ui>Installation Results</maml:ui> page, review the status, and then click <maml:ui>Close</maml:ui>.</maml:para></maml:section></maml:sections></maml:step></maml:procedure>
<maml:alertSet class="note"><maml:title>Note </maml:title><maml:para>After you complete the installation, DirectAccess Management Console appears in the list of features in Server Manager. You must now run the DirectAccess Setup wizard to configure your server for DirectAccess. For more information, see <maml:navigationLink><maml:linkText>Checklist: Install and Configure Single-Server DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=4bac45a3-385e-4aaf-9b31-b857f2ee7775"></maml:uri></maml:navigationLink> and <maml:navigationLink><maml:linkText>Use the DirectAccess Snap-in to Configure DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=d26beb27-2465-420c-a538-e46fc6dadee6"></maml:uri></maml:navigationLink>.</maml:para>
</maml:alertSet>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configuring DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=4326c738-9a48-4163-95c6-8cfec2f434e9"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
</maml:list>
</maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Use Netsh to Configure DirectAccess</maml:title><maml:introduction>
<maml:para>You can use the Network Shell (Netsh) command-line tool to create customized and scripted DirectAccess deployments. Scripts that use Netsh commands provide you with the flexibility to create unique DirectAccess deployment solutions.</maml:para>
<maml:para>The following Netsh.exe contexts can be used to configure interface, IPv6, IPv6 transition technology, IPsec, or firewall settings:</maml:para>
<maml:list class="unordered">
<maml:listItem><maml:para>interface</maml:para></maml:listItem>
<maml:listItem><maml:para>interface ipv6</maml:para></maml:listItem>
<maml:listItem><maml:para>interface 6to4</maml:para></maml:listItem>
<maml:listItem><maml:para>interface isatap</maml:para></maml:listItem>
<maml:listItem><maml:para>interface teredo</maml:para></maml:listItem>
<maml:listItem><maml:para>interface httpstunnel</maml:para></maml:listItem>
<maml:listItem><maml:para>http</maml:para></maml:listItem>
<maml:listItem><maml:para>advfirewall</maml:para></maml:listItem>
<maml:listItem><maml:para>ipsecdosprotection</maml:para></maml:listItem>
</maml:list>
<maml:para>For more information about using Netsh to customize a DirectAccess configuration, see the DirectAccess home page on Microsoft Technet (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=142598</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=142598"></maml:uri></maml:navigationLink>).</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Additional references</maml:title>
<maml:introduction>
<maml:list class="unordered">
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configuring DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=4326c738-9a48-4163-95c6-8cfec2f434e9"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
</maml:list>
</maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding DirectAccess Deployment Models</maml:title><maml:introduction>
<maml:para>DirectAccess can be deployed using a combination of the following:</maml:para>
<maml:list class="unordered">
<maml:listItem><maml:para>An access model, which defines the types of internal network resources that a DirectAccess client can access and whether the DirectAccess client and internal network server perform authentication and traffic protection by using Internet Protocol security (IPsec)</maml:para></maml:listItem>
<maml:listItem><maml:para>A scalability model, which defines how many DirectAccess servers that you need to scale your DirectAccess infrastructures to meet the demands of DirectAccess clients</maml:para></maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Access models</maml:title><maml:introduction>
<maml:para>You can deploy a DirectAccess server by using the DirectAccess Setup wizard with the following access models:</maml:para>
<maml:list class="unordered">
<maml:listItem><maml:para>End-to-edge</maml:para></maml:listItem>
<maml:listItem><maml:para>End-to-end for selected servers</maml:para></maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>End-to-edge</maml:title>
<maml:introduction>
<maml:para>The end-to-edge access model allows DirectAccess clients to connect to all of the resources inside the internal network but does not use IPsec to protect the end-to-end communication with internal network servers. IPsec-based tunnel policies require authentication and encryption and the IPsec sessions terminate by default at the DirectAccess server. This access model works with network servers running Windows Server 2003 that do not support policy-based IPsec protection of IPv6 traffic.</maml:para>
</maml:introduction>
</maml:section>
<maml:section>
<maml:title>End-to-end for selected servers</maml:title>
<maml:introduction>
<maml:para>In addition to the encryption of traffic between the DirectAccess client and server over the Internet, the end-to-end for selected servers access model also ensures that communications between the DirectAccess client and internal network servers are authenticated and protected. This allows the DirectAccess client to confirm that they are communicating with their intended servers.</maml:para>
<maml:para>For this access model, you can also specify the use of authentication without protection, which uses the new <maml:ui>Authenticate only (Null Encapsulation)</maml:ui> IPsec policy option available in Windows 7 and Windows Server 2008 R2. Authentication without protection requires that the DirectAccess client and internal network resource perform IPsec peer authentication, but subsequent data packets exchanged are not protected with an IPsec header. This option might be needed for networks that contain packet processing or forwarding devices that cannot parse or forward IPsec-protected traffic.</maml:para>
</maml:introduction>
</maml:section>
</maml:sections>
</maml:section><maml:section><maml:title>Scalability models</maml:title>
<maml:introduction><maml:para>DirectAccess can be set up using a single server, which allows DirectAccess to provide all of the baseline functionality required to operate. However, because the purpose of DirectAccess is to provide connectivity to remote users, reliability and scalability with multiple servers and division of tasks are also important.</maml:para></maml:introduction>
<maml:sections>
<maml:section><maml:title>Single server</maml:title><maml:introduction>
<maml:para>In the single server scenario, all of the components of DirectAccess are hosted on the same server computer. The benefit of this scenario is a relatively simple deployment, requiring only a single DirectAccess server. The limitations of this scenario are a single point of failure and server performance bottlenecks can limit the maximum number of concurrent DirectAccess connections. The DirectAccess Setup wizard configures the single server scenario.</maml:para>
</maml:introduction></maml:section>
<maml:section><maml:title>Multiple servers</maml:title><maml:introduction>
<maml:para>If high availability is a priority, multiple servers can minimize any network outages to approximately two minutes. To achieve this, a minimum of four servers are required for a deployment. A Network Load Balancing (NLB) cluster configured with two servers provide IPv6 connectivity to DirectAccess clients on the Internet. Two servers provide IPsec session termination and failover. If any server fails, the service is restored because the connection is re-routed through an operational server.</maml:para>
<maml:para>For more information about the multiple-server scalability model and how to configure the components of DirectAccess on different servers, see the DirectAccess home page on Microsoft Technet (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=142598</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=142598"></maml:uri></maml:navigationLink>).</maml:para>
</maml:introduction></maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Use the DirectAccess Snap-in to Configure DirectAccess</maml:title><maml:introduction>
<maml:para>The DirectAccess Setup wizard has four steps for the initial configuration that must be followed in order:</maml:para>
<maml:list class="unordered">
<maml:listItem><maml:para>Step 1: <maml:navigationLink><maml:linkText>Configure DirectAccess Clients</maml:linkText><maml:uri href="mshelp://windows/?id=d81e40e9-3097-4a0d-949c-e16a7f317f2f"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para>Step 2: <maml:navigationLink><maml:linkText>Configure the DirectAccess Server</maml:linkText><maml:uri href="mshelp://windows/?id=73935766-228a-465f-906c-5f5d131ebfc9"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para>Step 3: <maml:navigationLink><maml:linkText>Identify Infrastructure Servers for DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=80804f5b-78af-46c4-951c-6d9213ce226e"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para>Step 4: <maml:navigationLink><maml:linkText>Identify Application Servers for DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=5b760f0b-07d1-4f1e-8f1b-d9078175578c"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
</maml:list>
<maml:para>After you complete the four steps, click <maml:ui>Finish</maml:ui> to display the <maml:ui>DirectAccess Review</maml:ui> dialog box, which summarizes the settings. To configure the DirectAccess server and create Group Policy objects (GPOs) and settings, click <maml:ui>Apply</maml:ui>.</maml:para>
<maml:para>To reset the default DirectAccess Setup wizard settings, right-click the <maml:ui>Setup</maml:ui> node in the DirectAccess snap-in, and then click <maml:ui>Reset console settings</maml:ui>. When you reset the settings, you cannot load a previous configuration that is stored in an Extensible Markup Language (XML) file.</maml:para>
<maml:para>To reset the default settings for the DirectAccess Setup wizard, DirectAccess server settings, and GPO settings, right-click the <maml:ui>Setup</maml:ui> node in the DirectAccess snap-in, and then click <maml:ui>Undo configuration</maml:ui>. The GPOs that were previously created by the DirectAccess Setup wizard are not removed, but the DirectAccess settings within them are removed.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:para><maml:navigationLink><maml:linkText>Configuring DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=4326c738-9a48-4163-95c6-8cfec2f434e9"></maml:uri></maml:navigationLink></maml:para>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Configure DirectAccess Clients</maml:title><maml:introduction><maml:para>In this step of the DirectAccess Setup wizard (step 1), you configure settings for DirectAccess clients. For the initial configuration of DirectAccess client settings in the DirectAccess snap-in, expand the <maml:ui>DirectAccess</maml:ui> node, click the <maml:ui>Setup</maml:ui> node, and then click <maml:ui>Configure</maml:ui> for step 1.</maml:para><maml:alertSet class=""><maml:title></maml:title><maml:para>The security groups containing the computer accounts of DirectAccess clients must exist before you configure step 1. For more information, see Create a New Group (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=145847</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=145847"></maml:uri></maml:navigationLink>).</maml:para></maml:alertSet><maml:para>On the DirectAccess Client Setup page, click <maml:ui>Add</maml:ui> and specify the Active Directory Domain Services (AD DS) security groups that contain the computer accounts for the computers that you want enabled as DirectAccess clients. These computers receive Group Policy settings that configure DirectAccess behavior. Computers that are not members of the specified security groups are not enabled as DirectAccess clients and cannot access the internal network by using the DirectAccess server. When you have specified the groups, click <maml:ui>Finish</maml:ui>. To change the DirectAccess client settings, click <maml:ui>Edit</maml:ui> for step 1.</maml:para></maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Use the DirectAccess Snap-in to Configure DirectAccess</maml:linkText><maml:uri href="mshelp://windows/?id=d26beb27-2465-420c-a538-e46fc6dadee6"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><?xml version="1.0" encoding="utf-8"?>
<HelpCollection Id="da_snap" DTDVersion="1.0" FileVersion="" LangId="1033" Copyright="© 2005 Microsoft Corporation. All rights reserved." Title="DirectAccess Management Console" xmlns="http://schemas.microsoft.com/help/collection/2004/11">
<CompilerOptions CompileResult="H1S" CreateFullTextIndex="Yes" BreakerId="Microsoft.NLG.en.WordBreaker">
<IncludeFile File="da_snap.H1F" />
</CompilerOptions>
<TOCDef File="da_snap.H1T" Id="da_snap_TOC" />
<VTopicDef File="da_snap.H1V" />
<KeywordIndexDef File="da_snap_AssetId.H1K" />
<KeywordIndexDef File="da_snap_BestBet.H1K" />
<KeywordIndexDef File="da_snap_LinkTerm.H1K" />
<KeywordIndexDef File="da_snap_SubjectTerm.H1K" />
<ItemMoniker Name="!DefaultTOC" ProgId="HxDs.HxHierarchy" InitData="AnyString" />
<ItemMoniker Name="!DefaultFullTextSearch" ProgId="HxDs.HxFullTextSearch" InitData="AnyString" />
<ItemMoniker Name="!DefaultAssetIdIndex" ProgId="HxDs.HxIndex" InitData="AssetId" />
<ItemMoniker Name="!DefaultBestBetIndex" ProgId="HxDs.HxIndex" InitData="BestBet" />
<ItemMoniker Name="!DefaultAssociativeIndex" ProgId="HxDs.HxIndex" InitData="LinkTerm" />
<ItemMoniker Name="!DefaultKeywordIndex" ProgId="HxDs.HxIndex" InitData="SubjectTerm" />
</HelpCollection><?xml version="1.0" encoding="utf-8"?>
<HelpFileList xmlns="http://schemas.microsoft.com/help/filelist/2004/11">
<File Url="assets\1326e2b8-80d0-4528-a979-845080e353a7.xml" />
<File Url="assets\258acc73-4f0b-4016-a1a2-b5043eadaade.xml" />
<File Url="assets\2f5ff4e1-3c30-434e-9fc1-1d2bea6271be.xml" />
<File Url="assets\4326c738-9a48-4163-95c6-8cfec2f434e9.xml" />
<File Url="assets\4acdb444-bd72-465c-b651-096d840117b4.xml" />
<File Url="assets\4bac45a3-385e-4aaf-9b31-b857f2ee7775.xml" />
<File Url="assets\5b760f0b-07d1-4f1e-8f1b-d9078175578c.xml" />
<File Url="assets\61fb90b0-27ad-4728-904c-8d1320452326.xml" />
<File Url="assets\66aab1fa-3f57-4254-8c20-a99608c738a9.xml" />
<File Url="assets\73935766-228a-465f-906c-5f5d131ebfc9.xml" />
<File Url="assets\80804f5b-78af-46c4-951c-6d9213ce226e.xml" />
<File Url="assets\8ec2d220-eef2-4fc3-91c9-890d6b13f08c.xml" />
<File Url="assets\9d09c482-57c6-4608-91a6-fff05d869039.xml" />
<File Url="assets\a2786de8-cac8-44c5-9f48-449c00889921.xml" />
<File Url="assets\a9228f5c-1a4f-48c8-b413-90b49885c006.xml" />
<File Url="assets\b0c4f126-7d92-4f4b-b3ba-8042a34b8e64.xml" />
<File Url="assets\bba98946-c8ab-488c-b080-f753fb7e40f0.xml" />
<File Url="assets\c17ef9f1-d277-43ff-b899-6338ead04b1d.xml" />
<File Url="assets\d26beb27-2465-420c-a538-e46fc6dadee6.xml" />
<File Url="assets\d81e40e9-3097-4a0d-949c-e16a7f317f2f.xml" />
</HelpFileList><?xml version="1.0" encoding="utf-8"?>
<VTopicSet DTDVersion="1.0" xmlns="http://schemas.microsoft.com/help/vtopic/2004/11">
<Vtopic Url="assets\1326e2b8-80d0-4528-a979-845080e353a7.xml" RLTitle="DirectAccess Overview">
<Attr Name="assetid" Value="1326e2b8-80d0-4528-a979-845080e353a7" />
<Keyword Index="AssetId" Term="1326e2b8-80d0-4528-a979-845080e353a7" />
<Keyword Index="AssetId" Term="1326e2b8-80d0-4528-a979-845080e353a71033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="desktop and end-user support professionals" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Product help, including procedures and conceptual information, about DirectAccess, an IPv6-based remote access feature in Windows Server 2008 R2. " />
<Attr Name="subject_serverRole" Value="Network Access (VPN, RAS)" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="1326e2b8-80d0-4528-a979-845080e353a7" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\258acc73-4f0b-4016-a1a2-b5043eadaade.xml" RLTitle="Checklist: Before You Configure DirectAccess">
<Attr Name="assetid" Value="258acc73-4f0b-4016-a1a2-b5043eadaade" />
<Keyword Index="AssetId" Term="258acc73-4f0b-4016-a1a2-b5043eadaade" />
<Keyword Index="AssetId" Term="258acc73-4f0b-4016-a1a2-b5043eadaade1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="desktop and end-user support professionals" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Product help, including procedures and conceptual information, about DirectAccess, an IPv6-based remote access feature in Windows Server 2008 R2. " />
<Attr Name="subject_serverRole" Value="Network Access (VPN, RAS)" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="258acc73-4f0b-4016-a1a2-b5043eadaade" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\2f5ff4e1-3c30-434e-9fc1-1d2bea6271be.xml" RLTitle="Understanding DirectAccess Components">
<Attr Name="assetid" Value="2f5ff4e1-3c30-434e-9fc1-1d2bea6271be" />
<Keyword Index="AssetId" Term="2f5ff4e1-3c30-434e-9fc1-1d2bea6271be" />
<Keyword Index="AssetId" Term="2f5ff4e1-3c30-434e-9fc1-1d2bea6271be1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="desktop and end-user support professionals" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Product help, including procedures and conceptual information, about DirectAccess, an IPv6-based remote access feature in Windows Server 2008 R2. " />
<Attr Name="subject_serverRole" Value="Network Access (VPN, RAS)" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="2f5ff4e1-3c30-434e-9fc1-1d2bea6271be" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\4326c738-9a48-4163-95c6-8cfec2f434e9.xml" RLTitle="Configuring DirectAccess">
<Attr Name="assetid" Value="4326c738-9a48-4163-95c6-8cfec2f434e9" />
<Keyword Index="AssetId" Term="4326c738-9a48-4163-95c6-8cfec2f434e9" />
<Keyword Index="AssetId" Term="4326c738-9a48-4163-95c6-8cfec2f434e91033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="desktop and end-user support professionals" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Product help, including procedures and conceptual information, about DirectAccess, an IPv6-based remote access feature in Windows Server 2008 R2. " />
<Attr Name="subject_serverRole" Value="Network Access (VPN, RAS)" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="4326c738-9a48-4163-95c6-8cfec2f434e9" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\4acdb444-bd72-465c-b651-096d840117b4.xml" RLTitle="Use Scripts to Configure DirectAccess">
<Attr Name="assetid" Value="4acdb444-bd72-465c-b651-096d840117b4" />
<Keyword Index="AssetId" Term="4acdb444-bd72-465c-b651-096d840117b4" />
<Keyword Index="AssetId" Term="4acdb444-bd72-465c-b651-096d840117b41033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="desktop and end-user support professionals" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Product help, including procedures and conceptual information, about DirectAccess, an IPv6-based remote access feature in Windows Server 2008 R2. " />
<Attr Name="subject_serverRole" Value="Network Access (VPN, RAS)" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="4acdb444-bd72-465c-b651-096d840117b4" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\4bac45a3-385e-4aaf-9b31-b857f2ee7775.xml" RLTitle="Checklist: Install and Configure Single-Server DirectAccess">
<Attr Name="assetid" Value="4bac45a3-385e-4aaf-9b31-b857f2ee7775" />
<Keyword Index="AssetId" Term="4bac45a3-385e-4aaf-9b31-b857f2ee7775" />
<Keyword Index="AssetId" Term="4bac45a3-385e-4aaf-9b31-b857f2ee77751033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="desktop and end-user support professionals" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Product help, including procedures and conceptual information, about DirectAccess, an IPv6-based remote access feature in Windows Server 2008 R2. " />
<Attr Name="subject_serverRole" Value="Network Access (VPN, RAS)" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="4bac45a3-385e-4aaf-9b31-b857f2ee7775" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\5b760f0b-07d1-4f1e-8f1b-d9078175578c.xml" RLTitle="Identify Application Servers for DirectAccess">
<Attr Name="assetid" Value="5b760f0b-07d1-4f1e-8f1b-d9078175578c" />
<Keyword Index="AssetId" Term="5b760f0b-07d1-4f1e-8f1b-d9078175578c" />
<Keyword Index="AssetId" Term="5b760f0b-07d1-4f1e-8f1b-d9078175578c1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="desktop and end-user support professionals" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Product help, including procedures and conceptual information, about DirectAccess, an IPv6-based remote access feature in Windows Server 2008 R2. " />
<Attr Name="subject_serverRole" Value="Network Access (VPN, RAS)" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="5b760f0b-07d1-4f1e-8f1b-d9078175578c" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\61fb90b0-27ad-4728-904c-8d1320452326.xml" RLTitle="Use Group Policy to Configure DirectAccess Clients">
<Attr Name="assetid" Value="61fb90b0-27ad-4728-904c-8d1320452326" />
<Keyword Index="AssetId" Term="61fb90b0-27ad-4728-904c-8d1320452326" />
<Keyword Index="AssetId" Term="61fb90b0-27ad-4728-904c-8d13204523261033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="desktop and end-user support professionals" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Product help, including procedures and conceptual information, about DirectAccess, an IPv6-based remote access feature in Windows Server 2008 R2. " />
<Attr Name="subject_serverRole" Value="Network Access (VPN, RAS)" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="61fb90b0-27ad-4728-904c-8d1320452326" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\66aab1fa-3f57-4254-8c20-a99608c738a9.xml" RLTitle="Troubleshooting DirectAccess">
<Attr Name="assetid" Value="66aab1fa-3f57-4254-8c20-a99608c738a9" />
<Keyword Index="AssetId" Term="66aab1fa-3f57-4254-8c20-a99608c738a9" />
<Keyword Index="AssetId" Term="66aab1fa-3f57-4254-8c20-a99608c738a91033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="desktop and end-user support professionals" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Product help, including procedures and conceptual information, about DirectAccess, an IPv6-based remote access feature in Windows Server 2008 R2. " />
<Attr Name="subject_serverRole" Value="Network Access (VPN, RAS)" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="66aab1fa-3f57-4254-8c20-a99608c738a9" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\73935766-228a-465f-906c-5f5d131ebfc9.xml" RLTitle="Configure the DirectAccess Server">
<Attr Name="assetid" Value="73935766-228a-465f-906c-5f5d131ebfc9" />
<Keyword Index="AssetId" Term="73935766-228a-465f-906c-5f5d131ebfc9" />
<Keyword Index="AssetId" Term="73935766-228a-465f-906c-5f5d131ebfc91033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="desktop and end-user support professionals" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Product help, including procedures and conceptual information, about DirectAccess, an IPv6-based remote access feature in Windows Server 2008 R2. " />
<Attr Name="subject_serverRole" Value="Network Access (VPN, RAS)" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="73935766-228a-465f-906c-5f5d131ebfc9" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\80804f5b-78af-46c4-951c-6d9213ce226e.xml" RLTitle="Identify Infrastructure Servers for DirectAccess">
<Attr Name="assetid" Value="80804f5b-78af-46c4-951c-6d9213ce226e" />
<Keyword Index="AssetId" Term="80804f5b-78af-46c4-951c-6d9213ce226e" />
<Keyword Index="AssetId" Term="80804f5b-78af-46c4-951c-6d9213ce226e1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="desktop and end-user support professionals" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Product help, including procedures and conceptual information, about DirectAccess, an IPv6-based remote access feature in Windows Server 2008 R2. " />
<Attr Name="subject_serverRole" Value="Network Access (VPN, RAS)" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="80804f5b-78af-46c4-951c-6d9213ce226e" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\8ec2d220-eef2-4fc3-91c9-890d6b13f08c.xml" RLTitle="Resources for DirectAccess">
<Attr Name="assetid" Value="8ec2d220-eef2-4fc3-91c9-890d6b13f08c" />
<Keyword Index="AssetId" Term="8ec2d220-eef2-4fc3-91c9-890d6b13f08c" />
<Keyword Index="AssetId" Term="8ec2d220-eef2-4fc3-91c9-890d6b13f08c1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="desktop and end-user support professionals" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Product help, including procedures and conceptual information, about DirectAccess, an IPv6-based remote access feature in Windows Server 2008 R2. " />
<Attr Name="subject_serverRole" Value="Network Access (VPN, RAS)" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="8ec2d220-eef2-4fc3-91c9-890d6b13f08c" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\9d09c482-57c6-4608-91a6-fff05d869039.xml" RLTitle="Open the DirectAccess Snap-in">
<Attr Name="assetid" Value="9d09c482-57c6-4608-91a6-fff05d869039" />
<Keyword Index="AssetId" Term="9d09c482-57c6-4608-91a6-fff05d869039" />
<Keyword Index="AssetId" Term="9d09c482-57c6-4608-91a6-fff05d8690391033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="desktop and end-user support professionals" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Product help, including procedures and conceptual information, about DirectAccess, an IPv6-based remote access feature in Windows Server 2008 R2. " />
<Attr Name="subject_serverRole" Value="Network Access (VPN, RAS)" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="9d09c482-57c6-4608-91a6-fff05d869039" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\a2786de8-cac8-44c5-9f48-449c00889921.xml" RLTitle="Use the DirectAccess Snap-in to Monitor DirectAccess">
<Attr Name="assetid" Value="a2786de8-cac8-44c5-9f48-449c00889921" />
<Keyword Index="AssetId" Term="a2786de8-cac8-44c5-9f48-449c00889921" />
<Keyword Index="AssetId" Term="a2786de8-cac8-44c5-9f48-449c008899211033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="desktop and end-user support professionals" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Product help, including procedures and conceptual information, about DirectAccess, an IPv6-based remote access feature in Windows Server 2008 R2. " />
<Attr Name="subject_serverRole" Value="Network Access (VPN, RAS)" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="a2786de8-cac8-44c5-9f48-449c00889921" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\a9228f5c-1a4f-48c8-b413-90b49885c006.xml" RLTitle="DirectAccess">
<Attr Name="assetid" Value="a9228f5c-1a4f-48c8-b413-90b49885c006" />
<Keyword Index="AssetId" Term="a9228f5c-1a4f-48c8-b413-90b49885c006" />
<Keyword Index="AssetId" Term="a9228f5c-1a4f-48c8-b413-90b49885c0061033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="desktop and end-user support professionals" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Product help, including procedures and conceptual information, about DirectAccess, an IPv6-based remote access feature in Windows Server 2008 R2. " />
<Attr Name="subject_serverRole" Value="Network Access (VPN, RAS)" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="a9228f5c-1a4f-48c8-b413-90b49885c006" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\b0c4f126-7d92-4f4b-b3ba-8042a34b8e64.xml" RLTitle="Install DirectAccess">
<Attr Name="assetid" Value="b0c4f126-7d92-4f4b-b3ba-8042a34b8e64" />
<Keyword Index="AssetId" Term="b0c4f126-7d92-4f4b-b3ba-8042a34b8e64" />
<Keyword Index="AssetId" Term="b0c4f126-7d92-4f4b-b3ba-8042a34b8e641033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="desktop and end-user support professionals" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Product help, including procedures and conceptual information, about DirectAccess, an IPv6-based remote access feature in Windows Server 2008 R2. " />
<Attr Name="subject_serverRole" Value="Network Access (VPN, RAS)" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="b0c4f126-7d92-4f4b-b3ba-8042a34b8e64" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\bba98946-c8ab-488c-b080-f753fb7e40f0.xml" RLTitle="Use Netsh to Configure DirectAccess">
<Attr Name="assetid" Value="bba98946-c8ab-488c-b080-f753fb7e40f0" />
<Keyword Index="AssetId" Term="bba98946-c8ab-488c-b080-f753fb7e40f0" />
<Keyword Index="AssetId" Term="bba98946-c8ab-488c-b080-f753fb7e40f01033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="desktop and end-user support professionals" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Product help, including procedures and conceptual information, about DirectAccess, an IPv6-based remote access feature in Windows Server 2008 R2. " />
<Attr Name="subject_serverRole" Value="Network Access (VPN, RAS)" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="bba98946-c8ab-488c-b080-f753fb7e40f0" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\c17ef9f1-d277-43ff-b899-6338ead04b1d.xml" RLTitle="Understanding DirectAccess Deployment Models">
<Attr Name="assetid" Value="c17ef9f1-d277-43ff-b899-6338ead04b1d" />
<Keyword Index="AssetId" Term="c17ef9f1-d277-43ff-b899-6338ead04b1d" />
<Keyword Index="AssetId" Term="c17ef9f1-d277-43ff-b899-6338ead04b1d1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="desktop and end-user support professionals" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Product help, including procedures and conceptual information, about DirectAccess, an IPv6-based remote access feature in Windows Server 2008 R2. " />
<Attr Name="subject_serverRole" Value="Network Access (VPN, RAS)" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="c17ef9f1-d277-43ff-b899-6338ead04b1d" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\d26beb27-2465-420c-a538-e46fc6dadee6.xml" RLTitle="Use the DirectAccess Snap-in to Configure DirectAccess">
<Attr Name="assetid" Value="d26beb27-2465-420c-a538-e46fc6dadee6" />
<Keyword Index="AssetId" Term="d26beb27-2465-420c-a538-e46fc6dadee6" />
<Keyword Index="AssetId" Term="d26beb27-2465-420c-a538-e46fc6dadee61033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="desktop and end-user support professionals" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Product help, including procedures and conceptual information, about DirectAccess, an IPv6-based remote access feature in Windows Server 2008 R2. " />
<Attr Name="subject_serverRole" Value="Network Access (VPN, RAS)" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="d26beb27-2465-420c-a538-e46fc6dadee6" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\d81e40e9-3097-4a0d-949c-e16a7f317f2f.xml" RLTitle="Configure DirectAccess Clients">
<Attr Name="assetid" Value="d81e40e9-3097-4a0d-949c-e16a7f317f2f" />
<Keyword Index="AssetId" Term="d81e40e9-3097-4a0d-949c-e16a7f317f2f" />
<Keyword Index="AssetId" Term="d81e40e9-3097-4a0d-949c-e16a7f317f2f1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="desktop and end-user support professionals" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Product help, including procedures and conceptual information, about DirectAccess, an IPv6-based remote access feature in Windows Server 2008 R2. " />
<Attr Name="subject_serverRole" Value="Network Access (VPN, RAS)" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="d81e40e9-3097-4a0d-949c-e16a7f317f2f" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
</VTopicSet><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpTOC>
<HelpTOC xmlns="http://schemas.microsoft.com/help/toc/2004/11" DTDVersion="1.0" Id="da_snap_TOC" FileVersion="" LangId="1033" ParentNodeIcon="Book" PluginStyle="Hierarchical">
<HelpTOCNode Url="mshelp://windows/?tocid=5e06a189-1f8b-4fa3-a49d-43edf0e7025d" Title="">
<HelpTOCNode Url="mshelp://windows/?id=a9228f5c-1a4f-48c8-b413-90b49885c006" Title="DirectAccess">
<HelpTOCNode Url="mshelp://windows/?id=1326e2b8-80d0-4528-a979-845080e353a7" Title="DirectAccess Overview">
<HelpTOCNode Url="mshelp://windows/?id=2f5ff4e1-3c30-434e-9fc1-1d2bea6271be" Title="Understanding DirectAccess Components" />
<HelpTOCNode Url="mshelp://windows/?id=c17ef9f1-d277-43ff-b899-6338ead04b1d" Title="Understanding DirectAccess Deployment Models" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=258acc73-4f0b-4016-a1a2-b5043eadaade" Title="Checklist: Before You Configure DirectAccess" />
<HelpTOCNode Url="mshelp://windows/?id=4bac45a3-385e-4aaf-9b31-b857f2ee7775" Title="Checklist: Install and Configure Single-Server DirectAccess" />
<HelpTOCNode Url="mshelp://windows/?id=4326c738-9a48-4163-95c6-8cfec2f434e9" Title="Configuring DirectAccess">
<HelpTOCNode Url="mshelp://windows/?id=b0c4f126-7d92-4f4b-b3ba-8042a34b8e64" Title="Install DirectAccess" />
<HelpTOCNode Url="mshelp://windows/?id=9d09c482-57c6-4608-91a6-fff05d869039" Title="Open the DirectAccess Snap-in" />
<HelpTOCNode Url="mshelp://windows/?id=d26beb27-2465-420c-a538-e46fc6dadee6" Title="Use the DirectAccess Snap-in to Configure DirectAccess">
<HelpTOCNode Url="mshelp://windows/?id=d81e40e9-3097-4a0d-949c-e16a7f317f2f" Title="Configure DirectAccess Clients" />
<HelpTOCNode Url="mshelp://windows/?id=73935766-228a-465f-906c-5f5d131ebfc9" Title="Configure the DirectAccess Server" />
<HelpTOCNode Url="mshelp://windows/?id=80804f5b-78af-46c4-951c-6d9213ce226e" Title="Identify Infrastructure Servers for DirectAccess" />
<HelpTOCNode Url="mshelp://windows/?id=5b760f0b-07d1-4f1e-8f1b-d9078175578c" Title="Identify Application Servers for DirectAccess" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=bba98946-c8ab-488c-b080-f753fb7e40f0" Title="Use Netsh to Configure DirectAccess" />
<HelpTOCNode Url="mshelp://windows/?id=61fb90b0-27ad-4728-904c-8d1320452326" Title="Use Group Policy to Configure DirectAccess Clients" />
<HelpTOCNode Url="mshelp://windows/?id=4acdb444-bd72-465c-b651-096d840117b4" Title="Use Scripts to Configure DirectAccess" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=a2786de8-cac8-44c5-9f48-449c00889921" Title="Use the DirectAccess Snap-in to Monitor DirectAccess" />
<HelpTOCNode Url="mshelp://windows/?id=66aab1fa-3f57-4254-8c20-a99608c738a9" Title="Troubleshooting DirectAccess" />
<HelpTOCNode Url="mshelp://windows/?id=8ec2d220-eef2-4fc3-91c9-890d6b13f08c" Title="Resources for DirectAccess" />
</HelpTOCNode>
</HelpTOCNode>
</HelpTOC><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="AssetId" /><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="BestBet" /><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="LinkTerm" /><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="SubjectTerm" /> Ŝy ` F E Oܖ}T(Y%)\XJj]Q.EB AC*%T(*!} a A|}==(# 0.;Xn G4A A+Rm6D
`(VD "tٍ )Mf&1<`@P-aKv7?įsȱz?kxCn4 #oVoɧ^۾g[m?! q7~)x "^|O! y՛o{a3o.4O<s>mo'2#}ܻvi8{- o.W 9/=Az9:W3]8-6/sS1>w q藎[Gr'-{;]q[;ggo1.VzU [nJ]klL:'Oy>{Cz aOc˴sOų_*e}+ٶm9w/gmxv{g88>kygl>mө.7|oxl]|grφmyy&|k[ug=yvF<uYy=|zI/>] NVaGz߮x}6Sz? _W,b}=s,HO_t)|ʎ}rt mUnJ_ {u؏L{rlX~Ok Yup [Yޥ[}OOt ]oC6Գovߎ/{㷩k*n cؖ9t
SqS}^бU~
[=u wѱ96_s5 k c Hםb; sG}mc&|L Ww\α\7 \Ui&ey u>{ǺnǖOW
~yk> S qmubھ=y's
o}[ z}k[Fַ>5ғo3}[o]փnӷf[P[o!_ į6}_ln]oMpG}kk-ۮ]{om.}wm]u~k{ _O:T~[km ^o:[]W5m-rU
K_ԁ{Uu7^|.Yu\~ZWW-K:-KkZkŚŗkƚ]/u{]O__; _ܯ/5אԑ/ח_zɗkʗk:ʍKf:U`חzkaחz͗kZ͚b.긓]=/ vq/#N.1gϼvC 5{ ;H)_tOչS~|wb>uw9<)Q>wدC>p} ~;`Ch <[ x \s_s\?^qϱsN7p߯.\4v )wg7kxe)tJܝN)ҝ):tg{JtNJg^{tg{JtnJg~{tguJ qO,OsY)ҝ))=:SJg{t{Jt澧J{tuJ\N)ҝ)Y_S::t§Jg.|tYYoS:>: S3'>S:g|JtVŧJf|t]ܽN)ҝ )#)>:KSS>S:s>:[S;tgvJ OάOΛYS:gvJ\N);tFΧJgvN)w>S:>:SJgvN)C);tѧJg }tgwJ OY:S;tu|OΜN);tgwJ霫OYҝY);t}Jtv}N)S:s>:S<tgxJ O)<t& )t')tw` Vx/^x^/ŋx/^x^/ŋx/^x^/ŋx/^x^/ŋx/^x^/ŋx/^x^/ŋx/^x^/ŋ h|
s =9>
CGHhahE>
#͏h4$|?9Ώh44|=8GGC!ࣣah>?h?BЏHhF?hL|4I?h2>
W G!Ѱt~4
. !h|~4
0 ØG8hRU?hx|4X?ÚG0|4[?!hh(v>
s GCh~4
GPh|4>
ñG!0h( ~4
D âGhL}4*>B' ? _8 0` `0 0` `0 0` `0 0` `0 0` `0 0` `0 0` `0 0` x+\(Kkx w_#o>;p ?/Or o:Tl mm_cٔ<lrJ6;=9N ާ[9MGᎢqlP#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b"BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB^B`fS YC!d2 !CȐ2d C!d2 !CȐ2d C!d2 !CȐ2d C!d2 !CȐ2d C!d2 !CȐ2d C!d2 !CȐ2d C!d2 !CȐ2d C!d2 !CȐ2d C!d2 !CȐn-K7?MW7Ҝ{x\F\. ¸p.\
p\. ¸p.\.ܸ7.\
p\. ¸p.\
p\. >. · ¸p.\
p\<7yO]p\. ¸p.\k\<᮸p.\
p\. ¸p.\ ڈ`\2p.\ vAfG v#>|tm } p>D} ;w!;s1ow;yW {xփ>}p~` ;C <h^x AD ̈́/T\<.p√Fiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiii8jjګjjګjjګjjګjjګjjګjjګjjګjjګjjګjjګjjګjjګjm\cii˞kiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiii߿jjګjjګjjڵjõ[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[ծ=U4M44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM4_ -ow[݈-Eq\. EQ< =VmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[ծ14M44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM=(M;44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM4MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44M'iښiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiimqӄ4MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM4vO^ imv|]Nwa=հ=u|^I߷Jȟ7vۅ;Wka wq =?'}Wywn?w6/^
6["R ` V3 ]hZiE*RUfF( 8>Z#"颸D U0JL{4D3G4egGf;<w:s|hyQhD=" oDλBDjUIAJb8 WwI*Ɇ \q.B!7\pJh 촷#iN)̜T|U6R T$ _*"*}=
R ) 8C Oh K.m]M0s?zo__
gK /N|4 CiD`:~"a
,UQ֨vշKuB2;BL#nRn.+3B P u] wn:=(#pH3-!yLL{{Ox3m j?"N:&
,XA@v[5Ƨaa反t
~
@ z0!Uݎy Lu3bMCv.~Y|}fj}L_ 2ߺہ!y"z_ ~PU>BsW>WTM]A4}5 0B)'5 k22&g\ycڠ\laB$g;d /(M=ͮvЕX.n7hD@aÁsb?5`wٚ P,: 0g7%Q
;l@Uz̵ NA+[}@;d`v4d*@r[DѨ5xcL"kg~,"xzme
L7mR)RޔO|K<دbՉD.sYzA] Ia&oOOR3ꤨL BmJ_+q[-u1XW1e%v/BP ^C
?g5|~VŅha5a7\2/$Zj5j(6*e5!(E˦8--WCO@S6uBP l ߩ3qձ̛sghWJQObͶ /E
^ڌmqPWwh "z^MV٫Cc FX[&k
g瓾/ou#*79'?}}M/Vys֧\s2:!ruu *0w @z3ǵ9=kl^[{83_>ڀtFѐ ˜X, 3faپ̊` !rM:Bu]o g!)s5FZ /U6= j y `w{1 n0{G<gA!^MTp$qZ2Y
j5fIX $B+4Kt߾]tp(FA٭%]nރ uY!urdN 楱}䖚 >e|ٛAqD!d2bHPnM.S- r$,TE
0T| q=c6M[.Gp1P#jj+U;V5"ޱ¢6`JIw) N6ˁcs Ӯ5tduC og G Q(nv`M^,WFE+@ʨ̊x1㌹e7O)%,2Awuo(ƵT[3}GFp.mpν{Ը<ަ7@Y w+I<ZL]T]îqSvۗGQ8첽&Ϩ5z?uB=1UT
>sd"i9=;(rm'h%ھ
:Fඣ_b\kHF dx{b=-ZJbRG2]|bNnV- pc:AJq8 /*xή s Ԉߡ Ad3>)Gr-{OS!-֩pC$D5;},R!@YcvWHNv|
mjV=r~JCPO! a2l^ ZEoaiCi;]}\O
` <*-2;ZiY}iѝe xS.T\LR$nְ3逶2I0fIrE5=s+AiՌمO ?* 979W6[NǹV1 P{RXUಬ佶Vtjޣ^xꑠt mϔ܀_\C5hwcH;lT
5)tyB"ԬeŇ˜_[S`1C}E/7ōDL2#<ZL]Yȿco>F zzأ41:lࡂ# |N0ֻTS@9J-hxDt*Q ͔6;vk\LѐO_A>"v7$ xoẁ)d|vg+;GvZNK)#KR3pO
4O-n\4#PR zizUEA '<ȩ&
FE
^+ jE:97oWf rO{t)6PT*Wgd#x >*F+κ%;2UzS$yFkGEc ܞ?`jZK8Ρ I%BY(30T;$@ϯ
0>LaDONR (Vv);|
7=?Ir?1u&֊0X_+a }_`SY1P!5/iwlNH D g3s#-筻
PKɬq~$@7ji&\ ²Cq@oFj}o>yD?3\ʘ7
M}1P5nP3! n/,˩E5X
>`)'Kova% wٗ
]Nё7,cP~-}$|} j y<slÉ $7ךI%{ t]M $*x5,}_^ܫk:WMTVGm'B) y M_o&J+\ڝjn \ f*%؞ A΄P{;LXb|8;G|d]FN+rKW*2pA! ! &W ;>ΒҨ>ό xD&i
}o ~<-xҊLۢ=wâRbW!Nm~V(ny*m Pr5h7ખGEh'z="D>a)F @q hǺ僎#|˲鞌x., Rdlκ28fcxePsLRr :
SqnUSWf.Lj#̯h5+Y1ҁXCt뇷h5E6v&vjE!i])ow}U2 = <%z:QBUs%j,rϋk2a
^/05sv5ۤ =xSV ax(Fq~W! T? o7 FKZqQO8n0F!wp)+2?76=#0
yܕh_i0 h6N_ b ap_i7AI~</^sFʋ TJAЛP{C/]/`N B *2LOd9L\tTS
Dw!ѿ~l}Mxr~ GI:(gb\OV+ H8vIV:sQRO (]
GQ@Txrez ŀMgBF{ܷ%;"'_b`FfQXp-\oDOsoq=qx "FUʓfm ķE - \ߥt XG ;Kce1!Mُ`&۳rki^ Kw<4@hCl4Zo GmF\9sVke/>^ A(zBJh/mDZ#y$p7Ae8
N(l?/KdEC!q*L lxŝ2 _'5bH
V?sOِ0+ M]_MC7Jz?b}k( xN/e
fhx2M{Y?Ad5:ȴT@m6k 0ѶE⟘t6c|cg} 2YEx/ ># MB&bJ1qdi,yߑ]E+oxܱ/iy>oPhų!(]!Զ?d.pyK6ho}\=Qh0 Iݟi$V'Cj? e5ǟH7]f)&W2Ymo
'P <QzR(1& C 7SQ_r jpgt; WԲ+8Y 2]R` mj jw.hY1Ýp]7(&KY[& p*~前:Gd﷾wt\^K(ĶR<cQxeRU֍ >"8RG !zfooy7E.8 U<6+ps 5[ C/ļ
,8d* xy=Dk[Q sY/x[PM]O1
C>Xf b<xCèTģ7NkYeYxQ|>Iqdσne?+n8ǶN~W2vw
6:-Y?gzkuf_OLۓwFIxGQ8PƆK84
/ ȤGtR=ybcp!z<~$1̒] TԪRb,''=&w&(H!rv'1(
7աKل@Xl`A @|2@c3o,@ug::::::::A S "CKcUAt V*@zu0) G~#
^~ȥع!z͎SQG@8h'Uloh*ֳ U|«)$%m ~xCA<;L7Cn
c8p:v9B]3}/ώ5ML4 k_{1 uƕAx@wkZ }_1<<wp}<s[%, iwqw0`kw8& X>;,cLC!D@G3tjC 9Qd?OZ<y )g<ėax}fFEά2
J<= 7ae`
.][Wik~ ת!2TU]q bhƻMQĒOnÉvs]#3]y ŒoJxKo .qɯ0M/֟CwʾԬ;18-Ә"+$@ NLi! M
J n&[Iq(4) ӈDϊj?ZFqӇ (4GL
' # <ite/ZoT ޜQ n+9},du[ ΝG&0cw/{`=0ian:Α]ڛÏ-*3 8jLE]K4]q<g^ 7# &Iue *>k)ε >^Z"Xr:C!S\ 97(([`Txjh#u0(}~WwXxu99+rTe+oo ,QH^~!n; G lgע_mj WS9f, Y<4hV?okcehnoe ! cC.\lwfRl=. -6 3xyB W$ϡ V @%8b LF)Ba@Ʌi}v-пSm_!B-Y }݈ ʏh9r(< eW䜬j{<@ZpRsnţoRCڷ0H>O$ pC}=Q < !$C* %fNAy'?j qN3)ܽ =g XgX5T5>з%Ϥn`N rf8ģBf7"ćH,*jAC>#**꒨PIG ALx0S: <0N n;^hzuDF ݿA<㼵Tq$m7($'e:~('ݹ e$wT}a_C]s %H@}4IL;jqK] GskRJ:@P5b
Ioky:NK%0k|Ƒ.W rtzf!Y<*[% 79 yB$ꡭ6XsYA"pW0%)JԥtP Yr:|4ONe9*^+1%0!Fi ꑏqx uhB0Y'&r 1^ oBOWֺ07y.:s@8.m0&2TL Y#6^?q }T%qs'r;} tWC #6<GYTd֘} <m%,}a~j'kJV+7ttUJ3B֪tMwx X{c KzWn9 jRG8oQdQ oC
FZzCrMO[q M70^=YǬ,{ϵG魺$£ojkVRqg^ Y2ygjCRzC=#u 6#5}'K^AlnRY2Z۩9JҮ{?Kfz!;|a
k\h> h[5,m ta[XHk)BV C2Ml%O lZ
]bMżۉWؐ\a\ۃV3*'*M ` |3F{ V:;iRPM++ڿ 6l_N'|_Vfj9cU. .;N ւ {;XmX{{Ft/G&;w7%Sz,Iۥ]-*asޘC8ٿv:{1k>G8{\#+Y
DԧAɸg%ԒkGKk172OW\>P B"rnZS|W̒h~!FOJ <Sw=-wP\_?OlI+:>%;~S9QCOn 2b
,kQ9ͭq"v hi Cޣ ;̸iq>z\, `/<=e3faƞKFP/)Gr{6HM̌^3$/` q~CyMI,Ld^NXuu+6ML0n\ehrF.T 1"*ēc{\c~T@4zyia,#z߈Y4N) `(ɪwA.X
hUԽ-"1OMWIIٙ4;[oH ú4N~^7:?DdX=Gy 5 Ư p0+ӳH˕ә }ՙ
w,| 26r!De' .lì~^>.I{^ ⦥-Ȋ 4Rb|F2OT'3XsS@<Mx _o7ݾͪ<ωT82+c;awnӓ<ƴ1)2{+wʘn^) F `tNÛ2`W_3]2a)Z(?9]z"JHMyu&27cgaP8Cd'~
X. kh#%+r:Б*"U"5(2CnFI\ S8 1^]exl
lMI 8᷐{:q͎D/jPjD_gh:P*e2֮=E*bVf*kQf]DiDt46BP̮dcEnN|khX'e:fSELQv4M[5e\|f x[pl˱mgO9@W~z}XCe[X5}5WU. TEb/̯Bsz*.R,K P;yZ)X;70@m Y.e`m#>E\ئu3dy,'č ˰^&}AzVQ*dJK#(\#)|=p)xt^Y,)8Z(UNH^0<Dәf/(E-o_Hp5uҺpGͩtU9 jͲIFO]'bj<M} -RrKiRHRIWpќ;? eК\<~@ς~JKP͵g2
r -2L̈́~oSFs '_
j?Kl.M/Np|X6ܺ_Frϝ́2kg̓% 3u/6uU2}āά$żd_"/7 U J$YeJ
I$q\ "%4DD C&'!C@t@`0`
;+ v :"g9Lg;%\jGomzA ='"ۻR:( ,|#F`=XykM̭#3f}_ɡ4U:lcXRSE,`vߒ<r!])÷8"d>ylg֮z^KEЈl[^vF7#WP|x0JN`bd7d.
86b[fYPl|U+sbN]߽WťNb I^Ec73+ 0Qx ,,sk4$vWs)c;}j9^`XD]4qDt][s-@C^u s;V?Cod^+=aO.hV 7 _y'HMҿމ:4]@ Xo6=D-f[ ub7.v4n E&jEǢ3D6~zӂ&JӹA Iln[sB G0 6]^aы s#nӺ8bCr5ohH NS`/ͯ_*&ȁK^M'!aXD9 \<~ v&ei7N N ^ dq?#/> '.kep,mD37sU UfЂ Q|5CrlV`Q'06IĚTFV:wE:V2"
Lp bL hçܓ$0
q3Okƌ''1 G{ٞW7HDXv
=5Ӥ>jNA-č0<ԫݮX)?Zce8#?<וg@]کA /yVfoTz
JvwU覤`?9H*r )mrzbWJ ^.m<O-oW!0 8c * t~߬=j
.qˍz<' }ElH ɈN k$*IHYLj)u>'4>a%#J //w HëQ⯵m ꚂV'M@M.08,}QV1t rw"NG*,[< 5oGW;Yw]_0t>oj\ >0TG?oa9# YIc"ainhmiwus Fl
ޒUMգ3 En\nKZ egg`\ϮS?{֡hԴ0;TΕ4ny9jn*pu#nyݗFXei3[I]k*\& o(jt Xhakv1-nxZڻSw(> $~Qɯwc5gf'c=u,#EJ\\NkJ549i
(WtJG#4OmCts8D:TK0 \6Ms40qD>?"CD ! Y?vQ> EhihlYs"4}Fnњ"wR&tͭN|.| i ~Y*O2 UyĭnZ&r |?0xF L }G60gD S8 kI>RbWQ7s7G+ly=b,smMB/9
G2xUX<wEP
2@<ŨeVYƮb +^{ήPq6 mJrޕ9bJu6K /=ǽ0nuSfAl pimC< ?lA#E0˞_7~Ə: CL[* ^Ks8mYM67 %j kgrT;|+?"LUxdD X>3sOSk#YU >X[,VRмԪ *
֫p9ò%[r)%R
냇 O/~z
U7q]e?sy-`:drpzL2=w2(gb)W{ݪ1J%p6E]q4ϫf8Am! 5K)^.D_!mOƕR4S*Dc"ؕVM ]Py@Qhb;EhQ9#31x'8_5觕-} n4\B
WkaLJ_N0\{\ZQ ڵ V*d *J
<g>. `2T橬4Mn"9c] Ӫ8FG9}}1Ծjn,.ͫv}bQE"zZT4V4NWV.- s\!jݤݵX1'f//V2=` a/:z675}xI %&v|@vJ 7Ы7J0^k N Bt$_ l]vsWnLd5~ɍ*J*2K !J
+5ufyIA.
l{c@{@9i`Õ cM0 FH|-Pp@uwO5'Q@[~W~uϹՠ/j |cK oԣ cEYNAJfݱP+Mm1=p$11 eCs`6fQo`+;Ծ%r4,[ pУ?ael& m + r H:ANI.v:
gwC7&N_Ui8W3F^X0@ӞYGwGs_.c7&0EP[d rGgL8R%_[uY$cL^D0pN:ћu"a6 . F<Nsd)/3bu>֮l WzN(H?! 0
e-VZ>` *᥏КM郑Km-ߎ+sYpPƳmO)86+G|k#x _:3o]y-YOؼ }kF
|~ L_$Pͬ IU
A* ͯЯ((.<VS7wrK3s3.xA3]NMM}<_lه~=+F_ ҙ 1B3 Y̗`
W,c @6W8</\ Q |Z8]~A ] nzp}:PރӕH@
dMBh_- 5 `CP5#v45Ƹ$:@XeMw2 $h?bI*BC}oZdH-W\"IU뇼r͠cmj :wqd6Fz=@3FN؇ܽ4]`tB|{*X *aO 1f 6ѝ=BYg QܦQ=v ~ПX)6j|(wODĊZx=Ceٔ{֊Pm$ӈ9x KIf1}#ʢQD|MrOQTCk% xqy92oVB=TΓ 4!r|J'c@[M< 5/xDhQyþ.էQ K{w <S^dܔR=OfP1;
dɐ]GWu>9P(5ќ3M'|7<l=_IID F} Iy 9dyxW͉b/Cse"Xn4=
ɉU_ F֟P/#
x3Ȕ` OJ4;>rPMи Iև}&~2.ҏ_
m5ٯmaQ?>#<Pd506+kX:,2}DP@uZq Ơz?1DE!l6g :(Pv}8M92C,CW ׇ"/W2?^3:|>A 6y+;
iQ@l>'ה=zEZ~o .H~1 p{ɀ1txt*LY]8%9),dLb_d=[~I ̢X c KĂ ݦLWM,ЕJ
WBR@8z0i+ 26-
|$K<xflA ᨁ6 &@@R 0?ciDAiY=q, {?[2Y <I]2KȈ5sO[bpdyC<50gJ#o|3eMwK6 Ð*d#m"n7=X#M/;ƃwT,)ۺU
HȢ NދGe uld|MQQ?sg4R 95Qttk
Ru\i[;/!d]: vPtlWa 6a fkC^J Zj/|oTKU|JrژS,*aqRn%Ɗ
&ɚ&Q[t:y*j^O> el l52K '߸;RJdaIADT8
PKu tR͙ز:ܙ,MP~ŝsH:cͧu'2kgYTCC}!YJ*zkTKCvz Ҋy\pJp0$Ǡʻ9R-/%svhWi7>hw7[nepo`(/zc++7j2bth^hHf@vs#$6--9.?o^
m2SsѸ.CWRkZ p?e'5pٜn4VaD_Z4b'$f%9:
J6WtŹ'> 9|g({
VQ֑4 EDb}7X#@YJ ޡGP2Z 20]-XfORoJMmjUDA+_
s1H@-vx($ Ge|; ,q*
N?O+jJ~ e(n
XxLb;}h>"K`a [ƪ n}X҅j/<<kG Kjȶ|gcf2n U wt^##
kő(j8 U1e: uA~DM@M/-laf1&%nIr[jvP縟JHŤr OⒿoPuGuHM K<@UӽuwIT&\$ lp O-ƈ2=?/ Aw~[10>.y XüVSՇ
Bۍ-9i!vP6\W
냾 {2
9*Q jrdY2Qi o z-'yp:a#ܴ2XmM+耦kCSgHՃ-=)=]wq`/<,_ kjSPM )&o
A/<^9Ft{*Iߕs#xV̌/{YxlE_-b'w
-Tʛ#J9) !-Y`|y=Ss3u`co5"ܠ{&zRQ):Y(Q3_X1L<plqZ5EXDe)&uVYWʮ\4c~{`q_njtV:?I_܀સ
V@r :'0|Qπs6F5).^R-|G;ȍeL5kZ(ɾЉibVR<$}˧Il!KQЖֈj>,Lx|XALUc1:k&/cۺlcyn
ZM #-P 슶*>AԆPk*L:nj7>Q]Ni3 0 k~Nrhq-@֣_,Xٙ4]"["Ë4U Ģ )z7=
( ]=nDHMޑV A -+Ҍ?/ [yh}I $@TҨ$?U^g{j\)ȭڭmwdTmԯHNQHpYekIJ,j/MTK-JKTh k: JQ.]7whg "V,`."U.H@
, Wxk|uf ~uk
ku
C?5*-of}M6S.4`$3CL? ,IMh3wI`~pPGyx 86zD>.U1 Br9X{IZފ N=`\1kMll'.!d $EQKhDn8WçFV40\n%u/~QO\W'V NIԢE"A
%QȃѠoh]O9uq'%ٿΏ:<+y%Vy&\ȡQ25${#uD
|55Td1y *s ,DFTJ2PPʷH)QG.As_eh{`<!C^EE _fM\?fsh l3\IJ> TdtiB:d)3r1SO
gOQ 9}Jᬗo:-NSHF YۜjTC?ʳtNwNBh֊ΕYfhqp! EiŻb%=shc2 }&<$Y )yWhRoǵRiaFaZ"jE!)0d͚ugQ1 HCI U^ { !lVNv#13 3WnPX>,BF.$+ixE4VxJl$(jd-'9<' $R6$2#=)AL(5cܳ`v
5:4mR xK>/hK' U zxwӲ(z_J)s 熏!ƜR4 gOy%Є}q~+Vy5mr:ky4gdt M@XKTޤՃ9 Xp=ӥPJeK\'qFMb wjvi;j\H S䧛Y篱C~\@
jdvx嶍^ +(:7h U@"gIqlKFU'6mR?w=#-٘b]* A:_ԲLT[QV&c9< iU6Նd܋*
f
A2:t# Ͼ \m=a2KVsLN!&ڟa%blm4a hJt6| r{;&E0}& 傃L@yj(ֿ HISBn㥛_')xvsŚ<3w,ĬPzh0,nОJ p- H qպb|,uzZ-75'ս=C<>?t}P@fA(Vb1ߌhH&]RaTiS5^SVDT桰 >?i/ OXˬ1VKQ`HZ?::Je"Sa1IaKDТNT%KHI#ܑqfXfĦЇb
HP,PD@s@o B"`7M. -u 0#6Uy
@ǀomK}Θi.U%ggn 0')vTm8E
LPR:/h &(uQ8$"ѩjNa[|n#.<AJ4w2|OUGAV;BDUVt.r8\kUsuaYtS.S{6,8: k s>v_a*S:K+2U>\4tI?:TR ' U 7=턴ϭDEpykEz<tPBsSLٛ
HVro@,HOV6 +M-wg5"!&z:ig7< gm=,Z3ZMGչQWrti5j>h+ڈei+g&'hx앢A1*1j)# nRz?-'
EɧWK=qHH )Dp˄*EHEl HQ(*iuD^`ϧ-(5
)];K(i)Kc=FchsG 1IK彙 is*?
Ji;% `gL"E@VICŁ$9h@1^4ךĐTe-SD
:a9my@`5eъN~ $.( ءDBs v +2Sb?zIʛg+KC`uZ yYVD]1
dpUJ"MbMD]M
Iħѯ{,i[` ql-?rpJ Jp qT
؉c"L"X? L8V$$c"W$IHqo/q^ KU1uzf+%Z8%#x>fʪ"
7[?߯0 `Mbx}wY{jHcݚpCLrĐ6@˃cޤx$bOj7pJh p qsho8gH*<QU=F?++s|o6sy>R J$U`P=Q> 6(ar/Qj U;Ѭe"jjOiL CM(J"dNE@ֲ\irԍAfiAC%gKV&雷PXVXXpxۂsL5EXpXcz5)?׀ ob[Lm03Ss^Vdz~)J̃1&Kފ~YcT&3>uZ'4XbcdQ(2UCI=}ۛBpQ;q2.9^]M9iuOq÷J cb1pwd[YÇ![*[h8e,l!ȹeE d֚Cu|Zg!! 1[Wn}6frd"[t5HÒ(AVMGUnS\$3p} ~5C|c6G6ՔB^l|UjGK771sO ]`$ɖUUb>Wp]{zӛD,F*>i}?6L+K1ZLSVBST{#U0 Ey6p_MQU=nvGr}N `4+n,\gC\ū,^q:yr3k1Q3}EӡTmNG)
1%xߣ1/q_3ƅh>;] 5U0 7H@mݼ]6z~C_\94{EQSZdca"6 QKیIz,K>ѿ/6㾘$u( ӂ9c1=$j>
MRZgcY0z'K43UdYb~ee-_[zOK$7KT-
fuY6 O:Ar`O y_bz 'k-;kq x) 'G),ߚ>ۺ|R ;Edԭy=m~ >|R ⁙7zL~zR,2}fH6״O|7ro/3^&8
bo"sf
7M2isL^Ĥ.S _4Yv;vʟ V#窅 QOɚ )ky[Ǔ -x<\D$Ĕ| X8|k0:TTP 15M*5v9xϸ Ħ@#f]M^mCKUFv6K>wW ~4tdo
/O7&o-vvL$9Y^]K Fh|^/, r 4n<\9査AY%y=Т=ZW1gң}.Wt{kjm7_q%Ōdz g \z7k}r6̷[4ٍl S`T%M/rEuT!B"DB!D={eGZ k zBg ݭC{Rs@֔-2:U
՞ Œ[};}y V:oT>MP塱m|'*:,C= S3'4.s%^Z= qrh!D?N\Gp*O\?mi=q H[*
nW:ZE>ᖪ_R?>KbGIHގ+ COkU}Doլ} ~dCNOA!9rYDVzUf/s6W0dV>{$ww]c g*BpQa} m/D:n, qaY/ \^ L0{|wC9]I#1B(D#nQ9?> ·
V
BV@Xfzd{( p6 `.lrjhC`gڗmԆBX5vl-Ç 5YB {OrjfLnKCWm $Kɣ4DIGi\% ,%J9>&YJ Mf)r(\df)rA^ Y1R(IY1R(I@rPd$4K5cQcQ4cQ$h4Ky1R("⒴cQmf)rhuDf)r|w[Ɋ%hK)%} G2x#4,$k 햍y[8o4HN C#2HA\G$Hh(h(Q8SH# 1=.+\nPrk
A>¥A+ ~}j5G67y Ge>J 0oм'.=Z(4$E2ϮPԗWrq
Ku
)pu3]L嵂܍쫓x\%{;$nc "/ W '[Bԙ Wh,tR!(GoU11buŐ Kw4ʢ.g]Ɔxj2K`tpj,$Uk hTr
a%ހ|
8QA1`UGw,{y; <_ @}! E
e b=F3XwꞑfiCXJF3gE Vh&ݱ`Y1?{U5&{H:8II"M*ZT8GawREqI- ]JQy~R; I) ati;('{zTK^EKQĆϴҐ vȵ@_ ~UKdE/D[ ubok+@N) FUojXw`kVi
#꺦o%j̻L
ذ1xNo)vqp Sd6;\<0Aby`xa m[Ybc $RF?B5fzr PtWYFuy$?bM@4p>-zpȥ; u3wpb[1
` 5ANjI4T
8 x_g1ɡg -PglLȱ>$~vw ,n f8(<k 1<x0 CA &A0 4^jdtO@ N< 0>6 Pe3%B C&m4+jJg5ŗY; lCI'$ n*R~~طvUC; Dn푽ffJ`?><!q\=m<>K(.'k,I1T(Ʀ4j1)|sUMi\R5 16YTBKԘ%clHR5zḀ
jl
HcBwu䜒+R@GOK ]ڜþ1e%tӈP"#l[oB@ qYtرdID+̹Ѳ/Cg͖2oXgn Y E" orY}vtWI5;3.p=]]GTbu.G0H `ـlp CR #P4 hz_jSe h)z n˸z. Ztnٺ֫)ۉXuj Y' Б 'mˁ$C ]w?Oqԋ(ll8>|Y# c*f"1"iI$YZdp"T \ NT$t9a"hJP[IԢ-n)T,0YÄ 5>+pĻyZ3bVQn$F:Y2s[73E-A^bƳ(eL2#y&1Ib6J]2#yw jhQיECW4c1$\#IΣLpBbTpQ [AhS6x%-_,,l0(M9/D΄1.ƭˢ6Γnh-j(MZvX 0]=LMqڏc6H+3ÉsVIu*t;XPjrcJK9Q5RUз5dT|b" I2G+{ڭ6Z u rڊR9YG
3du2Ƙ]T9U}i <_0f Fi{4MFm kb8+ikޖ4YlM V]nb|Nzùwgk|na =J1-G4J3ƬݝLm t6 s|F Q fyk&_w2_c&4V:Zks]GO+^D&rb_ְ nH=oV>]-)f}im KXZSL k=ܩSXĞPKMaLN'6y 7n!ƊtY㭔\w;c} c>ww54W//o
amk٭_ fjwW b@ ̱XNXIj:=@ωST0ء;qT
N{ t ʕAv۳&ro2"݅U<LouЗ^@W[(VdLKY,x Ȱ]]Wnq%R$q#%?up{|U_|F 6uã%Yu?_3<eKag/LI5]E<EC!/teC+pS|bBߊwܓtp$ jq-G\S|_ FjCa*g}? _9Z< ˓g+ A{~dԩTlT~l:.i4 llmY`**N
&]FU ̹Ifֻ+Ӱ {\b@Գ !q;ciFp] hv1M~nzi?z (gz˭BxAd؞0k<z3f<e@{xQ[G(2WZz x*sdw_jl%/!,2?XSrSQ"^bIiL8K=00ٳ-dEľx]Y|1
).ڮ?lPH[F-?L#@gk_Q-rM7Vڽ}VcęAY/)b wLWtwZ~Hko8Wc,I.yjv26,ZffT59Z~N^ffm_6wP7{
yNZ;Mu}F؋yC"-HT d[YItnK|-\@e=/$ &Sk볿M{mބnԽ/Bki}`ր7-" `+P @ώa˩J--& c#O l ( |# v ' x[ n