Under Step 1, under Optional Settings, click Client Connectivity Assistant. The Client Connectivity page appears.

To configure the DCA, click Yes, configure application settings. To allow users to resolve single label names on the local subnet, rather than resolving them on the intranet Select Allow users to use local name resolution, and then click Next. The Connectivity verification page appears.

Note:
When Allow users to use local name resolution is selected: Users can configure the client-side DCA to use local name resolution for single label names, and re-configure the client-side DCA to use Forefront UAG DirectAccess name resolution. The DirectAccess client has an option to Prefer Local Names in the client-side DCA.

Note:
The following should also be noted: When force tunneling is configured, you cannot configure the Allow users to use local name resolution option. This option is disabled because when force tunneling is configured all traffic including name resolution must go through the Forefront UAG DirectAccess server.

If you do not wish to configure the DCA, click No, and then click Finish to finish the DirectAccess client section of the Forefront UAG DirectAccess Configuration Wizard.

On the Connectivity Verification page of the Forefront UAG DirectAccess Configuration Wizard, click Add. The Connectivity Verifier Details dialog box opens.

From the drop down, select a Connectivity method, enter the verifier details, click Validate Connectivity to validate that the connectivity verifier is valid and reachable, and then click OK.

Refer to the following table for more information on verification methods and verifier details.

To add more connectivity verifiers repeat step 2.

Click Next, the Troubleshooting Portal page appears.

On the Troubleshooting page, specify the portal that DirectAccess clients are referred to for troubleshooting information, as follows:

• Forefront UAG portal—If you have portals configured in Forefront UAG, you can select one of the available configured portals presented in the drop down box to server as the Forefront UAG DirectAccess troubleshooting portal.
  
  
• This portal (FQDN)—Enter the Fully Qualified Domain Name of a portal
  
  
• In Friendly name for URL link, enter a friendly link name of the corporate portal Web site. The friendly name appears on the Advanced Diagnostics dialog box in the DCA.
  
  

  Note:
  When you select a Forefront UAG portal, the portal name is used as the friendly name for the URL link. This can be edited by the administrator.

• Click Next, the Client Diagnostic Logging page appears.
  
  

On the Logging and Diagnostics page, in Send client log files to, enter the default Email address the users will send client log files to.

Note:
This is the default Email address that will be added to the DCA Diagnostics Logs Email. A user can enter an alternate address if required.

In Specify the path and name of the diagnostics script, if you have an additional script that you wish to use in addition to the default DCA script, enter the path on the DirectAccess client computer and filename of the script, and click Finish.

This script should be installed on the client computer in a location that cannot be modified by a standard user account. The DCA runs the script with elevated permissions.

Note:

The script can be a .cmd file, .bat file, or any other command file that can be run at a command prompt, and that prints output to the console as text. The client-side DCA creates the following outputs: DcaDefaultLog.html—This is the default advanced log file. <filename>.txt—This is the log file output when the IT administrator deploys an additional diagnostics script on the DirectAccess client, where <filename> is the name the administrator gives to the output file. DCA.cab—Is a compressed output of both the above files. If an additional diagnostics script has been configured in the Forefront UAG DirectAccess Configuration Wizard, yet the script has not been deployed on the DirectAccess client computer you may encounter problems opening the DCA.cab file. As an alternative, the log files can be manually sent as separate entities to support personnel. The script must complete its actions within 45 seconds. Scripts that take longer have their logs truncated.

Dynamic tunnel endpoints (DTEs) are automatically included as part of the DCA configuration.

Locate the DirectAccess_Connectivity_Assistant.msi Windows Installer Package on the UAG CD at: \Microsoft Forefront Unified Access Gateway\common\bin\da\dca\Microsoft_DirectAccess_Connectivity_Assistant.msi.

Send your DirectAccess users an e-mail message that contains a link to Microsoft_DirectAccess_Connectivity_Assistant.msi.

Run DirectAccess_Connectivity_Assistant.msi on the DirectAccess client.

Note:

Upgrades from DCA 1.0, DCA 1.5 Beta, and DCA 1.5 RC to DCA 1.5 RTM are supported. When performing an upgrade or uninstall of the DCA, the DCA stops the current DCA application process and service before continuing with the setup. However, when a computer has multiple users and where each user has a DCA instance running, you must reboot the computer to complete the upgrade or uninstall. You must uninstall DCA 1.5 if you want to reinstall DCA 1.0.

Note:
When force tunneling is configured, the DCA icon displays a yellow status indicating that Internet connectivity is not available. This is the expected DCA icon status when force tunneling is configured. If your client computer is using IP-HTTPS you should have full access to the Internet and intranet. Only when you cannot access Internet sites should the yellow state be investigated further.

Copy the Microsoft_DirectAccess_Connectivity_Assistant.msi installer program to a network shared resource to which your DirectAccess client computers have read access permissions.

On a computer that is running Windows Server 2008 R2 or Windows 7 and has the Remote Server Administration Tools (RSAT) installed, start the Group Policy Management MMC snap-in. To download RSAT, see Remote Server Administration Tools (http://go.microsoft.com/fwlink/?LinkID=182617) in the Microsoft Download Center.

In the navigation tree, right-click the GPO that you want to configure, and then click Edit. The Group Policy Management Editor appears.

In the navigation tree, expand Computer Configuration, expand Policies, expand Software Settings, right-click Software installation, click New, and then click Package.

In the Open dialog box, browse to the network shared resource where you copied the DCA installation file. Select the Microsoft_DirectAccess_Connectivity_Assistant.msi file, and then click Open.

Note:
If the path you specify is not a network shared resource, a warning message appears telling you that network users might not be able to access the file to run it. The file itself is not distributed by using Group Policy; only the command to run it. The file itself must be on a network shared resource to which the DirectAccess client computers have read access permissions.

In the Deploy Software dialog box, select Assigned, and then click OK. Because it is assigned to the computer instead of to a user, the software package is installed as soon as the Windows Installer engine determines that it is safe to do so.The new package appears in the details pane.

Open a command prompt.

Generate log files as follows:

• When installing, at the command prompt, type “Msiexec /i <full path to DirectAccess_Connectivity_Assistant.msi file> /Lvoicewarm <filename.log>”.
  
  
• When uninstalling, at the command prompt type “Msiexec /x <full path to DirectAccess_Connectivity_Assistant.msi file> /Lvoicewarm <filename.log>”, or “Msiexec /x {productGUID} /Lvoicewarm <filename.log>”.