Windows Server 2012: Up and Running

Chapter 9. Remote Access

One of the most common deployments in Windows Server infrastructures is remote access. Employees need a way to access the corporate network when they are away from the office. Remote access is implemented in Windows environments with two features: Routing and Remote Access (RRAS) and DirectAccess.

RRAS has been around since Windows 2000, built from RAS (Remote Access Service), which allowed remote access over modem lines in Windows NT 4.0. RRAS not only provides VPN (virtual private networking) and dial-up connectivity in Windows servers, but it also functions as a software-based router offering LAN, WAN, or over-the-Internet routing services.

DirectAccess was introduced in Windows Server 2008 R2 and provides a relatively easy way to connect Windows 7 domain-joined clients to a corporate network remotely and lets IT manage those client computers without the hassle of setting up a traditional VPN solution. Microsoft Forefront Unified Access Gateway (UAG)—Microsoft’s proprietary VPN and reverse proxy gateway solution, launched in 2010—provides even more manageability and easier deployment of remote access. With DirectAccess, clients are seamlessly connected to the company network once connected to the Internet, even before authenticating. DirectAccess gives VPN to Windows 7 and Windows 8 clients. RRAS provides VPN to legacy clients.

Unified Remote Access

Server 2012 takes remote access a step further with Unified Remote Access. In Server 2012, RRAS and DirectAccess ...