Update adds BPA rules for DirectAccess in Windows Server 2012 R2 or Windows Server 2012

Introduction

This article describes an update that adds new Best Practices Analyzer (BPA) rules. The rules are for DirectAccess on the servers that are running Windows Server 2012 R2 or Windows Server 2012.

The following rules are added:
  • Checks whether the Domain Name System (DNS) address that is used for internal network resources is correct. If the internal interface of the DirectAccess server has only an IPv4 address, the DNS server that is configured in the Name Resolution Policy Table (NRPT) must be the DNS64 address.
  • Gives a warning if the option that enables DirectAccess for Windows 7 clients is not selected.
  • Returns an error if the DirectAccess server is also a domain controller.
  • Returns an error if both force tunneling and Kerberos authorization are configured on the DirectAccess server.
  • Returns an error if the AcceptInterface parameter for DNS64 does not use the same IP address as the one that is used for DNS64.
  • If DirectAccess is configured by using the Remote Access Management user interface, checks whether DirectAccess policies are configured on the server.
  • Gives a warning if any certificate that can be used on the DirectAccess server has subject alternative names (SANs) but no subject name.
  • Provides information if the order of the Internal network interface is below the Internet network interface in Adapters and Bindings.
  • Gives a warning if the private key of the IP-HTTPS certificate does not exist on the server when the certificate is used.
  • Gives a warning if the DirectAccess client security group includes desktop computers.
  • Sends an HTTP request to test whether the certificate revocation list (CRL) field in the IP-HTTPS certificate that is configured on the DirectAccess server is valid. If the request fails, a warning is displayed. This test is only required when Windows 7 clients are configured for DirectAccess.
  • Sends an HTTP request to test whether the CRL field in the network location server certificate that is configured on the DirectAccess server is valid. If the request fails, a warning is displayed. This test is only required when Windows 7 clients are configured for DirectAccess, and when NLS is deployed on the DirectAccess server.
  • Checks whether an Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) router or load balancing is configured on the network. If this is the case, checks the DNS records for ISATAP. The DNS server should have the records for the internal dynamic IP (DIP) of the server and for the internal virtual IP of the load balancer.
  • Checks whether the email address field is configured for Network Connectivity Assistant.
  • Checks whether the default gateway is configured on the Internet interface instead of on the Internal interface. If the check fails, a warning is displayed.
  • Gives a warning if NRPT exemptions are configured when force tunneling is deployed.
  • Makes sure that probes other than Internet Control Message Protocol (ICMP) probes are configured in NCA.

More Information

Update information

How to obtain this update

Windows Update
This update is available from Windows Update.
Microsoft Download Center
The following files are available for download from the Microsoft Download Center:
Operating systemUpdate
All supported x64-based versions of Windows Server 2012 R2Download Download the package now.
All supported x64-based versions of Windows Server 2012Download Download the package now.
For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Prerequisites

To apply this update, you must be running Windows Server 2012 R2 or Windows Server 2012.

Registry information

To apply this update, you do not have to make any changes to the registry.

Restart requirement

You do not have to restart the computer after you apply this update.

Update replacement information

This update does not replace a previously released update.
File information
For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates

Additional file information


Additional files for all supported x64-based versions of Windows Server 2012 R2
File propertyValue
File nameAmd64_01196308900bea9d6193b84fbe6ba8fc_31bf3856ad364e35_6.3.9600.17116_none_218165b68cb70c0b.manifest
File versionNot applicable
File size723
Date (UTC)05-May-2014
Time (UTC)19:40
PlatformNot applicable
File nameAmd64_0ed09a96bf21c5428e987c3cf1d13233_31bf3856ad364e35_6.3.9600.17116_none_2be196ba72532931.manifest
File versionNot applicable
File size723
Date (UTC)05-May-2014
Time (UTC)19:40
PlatformNot applicable
File nameAmd64_1794cb8e40a5b3003f0183502827a747_31bf3856ad364e35_6.3.9600.17116_none_9c2b421c0cf1776d.manifest
File versionNot applicable
File size723
Date (UTC)05-May-2014
Time (UTC)19:40
PlatformNot applicable
File nameAmd64_34ab40ff175c1c3bc1e9c4fb07ce53e1_31bf3856ad364e35_6.3.9600.17116_none_ae91a4f1aad49fbc.manifest
File versionNot applicable
File size723
Date (UTC)05-May-2014
Time (UTC)19:40
PlatformNot applicable
File nameAmd64_4a0c6ca01227a9145c07cbbb52b6edf6_31bf3856ad364e35_6.3.9600.17116_none_ac5efcd534faf762.manifest
File versionNot applicable
File size723
Date (UTC)05-May-2014
Time (UTC)19:40
PlatformNot applicable
File nameAmd64_4c8e386a0a90c40afcb9217a30e6df9f_31bf3856ad364e35_6.3.9600.17116_none_ca948f1f5fd79b25.manifest
File versionNot applicable
File size723
Date (UTC)05-May-2014
Time (UTC)19:40
PlatformNot applicable
File nameAmd64_716096164865dadc32b305f7f5195720_31bf3856ad364e35_6.3.9600.17116_none_7d170fda1655b1bf.manifest
File versionNot applicable
File size723
Date (UTC)05-May-2014
Time (UTC)19:40
PlatformNot applicable
File nameAmd64_73ee3fd32c0f28150bc8c54b08723d0e_31bf3856ad364e35_6.3.9600.17116_none_e33df2f8143addae.manifest
File versionNot applicable
File size715
Date (UTC)05-May-2014
Time (UTC)19:40
PlatformNot applicable
File nameAmd64_829ef13f70e9550192c586eb45c34251_31bf3856ad364e35_6.3.9600.17116_none_0652bb2f33f311de.manifest
File versionNot applicable
File size723
Date (UTC)05-May-2014
Time (UTC)19:40
PlatformNot applicable
File nameAmd64_87d4be8093b9b5780f5b51523bc194e0_31bf3856ad364e35_6.3.9600.17116_none_dd25de4207c005cf.manifest
File versionNot applicable
File size723
Date (UTC)05-May-2014
Time (UTC)19:40
PlatformNot applicable
File nameAmd64_9b3592defe7f0b499050e0ed355a3d0e_31bf3856ad364e35_6.3.9600.17116_none_df775cef9eb6fe29.manifest
File versionNot applicable
File size723
Date (UTC)05-May-2014
Time (UTC)19:40
PlatformNot applicable
File nameAmd64_ab65b01c7a4147f84b8fb693041c85b1_31bf3856ad364e35_6.3.9600.17116_none_73a0cbf4dea918c7.manifest
File versionNot applicable
File size723
Date (UTC)05-May-2014
Time (UTC)19:40
PlatformNot applicable
File nameAmd64_adc6dc5e1b10f297bccb0a82a859ada0_31bf3856ad364e35_6.3.9600.17116_none_ed6fc2c27eba0976.manifest
File versionNot applicable
File size723
Date (UTC)05-May-2014
Time (UTC)19:40
PlatformNot applicable
File nameAmd64_ba666fcc85c087d0f50819546739e618_31bf3856ad364e35_6.3.9600.17116_none_f4a284d389695e34.manifest
File versionNot applicable
File size723
Date (UTC)05-May-2014
Time (UTC)19:40
PlatformNot applicable
File nameAmd64_baca961785ca7b688ff18540a00ff018_31bf3856ad364e35_6.3.9600.17116_none_c0e259561827e625.manifest
File versionNot applicable
File size723
Date (UTC)05-May-2014
Time (UTC)19:40
PlatformNot applicable
File nameAmd64_bed941691693ee85b89de93bb6a82475_31bf3856ad364e35_6.3.9600.17116_none_a78e30e2e970d876.manifest
File versionNot applicable
File size723
Date (UTC)05-May-2014
Time (UTC)19:40
PlatformNot applicable
File nameAmd64_c024108370bd528efe6696ee6feca3dc_31bf3856ad364e35_6.3.9600.17116_none_3d945ff67b304b74.manifest
File versionNot applicable
File size723
Date (UTC)05-May-2014
Time (UTC)19:40
PlatformNot applicable
File nameAmd64_c9b37aaedf56a6f43ae22aa1206f74fd_31bf3856ad364e35_6.3.9600.17116_none_a1569c6d9a00d579.manifest
File versionNot applicable
File size723
Date (UTC)05-May-2014
Time (UTC)19:40
PlatformNot applicable
File nameAmd64_d521b6ab96c03f2dd6cd97f295ea6e07_31bf3856ad364e35_6.3.9600.17116_none_e65e6353a68a8f1e.manifest
File versionNot applicable
File size723
Date (UTC)05-May-2014
Time (UTC)19:40
PlatformNot applicable
File nameAmd64_d754ab36826d8c9ca1fdc8f81304e524_31bf3856ad364e35_6.3.9600.17116_none_453661ad21ec030d.manifest
File versionNot applicable
File size723
Date (UTC)05-May-2014
Time (UTC)19:40
PlatformNot applicable
File nameAmd64_microsoft-windows-r..teaccess-server-bpa_31bf3856ad364e35_6.3.9600.17116_none_32bf4933d94d987a.manifest
File versionNot applicable
File size7,511
Date (UTC)05-May-2014
Time (UTC)07:30
PlatformNot applicable
File nameUpdate.mum
File versionNot applicable
File size18,562
Date (UTC)05-May-2014
Time (UTC)19:40
PlatformNot applicable


Additional files for all supported x64-based versions of Windows Server 2012
File propertyValue
File nameAmd64_00fd720fedf60865270af7dbf4b388b0_31bf3856ad364e35_6.2.9200.20871_none_f29e2f5d72793aa5.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_08371142ee0e45aaa34bddba6345a4aa_31bf3856ad364e35_6.2.9200.16758_none_c64a755d3bc36921.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_0e7ff90d97fb7b7c124aa2f41c940779_31bf3856ad364e35_6.2.9200.20871_none_215178ded1438ee7.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_11f25beb434843cca1616dfc164b9414_31bf3856ad364e35_6.2.9200.16758_none_133cf6e79cf6a52c.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_3ec069b9600a31a1d34623b23954da96_31bf3856ad364e35_6.2.9200.16758_none_4af964a619d8d702.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_47140c7a29f0834e8cf3d80a0afc4ee0_31bf3856ad364e35_6.2.9200.16758_none_b07517696faa20dc.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_4914eb5a8b4909b8c5796bc36d510dee_31bf3856ad364e35_6.2.9200.20871_none_9b8bbaaf18fc5155.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_5310d748053411a51903cddfecf7f02c_31bf3856ad364e35_6.2.9200.16758_none_449398c91a8d2a53.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_5566c826495882f6777e04425d19a9f8_31bf3856ad364e35_6.2.9200.20871_none_2473fea35845b284.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_60652d4855bd5f1a8c208f5dbccbbd40_31bf3856ad364e35_6.2.9200.16758_none_85a8d1f34eb1628d.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_683ff1cb7f19dfd04905e2c8ec7df4fd_31bf3856ad364e35_6.2.9200.20871_none_0f0d9e58a99a7f07.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_71123a281313537e7e5d1b150c44486e_31bf3856ad364e35_6.2.9200.16758_none_a4ff8f4c9c862098.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_71922976b7071eca4c4b01dcdc81a74f_31bf3856ad364e35_6.2.9200.20871_none_f2b9cb977ad7734e.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_763195df89b0f630392f28d7c3eecc8a_31bf3856ad364e35_6.2.9200.20871_none_ecd4814e78f40c09.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_774a16864ee7ac4fbd3b24683985a6f0_31bf3856ad364e35_6.2.9200.16758_none_4c554650368545d5.manifest
File versionNot applicable
File size715
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_849d99abbac5f6d50e63b83c1fd76b18_31bf3856ad364e35_6.2.9200.16758_none_53fde2752084c7b8.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_92f01d04f0642f34709c848355738fc1_31bf3856ad364e35_6.2.9200.16758_none_6500918436228d6c.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_9394b906297b2e9d84d9ed22a0c9e895_31bf3856ad364e35_6.2.9200.20871_none_71224292916cbc16.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_977cdc9029413757f85805f24d086583_31bf3856ad364e35_6.2.9200.16758_none_cf65913dc4241683.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_9e91c3979dce16dc5241a2b3285bbdf3_31bf3856ad364e35_6.2.9200.20871_none_9800bcd249c3a977.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_a1ecceccba8ec8c4c8de9f76d6bcf6bb_31bf3856ad364e35_6.2.9200.20871_none_9a6d2978b2ed922b.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_b6610e2d6870c8ff1eefdc6130d7f194_31bf3856ad364e35_6.2.9200.20871_none_13abb68df117752f.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_c35fc3316c76169a5269679421f2bed5_31bf3856ad364e35_6.2.9200.20871_none_ef666da29586e86d.manifest
File versionNot applicable
File size715
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_c3c50085ef0695ef983845e0ddb97b61_31bf3856ad364e35_6.2.9200.20871_none_98fa52f1d9e85592.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_d28e5644f35f06f8e02736f08f7c259e_31bf3856ad364e35_6.2.9200.20871_none_d78851e508d7eaf4.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_d5bb015a82d66c172dd4fea4dbb20c60_31bf3856ad364e35_6.2.9200.16758_none_25354f53ae9e2a81.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_d97a6ee739d4eeb39dd2d69c5135fd75_31bf3856ad364e35_6.2.9200.20871_none_1301f657ebab53c8.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_dab09074f4a53a76437516bf4e9bb774_31bf3856ad364e35_6.2.9200.16758_none_86901644f27e04c7.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_e0bdb38fd4ef5577e8c4007e64e40e8b_31bf3856ad364e35_6.2.9200.16758_none_0951122f36481544.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_e288d047f5cd27efea64cf30c647fbdc_31bf3856ad364e35_6.2.9200.16758_none_8f4be1626c1033b2.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_e3522e68627b1c1d7f1d8601035a4731_31bf3856ad364e35_6.2.9200.20871_none_e2174d2e157d24d1.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_e4a052120d51483f045f7da9d39d3905_31bf3856ad364e35_6.2.9200.20871_none_b8e9857dad9810b2.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_e5dc59f6a110c7e64f0717afc601abfb_31bf3856ad364e35_6.2.9200.16758_none_9f223d8e8a640e7d.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_e7b149c7452ed490471881174d14169d_31bf3856ad364e35_6.2.9200.20871_none_25023d6635c6de0f.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_e8cf9557dbac535abdd02e87adbdbd04_31bf3856ad364e35_6.2.9200.20871_none_5f466239cd2cbfd9.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_ee4a831655de4e4eb95c2b8385733260_31bf3856ad364e35_6.2.9200.16758_none_ccb2d3c800a41fc1.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_f2ecbe1bb113b943a2b088ddfb76a0a5_31bf3856ad364e35_6.2.9200.16758_none_c0fcf3c353381a97.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_f3ad676da0f85f9b2ddb9a811812f07f_31bf3856ad364e35_6.2.9200.16758_none_2cf064d35096a971.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_f91a7f0537f8938480baa278154eae8f_31bf3856ad364e35_6.2.9200.20871_none_fa1541213193b24b.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_fb0ba7287f064becfd526f95375bea48_31bf3856ad364e35_6.2.9200.16758_none_3f1a4d4c7a3481ac.manifest
File versionNot applicable
File size723
Date (UTC)07-Nov-2013
Time (UTC)15:35
PlatformNot applicable
File nameAmd64_microsoft-windows-r..teaccess-server-bpa_31bf3856ad364e35_6.2.9200.16758_none_9aa1739d8f393fb8.manifest
File versionNot applicable
File size5,831
Date (UTC)07-Nov-2013
Time (UTC)04:49
PlatformNot applicable
File nameAmd64_microsoft-windows-r..teaccess-server-bpa_31bf3856ad364e35_6.2.9200.20871_none_9b0e6e8aa86d6603.manifest
File versionNot applicable
File size5,831
Date (UTC)07-Nov-2013
Time (UTC)01:56
PlatformNot applicable

Properties

Article ID: 2896496 - Last Review: May 27, 2014 - Revision: 1

Windows Server 2012 R2 Datacenter, Windows Server 2012 R2 Essentials, Windows Server 2012 R2 Foundation, Windows Server 2012 R2 Standard, Windows Server 2012 Datacenter, Windows Server 2012 Datacenter, Windows Server 2012 Essentials, Windows Server 2012 Foundation, Windows Server 2012 Foundation, Windows Server 2012 Standard, Windows Server 2012 Standard

Feedback