Microsoft DirectAccess

Microsoft DirectAccess provided secure, always-on remote access to an organization's network resources without requiring users to manually initiate a VPN connection. As long as a compatible device was connected to the internet, it automatically established a secure tunnel to the corporate network. This allowed IT departments to manage machines seamlessly in the background.

DirectAccess was introduced with Windows 7 and Windows Server 2008 R2, requiring Enterprise editions of the client OS to function properly. It is heavily tied to Active Directory domain group policies for authentication and certificate deployment. It does not natively support non-Windows devices like macOS or Linux.

While DirectAccess is still present in Windows 10 and Windows 11, Microsoft has officially deprecated it and no longer develops new features for it. Microsoft now heavily pushes "Always On VPN" as the modern, supported replacement. Organizations are actively encouraged to migrate away from DirectAccess.

DirectAccess was fundamentally designed to use IPv6 to connect client devices directly to the corporate intranet. Because the early internet lacked broad IPv6 adoption, DirectAccess relied heavily on transition technologies like IP-HTTPS and Teredo. This requirement made initial network configurations notoriously complex for engineers.