Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain
Services (AD DS) domain named ABC.com. All servers on the network run Windows Server 2012.
Several Sales users spend most of their time away from the office. You implement DirectAccess to enable the
Sales users to connect to the network when they are away from the office. All computers used by the Sales
users are joined to the domain. You create a DirectAccess client group named SalesDirectAccess and add all
the computer accounts for the Sales users’ computers to the SalesDirectAccess group. Some Sales usersreport that they are unable to access the network using DirectAccess. Other Sales report that they can connect
successfully.
You discover that only users using laptop computers can connect using DirectAccess. Sales users are unable
to connect when they use desktop computers. How can you enable all Sales users to access the network using
DirectAccess?
A.
By adding the computer accounts for the Sales user computers to the RAS and IAS Servers group.
B.
By adding the user accounts for the Sales users to the SalesDirectAccess group.
C.
By modifying the group that the Direct Access Client Settings GPO applies to.
D.
By modifying the WMI filter that the Direct Access Client Settings GPO is linked to.
Right.
If only laptops are able to connect through DirectAccess, you can change this setting by modifying the the DirectAccess Client Settings GPO. Specifically, you need to remove the DirectAccess – Laptop Only WMI filter that is linked to this GPO in the Security Filtering settings. Note also that both creating and removing these WMI filters requires Domain Admin permissions.