IPsec Tunnel Endpoints
Jump to overview

Policy overview

Key metadata and intent for this policy.

Computer
Category
Network > DirectAccess Client Experience Settings
Supported on
At least Windows Server 2008 R2 or Windows 7

Supported OS tags: Windows10, Windows10RT, Windows11, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016

Specifies the IPv6 addresses of the endpoints of the Internet Protocol security (IPsec) tunnels that enable DirectAccess. NCA attempts to access the resources that are specified in the Corporate Resources setting through these configured tunnel endpoints. By default, NCA uses the same DirectAccess server that the DirectAccess client computer connection is using. In default configurations of DirectAccess, there are typically two IPsec tunnel endpoints: one for the infrastructure tunnel and one for the intranet tunnel. You should configure one endpoint for each tunnel. Each entry consists of the text PING: followed by the IPv6 address of an IPsec tunnel endpoint. Example: PING:2002:836b:1::836b:1. You must configure this setting to have complete NCA functionality.

Internal name
DTEs
Policy ID
0448d006f0c7
Elements
1

Registry values

How enabled and disabled states update the registry.

No explicit registry values are set for enabled or disabled states.

Policy elements

Inputs and configuration options exposed by this policy.

ScopeElementTypeRegistry mappingConstraints & behaviorCopy
Computer
DTEs
ID DTEs_Control
list
Path
SOFTWARE\Policies\Microsoft\Windows\NetworkConnectivityAssistant\DTEs
Value name
DTE
Type
REG_MULTI_SZ
List: additive
DTEs
Computer · Type list
Registry mapping
Path
SOFTWARE\Policies\Microsoft\Windows\NetworkConnectivityAssistant\DTEs
Value name
DTE
Type
REG_MULTI_SZ
Details
List: additive