Policy
IPsec Tunnel Endpoints
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10, Windows10RT, Windows11, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016
Specifies the IPv6 addresses of the endpoints of the Internet Protocol security (IPsec) tunnels that enable DirectAccess. NCA attempts to access the resources that are specified in the Corporate Resources setting through these configured tunnel endpoints. By default, NCA uses the same DirectAccess server that the DirectAccess client computer connection is using. In default configurations of DirectAccess, there are typically two IPsec tunnel endpoints: one for the infrastructure tunnel and one for the intranet tunnel. You should configure one endpoint for each tunnel. Each entry consists of the text PING: followed by the IPv6 address of an IPsec tunnel endpoint. Example: PING:2002:836b:1::836b:1. You must configure this setting to have complete NCA functionality.
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Element | Type | Registry mapping | Constraints & behavior |
|---|---|---|---|
DTEs ID DTEs_Control | list | HKLM\SOFTWARE\Policies\Microsoft\Windows\NetworkConnectivityAssistant\DTEs\DTE Type REG_MULTI_SZ | List: additive |
Other policies in this category
Explore related policies at the same level.
- ComputerCorporate ResourcesAt least Windows Server 2008 R2 or Windows 7
- ComputerCustom CommandsAt least Windows Server 2008 R2 or Windows 7
- ComputerDirectAccess Passive ModeAt least Windows Server 2008 R2 or Windows 7
- ComputerFriendly NameAt least Windows Server 2008 R2 or Windows 7
- ComputerPrefer Local Names AllowedAt least Windows Server 2008 R2 or Windows 7
- ComputerSupport Email AddressAt least Windows Server 2008 R2 or Windows 7
- ComputerUser InterfaceAt least Windows Server 2008 R2 or Windows 7