Your network contains an Active Directory domain named contoso.com. The domain
contains a Web server named www.contoso.com. TheWeb server is available on the
Internet.
You implement DirectAccess by using the default configuration.
You need to ensure that users never attempt to connect to www.contoso.com by using
DirectAccess. The solution must not prevent theusers from using DirectAccess to access
other resources in contoso.com.
Which settings should you configure in a Group Policy object (GPO)?
A.
DirectAccess Client Experience Settings
B.
Name Resolution Policy
C.
DNS Client
D.
Network Connections
Explanation:
For DirectAccess, the NRPT must be configured with the namespaces of your intranet with a
leading dot (for example, .internal.contoso.com or .corp.contoso.com). For a DirectAccess
client, any name request that matches one of these namespaces will be sent to the specified
intranet Domain Name System (DNS) servers.
Include all intranet DNS namespaces that you want DirectAccess client computers to access.There are no command line methods for configuring NRPT rules. You must use Group
Policy settings. To configure the NRPT through Group Policy, use the Group Policy add-in at
Computer Configuration \Policies\Windows Settings\Name Resolution Policy in the Group
Policy object for DirectAccess clients. You can create a new NRPT rule and edit or delete
existing rules. For more information, see Configure the NRPT with Group Policy.
Answer is B
https://social.technet.microsoft.com/Forums/forefront/en-US/95f5b46d-9915-4e17-bcbb-d56401a9796c/websites-not-available-on-directaccess
If this website is external have you made sure that the name of the site is set as an exclusion in your NRPT? In your DirectAccess configuration wizards on the UAG server, open up Step 3 and click on the DNS Suffixes screen. Here make sure to list the name of this site and exclude it, that will tell the DA clients not to try and send this website’s traffic through the DA tunnels.
http://directaccess.richardhicks.com/tag/nrpt/
0
0