Occasionally, I work with folks who have DirectAccess running, but down the road they realize that there may be a server or two that are not contactable from the DirectAccess clients for some reason. I'm not talking about the same thing as above, where the client application itself isn't working, but this would be something like a ping or RDP access to a particular server just isn't getting to its destination inside the network. There are a number of different things that could cause such behavior.
You may notice that you cannot contact a whole set of servers, and then realize that all of these servers are within the same subnet inside your network. This is the first thing I always check when working on a selective server access issue; make sure that the routes exist on the DirectAccess server. Because the internal NIC on the DA server does not have a default gateway, that means we have to build the routing table ourselves from the command prompt. If you...