Bleh. I'm stumped.
I just completed the stand-up of a DirectAccess environment configured with force tunneling (the client demanded it, so please don't try and convince me to revert to split tunneling, my hands are tied). The entire environment has been working beautifully,
then as one last step there was another external URL they needed to have added to the NRPT exemptions list that requires external ipv4 resolution from their DA clients.
its a procedure I've done a thousand times, but for some reason, after adding the entry the DA clients can no longer resolve any of the NRPT exemptions when connected remotely.
if I disable DirectAccess on the client by turning off the IP Helper service, I can resolve the external A records just fine, so I know it's not a DNS issue locally. As soon as the DA Client resolves the Entry Point and connects, I can no longer resolve
any DNS record that is listed in the NRPT as an exemption.
I've tried deleting the DnsPolicyConfig Key in regedit and forcing a gpupdate, just in case the NRPT had been corrupted. I've lowered the DNS resolution policy to fallbackunsecured and of course restarting several times to ensure that everything picks up
the policy changes properly.
nothing has had an impact, as soon as DirectAccess connects, I can no longer resolve any DNS entry added as an exemption, though I can still look up the IP using nslookup.
