Set-DANetwork Location Server

Syntax

Set-DANetworkLocationServer
   [-Url] <String>
   [-CheckReachability]
   [-ComputerName <String>]
   [-Force]
   [-PassThru]
   [-CimSession <CimSession[]>]
   [-ThrottleLimit <Int32>]
   [-AsJob]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

Set-DANetworkLocationServer
   [-ComputerName <String>]
   [-Force]
   [-PassThru]
   [-Certificate <X509Certificate2>]
   [-NlsOnDAServer]
   [-CimSession <CimSession[]>]
   [-ThrottleLimit <Int32>]
   [-AsJob]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

Description

The Set-DANetworkLocationServer cmdlet configures the Network Location Server (NLS). The NLS can be present on the DirectAccess (DA) server or on some other highly available server

NLS configuration is applicable globally. It is either present on every DA server or when present on a separate, highly available server it acts as the NLS for all DA clients. Hence this cmdlet is not impacted by multi-site deployments.

The IIS role and IP and Domain Restrictions role service are required on the DA server if it has to be configured as the NLS. These roles get automatically installed during Remote Access installation itself.

If the NLS is already configured on the DA server and this cmdlet is used to move it to a different computer, then this cmdlet does not uninstall IIS and IP and Domain Restrictions roles.

Examples

EXAMPLE 1

PS C:\>Set-DANetworkLocationServer -NlsOnDAServer -PassThru
Certificate NLS cannot be located on the Remote Access server. Do you want DirectAccess to create and use a self-signed certificate? 
Confirm 
 
[Y] Yes  [N] No  [S] Suspend  [?] Help (default is ꞌYꞌ): Y 
 
NlsLocation  : DirectAccessServer 
Url          : 
Reachability : 
Certificate  : [Subject] 
CN=directaccess-nls.corp.contoso.com 
[Issuer] 
CN=directaccess-nls.corp.contoso.com 
[Serial Number] 
6C70EDD2DEAEF2AF46B30823778E0CE2 
[Not Before] 
11/29/2011 9:45:22 PM 
[Not After] 
11/29/2016 1:55:22 PM 
[Thumbprint] 
49D3CE5C1E51F9AA18D4415A8EEA7291DDC4D917

This example configures the NLS on the DA server. This cmdlet first looks for an appropriate certificate on the DA computer itself. Since it is not able to find one it decides to create a self-signed certificate and prompts the user to accept before going ahead and creating one.

EXAMPLE 2

PS C:\>$a = Get-ChildItem -Path cert:\localmachine\my



PS C:\>$cert = $a | Where-Object -Property Subject -Value CN=edge1.corp.contoso.com -Clike



PS C:\>Set-DANetworkLocationServer -NlsOnDAServer -Certificate $cert

This example looks for an appropriate certificate for NLS and manually uses the certificate to configure the NLS on the DA server.

All the certificates will be retrieved from local computer store. This list will be filtered on the certificate for our DA server edge1 to obtain the SSL certificate required. This certificate is then passed to this cmdlet to configure NLS. Since DA NLS configuration is global it will be created on all Client GPOs.

EXAMPLE 3

PS C:\>Set-DANetworkLocationServer -Url https://nsl.corp.contoso.com -CheckReachability -PassThru
Confirm

If the NLS is moved to another computer, then clients without updated GPOs will not be able to connect to the new location. When these clients are located in the internal network they will not be able to connect to internal resources as expected.
PS C:\>
[Y] Yes  [N] No  [S] Suspend  [?] Help (default is ꞌYꞌ): Y 
 
NlsLocation  : ExternalServer 
Url          : https://nsl.corp.contoso.com/ 
Reachability : True 
Certificate  :

This example configures an external server as the NLS by specifying the URL https://nsl.corp.contoso.com hosted on that server. Since the NLS is configured on the DA server in the setup this cmdlet will prompt, that the users which do not receive the new policies resulting from this change will not be able to access internal resources when inside the corporate network as they will be detected to be outside the corporate network. Once the user confirms to the prompt, this cmdlet first checks whether the given URL is reachable and if it is reachable then it sets this URL in the DA configuration.

Required Parameters

Optional Parameters

Inputs

None

Outputs

Microsoft.Management.Infrastructure.CimInstance#DANetworkLocationServer

The Microsoft.Management.Infrastructure.CimInstance object is a wrapper class that displays Windows Management Instrumentation (WMI) objects. The path after the pound sign ( # ) provides the namespace and class name for the underlying WMI object.

The DANetworkLocationServer object consists of the following properties:

-- If the NLS is configured on the DA server or on a different server.

-- The URL used for detecting whether a remote computer is inside or outside the corporate network (if NLS is configured on a different server).

-- The certificate used for NLS (if it is configured on the DA server).

-- Reachability of the NLS (if on a different server).

Related Links

• Get-ChildItem
• Where-Object
• Get-DANetworkLocationServer