You can install NAT by adding the Routing role service on the server. This requires two network adapters in the server, one connected to the private network and one to the Internet. You could configure the NAT service so that it provided DHCP and DNS name resolution for internal clients.

After installing NAT, if you opt to use the DHCP allocator in NAT, there is nothing further to do, because the clients are configured to use the NAT server as their default gateway. However, if you opted to manually configure networked clients, you must manually assign the private IPv4 address of the NAT server as the default gateway for all clients on the private network.

You can modify the configuration of the NAT server so that it published the HTTP port. To complete this task, you must know the private IPv4 address of the server on the internal network. You can then use the Services and Ports page of the Internet interface of the NAT server to define the location of the internal web server.

You can create a global security group called Sales_Computers. Next, you can add the computers for all sales users to that group. Next, in the Getting Started wizard, you can modify the Remote Clients settings to use only the newly-created group.

Use standard network troubleshooting techniques to determine whether those com- puters are obtaining an appropriate IPv6 address. Next, verify correct application of the DirectAccess Client Settings GPO by using the gpresult command. Finally, run the Netsh name show effectivepolicy command to verify whether DirectAccess settings are being applied.