DirectAccess as a Service

DirectAccess as a Service is a service for schools, colleges, and auxiliary units who wish to provide their constituents with secure access to U-M resources from off campus by subscribing Windows 10 computers to route network traffic through the MiWorkspace DirectAccess servers. The service can be leveraged by Unit IT, who will be responsible for tier 1 and 2 desktop support regarding DirectAccess. The available feature set is included with the MiWorkspace Service.

Email to request service or support.

This service is currently: 


  • Group Policy Objects (GPOs)
    ITS provides a configured GPO that links to Active Directory Organizational Units, which contain machine objects targeted to use DirectAccess.
  • Act as last-tier of DirectAccess support
    ITS provides assistance to Unit IT staff via ServiceLink, and can escalate to Microsoft when necessary.
  • Troubleshooting documentation
    ITS provides basic troubleshooting documentation targeted to an Unit IT audience describing fundamental troubleshooting steps for DirectAccess for Windows 10 and above.
  • Routing of unit specific services through the secure tunnel
    ITS adds URLs or UNCs to unit specific services upon request to direct network traffic to these locations through the DirectAccess secure tunnel.
Who can use the service?: 

DirectAccess is available to units with local IT staff on the UM-Ann Arbor campus provided those units are federated to the Ann Arbor campus Active Directory forest.

The service is included in MiWorkspace and is administered by ITS.

Rates & Pricing: 

$1/device/year, billed in monthly installments of $0.08/device

The charge is determined by the number of Windows devices in the unit’s fleet. ITS reviews rates annually and will communicate rate changes by February of the preceding fiscal year.

Related Categories: 
User Groups: 
IT Professionals