COMMAND EVERYTHING.
Modifies the configuration of the specified DirectAccess client user experience.
Microsoft DirectAccessClientComponents reference: Modifies the configuration of the specified DirectAccess client user experience. The syntax and selected example below are adapted from the pinned Windows Server 2025 reference. Module availability, target configuration and delegated permissions determine whether it can run in your environment. Documentation and parameter text: Microsoft, CC BY 4.0; formatting adapted by Cmdlet World. No execution testing is claimed.
Use an account with the target resource permissions documented for Set-DAClientExperienceConfiguration. Modifying administrative cmdlets may require elevation or delegated administration. This catalog does not assert that ordinary users can execute the command.
Windows / DirectAccessClientComponents · Windows Server 2025 documentation; feature/module prerequisites apply
-AsJob- Runs the cmdlet as a background job. Use this parameter to run commands that take a long time to complete. The cmdlet immediately returns an object that represents the job and then displays the command prompt. You can continue to work in the session while the job completes. To manage the job, use the *-Job cmdlets. To get the job results, use the Receive-Job cmdlet. For more information about Windows PowerShell background jobs, see about_Jobs.
-CimSession- Runs the cmdlet in a remote session or on a remote computer. Enter a computer name or a session object, such as the output of a New-CimSession or Get-CimSession cmdlet. The default is the current session on the local computer.
-Confirm- Prompts you for confirmation before running the cmdlet.
-CorporateResources- Configures the connectivity tests that DirectAccess client computers use to determine connectivity. Enter the values for this parameter in the form of a string array, with each entry surrounded by double quotes (" ") and separated by commas. Use the following formats for each test type: HTTP test: "HTTP:http://computername" File test: "FILE:\\fileserver\" Ping test: "PING:testURL"
-CustomCommands- Configures any custom commands required by the administrator. The custom commands are incorporated into the logs that are generated when there are problems. Commands run in an elevated Windows PowerShell console sequentially. Each item in the string array must be an individual command.
-ForceTunneling- Configures the force tunneling setting on a DirectAccess client computer. The acceptable values for this parameter are: - Enabled - Disabled - Default By default, force tunneling is disabled.
-FriendlyName- Specifies the name of the DirectAccess deployment to be shown in the client computer user interface. It is recommended that the name be 15 characters or less.
-GPOSession- Specifies the Group Policy session to send configuration information. You can use *GPOSession* with the NetGPO cmdlets to aggregate multiple operations performed on a Group Policy Object. *GPOSession* cannot be used in conjunction with *PolicyStore*.
-GslbFqdn- Specifies the fully-qualified domain name (FQDN) used for DirectAccess multisite client computers. The client computer resolves the FQDN to an IP address, and compares the IP address to the list of entry points. Client computers use the matching entry point for connectivity. Specify the value for *GslbFqdn* in double quotes (" ").
-IPsecTunnelEndpoints- Configures the IPsec tunnel endpoints to use for DirectAccess. Client computers use this information to verify the availability of the DirectAccess servers and present that information to the user. Specify the values for *IPsecTunnelEndpoints* in double quotes (" "), separated by commas, in the format: "Ping: ipaddress"
-InputObject (required)- Specifies the input to this cmdlet. You can use this parameter, or you can pipe the input to this cmdlet.
-ManualEntryPointSelectionAllowed- Specifies if the user of a client computer can change the site used for DirectAccess connectivity. If *ManualEntryPointSelectionAllowed* is set to $True, then users can change the entry point configuration in the user interface. If *ManualEntryPointSelectionAllowed* is set to $False, then users cannot change the entry point configuration in the user interface. By default, *ManualEntryPointSelectionAllowed* is set to $True.
-PassThru- Sends items from an interactive window down the pipeline as input to other cmdlets. By default, this cmdlet does not generate any output. However, to send items from the interactive window down the pipeline, click to select the items and then click OK. Shift-click and Ctrl-click are supported.
-PassiveMode- Controls the passive mode setting on DirectAccess client computers. In order to report DirectAccess status to the user, DirectAccess performs a set of tests frequently. When *PassiveMode* is set to $True, those tests happen much less frequently. However, enabling passive mode makes the client experience less responsive. Valid values for *PassiveMode* are True or False. By default, *PassiveMode* is set to False, which is the recommended setting.
-PolicyStore- Specifies the policy store into which the cmdlet stores the configuration information. To store the configuration information in a Group Policy Object, specify the GPO name using the format "Domain\GPOName". To store the configuration information in a computer's local GPO, specify the computer's local GPO name in the format "GPO:\". *PolicyStore* cannot be used in conjunction with *GPOSession*.
-PreferLocalNamesAllowed- Indicates whether users can disconnect DirectAccess. Disconnecting DirectAccess temporarily deactivates the name resolution policy table. Valid values for *PreferLocalNamesAllowed* are True or False. If set to True, users can disconnect DirectAccess. The default value is False.
-SupportEmail- Configures the email address displayed in the user interface for users to send logs and requests for assistance. *SupportEmail* must be configured for logging to work. Specify *SupportEmail* in the format of a valid email address.
-ThrottleLimit- Specifies the maximum number of concurrent operations that can be established to run the cmdlet. If this parameter is omitted or a value of 0 is entered, then Windows PowerShell® calculates an optimum throttle limit for the cmdlet based on the number of CIM cmdlets that are running on the computer. The throttle limit applies only to the current cmdlet, not to the session or to the computer.
-UserInterface- Enables or disables the user interface for DirectAccess on the client computers that receive the policy. Valid values for *UserInterface* are True or False. Setting *UserInterface* to False removes the user interface. By default, *UserInterface* is set to True.
-WhatIf- Shows what would happen if the cmdlet runs. The cmdlet is not run.
Windows with the DirectAccessClientComponents module and the Windows feature or management tools that provide it. Confirm target connectivity and version compatibility using the linked Microsoft reference.
This cmdlet changes system state. Review every target and parameter in the official reference, test outside production, and prepare an appropriate backup or rollback. Do not execute the example automatically.