Install Remote Access role
Select DirectAccess role service
Run the Remote Access Setup Wizard
Server Manager > Remote Access Management Console > DirectAccess and VPN > Run the Remote Access Setup Wizard
Deploy VPN only (opens Routing and Remote Access console)
Right click to Configure and Enable Routing and Remote Access
How do you want VPN users to get their IP Addresses?
How do you want to setup authentication?
Routing and Remote Access > Properties >
Go to Active Directory Users and Computers (dsa.msc) > Dial-in > Allow Access (if not using RADIUS server)
On Client computer