Updating nrpt direct access settings error
This can be a huge problem, because if Direct Access fails, systems will typically no longer be able to communicate with the Domain to retrieve corrected NRPT information, since this information is deployed via GPO.If something causes your Direct Access configuration on a client machine to corrupt or if Direct Access isn’t properly configured, it may be necessary to reset the NRPT on the client machine to fix the problem.However, it is usually easier to just remove the existing NRPT entries on the client machine entirely. Remove any entries that have that DA- prefix and reboot.This has to be done in the registry at the following location: HKLM\Software\Policies\Microsoft\Windows NT\DNSClient\DNSPolicy Config (Pictured below) Note the two entries there. Once this is done, the system will begin communicating without Direct Access and will have the ability to connect to the domain to retrieve new NRPT information if it is available.Technet has some information on how to handle NRPT here: when Direct Access stops communicating, it stops working because the NRPT isn’t configured properly.If this happens, you may run into a situation where some systems are unable to ping domain controllers or other systems by using Net BIOS names or through FQDNs.There are known issues with Direct Access where the GPOs can be inadvertently deleted (see https://technet.microsoft.com/en-us/library/dn464274.aspx#Anchor_0).The way to resolve this is to have an AD administrator create the GPOs and delegate full permissions on them to you.
Checking the network location server certificate... This basically controls the way Direct Access handles name resolution for specific Domains.Entries in the NRPT control where client machines look for name resolution on specific domains and allow finer control of what happens when client machines are utilizing Direct Access for connectivity.However, there are situations where Direct Access can fail, leaving you without DNS functionality and a lot of headaches.
Direct Access utilizes a feature called the Name Resolution Policy Table (NRPT).I have searched online but there doesn't seem to be much information out there in Direct Access in general (some mention it's easy to install, others say stay away from it as it's a nightmare) or this error message in particular.