DirectAccess requires a public TLS certificate for the IP-HTTPS IPv6 transition technology. When using the CertKit.io agent to manage this certificate, the certkit-agent service must run in the context of a service account (gMSA or standard domain account) with delegated permissions on the DirectAccess Client Settings and DirectAccess Server Settin... More info

This script performs the following tasks: - Disables Internet Explorer enhanced security configuration, which is required for the Intune Certificate Connector installer to run successfully. - Checks if the specified PKCS service account is a member of the local administrators group and adds it if necessary. - Updates the registry to enable the SID... More info