How to Install the Remote Access and RRAS Roles on Windows Server
Applies to: Windows Server 2019, 2022 and 2025.
Remote Access provides routing, VPN and DirectAccess role services. Install only the components required by the approved topology.
Network changes can immediately interrupt management access. Maintain console access, export the current configuration and use approved test addresses. Visit networkmanager.info for managed Windows VPS services.
Prerequisites
- Use console access.
- Assign and label network adapters.
- Document inside and outside networks.
- Choose VPN protocols and authentication.
Procedure
Step 1: Inspect role services
Review available Remote Access components.
Get-WindowsFeature RemoteAccess,Routing,DirectAccess-VPNStep 2: Install RRAS components
Add Remote Access, routing and VPN management tools.
Install-WindowsFeature RemoteAccess,Routing,DirectAccess-VPN -IncludeManagementToolsStep 3: Open RRAS console
Launch Routing and Remote Access.
rrasmgmt.mscStep 4: Run configuration wizard
Choose VPN, NAT or custom configuration according to the design.
Step 5: Start and monitor service
Confirm RemoteAccess state and event logs.
Verification
Verify role state, service and bound interfaces.
Get-WindowsFeature RemoteAccess,Routing,DirectAccess-VPN
Get-Service RemoteAccess
Get-NetAdapterRollback
Disable RRAS through the management console before uninstalling role services. Restore previous routes and firewall rules.
Security and operational notes
Do not expose legacy VPN protocols such as PPTP when modern alternatives are available.
