2008R2 RDS Redirect RDP Request

Question

I have a 2008 R2 with AD, DHCP, RDS - The server acts as a router for the internal network. I'm trying to connect through RDP from the internet to computers on the internal network through RDS. How can I achieve this?

score 7 · Answer 1 · edited Apr 15 '12 at 19:25

7

You best bet would be Remote Desktop Gateway (or Terminal Services Gateway). This creates a gateway via port 443 to allow you to access Remote Desktop Servers (this includes Windows Professional/Ultimate edition workstations offering RD access) behind the gateway. It also allows you to control who can get to where using Authorization Policies, which is much better than just opening up ports on your firewall.

Since it uses TLS, you would need a certificate your RD clients trust to avoid warnings on each connection setup.

edited Apr 15 '12 at 19:25

the-wabbit

40,737
13
111
174

answered Apr 15 '12 at 18:32

MikeAWood

2,566
1
13
13

thanks for the edits.. I need to work on being more complete when I answer questions on here. – MikeAWood Apr 16 '12 at 05:23
Can you go a bit more indepth on actual configuration Mike? Or point me to somewhere that shows how to achieve this config – Theveloper Apr 16 '12 at 15:20
Remote Desktop Gateway is a Server Role under Remote Desktop Services in Windows Server 2008. A Step by Step from Microsoft can be found here http://www.microsoft.com/download/en/details.aspx?id=5177 Start there and let us know how far you get. – MikeAWood Apr 17 '12 at 01:37

score 2 · Answer 2 · answered Apr 15 '12 at 17:43

2

RDP to the RDS server. RDP ("jump") from that one to the next

answered Apr 15 '12 at 17:43

Mathias R. Jessen

25,161
4
63
95

I doubt very much that the performance would be acceptable. – Falcon Momot Apr 15 '12 at 18:18
Depends on what you need RDP access for – Mathias R. Jessen Apr 15 '12 at 18:31
This is what I'm doing right now but that's not really making use of RDS at all... – Theveloper Apr 15 '12 at 23:51
Usually with adequate bandwidth, jumping is workable. Though don't expect to stream video on it. – MikeAWood Apr 16 '12 at 06:02

score 2 · Answer 3 · answered Apr 15 '12 at 18:17

If there are only a few of them you could forward ports. One excellent way to do this in linux is to use SSH to forward the port dynamically; I don't know if windows has any like facility.

You could also use internet-routeable ("real") IP addresses on your internal network and allow RDP through the firewall.

2008R2 RDS Redirect RDP Request

3 Answers3