Questions tagged [remote-desktop-gateway]

Remote Desktop Gateway (RD Gateway) is a role service on Microsoft Windows Server that enables authorized remote users to connect to resources on an internal corporate or private network, from any Internet-connected device that can run the Remote Desktop Connection (RDC) client. The network resources can be Remote Desktop Session Host (RD Session Host) servers, RD Session Host servers running RemoteApp programs, or computers with Remote Desktop enabled.

RD Gateway uses the Remote Desktop Protocol (RDP) over HTTPS to establish a secure, encrypted connection between remote users on the Internet and the internal network resources on which their productivity applications run.

RD Gateway provides such benefits, as:

  • RD Gateway enables remote users to connect to internal network resources over the Internet, by using an encrypted connection, without needing to configure virtual private network (VPN) connections.
  • RD Gateway provides a comprehensive security configuration model that enables you to control access to specific internal network resources. RD Gateway provides a point-to-point RDP connection, rather than allowing remote users access to all internal network resources.
  • RD Gateway enables most remote users to connect to internal network resources that are hosted behind firewalls in private networks and across network address translators (NATs). With RD Gateway, you do not need to perform additional configuration for the RD Gateway server or clients for this scenario.
  • The Remote Desktop Gateway Manager enables you to configure authorization policies to define conditions that must be met for remote users to connect to internal network resources.
  • You can configure RD Gateway servers and Remote Desktop Services clients to use Network Access Protection (NAP) to further enhance security. NAP is a health policy creation, enforcement, and remediation technology that is included in Windows Server® 2008 R2, Windows Server® 2008, Windows® 7, Windows Vista®, and Windows® XP Service Pack 3. With NAP, system administrators can enforce health requirements, which can include software requirements, security update requirements, required computer configurations, and other settings.
47 questions
1
vote
1 answer

How do I configure RemoteApp to find the correct Gateway Server?

I am trying to make RemoteApps work but when I go to the https:\desktop.(mydomain)/rdweb link from outside, all the apps that are published in the QuicksessionCollectio error out saying the server cannot be found. If you look at the image loaded…
Mark
  • 131
  • 2
  • 14
1
vote
0 answers

RDSH logon is hanging at 'Please wait for remote desktop configuration'

RDSH logon is hanging at 'Please wait for remote desktop configuration'. Can anybody tell me what it's actually doing at this stage? It will proceed eventually but we're talking like 5-10 minutes of wait time.
1
vote
0 answers

Prevent user account lockout for hacks/failed-logins to RDWeb (Remote Desktop Web Access)

How can I prevent RDWeb (Remote Desktop Web Access) attempting to authenticate/login ANY user on the domain!? I was under the impression only users configured in our CAP (Connection Access Policy) & RAP (Resource Access Policy) were allowed to…
gregg
  • 629
  • 4
  • 11
  • 26
1
vote
1 answer

RD Gateway Manager cannot connect to local server

I am logged in onto this Windows 2012 R2 VM with Remote Desktop, I launched the Remote Desktop Gateway Manager, I right-clicked on the RD Gateway Manager node in the left tree, I selected Connect to RD Gateway Server, I left the Local server…
boggy
  • 111
  • 2
  • 6
1
vote
1 answer

SSL Cert for RD Gateway is missing the AD subdomain. Am I hooped?

I am setting up an RD Gateway server for test purposes and I think I may have screwed up on the SSL Cert purchase. I have created a subnet (192.168.25.XXX) off our main network with a firewall and server running VMs for the DC, RDS, Workstation,…
1
vote
1 answer

Is the server without GPU is good for remote desktop?

I want to buy a server 4 cores Intel Xeon E3-1220 v5 (16 GB RAM) but without GPU. Is it OK to use as a remote desktop computer? I know that we need GPU to show images on the screen but I don't know on which side do we need a GPU. Do we need GPU…
Oleksandr
  • 733
  • 2
  • 10
  • 17
1
vote
1 answer

Having an issue with Remote Desktop Services Gateway from external

We're having an odd issue with our Remote Desktop Services that we just can't seem to figure out. If we are testing from our internal network, we are able to hit the address and run the application just fine. However, if we try to hit it externally…
1
vote
1 answer

MS RemoteApp broken after changing IIS bindings

OS is Server 2008 R2. In an effort to make the internal and external hostnames match (the SSL cert only matches the public hostname), I edited the bindings for our 'RDWeb' site. This somehow broke WelbyApp and I can't seem to undo it. The error I…
KidACrimson
  • 330
  • 1
  • 10
  • 26
1
vote
0 answers

Bypassing Network Policy Server with Azure AD Extension

I hope someone can help guide me here! We have a RDS environment and introduced Azure MFA and built it successfully using the following guide here:…
cOzMaTiC
  • 158
  • 2
  • 5
1
vote
0 answers

Connection remains active in RDP farm and profile disks don't load. Where to drop?

We have a server farm with a Domain Controller, Connection Broker, Gateway and several Terminal Servers. A user logs in to the RDP generated website and connects to the Gateway. Then starts the RDP session and is redirected to a terminal server. One…
1
vote
1 answer

Automating full Remote Desktop Session Deployment using powershell

I am attempting to automate a full Remote Desktop Session deployment but running into a problem adding the gateway via powershell. I can add each server with the exception of the gateway. Which produces the error: Unable to create a Remote Desktop…
1
vote
1 answer

RD gateway with Azure MFA

I followed this GUIDE https://docs.microsoft.com/en-ca/azure/active-directory/authentication/howto-mfa-nps-extension-rdg And the issue is all my users are able to login without getting prompted for the MFA.. this is the logs I see on the NPS server…
SAM
  • 11
  • 1
  • 2
0
votes
0 answers

How to configure Thin Clients to connect to RDS farm

We have recently upgraded our RDS servers to include a Gateway, connection broker, and two session hosts (RDGW, RDCB, RDSH1, RDSH2). This should allow us to have one session host for sales with their sales programs installed and another for…
0
votes
2 answers

Route RDP Through One Server

I have been trying to come up with a solution to enable something akin to "Remote Resources" through RDP where we can have a collection of remote desktops (residing in a remote network, such as AWS or GCP) that cannot be reached from the outside…
kccoers
  • 31
  • 3
0
votes
1 answer

RDP from Mac fails

Situation: 4 Windows 2016 RDS servers in a collection 1 Windows 2016 server that serves as RD Gateway and connection broker. Authentication is done via NAP/Radius using a 2FA (Microsoft Multi-Factor Authentication). Connection using Windows…