Questions tagged [remote-desktop-gateway]

Remote Desktop Gateway (RD Gateway) is a role service on Microsoft Windows Server that enables authorized remote users to connect to resources on an internal corporate or private network, from any Internet-connected device that can run the Remote Desktop Connection (RDC) client. The network resources can be Remote Desktop Session Host (RD Session Host) servers, RD Session Host servers running RemoteApp programs, or computers with Remote Desktop enabled.

RD Gateway uses the Remote Desktop Protocol (RDP) over HTTPS to establish a secure, encrypted connection between remote users on the Internet and the internal network resources on which their productivity applications run.

RD Gateway provides such benefits, as:

  • RD Gateway enables remote users to connect to internal network resources over the Internet, by using an encrypted connection, without needing to configure virtual private network (VPN) connections.
  • RD Gateway provides a comprehensive security configuration model that enables you to control access to specific internal network resources. RD Gateway provides a point-to-point RDP connection, rather than allowing remote users access to all internal network resources.
  • RD Gateway enables most remote users to connect to internal network resources that are hosted behind firewalls in private networks and across network address translators (NATs). With RD Gateway, you do not need to perform additional configuration for the RD Gateway server or clients for this scenario.
  • The Remote Desktop Gateway Manager enables you to configure authorization policies to define conditions that must be met for remote users to connect to internal network resources.
  • You can configure RD Gateway servers and Remote Desktop Services clients to use Network Access Protection (NAP) to further enhance security. NAP is a health policy creation, enforcement, and remediation technology that is included in Windows Server® 2008 R2, Windows Server® 2008, Windows® 7, Windows Vista®, and Windows® XP Service Pack 3. With NAP, system administrators can enforce health requirements, which can include software requirements, security update requirements, required computer configurations, and other settings.
47 questions
0
votes
1 answer

Physical to Virtual of RD Server on the same server

I need to Physical to Virtual our Remote Desktop Server (Server 2008 R2), install the HyperV role on the Physical server and then eventually have the converted RD VM back running on the Physical Server. I have read numerous threads on similar topics…
0
votes
0 answers

Hyper-V Virtual Desktop Infrastructure

We're designing a virtual desktop infrastructure (VDI) on Hyper-V Server 2012 R2 Remote Desktop Services using Windows 7 clients and I need some information on how it works in order to see if how we have it on paper is going to work. We need the…
0
votes
0 answers

RDS 2016 external users unabel to connect to RDS

I have followed this guide https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds-deploy-infrastructure and also tried deploying a template in azure using the following…
0
votes
1 answer

RDS 2016 minimum services

I wish to put in place a HA 2016 RDS service in azure that will provide remote desktop services to users connected via a VPN, there are multiple articles and deployment templates that deploy the web and gateway servers, are these needed or could I…
0
votes
0 answers

RDS deployment with a single point of access in DMZ

Our organization is very comfortable with the idea of homing the IIS portion of a user app in the DMZ, which authenticates them to connect inside. This is clearly not the roadmap for RDS 2012. We're not going to get the go-ahead to create any kind…
Kara Marfia
  • 7,892
  • 5
  • 33
  • 57
0
votes
1 answer

How to secure a Remote Application server farm to prohibit users from running unpublished applications?

We have recently deployed and tested a working RemoteApps configuration based on MS Windows Server 2012R2's Remote Desktop Session Host and Remote Desktop Gateway services, that is intended to allow certain users to run certain applications on the…
0
votes
0 answers

Users from a trusted domain cannot connect to remote desktop gateway

Trying since few days to have an RDP gateway allowing users from a tusted domain to connect to. The only error I can find in the error log is : The user "DOMAIN\login", on client computer "172.22.2.125", did not meet connection authorization policy…
KAMI
  • 1
0
votes
0 answers

Remote Desktop Gateway (RDG) Public CA certificate not trusted on external connection

Currently moving RDG role from "nene-server" to "NTRDG01, but when trying to connect externally to the gateway, getting certificate error:External error on gateway over https. This was weird because I uploaded a re-keyed certificate from 123reg but…
0
votes
0 answers

How to stop RD-Gateway from redirecting to HTTP

I have a single server setup for my Remote Application Services. So one server is RD-Gateway, Connection Broker, and Host all at once. I'm trying to use a Cloudflare Tunnel as a proxy with the following ingress rules (ws for websocket): ingress: -…
0
votes
0 answers

RD Gateway and Web Application Proxy and AD FS

I am trying to deploy an RD Gateway in combination with WAP (Web Application Proxy) and AD FS pre-authentication as described here. For a "proof of concept", I've decided to deploy all RDS roles to one server. Simplified, my environment now looks…
0
votes
1 answer

How to force disconnect from Windows Remote Apps command line

I have a RDP connection that is initiated by a RD Gateway website. Login and everything works well. But sometimes the connection becomes a ghost, or if i want to login as another user on the same RD Gateway via RDP i have to manually press…
boomdrak
  • 143
  • 1
  • 6
0
votes
1 answer

RDP Windows server 2019

I'm connecting to one windows server 2019 from another windows server 2019 through RDP, when i close the connection using the "X" button and then try to open new RDP connection i get a timeout on this new RDP, however on the other hand if i "logout"…
0
votes
0 answers

Remote Desktop can't connect to CentOS 7, flashing blue screen

I have someone trying to connect to a CenOS 7 server via Windows Remote Desktop (based on the instructions here: https://www.itzgeek.com/how-tos/linux/centos-how-tos/install-xrdp-remote-desktop-to-centos-6-rhel-6.html) using SSSD and their AD…
0
votes
0 answers

Restrict RDGW sessions to single active per device by multiple devices

Starting situation: Multiple physical Windows OS computers on production line served by system owner and co-owner, e.g. Alice and Bob work on PC1, Charlie and Dave on PC2, etc. They are all using the same local user name when logging in directly on…
Bo Solo
  • 1
  • 2
0
votes
1 answer

Create a second WebAccess RDS connection to servers already in a collection

All of our staff who are working from home use Windows RD Web Access to connect in to our Remote Desktop Servers. We currently have a 2012-r2 RD Broker with 1 collection consisting of 5 RDS 2012-r2 Servers and a second collection with just a Remote…