In the General tab, enter the name of a standalone RDS Host, RDS farm, or a computer you want to connect to via RDP (you may also specify a user name and use saved credentials for the RDP connection).See an article on how to update root certificates on Windows. If you are using a self-signed certificate on your RDGW, put it to the Trusted Root Certification Authorities on your client. If a client doesn’t trust a certificate on an RDGW server, it won’t be able to connect to the gateway (you can import self-signed SSL certificates to clients manually or using GPO). You may also use a free Let’s Encrypt SSL certificate ( Configure a Let’s Encrypt certificate on IIS for Remote Desktop Gateway) or a self-signed Windows SSL certificate, but note that external clients must trust it. It is better to use a commercial certificate issued by an external certification authority (CA). To secure the connection to the RDS gateway, you must install an SSL certificate on it. New-Item -Path RDS:\GatewayServer\RAP -Name allowextAdminMunRDS -UserGroups -ComputerGroupType 1 -ComputerGroup Install SSL Certificate for Remote Desktop Gateway
You can add this RAP rule using PowerShell: But you can open additional ports as well By default, it is recommended to open only the default RDP port TCP/3389. Then specify the port numbers you want to allow connection to.On the Network Resources tab, specify what RDS servers your external users are allowed to connect to (mun-rdsfarm).Specify the name of the user group allowed to connect to internal RDS resources.Enter a policy name: rdgwExternalAdmins.In the RD Gateway Manager console, click Policies -> Resource Authorization Policies and select Create New Policy -> Wizard.New-Item -Path 'RDS:\GatewayServer\CAP' -Name 'rdgwAllowAutht-CAP' -UserGroups rdgwExtUsers -AuthMethod '1' Import-Module -Name RemoteDesktopServices You can also create an RDGW connection policy using PowerShell: Then you can configure timeouts for RDP sessions.In the Enable or Disable Device Redirection window, you may specify what devices are allowed to be redirected to an RDP session (a clipboard, printers, local drives, etc.).Select an authentication type (a password and/or a smart card) and specify a group of users allowed to authenticate on the RDGW.Expand Policies -> Connection Authorization Policies and select Create New Policy -> Wizard.Resource Authorization Policies (RD RAP)– s specifies users and resources (computers) on the internal network that are allowed to connect via RDGW.Connection Authorization Policies (RD CAP) – sets who is allowed to authenticate on the RDS Gateway.
0 kommentar(er)
