+ Post New Thread
Results 1 to 10 of 10
Windows Server 2008 R2 Thread, RemoteApp small problem in Technical; Hi, I've got remote app running happily, im almost ready to let staff use it apart from one minor issue... ...
  1. #1
    mrbios's Avatar
    Join Date
    Jun 2007
    Location
    Stroud, Gloucestershire
    Posts
    2,419
    Thank Post
    343
    Thanked 250 Times in 206 Posts
    Rep Power
    97

    RemoteApp small problem

    Hi,

    I've got remote app running happily, im almost ready to let staff use it apart from one minor issue...

    When people login to remote app from the start page i've got it to automatically but domain\ in the username box, that's good and they login ok, they click on an app and then it asks you for your login again....at this point they have to manually type domain\username. I need to get it to default to domain and only require them to enter the username OR how do i implement single sign on so they just login to the system and from that point they don't have to login to apps etc?

  2. #2

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,758
    Thank Post
    825
    Thanked 1,662 Times in 1,447 Posts
    Blog Entries
    11
    Rep Power
    441
    Is this from machines within the local domain or outside of school?

    Try adding the site to the Local Intranet Zone in IE. Then it shouldn't ask for a password at all.

  3. Thanks to FN-GM from:

    mrbios (1st December 2010)

  4. #3
    mrbios's Avatar
    Join Date
    Jun 2007
    Location
    Stroud, Gloucestershire
    Posts
    2,419
    Thank Post
    343
    Thanked 250 Times in 206 Posts
    Rep Power
    97
    Outside of school

  5. #4

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,758
    Thank Post
    825
    Thanked 1,662 Times in 1,447 Posts
    Blog Entries
    11
    Rep Power
    441
    ah well ignore me then

  6. #5
    mrbios's Avatar
    Join Date
    Jun 2007
    Location
    Stroud, Gloucestershire
    Posts
    2,419
    Thank Post
    343
    Thanked 250 Times in 206 Posts
    Rep Power
    97
    Still a handy suggestion incase i decide to use it in school though, so thank you

  7. #6

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,758
    Thank Post
    825
    Thanked 1,662 Times in 1,447 Posts
    Blog Entries
    11
    Rep Power
    441
    Quote Originally Posted by mrbios View Post
    Still a handy suggestion incase i decide to use it in school though, so thank you
    glad i could be some help.

  8. #7

    Join Date
    Apr 2007
    Location
    Sutton Coldfield
    Posts
    207
    Thank Post
    29
    Thanked 34 Times in 28 Posts
    Rep Power
    20
    Hi,

    This is to do with Digital Certificates. I'm guessing you use internally generated digital certificates, in which case, you need to generate a certificate for each internal Session Host server and then import that into your Gateway/Web Access server (or Web Access) server. Make sure it uses that certificate and that gets rid of the issues.

    I'll try and find the guide I found on the net and post a link.

    Thanks,

    Rob

  9. Thanks to robknowles from:

    mrbios (1st December 2010)

  10. #8
    mrbios's Avatar
    Join Date
    Jun 2007
    Location
    Stroud, Gloucestershire
    Posts
    2,419
    Thank Post
    343
    Thanked 250 Times in 206 Posts
    Rep Power
    97
    Cheers Rob

    I've tried it with both automatically generated certs and we also have a domain wildcard certificate. As far as im aware there are 3 locations i can set the certificates within remote desktop services settings, i can set this certificate on two of these but on the 3rd one (can't remember which it is inparticular) i can't access the site externally as ISA gets funny, i've got the certificate on both the ISA and the TSgateway/remoteapp servers certificate stores but it still doesn't work.

    If that's what i need to play with though then i'll focus on that, it at least puts me on the right track Cheers

  11. #9

    Join Date
    Mar 2007
    Posts
    1,748
    Thank Post
    79
    Thanked 288 Times in 219 Posts
    Rep Power
    70
    single sign on also requires a specifc version of the rdp client, and works better in 7 than it does in xp. There;s an authentican level settings for the rdp file which i think helps too.

  12. #10
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,648
    Thank Post
    164
    Thanked 217 Times in 200 Posts
    Rep Power
    66
    After fighting this for a few days I found the magic bullet to all my double authentication woes... turns out the renderscript.js file doesn't work correctly in terms of handling the authentication cookies... a few lines of code added in solved all my issues

    Getting multiple credential prompts when connecting to Remote Desktop Remote Apps - Ask the Performance Team - Site Home - TechNet Blogs

    Having tested it out I've come to some conclusions on the user experience if we roll out RemoteApp \ RD Web Access functionality to our staff... just wondering if anyone could confirm what I've found?

    The aim is to have a remote access setup for staff to either work from home on documents (without downloading them to a local PC) and also to run apps at external centres that may have old versions of Office etc installed. That suggests two features...

    • Remote Desktop Gateway (https-based access to a Remote Desktop session)
    • RemoteApp via RD Web Access for the apps

    Setting up the SSL certificates went OK and installing the roles was nice and simple, RemoteApp SSO works OK but there's still a few gotchas...

    • for the WebSSO to work on a non-domain joined PC the client has to be running the RDC 7.0 client. That's included with Windows 7 but requires an update for Vista \ XP SP3.
    • if the user wants to launch a Remote Desktop session via the RD Web Access interface it asks for credentials again. This is by design I think (although there's a hotfix for 7 to enable SSO here, don't think there's anything for XP as far as I can tell)

    So the problem with this is quite obvious from a user point of view needing to install updates and assuming admin rights to install the updated RDC client, which is far from ideal. The alternative is a minimum of two login boxes, which have to be filled in with the DOMAIN\USERNAME prefix. That's ignoring the ActiveX control and untrusted publisher warnings (MS seem to think a GPO is a suitable fix for this even though the REMOTE part of the product suggests the machines won't be on our AD!)

    If I leave the RemoteApp out of it and just want the Remote Desktop via Gateway I think all I need is a pretty web page with a link to the .rdp file as far as I can tell?

    Any thoughts on how it's worked for anyone who's had it implemented so far?
    Last edited by gshaw; 4th November 2011 at 12:46 PM.

SHARE:
+ Post New Thread

Similar Threads

  1. [SIMS] SIMS via TS RemoteApp in server 2008R2
    By mrbios in forum MIS Systems
    Replies: 24
    Last Post: 3rd December 2010, 03:47 PM
  2. Replies: 18
    Last Post: 28th November 2010, 10:10 PM
  3. RemoteApp on thin clients
    By Axel in forum Thin Client and Virtual Machines
    Replies: 4
    Last Post: 19th November 2010, 03:50 PM
  4. [RIS] Problem HP Mini 2140 Laptop and HP Ultra small PC 7900
    By GAS in forum O/S Deployment
    Replies: 2
    Last Post: 22nd July 2009, 12:40 PM
  5. Replies: 6
    Last Post: 31st August 2008, 01:25 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •