RDS and authentication

[Sheridan]

I've setup a test 2012 R2 RDS system (all the roles on one server purely for testing) so I can see how well RDS will replace our older Citrix system. Internally it works ok - staff login and launch apps fine (apart from the first initial app loading slowly) but when they try to use it at home the behaviour changes.

 

They login ok, but when launching any app are given a dialogue asking them to enter their credentials for the RDS server - no valid credentials seem to work at this point!

 

I've got a full domain wildcard SSL certificate on all the RDS roles, and on the TMG that it comes through - have I missed something about enabling SSO along the way?

[jdoldridge]

Have they put their credentials in DOMAIN\username format? We have do this externally to login.

[Sheridan]

No, I edited the login.aspx file to allow them to login with short login names.

 

I might try reseting it back and give it a try.

[localzuk]

What about in the RDS box? We also have to put the full DOMAIN\Username format in externally there.

[Sheridan]

What about in the RDS box? We also have to put the full DOMAIN\Username format in externally there.

 

What do you mean by the RDS box? Sorry if I'm being dim here!

[localzuk]

What do you mean by the RDS box? Sorry if I'm being dim here!

 

When logging in via RDWeb, you log in once using the web page, then when you click on the app you wish to use (be it an individual app, or an entire desktop), you are presented with the Remote Desktop client login dialog. That's the RDS box I'm talking about.

[Sheridan]

When logging in via RDWeb, you log in once using the web page, then when you click on the app you wish to use (be it an individual app, or an entire desktop), you are presented with the Remote Desktop client login dialog. That's the RDS box I'm talking about.

 

Right, I get it. Thats whats I'm having the problem with - I thought that box shouldn't pop up and it doesn't seem to accept any credentials (even prefixing with domain name)

 

I thought with RDS you could get away with a single login? We do with our old Citrix system currently.

[localzuk]

The second login box is caused by the RDP file that is generated being untrusted. Its all about the certificate not signing the RDP files, and/or the clients not recognisig the signature.

[Sheridan]

The second login box is caused by the RDP file that is generated being untrusted. Its all about the certificate not signing the RDP files, and/or the clients not recognisig the signature.

 

Its odd then, as I have a 'proper' certificate installed across the way, from the TMG firewall to the all of the RDS Server components. It works fine internally, user logs in and launchs apps with no further authentication.

 

If we can't work around it we'll have to stick with Citrix, staff wouldn't be happy with this carry on!

[KibosJ]

Are you logging into the RDS site with Internet Explorer?

 

When I use Internet Explorer to log in to the RDS site and open an App it doesn't ask for credentials, if I do it through any other browser it does.

 

We have moved away from using the website now and using the RemoteApp feature that is part of Windows, much simpler for my users.

[Sheridan]

Yes we're using IE11/Edge and its asking for authentication. Haven't tried the remote app part yet as we're just testing this.

[KibosJ]

Hmm strange, just tried it here in IE11 and it is asking for the username and password details now.

[Sheridan]

I can't get it work like I want. I can login to the RDS site, but any app I try and start prompts for authentication and nothing entered in here will work, no matter how I enter it

 

Works fine internally though, which isn't much use!

 

If nothing else its proved Citrix is worth the money!