RDP Options

[Jason1975]

Hi Steve

 

Thanks for the info. Do you mean with 1 and 1?

 

So set the A record on the subdomain so that when the redirection occurs it redirects as as the full url and not the external IP, thereby matching the SSL cert?

[Steve21]

There shouldn't be any redirection set on it at all. There should be an option for an A record which basically says where that site lives.

 

And yes on 1&1 (The only thing I don't know is whether 1&1 allow sub-domain A records or only primary domain). If there is it'll normally be something like Manage Sub Domain -> DNS -> A/AAAA records

 

Then when you as an external hits the URL it's pointing you to your external IP but the domain is the same as you said

 

Steve

[Jason1975]

Hi Steve

 

Ok great, thanks for the info - It makes sense.

 

Seems my mistake was using the domain redirection instead of using the A record.

 

I will set this up and see how it goes.

 

Many thanks for the time taken to answer my questions.

[Jason1975]

Ok, update, this is now working

 

The solution was indeed setting up the sub domain with 1and1, but instead of using redirection to get to our internal IP I used an A record.

 

Thanks Steve!

[Steve21]

There's a snassy redirect you can do too btw, Put your default sites onto a redirect for /RDWeb/Pages etc then if they hit the top domain it'll force them to that page as currently if they use the normal full URL it'll go to a basic IIS loading page, but only a thought

 

Steve

[Jason1975]

Thanks Steve - Thats a good tip

 

I am researching how to make home directories work within remote apps but there has been good progress made today!

[Jason1975]

More progress made and I am almost there in terms of functionality

 

Unfortunately I am struggling with the actual drive mappings, and getting them setup.

 

I have researched this but can't find a good tutorial how to make this work.

 

Any ideas or links please?

 

Many thanks

[Steve21]

Is this for RemoteApps wise still?

 

If so just use your normal GPO in the backgrounds on the servers for those users, so say "Teaching Drive Maps to R:" then make a program that runs:

 

C:\windows\explorer.exe

 

 

In parameters put "Always use the following command line parameters" R:\

 

Done.

 

Steve

[Jason1975]

Thanks Steve, yes still for remote Apps.

 

By normal Group Policy, do you mean that the drives would display in the remote apps page or on the actual computer that is initiating the connection?

 

If I RDP normally to the server hosting Remote Apps and log on it seems to pull the correct mappings but it does not seem to be pulling anything GPO related if I log on via remote Apps.

 

 

 

Would this work with Home drives as well?

 

Usually I map with %username% to get the home drives working.

 

 

Thanks for helping me out

[Steve21]

Whatever account you're connecting to remoteapps with the server that hosts the apps uses the GPO linked to it.

 

So if you're R:\ drive is mapped on the server to "Teaching" it'll work via RemoteApps too. So in the homedrive example you map as normal with GPO, then just use explorer.exe to N:\ etc

 

btw you might find it useful to also just add a RDP option to the server We have them all mapped individually, then the option that one of the programs RDPS into the server for a full login session so they get their normal desktop etc

 

See these pics for examples of ours - 1st is if you via the web way you can just open the drives directly, and 2nd is if you click the RDS1 option on our web

 

 

That might explain a bit better what I mean

Steve

[Jason1975]

The first screen shot is exactly what I am looking to achieve.

 

I have just made published explorer.exe to see if the GPO is working, and when I run it I can see the mappings on a non domain PC, so the GPO is applying correctly.

 

Almost there I think!

 

Thanks for the help Steve

[Jason1975]

Job done!

 

Mappings in place, folders and icons in place and everything seems to be working correctly.

 

Thanks to everyone that offered advice and help

[Jason1975]

Morning everyone.

 

Staff have been using the remote apps and it seems to be well received and working correctly.

 

I checked the remote App connections and see staff usernames, but also a domain\visitor account, which perplexes me slightly as one should (as I understand things) only be able to log on with a username that is authenticated via AD.

 

Is this visitor account a cause for concern?

 

Many thanks

[sted]

depends if you have an account called visitor or not. To log in you need an account that is allowed access which by default iirc is basically any domain account

[Steve21]

What options did you set on the collection? There's the option on the collection to filter who can access said collection.

 

Then there's the actual option on the RDS server who can remote onto it too.

 

Steve

[Jason1975]

The collection has been set for just staff to access resources.

 

I found this account in AD, but wonder why a member of staff would use it and not their own login.

 

Definitely disabling that one to find out who is using it!

 

Thanks

[sted]

The collection has been set for just staff to access resources.

 

I found this account in AD, but wonder why a member of staff would use it and not their own login.

 

Definitely disabling that one to find out who is using it!

 

Thanks

 

i bet theyve been doing it for years when they forgot their password one day

[AngryITGuy]

depends if you have an account called visitor or not. To log in you need an account that is allowed access which by default iirc is basically any domain account

 

I was in the same boat recently while testing out our new RDS Farm.

 

We have a REMOTE-ACCESS-ALLOW group which the collection was assigned to and policies setup to only allow remote access for that group.

 

But as pointed out by sted we found that any domain user could login to the Web Access Portal but they wouldn't see any published apps.

 

After a bit of hunting around online I came across and implemented this so only users in the allow group can authenticate

 

http://www.vkernel.ro/blog/restrict-users-from-login-to-remote-desktop-web-access

[Jason1975]

I was in the same boat recently while testing out our new RDS Farm.

 

We have a REMOTE-ACCESS-ALLOW group which the collection was assigned to and policies setup to only allow remote access for that group.

 

But as pointed out by sted we found that any domain user could login to the Web Access Portal but they wouldn't see any published apps.

 

After a bit of hunting around online I came across and implemented this so only users in the allow group can authenticate

 

Restrict users from login to Remote Desktop Web Access

 

Thats good info, thanks for sharing

[jhector]

I like the front page - what did you use to create it?

[Areku]

we also have ours as a custom front page which gives staff and students information about how to use it

https://remote.beaufort.coop

 

 

Off topic, thanks for helping me work out what i was doing wrong on MAC's, having read though your "Mac guide" i was able to get our music teachers mac to remote apps on our solution (obviously swapping our domain names in)