jonathan.lees Posted September 13, 2018 Posted September 13, 2018 Hi, not sure if this is the right forum, we're currently using HAP+ for staff and students to access files from home. I need to implement something more secure and thinking about remote access via VPN to desktops for staff. If you have this facility, what do you use and what would you recommend. I'm looking for something with 2FA and ideally access through a browser. thanks!
AlanD Posted September 13, 2018 Posted September 13, 2018 VPN access? You mean you are going to allow any PC at home riddled with ransomware and viruses to access your school network directly? I presume you already have a job offer at another school you are ready to move to. Maybe...and only maybe....if you have a fully locked down staff laptop where the user cannot install or run executables or scripts (maybe an RM network) ...then I might consider allowing a VPN connection to school. Why not use O365 (or google filestream) as your means for providing user storage?
steveg Posted September 13, 2018 Posted September 13, 2018 We use Ericom Connect here to allow staff to rdp to a Remote desktop server in a browser, also has clients for Windows, Mac, ios and android. Seems pretty popular with staff and is very reliable. Steve 1
FN-GM Posted September 13, 2018 Posted September 13, 2018 We use Ericom Connect here to allow staff to rdp to a Remote desktop server in a browser, also has clients for Windows, Mac, ios and android. Seems pretty popular with staff and is very reliable. Steve Microsoft provide a HTML 5 client now. It can do the above but without having to pay extra for it. 1
FishCustard Posted September 13, 2018 Posted September 13, 2018 Microsoft provide a HTML 5 client now. It can do the above but without having to pay extra for it. We use this (link: https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/remote-desktop-web-client-admin) and it works wonderfully. Staff love it, and the few who are a little more tech-aware view it as pure witchcraft compared to our old laptop-and-VPN system. The less techy just appreciate that it works every time! 1
steveg Posted September 14, 2018 Posted September 14, 2018 Microsoft provide a HTML 5 client now. It can do the above but without having to pay extra for it. It's on my list of things to look at, just too many other projects on the go at the moment!
FN-GM Posted September 14, 2018 Posted September 14, 2018 It's on my list of things to look at, just too many other projects on the go at the moment! Snap! We haven't deployed it either.
Norphy Posted September 14, 2018 Posted September 14, 2018 Assuming you have a properly configured RDP gateway in place already, it's actually surprisingly simple to get implemented. It's above five lines of PowerShell and importing your certificate. 1
jonathan.lees Posted September 14, 2018 Author Posted September 14, 2018 thanks all for your advice, I'm obviously wrong in that I don't need VPN, just that's how I've always done it. How secure is the remote desktop web client though?
jonathan.lees Posted September 14, 2018 Author Posted September 14, 2018 Has anyone got a good guide for setting up Remote Desktop services, I've found a few things on google, seems a lot of work!
sister_annex Posted September 14, 2018 Posted September 14, 2018 We use this (link: https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/remote-desktop-web-client-admin) and it works wonderfully. Do you give your staff a direct link to the webclient or is there a way of automating it? I've installed it, got it working fine when I navigate to the URL but the default RDWeb site shows as usual which loads the MSTSC version hope that makes sense??
Norphy Posted September 14, 2018 Posted September 14, 2018 I've modified the RDWeb connection page to give a link to the webclient if they want to use it. PM me if you want to see.
FishCustard Posted September 14, 2018 Posted September 14, 2018 Do you give your staff a direct link to the webclient or is there a way of automating it? I've installed it, got it working fine when I navigate to the URL but the default RDWeb site shows as usual which loads the MSTSC version hope that makes sense?? We just redirect rds.school.com to the RDWeb page.
Asgard Posted September 14, 2018 Posted September 14, 2018 (edited) Has anyone got a good guide for setting up Remote Desktop services, I've found a few things on google, seems a lot of work! I’ve set two up for two separate sites over the last couple of weeks, I don’t mind giving you a hand if you want - html5 client is cool - our staff were quite used to a html5 client from our Quest / Dell vWorkspace setup which was just a pretty front end for RDS On security .... it passed a JISC penetration test [emoji106] Edited September 14, 2018 by Asgard
evasion Posted November 17, 2018 Posted November 17, 2018 When you allow rdp over https using RD Gateway, what do your staff connect to? Is it a single VM in DMZ vlan, or is it something else supporting multiple logins? thanks
Blue_Cookeh Posted November 17, 2018 Posted November 17, 2018 When you allow rdp over https using RD Gateway, what do your staff connect to? Is it a single VM in DMZ vlan, or is it something else supporting multiple logins? thanks You'd usually have some sort of VDI setup - so multiple VMs waiting for connections.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now