RDS Confusion

[36Degrees]

I am trying to set up an RDS system for remote apps only, accessible externally on non-school devices. I am also going mad trying to get my head around it.

 

So far:

 

Web access, Connection Broker and Session Host are configured and everything appears to be working internally (albeit with certificate errors which I can resolve later)

Gateway created and external FQDN is set.

 

What do I need to configure on the gateway?

There is now an NPAS service - do I need to do anything with this?

[deano]

I presume you can browse to the login page remotely through the external DNS and port forwarding configured for 443?

 

No config should be needed on the NPAS and you will also need to get a cert of some kind installed

[36Degrees]

I haven't tried the external link yet as now I've added the gateway I'm not sure if I need to link the public IP to the gateway or the Web Access server.

 

Certs aren't a problem, I have that aspect in hand.

[deano]

are you using a seperate server for the gateway? Either way you need to port forward 443 to the server with the gateway role installed and then add an external record in your DNS provider to that external IP.

[2097]

I have just setup the following

 

Connection Broker

Gateway

3 session hosts

Gateway and Session broker are on the same server

 

 

Problem being if you host anything on port 443 in school with external access ( e.g. OWA, Exchange Proxy ) and you only have a single IP address then you need to change the port for RDS gateway . You can change this setting some where in the gateway settings.

 

Remote Gateway Manager > Right click server and goto Properties > Goto Transport Settings > Change HTTPS port

 

You also need to do this with a power shell command so it also updates the RDP files in RDWEB.

 

Set-RDSessionCollectionConfiguration -CollectionName "COLLECTIONNAME" -CustomRdpProperty "gatewayhostname:s:gateway.domain.com:4343"

 

Another thing i also noticed was i couldn't add the username RDP property to specify the domain name ( Stops people typing in DOMAIN\ externally) . Tried a few power shell commands to add it to the RDP via a CustomRDPProperty, never worked.Also with 2019 there are no RDP's to edit.

 

Add this to the bottom line of your RDP files

[b]username:s:domain\[/b]

( Replace domain with internal domain name)

 

For macs add the following instead on the bottom line

[b]domain:s:DOMAIN[/b]

 

 

I noticed that you can add it manually after the Certificate part of the RDP file ( it still apply's it without having to be signed)

 

RD WEB wouldn't work for us , because of the reasons above. I now use HAP+ to host the files which is a LOT easier and much more customizable.

Edited April 16, 2020 by 2097