RDS Internal Access
I have deployed a 2012 RDS farm with 3 servers. Server01 currently is the Gateway, Session Broker and RDWeb. The other 2 servers are session hosts (server02 and server03). We have a reverse proxy and then a firewall that provides secure
external access. I have installed a 3rd party certificate and external access works. I made the dns changes to our domain controllers to resolve the external name (remote.contoso.com) to the internal IP address. I am able to get to the RDWeb
site and the certificate shows correctly. However when I try to publish an app I get "Your computer can't connect to the remote computer because an error occurred on the remote computer that you want to connect to." or Remote Desktop can't
connect to the remote computer for one of the reasons: 1) Remote access to the server is not enabled 2) The remote computer is turned off 3) The remote computer is not available on the network - Make sure the remote computer is turned on and connected to the
network, athat remote access is enabled. When I edit deployment properties and check "Bypass RD Gateway Server for local addresses" I am able to publish applications. So my assumption is that the gateway server is causing the problem, just
not sure what. Workstations connecting to the RDS Farm are windows 7 64 bit.
(edit: added workstation type)
Hi,
Thank you for your posting in Windows Server Forum.
Please check collection Properties of security setting. For test purpose, please low down the security level and test the issue again as per
this article.
1. Set Security layer to "RDP Security Layer”
2. Set Encryption level to "Client Compatible"
In addition, I would like to suggest that you must use “domainname\username” for entering into RD web access. Also Apart from that you can try to download and install
RDP 8.1 for Windows 7 and check the result.
Also refer “Why can’t I connect using Remote Desktop Connection?” article.
Hope it helps!
Thanks,
Dharmesh
Similar Messages
-
This morning Voice Over started running on my computer when I turned it on. I did not turn Voice Over. Could I have hit a combination of keys on the keyboard that accidentally turned it on? When I went to System Preferences and chose Internation Access it showed that Voice Over was not even on. I turned it on and turned it off to reset it, and it is still running. How is this possible, and how to I get rid of it?
TrumpeterI went to System Preferences, Universal Access, and then VoiceOver for the fiftieth time after you said to check VoiceOver Utility to see if I saw anything odd. On The VoiceOver screen it was actually saying that VoiceOver was on. All day the VoiceOver option was off, and the computer talked to me everytime I logged in. I tried turning it on and off and it still talked to me. Now the VoiceOver option was on, so I turned it off again. Weird! I had tried several combinations of keys again and again as the tech instructed me to do, but we couldn't turn it off, but I have to admit that after my phone went dead I tried everything I could imagine; so maybe in trying to turn the talking off I turned the VoiceOver Option on. Anyway, somewhere along the way it quite talking to me.
Let me ask you a couple of questions. When I clicked on VoiceOver Utility, after turning VoiceOver off, the screen message says: Speak the following greeting after login: Welcome to Mac OSX. VoiceOver is running. I was assuming that it meant VoiceOver was running. That is what it is saying right now. It's not talking to me anymore, but the screen says this whether the VoiceOver icon is on or off. What is this all about. Is it telling me that Voice Over is still running when I see this, or what? After all, even when the OFF icon was chosen the computer still spoke to me when I hit each key upon logging in. After you read the rest of this you will understand why I am asking if it is still running even though it's not talking to me.
There is a box that appears and says "Portable Preferences for (Jane Doe) have been detected on (JaneDoe). Would you like to use them? Always Use / No / Yes What does that mean?
Last but not least. I was looking around and was clicking on Application, Documents, etc. When I clicked on Documents, only four things came up even though there are tons of documents on my computer. All four of them have to do with VoiceOver, and they were labeled as documents. One of the documents had this in it:
SCRConfiguration Cursor Tracking KBToVO
SCRConfiguration Cursor Tracking VOToTXT
SCRConfiguration Cursor Tracking VOToKB
I'm not a computer genius, so maybe I just don't know what I'm looking at. Is it normal for something like this to be found under documents? All of these were dated today, and the problems started today. I haven't gone to bed yet, so even though it's after midnight it's still the same day to me. Anyway, none of the documents were dated before this problem started. On top of that, I have tons of documents on my computer, but when I clicked on Documents, those four are the only ones that showed up. After trying to decipher the programming language on them, I went to click on Applications and hit Documents again, and all the documents came up. I scanned the list and didn't see them, but there are so many documents on here that I haven't had time to slowly go over them to see if I missed those four documents somehow. Since then I haven't been able to get just those four to appear by themselves again.
Now, is it possible that I still have a hacker and he knows through a key logger everything I am communicating to you and the Apple Store, Maybe he did made a mistake and accidentally caused this problem, and through logging every key I have typed he has learned about his mistake and fixed it. He could still be key logging me now without me knowing it; or maybe he removed the keylogger, because he know I'm taking it in to the Apple Store and can tell them now exactly what to look for.
It is either a hacker, or I have a very vivid imagination. What do you think? -
just read an interesting article in the ny times which spoke
about how worldwide spam volumes have doubled... and that spam
accounts for more than 9 of 10 email messages sent.
since a good chunk of the junk comes from outside the country
- and presumably a good chunk of the programs that scour websites
looking for email addresses are out of the country - it seems like
it would be a good idea to block international access to a site
(assuming, obviously, that one doesn't care about the quality
viewers that will be lost in the process) and also block receipt of
incoming email that originated outside the country.
possible?You'd better go take a nap. That's way too many paragraphs
for you
today.... 8)
Murray --- ICQ 71997575
Adobe Community Expert
(If you *MUST* email me, don't LAUGH when you do so!)
==================
http://www.dreamweavermx-templates.com
- Template Triage!
http://www.projectseven.com/go
- DW FAQs, Tutorials & Resources
http://www.dwfaq.com - DW FAQs,
Tutorials & Resources
http://www.macromedia.com/support/search/
- Macromedia (MM) Technotes
==================
"crash" <[email protected]> wrote in message
news:[email protected]...
> Saying it's a reasonable request and saying it's a
reasonable expectation
> are two different things. I would not do it, based
mostly on the reasons
> stated.
>
> No matter how many people might be able to see my
webpage, if I sell local
> products to a local market (say, energy), then the
global market is of no
> concern to me. Yes, I can reach them, but what does it
matter?
>
> If there is a circumstance in which the spam is causing
an overload of my
> servers to provide service to my local customers, and I
sell energy to a
> tri-state area, it may behoove me to limit my site to
only those that I
> serve.
>
> Just because my page is globally accessible doesn't mean
that's the best
> business model to uphold. Similarly, I don't code my
pages in anything
> but English because I don't have the facilities to work
with anybody that
> doesn't speak English. While they might be technically
able to buy my
> product, It's not feasible for me to sell it to them.
>
> Since very little was specified about the site, I did
not find it an
> unreasonable request. I do not agree on the OP's methods
arriving at
> this - articles don't tell you what your traffic is,
only general
> patterns.
>
>
> "Murray *ACE*" <[email protected]>
wrote in message
> news:[email protected]...
>> You still think it's reasonable?
>>
>> --
>> Murray --- ICQ 71997575
>> Adobe Community Expert
>> (If you *MUST* email me, don't LAUGH when you do
so!)
>> ==================
>>
http://www.dreamweavermx-templates.com
- Template Triage!
>>
http://www.projectseven.com/go
- DW FAQs, Tutorials & Resources
>>
http://www.dwfaq.com - DW FAQs,
Tutorials & Resources
>>
http://www.macromedia.com/support/search/
- Macromedia (MM) Technotes
>> ==================
>>
>>
>> "crash" <[email protected]> wrote in
message
>> news:[email protected]...
>>> heheh, sorry, reader wasn't showing the 800
other replies to this, and I
>>> wasn't lookign at time of posts.
>>>
>>> :O)
>>>
>>>
>>
>>
>
> -
Exchange 2013 OWA - Restrict External access to OWA, while keeping internal access open
I'm looking for the best way to restrict users who can access OWA externally, while keeping internal access to OWA open to everyone. We would preferably like to control who has external access to OWA with an AD group. Users who have external access,
would need both external and internal access to OWA. Internal users would only have internal access to OWA.
TMG is off the table since it is EOL. Reverse proxy might be a possibility, but I'm running into issues with the security setup and passing credentials.
Does anyone know the best way of restricting external access without disabling internal access?
ThanksNot sure if this still applies to 2013 or not, haven't tried yet...
http://blog.leederbyshire.com/2013/03/13/block-or-allow-selected-users-depending-on-location-and-ad-group-membership-in-microsoft-exchange-2010-outlook-web-app/
Blog |
Get Your Exchange Powershell Tip of the Day from here -
Configure a sharepoint 2013 site for external and internal access
I need to configure a local install of sharepoint 2013 so that users can access it internally and externally using windows/AD authentication. The internal and external addresses are different.
I have bound an external ip to the domain for external access.
I have created Alternate Access mapping, and bound the host header but I get a file not found message for external access.
Have I missed something here? why the error and how can it be fixed. Step by step process would be appreciated.Hi Luis,
According to your description, my understanding is that the error occurred when accessing the site externally.
The most common cause for this is that the IIS host header is configured incorrectly. The 404 will appear because we are hitting a different IIS web site and not the one we are intended to.
Here is a similar issue for you to take a look:
http://stackoverflow.com/questions/14953322/sharepoint-2013-404-not-found-while-accessing-site-collection-from-outside
More references:
http://technet.microsoft.com/en-us/library/cc261814(v=office.15).aspx
http://technet.microsoft.com/en-us/library/cc263208(v=office.15).aspx
Best regards.
Thanks
Victoria Xia
TechNet Community Support -
How to configure RDS to let a specific RDS group access a specific RDS server (no VDI or farm) ?
Hi there,
We have one domain with 40 sites. On each site is a RODC, wich also has RDS. (RDS the old way, no broker installed)
The RODC's are 2008R2 and 2012R2 servers.
Everything works fine, however everyone can access all servers as a straight forward RDS user (no VDI).
Everyone is in the build in group for remote user.
I'd like to have people that work on ServerA only are able to contact serverA for RDS.
B on B, C on C and so on ... This for all 40 sites.
I made a policy for each site allowing RDS_A to access server A and so on. Is this the right way to do it, or can I do it having less GPO's ? I need 40 right now!!! Linking the policy to the right OU, containing the specific server.
Something is still wrong, because other people still can access serverA.
I get into it, but maybe I'm doing it wrong, so please give me some advice :)
Thanks,
Ben.
Ben van der MeerHi Ben,
Thank you for posting in Windows Server Forum.
You can achieve this through group policy but you can do one thing. You can create one group for one server (Suppose group A for server A, B for B, so on). After creating that group add particular user to that group and apply the group policy setting on that
group for particular group.
The group policy which can apply is “Allow users to connect remotely using Remote Desktop Services” under below mention path.
Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections
More information.
http://technet.microsoft.com/en-us/library/ee791922(v=ws.10).aspx
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support -
AnyConnect 3.0 with ASA5510 no Internal Access
We have gotten our anyconnect clients to connect to the VPN with no issues and verifying credentials with RADIUS. Remote users however cannot access internal resources through the VPN. I know I need to setup an NAT Exempt statement for my VPN Pool to the Internal Network, but I am having problems figuring that out and looking for a little guidance.
Thank you in advance.
-NickYou have to create a access list.
e.g access-list NO-NAT extended permit object-group VPN-DHCP-POOL any ( feel free to restrict access here) log
Then create no NAT rule
e.g Nat (interface) 0 access-list NO-NAT
Sent from Cisco Technical Support iPad App -
Hi,
the RDS web became empty,
I enabled logging in %systemroot%\web\rdweb\Web.config and the log being created in %systemroot%\web\rdweb\App_Data says:
w3wp.exe Warning
0 2014/10/24 16:37:58 [Warning] 35 Could not retrieve workspace info from the store, falling back to Web.config
w3wp.exe Warning
0 2014/10/24 16:37:59 [Warning] 53 Could not retrieve workspace info from the store, falling back to Web.config
w3wp.exe Warning
0 2014/10/24 16:38:02 [Warning] 44 Could not retrieve workspace info from the store, falling back to Web.config
any Ideas?ok, so I solved it by just deploying the web access on another server
-
Help Rights International access Adobe Muse
Rights International is a childrens rights charity working in Uganda. Our website was built by a consultant using Adobe Muse. We would now like to access a copy so we can edit our website. We cant really afford to buy it so was looking for an organisation to donate it for free or let us be one of your users. This is a great way of fulfilling your coporate social responsibility and supporting a childrens chairty www.rightsinternational.org.uk.
Lisa Davis
Director
Rights International
[email protected]Hi Sanjit,
Thank you for your help, as long as it can be done one way or another that is fantastic.
Thanks,
Adam. -
Dual setup for internet and internal access
Goal: To set up an Xserve that is both hosting public web sites and internal websites. The server is currently connected to the internet via ethernet 1 and to our internal network via ethernet 2. It serves as a backup failover for our main web server and hosts an internal wiki. The wiki is getting more sensitive company information so we want to cut it off from outside access and guarantee that it cannot be hacked or otherwise seen. Someone mentioned a solution using partitioning of some kind to achieve this separation. I haven't been able to find information on this. Can anyone tell me more about what this may be or suggest a setup that will accomplish the same security.
Here, you have two NICs within one security context.
A security breach made via one NIC can generally gain access to another NIC within the context of a single operating system. Once the [security of the box is breached|http://labs.hoffmanlabs.com/node/1214] sufficiently to cause you problems (whether data exposures, deletions, defacement or otherwise), then the entire box is generally considered to be untrustworthy.
If the breach arrives via http port 80 (and that is a typical web server breach), then (once the breach is made) the box itself is compromised. The firewall block here doesn't get you the degree of isolation provided by a DMZ; a breach via port 80 inward or one of these recent browser-based attacks on the firewall aren't necessarily blocked. (Whether the particular web environment is directly vulnerable to a breach is another and open question. Some environments can be more vulnerable to others, but there's the common assumption that all web-facing and internet-facing environments can potentially be vulnerable. That also ties back to how the box is managed and monitored, and how fast a breach can be detected and isolated and sealed and cleaned up.)
Some operating systems feature technologies known as sandboxes or jails or such, and sandboxes (and jails) are not AFAIK officially available on Mac OS X Server. These are part-way between the default configuration and what's provided by operating as a VM guest. If you really want to learn the innards of the configuration sufficiently, you might be able to get a jail or sandbox or such going, but then tossing another Mac Mini at the problem solves it in what is usually a more supportable fashion than getting a sandbox or jail going and maintaining the configuration over Mac OS X Server patches and upgrades, and application installations and upgrades, and thus at lower cost.
The approach using a VM tries to avoid extending the exposure by requiring the attacker to breach the underlying VM to get further from the box, and approaches based on a DMZ and on multiple boxes also try to contain or firewall a compromised system. -
Wireless ACL - Block internal access
I need to block all access from the guest wireless to our internal network.
The following is the ACL I've come up with so far for the guest SSID. I thought seq 1 and 2 would work - 1 allow clients to communicate with DHCP and 2 block access to all internal IP addresses. I had to add seq 3 for clients to access the internet as a workaround for now. Unfortunately because of seq 3 clients can also access everything else on our internal network.. I believe the descriptions are correct. Not 100% sure. It's what I want them to do anyway.
Our DHCP Windows server hands our guest wireless clients an IP address and sets their DNS to the DNS of our ISP not our internal DNS server.
The guest VLAN DHCP range is 10.55.12.50-10.55.13.254.
Our internal network is any IP in the 10.55 range.
Our controller is a Cisco 4402.
How do I accomplish this?
ACL: GuestWiFi
Seq
Action
Source IP/Mask
Destination IP/Mask
Protocol
Source Port
Dest Port
DSCP
Direction
NoH
Desc
1
Permit
10.55.12.0 / 255.255.255.255
10.55.1.1 / 255.255.255.255
UDP
DHCP Client
DHCP Server
Any
Inbound
0
DHCP Server. Allow clients to respond to DHCP requests.
2
Deny
10.55.12.0 / 255.255.255.0
10.55.0.0 / 255.255.0.0
0
Any
Any
Any
Any
0
Block access to internal network - all 10.55 addresses
3
Permit
0.0.0.0 / 0.0.0.0
0.0.0.0 / 0.0.0.0
Any
Any
Any
Any
Any
0Not a problem. The order is very important.
First allow access to all of your network. This ends up being last in the sequence. Then start denying access. For our network I permitted to all and then added vlans to deny. At the very beginning of the sequence is where I allowed access to specific devices/services on vlans that are blocked. Here is an example. There could be a better way of doing this. If there is please chime in.
ACL: GuestWiFi
Seq
Action
Source IP/Mask
Destination IP/Mask
Protocol
Source Port
Dest Port
DSCP
Direction
NoH
Desc
1
Permit
0.0.0.0 / 0.0.0.0
10.55.1.117 / 255.255.255.255
UDP
DHCP Client
DHCP Server
Any
Inbound
0
Allow printer
2
Deny
10.55.12.0 / 255.255.252.0
10.55.8.0 / 255.255.252.0
Any
Any
Any
Any
Any
0
Internal Wireless Vlan
3
Deny
10.55.12.0 / 255.255.252.0
10.55.5.0 / 255.255.252.0
Any
Any
Any
Any
Any
0
Management Vlan
4
Permit
0.0.0.0 / 0.0.0.0
0.0.0.0 / 0.0.0.0
Any
Any
Any
Any
Any
0
Everything -
Internal Access Management OIM
Hi Folks,
Can we create a user in OIM, who is not the End - User Admininstrator ?
and assign him access to Reports tab section.
Cheers,
GopsYou can create a separate group in OIM and make a user a member of that group and assign the reports in the menu times of that particular group in Additional details.
User -> Create -> Assign him to a group using Group Membership tab.
User Groups -> Create -> Menu Items -> Historical Reports -> Operational Reports -> Finish
Does that answer your question?
- oidm. -
Problems with Win 7 64 bits printer configuration on RDS Web Access
hey All,
I have a scenario with RDS 2012 with Session host in 2008 R2 SP1, and on clients with windows XP SP3 and win 7 SP1 32 bits, printer configuration looks ok but in windows 7 64 bits it looks like a truncated configuration , i have been tested every solution
that was reported before, like changing GPO, install Drivers in the clients and in the server, changed display resolution (to print in video) and nothing works, is any issue or incompatibility reported in this cases ?
Thanks in advance
Breno AndradeHi,
Thanks for posting in Windows Server Forum.
As this thread has been quiet for a while, we assume that the issue has been resolved. At this time, we will mark it as ‘Answered’ as the previous steps should be helpful for many similar scenarios.
If the issue still persists, please feel free to reply this post directly so we will be notified to follow it up.
BTW, we’d love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems.
Thanks for your Support & understanding.
Regards.
Dharmesh Solanki -
International Access to iTune Movie Store
We will be traveling to France next month and staying in a hotel with wi-fi. Will I be able to access the iTunes movie rentals area on my iPad, select, rent and view movies while abroad?
Yes you will be able to - but ...
terms of use require you to be in the country where your iTMS account is located.
So, renting, purchasing from abroad won't be allowed ... -
Use Wi-Fi and Turn Off EDGE for International Access
I will be travelling to the Bahamas next week and have a question about the data on my phone.
AT&T says that you need to be a customer for 3 months before international voice calls will work. Fine.
They say data however, will be charged at 0.03 / kb when international, and text messages will be 0.25 / message.
My question is, I will be in a house that has a wireless network. How can I get my phone to use the wi-fi network and stay connected to that and not default to EDGE when asleep or if the wi-fi dies. Is there a way to disable EDGE?
Do I just need to resort to having airplane mode ON the whole time I am abroad just for safety.FYI you don't need to be a customer for three months in order to make and receive international phone calls. I used to have Sprint, but switched to AT&T when I got my iPhone on June 29. I traveled to Ireland 8/12-8/22 and had AT&T add their $5.99/mo World Traveler plan which allowed me to make and receive calls at $0.99 per minute. It worked without a problem. When I returned home, I canceled the World Traveler plan. Also, ask about their International SMS Text plan for $9.99. They neglected to tell me about it before I traveled, but retroactively signed me up when I got home after I called them on it. For $9.99/month you get 100 SMS messages and are charged $0.20 per SMS after that. Without the plan you'll be charged $0.50 per SMS. If you expect to make more than 20 SMS messages, it's worth it. Similarly to the World Traveler plan, you can cancel this option after your trip.
Maybe you are looking for
-
upgraded to ios 5, now my voice mail is asking for a password or code to unlock to get voice mail. Didn't have a passcode before upgrade, so how do I reset the passcode?
-
Cost Center data Extraction from R/3
Hello, I am using extractor 0CO_OM_CCA_1 to get CO data into BW-BPS. After examining the resulting data into BW, I have a a problem: The customer uses movement types JVIV, RKIV, RRIV in R/3 for some of their cost centers, and they want those movement
-
Hi Gurus I have installed mySAP ecc 5.0 with oracle 9.2 DB on solaris 10.My Central instance got installed without any error.But my Database installation i got some errors. Fist error was ERROR 2007-06-27 13:14:16 FRF-00007 Unable to open RFC connec
-
We are having an issue with CS3. When we export a page with a spot color ad, the white will either overprint the color beneath or even convert to the spot color. We didn't have this issue with CS2.
-
Does anyone know if cleaner 6.5 works on the powermac pro computers?