Single fqdn for rds?

I have server 2012 r2 that has all rds roles. It's hosting few apps that are published as remoteapp for both internal and external users.
Is there going to be problems that I should be aware of if I configure everything with single fqdn remoteapp.company.com? I'm buying certificate from public ca and I have problem because there is .local in servers internal name and I cannot append
that to certificate. I'm planning to configure internal dns so that remoteapp.company.com resolves to rds server private ip and external dns server resolves to public ip.
How does client determine when to connect via rd gateway? Will they always connect through the rd gateway if internal server name and rdgateway names are the same?

Hi,
There is no problem with using a single name since you have everything on one server. You will need to change the published FQDN using this cmdlet:
Change published FQDN for Server 2012 or 2012 R2 RDS Deployment
https://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80
In RD Gateway Manager, please edit the Properties of the RD RAP. On the Network Resource tab, please select Allow users to connect to any network resource. Alternatively you could create a RDG-managed local group that has the required names and
select that option instead.
In your firewall you need to allow TCP port 443 and UDP port 3391. Using the default setting internal users will not use RD Gateway whereas external users will use RDG since they will be blocked by your firewall from connecting directly on TCP/UDP
3389.
If you would rate the above cmdlet (hopefully 4-5 stars) I would appreciate it.
Thanks.
-TP

Similar Messages

Change published FQDN for 2012 R2 RDS

I have Windows Server 2012 R2 (single server hosting all the roles for RDS). I'm using RDS for publishing RemoteApps for both internal and external users. External users connect to remote.company.com and I have certificate from public ca (issued to remote.company.com).
Active Directory is company.local.
When external users connect through the rds gateway and run remoteapp they receive this warning message that is caused by fqdn mismatch
I tried to use this script to change fqdn to match remote.company.com and it does that but after that external users cannot open remoteapps anymore. Internally they work.
https://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80
I get this error in eventlog:
The user "COMPANY\username", on client computer "xx.xx.xx.xx", did not meet resource authorization policy requirements and was therefore not authorized to resource "remote.company.com". The following error occurred: "23002".
If I change the published fqdn back to rds.company.local remoteapps starts to work again but with certificate error.
How can I fix this?

Hi,
In RD Gateway Manager, please edit the properties of the RD RAP. On the Network Resource tab, please select Allow users to connect to any network resource. After modifying the RD RAP please use Set-RDPublishedName cmdlet to change the published
name to the correct FQDN as you did before.
Once you verify it is working you could go back in (if you want to) and create a RDG-managed group with all of the required names.
Thanks.
-TP

Providing external url for the fqdn for webfeed returns error in eventlog that shows internal url is being used - how to change to the external url?

I've got my Rdweb accessible on both my internal and external network by using split dns locally to resolve the external url (remote.domain.com/rdweb) to resolve and everything works fine. However users don't want to use the rdweb interface (as it is slower
than just clicking on a rdp shortcut.
Following the notes at http://social.technet.microsoft.com/wiki/contents/articles/14488.distribution-of-remote-apps-and-desktops-in-windows-server-2012.aspx - I've tried to set up the webfeed on a Win7+ machine but when I enter the external url that
is protected by an SSL cert the eventlog shows that the internal address is being used and it doesn't match the certificate. - "There is a problem with this connection's security certificate.
The remote computer cannot be authenticated due to problems with its security certificate.
Security certificate problems might indicate an attempt to fool you or intercept data you send to the remote computer.
Windows cannot continue setting up this connection. Contact your workplace administrator for assistance.
Connection name:
Connection URL: https://internalservername/rdweb/feed/webfeed.aspx
How do I set the servers to use the external address rather than the internal one - i'm assuming it's similar to exchange's
Set-webservicesvirtualdirectory command but I can't find the equivalent command documented anywhere.
http://absoblogginlutely.net

Hi,
Thank you for posting in Windows Server Forum.
Please check below mention point.
• Create a relevant DNS entry in the mentioned zone to point to the RDS environment’s internal IP address
• Create a relevant DNS entry in external DNS to point to the firewall which is publishing RDS’s external IP address
• You can use the below mention script to change the FQDN of the RDP files provided by RD Web Access / RemoteApp and Desktop connection feed.
Change published FQDN for Server 2012 or 2012 R2 RDS Deployment
http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80
In addition please check below mention thread.
How do I change the URL to the Remote Web Access server in Windows Server 2012?
http://social.technet.microsoft.com/Forums/windowsserver/en-US/67dfab70-7e10-4e0b-a3c8-63ce776f2355/how-do-i-change-the-url-to-the-remote-web-access-server-in-windows-server-2012?forum=winserverTS
Apart from this, also check the settings under; IIS in RDWeb Server as per below mention path.
Expand the default Website >Pages >Application Settings >DefaultTSGateway >
Enter the external address (FQDN) of the RD Gateway in the Value Field.
Hope it helps!
Thanks,
Dharmesh

Adding alternative FQDN for local domain.

Hi,
I'm trying to configure RDS for my standalone Windows Server 2012 Essentials and it's almost done.
(Probablly) last thing i need to do is to change FQDN for my local domain to .com to use RDS externaly.
So, like i said, i've done dyndns config, added ssl cert, configured RDWeb, RD Gateway, RD License and RD Broker.
Now, when i'm logging into remote.mydomain.com/RDWeb , i can login with Active Directory credentials, get rdp i try login into server. But i can only try, becuase there is an error about wrong FQDN for server (know and not new error for anyone). So, what I
had done was changing FQDN for my domain by this powershell script http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80 (if anyone had problems with digitally unsigned script, google for "Set-ExecutionPolicy Unrestricted"), in
theory, this script changed FQDN, but in reality, i still have same problem trying to connect externally.
I also read that i should add new DNS Zone for my .com domain and there add (A) record for my subdomain for remote desktop, that points to internal IP adress of my server. When i tried that, it was even worse because i couldn't even open RDWeb site. When that
dns zone was deleted, everything came back to previous state.
And now i'm here, out of ideas. Any suggestion what I did wrong? Maybe it was something with this DNS Zone for .com ? Maybe there should be Zone, but not normal one but "stub zone"?
I would be happy for any suggestion.

" suspect we may have a basic mis-understanding of what each of us is trying to say. Let me try again.
There are (at least) three ways to reach a LAN computer from the internet with Essentials. Remote Web Access, direct RDP and VPN. There are also third party solutions, such as Go To My PC and Log Me In. The third party type
usually involve a subscription model with recurring charges, the others may involve a fee for SSL certificates, but they are (usually) much less expensive and do not rely on a third party."
Yes, i can agree we difinitelly had problem with mis-uderstanding so, sorry for that. I was talking about direct RDP to my server because Anywhere Access is already configured (but remote desktop from there to server opened only Essential Dashboard, that's
why i left this solution). Also, like i said, i'm aware of risks and i'll
take responsibility for that.
"Direct RDP is configured at the router and points the port (3389, but it can be changed) to the IP of the device you want to contact. then, simply opening the RDP applet on your remote computer and typing in the public IP of the router/firewall
will automatically connect you to the chosen computer. This is a very high security risk and should be avoided when ever possible."
Here is double facapalm for me - when you wrote about 3389 TCP port, i got enlightenment that i didn't do that (because i ealier tried to work on 443 with Anywhere Access and forgot about it), also information i got after tries to connect weren't usefull neither
- because Windows gave me back information about wrong FQDN, i was strictly focused on that problem, but like we know now, problem was in much different place. When i opened that port, everything started to be like i wanted (i also find out, after testing
RDP client from remoteapp in web menu that why i'm using this when i want to used direct RDP anyway). So much facepalm.
Next thing for now will be different port then 3389 and in future, VPN instead of direct RDP.
Anyway, really, thanks for help!

Create a single delivery for different schedule lines in the scheduling agr

Hi
I want to create a single delivery for different line items with different delivery dates in the scheduling agreement, as Iam aware it is possible to combine different line items into one delivery through sales order.
Need your inputs
Aravind

Hi,
Try with below solution and see I am not confirm about this
VL01N >>> Menu outbound delivery >>> Deliver sales order
Here you put order number and selected date as your ANOTHER SCHEDULE LINE
Kapil

Single invoice for multiple orders with different divisions

Dear All,
while I am trying to do single invoice for muliple orders with different divisons invoice is gettting splitted..In copy control vbrk routine I tried with 003 and 007 etc..but result is same..what configuration need to be done for getting the single invoice
Thanks In advance
Regards
CNRNAIR

Hello
single invoice for multiple orders with "different divisions" invoice is getting split
FYI - Different Division means different Sales Area.
So, sales doc (whether sales order, Delivery & Billing) is applicable to EXACTLY one sales area.
Thus, combining docs with different sales area is practically impossible.
Provided, you are using common division.
Hope this assist you,
Thanks & REgards
JP

Single invoice for multiple payment terms

Hi Friends,
I have given 2 different payment terms for 2 line items in single order and the billing is splitted due to this reason. I want to know where the system is checking this control. Because I want to create single Invoive even the payment terms are different. (The routine 003 under Data VBRK/VBRP in SO to Bill copy controls will be usefull only to create single Invoice for multiple SO's where the payment terms is same). But I need to create single Invoice even for multiple payment terms.
Can anyone suggest me at the earliest please.
Kumar

Hi Kumar,
The Billing Split is take care at Copy control level.
For multiple line items in one single SO, with different Payment terms is not acceptable as per the business logic and its not best practices.
Please suggest the business to go on Split method only.
Or
Try to use Proforma Invoice Concept.
Regards
Srini

Single invoice for multiple deliveries in Export scenario

Hi All
I am trying to create a single invoice for multiple deliveries. In case of Local Sales i am able to do it.
But when it comes to export sales the system is not allowing me to create Single invoice for 2 deliveries . This is a export scenario. Can you suggest... When i am checking the split invoice log it says split due to header data "Number of foreign trade data i"
Plz suggest.
Thanks
Rishi

Thanks G. Lakshmipathi
Resolved
As per the split analysis, System was checking the number generated for Foreign Trade data at delivery level.
As told i have Tried maintaining the Indication at copy control level VTFL "Redetermination of Foreign Trade Data at Billing level".
This has resolved my Issue.
Thanks Again
Rishi

Single invoice for Multiple Purchase Orders

Hi,
How to Park the single invoice for multiple purchase orders

brother this is possible to enter one Invoice fro multiple purchase order.
call transaction MIR7, select " purchase order/Scheduling Agreement" from the PO refernce Tab. then click on arrow. give your purchase orders here.
Thanks

Single email for a multiple steps Job

Hello,
Is it possible to send output from 2 steps in a single job in a single email? I have setup a job that has 2 steps and I have defined the recipient email address in the spool list recipient in SM36 but SAP sends 2 separate emails for these steps instead of a single email.
Are there any way to send a single email for the job instead of a email for each step?
Thanks in advance.
Mariano.

Hi Mariano,
I have already replied to your query in ABAP General Section.
Please avoid posting multiple posts. Its against the SDN Rules & Regulations.
Thanks,
Babu Kilari

Single spool for multiple smartforms

Hi,
I am using Function modules SSF_open and ssf_close for creating single spool for multiple smartforms but when i try to run the program in background then the job is getting cancelled...........and if i run the program in foreground then the program is running fine giving single spool for multiple forms........
so the problem is that job should run in background if i run it in background instead job is getting cancelled.
please tell me the solution how can i get the single spool for and multiple smartforms as well as the job should run if i am doing so.

Moved to the correct forum

HT1660 how can I use one single library for all users on the same laptop?

how can I use one single library for all users on the same laptop?

You are most of the way there. Each user having access to hard drive is the key. If users are limited in file privileges this is harder.
Any files you add to your library and any files she adds to her library are available to the other. Just not automatically. Each user must add the files to their own library using the add file or add folder option from menu bar.
What I have done is set library location to a location outside of My Documents\My Music. On my network storage I have a folder names s:\itunes. Both accounts iTunes are set to use this location for the library.

How to use single eventhandler for all menuitems...

Hi all,
I have a tray with a popup.
Currently I have an eventhandler for every single menuitem.
Is it also possible to provide only a single eventhandler for all of the menuitems and determine the clicked entry with the event??
Tried to use parameter mapping but onAction doesn't provide any parameters... Or am i wrong?!
Additionally, is there a list populated where I can find provided parameters for mapping?!
Thanks in advance for replies.
Bastian
Message was edited by: Bastian Schnorbus

Bastian,
This is possible via parameter mapping.
1. Set same action for every menu item;
2. Add parameter, say "id" of type string to action;
3. In wdDoModifyView write the following:
if (firstTime)
IWDMenuActionItem itm;
itm = (IWDMenuActionItem)view.getElementById("<id-of-menu-item>");
itm.mappingOfOnAction.addParameter( "id", itm.getId() );
/* repeat for all items */
4. In view handler you now can dispatch by "id" parameter received;
Valery Silaev
EPAM Systems
http://www.NetWeaverTeam.com

How to use single button for different operations

Hi
I am using one button with image having 4 controls like left right up and down...
How to use the single button for 4 different operations??
Is there any way of defining hotspots on single button to do four different operations...
Please have a look at the attached image, u can understand my problem better...
Please let me know ASAP...
Thanks and Regards
Aruna.S.N.

Here ya go:
http://code.google.com/p/flexlib/wiki/ComponentList
If this post answers your question or helps, please mark it as such.

Using a Single Library for Entire Site and When to Use Subsites

I'm hoping a discussion I am having with my coworkers can be solved. We are trying to decide two things:
Should the entire office be under a single site or should each division have their own site? Our Office has 5 divisions that contain 17 Branches, one site for business functions and one top-level site for the entire office.
Is it standard practice to create one huge library managed by metadata or should there be multiple libraries? I tend to think one library will be too hard to manage with regard to metadata and site columns and that libraries should be based on business
functions or subject domains (i.e., SOPs, Quality Documents, Business Documents, Technical Documents, etc).
Currently, several workflows, libraries and lists have already been created under our business functions site. In order to house everything under a single site, we would need to change the name of the site and move everything under it. I'm not
sure if changing the name of the existing site will cause problems.
I group these two items together because they really seem related. With everything under a single site, individual libraries, lists and workflows could get out of hand as everyone tries to manage their own division. But then so would a single
library for everyone. The problem with more than one site is that data cannot flow freely between sites (via workflows) and search would be less effective so some are against separate sites. So knowing one question may affect the answer for the
other.
Any thoughts on our library and site structure would be appreciated. Thanks.

As always the usual SharePoint consultant cop-out answer of 'it depends' is correct.
Having said that there are certain trends that are quite relevant:
It isn't common to use a single site collection for all sites. It can be done but it often leads to a state where you have a single monstrous site collection which is harder to backup, recover and maintain (see the boundaries and limits documents). The
default behaviour in most cases is to have a central 'shared' site collection then one per <group> where Group is a team that works on the same content, has broadly the same area of interest and access. That might be one for HR, one for the Support team,
one for the Sales team etc.
In terms of libraries there's a wide variation. If there' no difference in views, security and metadata then keeping the library count down is generally a good thing. However using multiple libraries can make life easier and better for users by allowing
more useful views, more secure by locking down libraries rather than using item level permissions (always a nightmare) and allowing more useful alerts and so on.
SharePoint architecture is a science but it's a really, really hard one to formulate into If/Then rules. So, broadly answering your questions I would lean towards multiple site collections and I generally agree with you on point 2, although if there's only
a small number of documents and simple structure then a single library might still make sense.

Single fqdn for rds?

Similar Messages

Maybe you are looking for