Yes, but as expected no change (which is fine, it would be confusing to me if it did work).
From: Miller Bonnie L. [mailto:[email protected]] Sent: Wednesday, September 14, 2011 8:18 AM To: NT System Admin Issues Subject: RE: RDS Q - Webster? Have you tried adding the domain to the trusted sites zone in the browser on the machine that is connecting externally? From: David Lum [mailto:[email protected]] Sent: Wednesday, September 14, 2011 8:00 AM To: NT System Admin Issues Subject: RE: RDS Q - Webster? Yeah I am at the point where they log into the RDS website and then get prompted once more for the first app they launch (what's weird is it's asking for credentials to the gateway server, not the app server) and they get no more prompts once they have an app up. It's that 2nd login I want to eliminate as my thinking is "hey I already logged into an RDS Web server, just pass those creds to the gateway server (which in this case is the same box!)". I do have "Use the same credentials for RD gateway and RD Session host server" checked on RDSH server, but is the "best case" for RDS via external website going to be two login prompts? Dave From: Dean Cunningham [mailto:[email protected]] Sent: Tuesday, September 13, 2011 3:23 PM To: NT System Admin Issues Subject: Re: RDS Q - Webster? I think you will find that as you are connecting from a user/machine that is already domain authenticated (NTLM) to those credentials are transparently submitted to the webpage When connecting externally, you need to log into the website and then (depending on the certificates you use) at least once more. Once you have run one app up, you should no longer be prompted for subsequent remote apps you run On Wed, Sep 14, 2011 at 9:17 AM, David Lum <[email protected]<mailto:[email protected]>> wrote: My RDS servers are part of our internal domain, (internal.nwea.org<http://internal.nwea.org/>). >From my desk inside the network If I enter >https://myrdswebserver.internal.nwea.org<https://myrdswebserver.internal.nwea.org/> > and then try to launch an app I do not get prompted and the app works fine. If I enter https://myrdswebserver.nwea.org<https://myrdswebserver.nwea.org/> (A URL I would also use if not inside our perimeter) I get the app list via RD Web server (populated from my RDS all server), but when I try to launch any app I get prompted for domain credentials. Entering my credentials works but that's now an extra authentication step. The internal.nwea.org<http://internal.nwea.org/> is a subdomain of nwea.org<http://nwea.org/>, so I need to figure out how to pass the credentials from the RD Web server to the app server. All RDS servers are in the internal.nwea.org<http://internal.nwea.org/> domain. Is there a trust that needs to be set up for this to work? Do the RDS servers need to be part of our external domain? Perhaps I have this architected wrong...? David Lum Systems Engineer // NWEATM Office 503.548.5229<tel:503.548.5229> // Cell (voice/text) 503.267.9764<tel:503.267.9764> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
