Remote Desktop Service (RDS)
If you require remote desktop access only for managing the server and no more than two concurrent sessions, you only need to create a firewall rule for this port.
Preparing a firewall for RD access
To create a firewall rule, switch to the Administration tab and click on Networks:
1) Mark and right-click on the EON network and select Configure Services… from the context menu.
2) Switch to Firewall tab.
3) Make sure that the checkbox next to Enable Firewall is activated.
4) Click the Add... button to create a new rule.
5) Enter the relevant data for the rule (name, source IP, destination IP, etc.).
6) Confirm the creation of the rule by clicking the OK button.
Setting up the Remote Desktop Service role
When you have set up RDS (formerly known as Terminal Service) as described in this chapter, you will need appropriate licences. These licences are not provided by Swisscom and must be obtained directly from the solution provider.
1) Launch Server Manager. This is done by clicking on Start, pointing to Administrative Tools and then clicking on Server Manager. There, expand Roles.
2) Click on Add Roles in the roles summary.
3) In the Add Roles wizard, click the Next > button on the "Before You Begin" page.
4) On the "Select Server Roles" page, activate the checkbox next to Remote Desktop Services and then click the Next > button.
5) Click the Next > button at the bottom of the "Remote Desktop Services" page.
6) On the "Select Server Roles" page, activate the checkbox next to Remote Desktop Session Host and then click the Next > button.
7) Now click the Next > button at the bottom of the "Uninstall and Reinstall Applications for Compatibility" page.
8) On the "Specify the Authentication Method for Remote Desktop Session Host" page, activate the radio button labelled Require Network Level Authentication and then click the Next > button.
Please note: If this RD session host server is used by client computers running Windows® XP, activate the radio button labelled Do not require network level authentication instead.
9) On the "Specify Licensing Mode" page, select the relevant option (in this case, "Configure later") and then click the Next > button.
10) On the "Select Users Groups Allowed Access to This RD Session Host Server" page, click the Next > button.
11) Now click the Next > button at the bottom of the "Configure Client Experience" page.
12) On the "Confirm Installation Settings" page, ensure that the RD session host role service is available for installation, then click the Install button.
- On the installation results page you are prompted to reboot the server to complete installation. To do so, first click the Close button, then on Yes. The server will be restarted.
- Once the server has been rebooted and you have logged on again, you can continue with the remaining installation steps. When the installation results page appears, check whether the RD session host role service has indeed been installed. Then click the Close button to exit the RD session host configuration screen. You should also close the Server Manager.
Adding users to the remote desktop user group
1) Click on Start, point to Administrative Tools and click on Computer Management.
2) Expand Local Users and Groups, then click on the Groups directory.
3) Right-click on Remote Desktop Users and select Add to Group… in the context menu.
4) Then click the Add… button in the "Remote Desktop Users Properties" dialog box that appears.
5) In the relevant field, enter the object names (usernames) to be used. Click the Check Names button to validate users. Now click the OK button.
6) Then click the OK button again to close the "Remote Desktop Users Properties" dialog window.
Starting a remote desktop session on your computer
1) Click on Start and then Run.
2) In the window that appears, enter mstsc and confirm the command by clicking on the OK button.
3) Click on the Options dropdown menu to expand the window.
4) In the relevant fields, enter the address (IP/DNS) at which the server can be reached as well as the username (of the remote desktop user).
5) Now click the Save As... button to save the connection.
6) To establish a connection, click the Connect button.