Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a 2008 R2 with AD, DHCP, RDS - The server acts as a router for the internal network. I'm trying to connect through RDP from the internet to computers on the internal network through RDS. How can I achieve this?

share|improve this question
add comment

3 Answers 3

You best bet would be Remote Desktop Gateway (or Terminal Services Gateway). This creates a gateway via port 443 to allow you to access Remote Desktop Servers (this includes Windows Professional/Ultimate edition workstations offering RD access) behind the gateway. It also allows you to control who can get to where using Authorization Policies, which is much better than just opening up ports on your firewall.

Since it uses TLS, you would need a certificate your RD clients trust to avoid warnings on each connection setup.

share|improve this answer
    
thanks for the edits.. I need to work on being more complete when I answer questions on here. –  MikeAWood Apr 16 '12 at 5:23
    
Can you go a bit more indepth on actual configuration Mike? Or point me to somewhere that shows how to achieve this config –  Theveloper Apr 16 '12 at 15:20
    
Remote Desktop Gateway is a Server Role under Remote Desktop Services in Windows Server 2008. A Step by Step from Microsoft can be found here microsoft.com/download/en/details.aspx?id=5177 Start there and let us know how far you get. –  MikeAWood Apr 17 '12 at 1:37
add comment

RDP to the RDS server. RDP ("jump") from that one to the next

share|improve this answer
    
I doubt very much that the performance would be acceptable. –  Falcon Momot Apr 15 '12 at 18:18
    
Depends on what you need RDP access for –  Mathias R. Jessen Apr 15 '12 at 18:31
    
This is what I'm doing right now but that's not really making use of RDS at all... –  Theveloper Apr 15 '12 at 23:51
    
Usually with adequate bandwidth, jumping is workable. Though don't expect to stream video on it. –  MikeAWood Apr 16 '12 at 6:02
add comment

If there are only a few of them you could forward ports. One excellent way to do this in linux is to use SSH to forward the port dynamically; I don't know if windows has any like facility.

You could also use internet-routeable ("real") IP addresses on your internal network and allow RDP through the firewall.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.