Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I've set up a Win2012R2 RDS Session Host farm.

Only some users must be allowed to log on outside our network (external) while everybody must be allowed to logon on internal network.

How can I do this?

share|improve this question
    
How do you have it setup for remote access? –  Nixphoe May 6 at 11:27

1 Answer 1

up vote 4 down vote accepted

One method would be to use a Remote Desktop Gateway. The Gateway can be fitted with multiple Connection Authorization Policies and Resource Authorization Policies (CAPs and RAPs) to define exactly who is allowed to connect to what. You could, for instance, create an Active Directory security group named "Internal Network Access" and assign that security group to the RD CAP/RD RAP that defines access to internal resources.

share|improve this answer
    
Ok that sounds like something I should look into :) Thanks!! –  MojoDK May 6 at 13:23

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.