Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've set up a Win2012R2 RDS Session Host farm.

Only some users must be allowed to log on outside our network (external) while everybody must be allowed to logon on internal network.

How can I do this?

share|improve this question
How do you have it setup for remote access? – Nixphoe May 6 '14 at 11:27
up vote 4 down vote accepted

One method would be to use a Remote Desktop Gateway. The Gateway can be fitted with multiple Connection Authorization Policies and Resource Authorization Policies (CAPs and RAPs) to define exactly who is allowed to connect to what. You could, for instance, create an Active Directory security group named "Internal Network Access" and assign that security group to the RD CAP/RD RAP that defines access to internal resources.

share|improve this answer
Ok that sounds like something I should look into :) Thanks!! – MojoDK May 6 '14 at 13:23

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.