5

I have installed Remote Desktop Services on a fresh Windows Server 2012 R2 Datacenter VM. It has the basics: RD Gateway, RD Web Access and RD Connection Broker. I've accepted the default values pretty much all throughout the setup process. I've also installed a "real" SSL certificate (using the server's external FQDN, not the internal one).

This was all working fine until recently. A Windows 8.1 client (not on my domain) gets the following error message when trying to connect to RemoteApps: "Your computer can't connect to the remote computer because your computer or device did not pass the Network Access Protection requirements set by your network administrator. Contact your network administrator for assistance."

I cannot work out what is causing this issue. It only happens to this one user (and it was working previously for him), and I can still connect via other Windows 7 and Mac OS X clients.

EDIT: This also does not happen when this user is on our LAN or tunnelled in via a VPN. It's only happening via the public internet.

I only have default NAP rules. Unfortunately, my understanding of NAP is fairly limited at this stage so I don't know where to start there.

Any assistance would be appreciated.

Improve this question
1
  • as Microsoft releases newer and newer things they keep locking down / securing things. in the past what use to work by default just by next next finish :) will not work in these new generation of 2012. you need to do a small reading here. windowsecurity.com/articles-tutorials/… it is not long but it will get you started
    – user188145
    Commented Dec 17, 2014 at 0:53

1 Answer 1

Reset to default
8

In the end, this issue was caused by incorrect certificate installation in the Remote Desktop Gateway. When I opened the RD Gateway Manager it gave me options to select a certificate to import and use.

It has nothing to do with Network Access Protection, although through this process I ended up adjusting some of my policies anyway to lock it down further.

Improve this answer
1
  • 1
    Had the same problem in Windows Server 2012 Essentials. Also had to use this PowerShell command to install RD Gateway manager before I could fix it: dism /online /Enable-Feature:Gateway-UI
    – scotru
    Commented Sep 16, 2015 at 5:43

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .