internal RDWEB

i want use rdweb connect personal , pooled desktops inside domain , seems sso not working in case. possible connect rdweb site in domain environment without credentials prompt?

hi sergey,

if use windows authentication both rdweb , target personal or pooled desktop, there additional configuration needed.  list items below, of have configured:

1. enable delegating default credentials on workstations via group policy.  please see article details:

http://blogs.msdn.com/b/rds/archive/2007/04/19/how-to-enable-single-sign-on-for-my-terminal-server-connections.aspx

2. enable trust of certificate's thumbprint on workstations via group policy.  setting "specify sha1 thumbprints of certificates representing trusted .rdp publishers" , located under computer configuration\administrative templates\windows components\remote desktop services\remote desktop connection client

3. the user needs check "i using private computer complies organization's security policy".  checkbox @ bottom of rdweb page when logging on windows authentication.

if not want users have select checkbox each time use rdweb may modify rdweb in private mode default.  1 way you can editing default.aspx page under language folder.  example, english install page be c:\windows\web\rdweb\pages\en-us\default.aspx.  make backup copy of default.aspx file , change following line true (it false default):

tsportalwebpart1.privatemode = true;

4. make sure rdweb site recognized part of local intranet zone on workstations, , if not add it.  allow user authenticated rdweb without credentials prompt when have windows authentication configured rdweb.

if have configured users able access rdweb launch connections personal or pooled desktops without credential prompts.

please let me know results of testing.  have re-verified of above works in lab environemnt.

thanks.

-tp

Windows Server  >  Remote Desktop Services (Terminal Services)