TS Gateway and TS Remoteapp on the same physical server?

-

for testing purposes install ts gateway , ts remoteapp , regular terminal services on same windows 2008 server.

the network topology follows:

internet
|
80.80.80.80
checkpoint router
192.168.10.1
|                    \
|                    192.168.10.200
|                    domain controller (servername.companyname.local)
|
192.168.10.209
ts server/remoteapp/ts gateway server (tsserver.companyname.local)

what have done far installed ts options on single server.
on internal network works great in no way reachable internet.

on internet side test.companyname.com resolves wan port of router (80.80.80.80).

so understandin if allowed , forwarded port 443 (ssl) router tsserver.company.local, should work?

however either self-signed or 3rd party certificates client gives me following error:
this computer can't connect remote computer because certificate authority generated terminal services gateway server's certificate not valid.

i suspect problem internally use companyname.local , externally companyname.com?
so gratefull if explain me how set correctly, or perhaps having ts functions on 1 single server never work?

have here:

http://support.microsoft.com/kb/840671#11

selfssl need need install on 2003 box (can't remember if works correctly on xp) , transfer cert gateway.

best of luck!


Windows Server  >  Remote Desktop Services (Terminal Services)



Comments

Post a Comment

Popular posts from this blog

for loop and start-job from cmd.exe

-
hello, i have simple script developed debug purposes: $serverlist = @( "sca-c1cor01", "scb-c1cor01" ) ($i=0; $i -lt $serverlist.length; $i++) { start-job -scriptblock {$x=0} } i have saved script off file called test.ps1.  when run ./test.ps1 within interactive powershell runs fine.  i trying to call script dos window, sql server agent command job, or start->run line.  here syntax using: cmd.exe /c powershell -nologo -noninteractive "c:\scripts\powershell\test.ps1" when run way (from dos window), diaglog box pops says: powershell has stopped working  problem caused program stop working correctly.  windows close program , notify if solution available. i close , open eventvwr.msc.  2 pieces of info.  1 application , services log (windows powershell): engine state changed available stopped. details:  newenginestate=stopped  previousenginestate...
Read more

Edit Group Policy

-
i have pc has power settings pushed out default domain policy in ad environment. of course on local machine "some settings managed system adminstrator". the machine temporarily no longer in contact domain controller (it's been physically moved , not on same network now) can't updated gpo settings. i believe if edit local group policy won't make difference because of group policy processing , precedence. since it's temporary away ad network, still want use settings of ad user. is there somewhere in registry stored can edit power plan manually until can sync domain? (i need prevent sleeping while plugged in - it's set 1 hour) thanks! allen crist i found site: http://gpsearch.azurewebsites.net/#7916 i able add policy to hkey_local_machine\software\policies\microsoft\power using specs found on site. looks solved issue. i'll report if didn't. thanks! allen crist ...
Read more

File Share Witness is not a valid File share path

-
i have 2 windows 2008 r2 vms (esxi) running double-take. we have health-check running on our netscaler force failover primary vm secondary vm if netscaler cannot access smb share on primary vm. this hasn't proven method of providing fault tolerance, trying cluster these 2 vms using file share witness. (i should add client engineers solution, implement according requirements). the witness share has been created on emc vnx. domain account , domain cluster computer name account both have full control permissions on share. i have installed the file services role failover clustering feature on both vms. to configure quorum, selecting node , file share majority (for clusters special configuration). i providing ip address , share name in form of \\<ipaddress>\<sharename>. the wizard returns \\<ipaddress>\<sharename> not valid share path. reading documentation microsoft, there statement saying witness share should have nothing else stored or u...
Read more