Hello,
I'm in the process of deploying remote desktop services for our company to see if it's viable for our situation.
I've got everything working. The only thing that's bugging me is that the local FQDN is show when connecting to a full desktop session host.
I've set the "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\CentralPublishedResources\PublishedFarms\<Collection>\RemoteDesktops\<Collection>\ShowInPortal" to 1 to show the Remote Desktop Connection shortcut in RD Web Access.
> Server certificates are all published in the RDS deployment properties. (We have bought a wildcard certificate from a trusted CA.)
- RDCB SSO: Trusted & OK
- RDCB Publishing: Trusted & OK
- RD Web Access: Trusted & Error (All services are on single server with HA)
- RD Gateway: Trusted & OK
> RD Gateway specific certificates are also uploaded through the RD Gateway Manager.
> RD Connection Broker HA DNS RR is set to remote.domain.com in the deployment properties.
> RD Gateway server name is also configured to remote.domain.com in the deployment properties.
> RD Gateway HA is configured with NLB on the second NIC of each server, with cluster name also set to remote.domain.com.
I've configured the Gateway RAP to only allow connection to the RD Server Farm through the DNS RR name, being remote.domain.com, which we have also configured in our local DNS server to point to the RDCB.
Now, when I try to connect through RD Gateway, I sometimes get the below error.
Remote Desktop can't connect to the remote computer "remote.domain.com" for one of these reasons:
1) Your user account is not listed in the RD Gateway's permission list
2) You might have specified the remote computer in NetBIOS format (for example, computer1), but the RD Gateway is expecting an FQDN or IP address format (for example computer1.fabrikam.com or 157.60.0.1).
Contact your network administrator for assistance.
I don't get this error when I open a RemoteApp in the same session.
When I add the farm members (using local server name) individually to the network resources, this works, but then I get the certificate mismatch. (This is also specified on the Network resources tab:Note: if you are using a Remote Desktop Session Host server farm, the name of the farm and the name of each member must be specified in the computer group.)
Name mismatch
Requested remote computer: servername.domain.local
Name in the certificate from the remote computer: *.domain.com
I've searched the internet for days now, but haven't found a solution yet. Or I must be doing something wrong.
Need to note that I've also tried adding the servers to the network resources using a different DNS name (rds01.domain.com, rds02.domain.com), but that doesn't seem to do anything. Then I get the error again (Remote Desktop can't connect...)
Hope I'm missing something here, cause I don't want local server name or IP to be visible.