Windows Remote Desktop

External

• http://en.wikipedia.org/wiki/Network_Level_Authentication
• Configure Remote Desktop Access on Windows 7 Systems http://technet.microsoft.com/en-us/magazine/ff404238.aspx

Internal

• Windows

Remote Desktop Clients

Windows

Configure to Connect to a Remote Server

1. Start Remote Desktop Connection

Start -> All Programs -> Accessories -> Communications -> Remote Desktop Connection.

2. Specify computer.

1.2.3.4

3. Specify username/password.

Export Local Resources of the Machine we are Connecting to to be Available on the Machine we are Connecting From

Launch Remote Desktop Connection -> Show Options -> Local Resources tab -> Local devices and resources: Printers, Clipboard -> More -> Drives -> C:

Group Policy Entries

Start Local Group Policy Editor (https://home.feodorov.com:9443/wiki/Wiki.jsp?page=LocalGroupPolicyEditor and navigate to Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host.

Executable

Windows 7, Windows 8: C:/Windows/System32/mstsc.exe

Mac

Mac users can access a Microsoft Windows with Remote Desktop access enabled. For that:

1) Download "Microsoft Remote Desktop" from App Store.

DO NOT use "Remote Desktop Connection", I had troubles with it.

2) Configure as follows:

Connection Name: NOW530

PC Name: NOW530

Credentials

User name: ovidiu

Password: ***

Resolution: Native

Colors: True Color (24 bit)

Full screen mode: OS X native

DO NOT Start session in full screen

DO NOT Scale content

DO Use all monitors.

Export Local Resources of the Machine we are Connecting to to be Available on the Machine we are Connecting From

Select the entry corresponding to the machine we are connecting into -> Right Click -> Edit -> Redirection tab -> Enable Folder Redirection -> + -> Name, Path.

Remote Desktop Server

Enable a Windows Machine to Run as Session Host

Enable on Windows 7, Windows Vista

System -> Remote Settings -> Remote Desktop.

In some situations, you must enable the Windows Firewall exceptions for Remote Desktop (the link has a yellow triangle exclamation mark besides it and the "Remote Desktop" options below are grayed out. In order to do that, click on the link and follow the instructions.

Then:

Allow connections from computers running any version of Remote Desktop -> Select Users

Enable on Windows 8

System Settings -> Remote Settings -> Remote -> Remote Desktop

Command line:

C:\Windows\System32\SystemPropertiesAdvanced.exe

See the firewall exception notes, above.

Then: Allow Remote Connections to this Computer.

Enable on Windows 10

Command line:

C:\Windows\System32\SystemPropertiesAdvanced.exe > Remote -> Remote Desktop

Troubleshoot the Session Host

1. Verify that the Service is Running

Services:

• Remote Desktop Configuration
• Remote Desktop Services
• Remote Desktop Services UserMode Port Redirector

To start the service:

C:\windows\System32\svchost.exe -k NetworkService

2. Verify that the Firewall Allows Access

The "Remote Desktop" rule should be there. More details here:

https://home.feodorov.com:9443/wiki/Wiki.jsp?page=WindowsFirewall#section-WindowsFirewall-AddingAccessRuleForRemoteDesktopOnSessionHost

3. Boost Group Policy Rules

I did this on just on pre-configured corporate laptop, not sure if it is really necessary generally.

Start the Local Group Policy Editor following the procedure3 described here: https://home.feodorov.com:9443/wiki/Wiki.jsp?page=LocalGroupPolicyEditor#section-LocalGroupPolicyEditor-Run

Then navigate to Local Computer Policy -> Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host:

Connections:

• Allow users to connect remotely using Remote Desktop Services: Enabled

Device and Resource Redirection:

• Do not allow drive redirection: Disabled.

Security:

• Set client connection encryption level: Enabled , Encryption Level: Client Compatible
• Always prompt for password upon connection: Enabled
• Require user authentication for remote connection by using network Level Authentication: Disabled

Session Time Limit:

• Set time limit for active but idle Remote Desktop Service sessions: Enabled, Idle session limit: Never.
• Set time limit for active Remote Desktop Service sessions: Enabled, Active session limit: Never

4. Added my network user to "Remote Desktop Users" group

I did this on just on pre-configured corporate laptop, not sure if it is really necessary generally.

Start the local user management utility as described in https://home.feodorov.com:9443/wiki/Wiki.jsp?page=WindowsUsers#section-WindowsUsers-UserManagement

Then, go to Groups, double click on Remote Desktop Users -> Add -> "...."