Transcript client1.myhome.com 443/TCP dc.contoso.com server1.contoso.com Remote Desktop Gateway contoso.com 3389/TCP server2.contoso.com Remote Desktop Session Host …but wait a minute! Anyone see an issue here? client1.myhome.com 443/TCP dc.contoso.com server1.contoso.com Remote Desktop Gateway contoso.com 3389/TCP server2.contoso.com Remote Desktop Session Host.

client1.myhome.com
443/TCP
dc.contoso.com
server1.contoso.com
Remote Desktop
Gateway
contoso.com
3389/TCP
server2.contoso.com
Remote Desktop
Session Host
…but wait a minute!
Anyone see an issue here?
client1.myhome.com
443/TCP
dc.contoso.com
server1.contoso.com
Remote Desktop
Gateway
contoso.com
3389/TCP
server2.contoso.com
Remote Desktop
Session Host
client1.myhome.com
443/TCP
dc.contoso.com
server1.contoso.com
Remote Desktop
Gateway
contoso.com
3389/TCP
server2.contoso.com
Remote Desktop
Session Host
Option #1: No DMZ. RDG in the LAN.
Option #1: No DMZ. RDG in the LAN.
Option #2: RDG in DMZ. No internal AD for RDG.
Option #1: No DMZ. RDG in the LAN.
Option #2: RDG in DMZ. No internal AD for RDG.
Option #3: RDG in the DMZ. Internal AD for RDG!
Option #1: No DMZ. RDG in the LAN.
Option #2: RDG in DMZ. No internal AD for RDG.
Option #3: RDG in the DMZ. Internal AD for RDG!
Option #3a: Use internal DC. Open lots of ports.
Option #3b: Internal RODC in the DMZ. Open lots of ports.
Option #3c: Forest trust to DC in the DMZ.
30
RD CAP
The “Who”
RD RAP
The “What”
36
Enables SSO between RDG and RDSH
Enables direct RDSH access for LAN clients
37
38
39
#TE(sessioncode)
DOWNLOAD
Windows Server
2012 Release
Candidate
Hands-On Labs
microsoft.com/windowsserver
DOWNLOAD
Windows Azure
Windowsazure.com/
teched
http://northamerica.msteched.com
www.microsoft.com/learning
http://microsoft.com/technet
http://microsoft.com/msdn