Checklist: Making RemoteApp Programs Available from the Internet

  • Article

Applies To: Windows Server 2008

By using TS RemoteApp with TS Gateway, you can enable users to connect from the Internet to individual programs on a terminal server without first establishing a virtual private network (VPN) connection. Depending on the deployment method that you choose, remote users can connect to a program by opening an .rdp file, by clicking a shortcut to a Windows Installer package on their desktop or Start menu, or by accessing a RemoteApp program on a Web page through TS Web Access.

This checklist shows the steps that are required to make RemoteApp programs available from the Internet through TS Gateway. Alternatively, if you do not want to deploy TS Gateway, you can make RemoteApp programs available through a VPN solution.

Task Reference

Ensure that you meet the following prerequisites:

  • You have deployed RemoteApp programs on the terminal server.

  • You have successfully deployed TS Web Access in an intranet environment (if you want to make RemoteApp programs available from the Internet through TS Web Access).

Review information about TS Gateway.

TS Gateway Server Step-by-Step Guide (https://go.microsoft.com/fwlink/?LinkId=85872)

Deploy and configure TS Gateway. When you configure TS Gateway, ensure that you do the following:

  • Create a Terminal Services connection authorization policy (TS CAP) to define the list of user groups that can connect to the terminal servers that host the RemoteApp programs.

  • Create a Terminal Services resource authorization policy (TS RAP) that provides access to the terminal servers that host the RemoteApp programs. When you create the TS RAP, add the user groups that you defined in the TS CAP.

  • Create a new TS Gateway-managed computer group that contains both the NetBIOS names and the fully qualified domain names (FQDNs) of the terminal servers or the terminal server farm that hosts the RemoteApp programs.

Configure TS Gateway settings in TS RemoteApp Manager (either in the global deployment settings or when you create an .rdp file or Windows Installer package).

Configure TS Gateway Settings

Ensure that existing .rdp files or Windows Installer packages were created with the correct TS Gateway settings if you want to use them to access RemoteApp programs over the Internet. If they were not, you must create new files with the correct settings, and then distribute them to users.

Configure firewall and authentication settings if you want to allow Internet access to RemoteApp programs through TS Web Access.

Configure the TS Web Access Server to Allow Access from the Internet