Checklist: Make RemoteApp Programs Available from the Internet

  • Article

Applies To: Windows Server 2008

By using TS RemoteApp together with TS Gateway, you can enable users to connect from the Internet to individual programs on a terminal server without having to first establish a virtual private network (VPN) connection. Depending on the deployment method that you choose, remote users can connect to a program by opening an .rdp file, by clicking a shortcut to a Windows Installer package on their desktop or Start menu, or by accessing a RemoteApp program on a Web page through TS Web Access.

This checklist shows the steps that are required to make RemoteApp programs available from the Internet through TS Gateway. Alternatively, if you do not want to deploy TS Gateway, you can make RemoteApp programs available through a VPN solution.

Important

Before you complete this checklist, you must meet the following prerequisites:

Task Reference

Review information about TS Gateway.

The TS Gateway page on the Windows Server 2008 TechCenter (https://go.microsoft.com/fwlink/?LinkId=79605).

Deploy and configure TS Gateway. When you configure TS Gateway, ensure that you do the following:

  • Create a Terminal Services connection authorization policy (TS CAP) to define the list of user groups that can connect to the terminal servers that host the RemoteApp programs.

  • Create a Terminal Services resource authorization policy (TS RAP) that provides access to the terminal servers that host the RemoteApp programs.

    When you create the TS RAP, add the user groups that you defined in the TS CAP. Also, create a new TS Gateway-managed computer group that contains both the NetBIOS names and the fully qualified domain names (FQDNs) of the terminal servers or the terminal server farm that hosts the RemoteApp programs.
  • The TS Gateway Server Step-by-Step Setup Guide (https://go.microsoft.com/fwlink/?LinkId=85872)

  • The following Help topics:

    • Overview of TS Gateway

    • Checklist: Configure TS Gateway

    • Manage Terminal Services Connection Authorization Policies (TS CAPs)

    • Manage Terminal Services Resource Authorization Policies (TS RAPs)

    (To review these Help topics, click Start, click Run, type hh ts_gateway.chm, and then click OK.)

Configure TS Gateway settings in TS RemoteApp Manager (either in the global deployment settings or when you create an .rdp file or Windows Installer package).

Configure TS Gateway Settings

If you want to use existing .rdp files or Windows Installer packages to access RemoteApp programs over the Internet, ensure that the files were created with the correct TS Gateway settings. If they were not, you must create new files with the correct settings, and then distribute them to users.

If you want to allow Internet access to RemoteApp programs through TS Web Access, configure firewall and authentication settings.

Configure the TS Web Access Server to Allow Access from the Internet

Additional references