Use the Authorization Policies Wizard to Create TS CAPs and TS RAPs

  • Article

Applies To: Windows Server 2008

Terminal Services connection authorization policies (TS CAPs) allow you to specify who can connect to a TS Gateway server. Terminal Services resource authorization policies (TS RAPs) allow you to specify the internal network resources (computers) that remote users can connect to through a TS Gateway server. To allow users to connect to network resources through a TS Gateway server, you must create both a TS CAP and a TS RAP.

This procedure describes how to open the Authorization Policies Wizard, which enables you to quickly create a local TS CAP and a TS RAP. Alternatively, you can create custom TS CAPs and TS RAPs.

Note

You cannot use the Authorization Policies Wizard to specify a centrally stored TS CAP.

For information about how to create custom TS CAPs and TS RAPs, see Manage Terminal Services Connection Authorization Policies (TS CAPs) and Manage Terminal Services Resource Authorization Policies (TS RAPs).

Membership in the local Administrators group, or equivalent, on the TS Gateway server that you plan to configure, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at Local and Domain Default Groups (https://go.microsoft.com/fwlink/?LinkId=83477).

To use the Authorization Policies Wizard to create TS CAPs and TS RAPs

  1. Open TS Gateway Manager.

  2. In the console tree, click to select the node that represents the TS Gateway server, which is named for the computer on which the TS Gateway server is running.

  3. In the console tree, expand Policies.

  4. In the console tree, with the Policies folder selected, right-click the Policies folder, and then click Create New Authorization Policies.

  5. Complete the wizard pages as needed.

Additional references