FQDN not Resolving

[christophergault]

@scottalanmiller However I still get an error from the RDWeb app saying it can't connect to the server...

[scottalanmiller]

Is RDS exposed?

[christophergault]

@scottalanmiller I don't know

[scottalanmiller]

What steps did you go through to expose it? Right now IIS is generically showing up.

[JaredBusch]

tacking /rdweb on the end of that URL results in the proper page, with an SSL error.

https://i.imgur.com/CKQWPgj.jpg

[christophergault]

@scottalanmiller I don't think I ever did expose it...

[christophergault]

@JaredBusch I can access that but its the app when I open it rdp file it says cant access server

[JaredBusch]

@christophergault said:

@JaredBusch I can access that but its the app when I open it rdp file it says cant access server

RDP will need opened. The entire point of RDS is to create an RDP session.

[christophergault]

@JaredBusch Well how the living hell do I open it?

[JaredBusch]

@christophergault said:

@JaredBusch Well how the living hell do I open it?

Port 3389

[christophergault]

@JaredBusch And that is opened using?

[scottalanmiller]

@christophergault said:

@JaredBusch And that is opened using?

the firewall. All ports are managed using the same tools.

[christophergault]

@scottalanmiller So the router firewall to be correct?

[JaredBusch]

@christophergault said:

@scottalanmiller So the router firewall to be correct?

Well on the server too, but it should have automatically done that one when the roles were installed.

[scottalanmiller]

@christophergault said:

@scottalanmiller So the router firewall to be correct?

Well, ALL firewalls between the RDS server and the Internet. If any are blocking 3389, RDP isn't going to get out. The firewall touching the Internet needs to port forward to the server or nothing will be able to get to it.

[christophergault]

@scottalanmiller I got it working!!!! I fell so accomplished. Jk

[JaredBusch]

@christophergault said:

@scottalanmiller I got it working!!!! I fell so accomplished. Jk

Great!, now I can through a password cracker at it..

[JaredBusch]

@JaredBusch said:

@christophergault said:

@scottalanmiller I got it working!!!! I fell so accomplished. Jk

Great!, now I can through a password cracker at it..

Note: I really will not, but this is part of RDS I hate. I need to find a fail2ban equivalent for Windows.

[christophergault]

@JaredBusch Well whats a best practice for protecting RDS?

[scottalanmiller]

I'm not the expert here, but a common practice is to keep it inside of the network and require people to connect via a VPN before connecting to RDP. The VPN, for security, would be best handled by being exclusive to a DMZ where the RDS server sat isolated from other traffic.