Hi,
I was looking at implementing the remote desktop gateway role in my environment, and reading through the guides etc, and have a couple of questions. So in my current setup i have a remote desktop serverserver01 and a server running routing and remote access and NAPserver02.
Clients presently connect via a PPTN VPN using PEAP encryption with a certificate from a domain CA and this works fine (setup this way for XP clients which will soon be gone :)...
So basically looking at the best way to implement the remote desktop gateway role. My questions are:
- Can I add the remote desktop gateway role to server02 since it is already running the NAP role, or is it better to deploy the remote desktop gateway role on the actual remote desktop server server01 and point the NAP service to server02 ?
- I have a remote hostname setup for the RDG, so I will be using a custom request from the CA to request the certificate with the externally available host name. Regarding authentication, the thing I am not sure about is if the certificate does not match or is not trusted, is the connection refused ? Essentially, I want it setup the same way as PEAP, if the certificate is not trusted, the connection is refused.
- Obviously, I will find out when I deploy it, so any responses on the above two questions would be appreciated.
Regards