Configuring the Remote Desktop Gateway on Windows

Launch the "Server Manager", go to the "Add Role" tab on the right side:

For example, use the first item:

Next, the utility will ask you to specify the server for which the role is being issued. Select from the list, click "Next". In the next step, a list of available server roles will appear. For example, we put “Remote Desktop Service”:

After clicking the “Next” button, information about the selected role will be displayed on the screen. We agree and move on to the next step. Now an added feature has appeared in the Role Server section. We go into it and note the options that are necessary for the administrator. For example, activate RDG:

The setup wizard checks the selected role and compatibility with the server OS. If you need to install additional components, the workspace automatically opens with the marked components. For RDG to work, web administration services with a full set of software tools must be installed in the operating system:

After installing the selected role, go to the main window of the Server Manager. Select the “Tools” section and proceed to the RDG setup. A new popup window will open (RD Gateway Manager). In it, go to the tab with the server name, then select "Policies" and configure authorized connections. Press the “Wizard” button to open the setup wizard:

The installer will offer a choice of 3 points. Leave the first option active:

Set a name for the new template, click “Next”. The next step is to select an authentication method and a list of users who will gain access to the policy. Authorization is allowed with a password or a smart card, or both. Leave only a password. Next, click the "Add Group" button and add data to the field:

Next, we differentiate access to network resources to which users will connect through the Remote Desktop Gateway:

The setup wizard will ask you to specify an authorization policy for network resources. First, we come up with a configuration name. Then we add the user groups that will connect:

Now select the resource group:

For RDG access to be active, you must also create a certificate. In the RDG Manager working window, go to the "Server Name" section. Using the context menu, open the item “View or change certificate properties”. In the window that opens, switch to the SSL tab. There are 3 options for creating. Select the item marked in red in the screenshot:

Now we write the name of the certificate and the path along which it will be stored:

Click “OK” to generate. As a result, manager workspace is as follows:

For increased security, it is recommended that you change the default port for connecting via Remote Desktop Protocol. Open the "Actions" section in the RDG Manager, the "Properties" item. Go to the tab "Transportation properties". In the field marked in red, change the value:

Now you need to configure the connection through RDP. Press the key combination Win + R, enter the command mstsc.exe. In the window that opens, click "Options":

Now go to the "General" tab. Enter the domain name and user name: