@jaredbusch said in Remote Desktop Services & Lets Encrypt:

@stuartjordan said in Remote Desktop Services & Lets Encrypt:

There is also one for Exchange as well:
https://mediarealm.com.au/articles/lets-encrypt-microsoft-exchange-installation/

Man, I just do not think I can trust all the pieces involved here to properly work together in an automated fashion.

Exchange is generally fine. LE is generally fine. The scripts are generally fine.

But any single issue with one will blow crap up.

I think it'd still be worth a look. It could work out to be a nice time saver to set it up once and not have to worry about it.

@nashbrydges said in Microsoft HTML5 Web RDS Client:

Wonder if this will be better than my Apache Guacamole install for RDP.

Likely, only because it needs one fewer components in the chain. But less flexible.

I had some confusion because of the age of the old CSR. It doesn't line up with the correct dates. I'll edit my original post when I know more.

Where will his EHR be hosted? Local or cloud?

I would say it can be done a good bit cheaper that $80k,.. I mean wow. I know NTG could spec it out less.

So much of HIPPA is simple common sense with no all users seem to understand. You don'[t keep patient data on the local computer.
IIRC - Bitlocker isn't 'approved' for drive security - Vera Crypt I know isn't. But if you do an RDS session to the server - keeping all the data on the server, you may be fine with that. Keeping everything off the local prevents multiple failure points.

Do you mean 0_1498582282921_59cacfbb-8909-4372-86eb-359701860257-image.png ?

Or a different product package?

Rebooted - profile created.

https://support.microsoft.com/en-us/help/315271/how-to-use-dumpchk.exe-to-check-a-memory-dump-file
http://msdn.microsoft.com/en-us/windows/hardware/gg463009.aspx

@syko24 free... and useless:

Limitations of the free license:

The free license is limited to five locks per day which means the free edition defends your system against five unique attacks per day. [...] The free license does not contain reporting (like the PRO edition does).

Also, no official support for Windows Server 2016.

https://cyberarms.net/download-pricing/installation-configuration.aspx

I'm working... which is why I don't have the ability to reply to posts here all day long!

No feedback yet.

Remmina is a great tool. I've had excellent luck with it.

Scott, how does this work for non static profiles?

Only the other night for me and it was all on one project so I'm not sure what it was, yet.

The XX concurent users only comes into play if the licensed application offers such a thing. In the case of something like Office 2013, you'd definitely need 300 license...

But for Something like... Raiser's Edge, or a Student Information System... You'd only need to license for the expected number of concurrent users.

IE: Raiser's Edge can be installed on every computer on my campus... But only 15 of us can log in at one time.

Thanks to those of you that offered a suggestion. I built a second RDS server and applied my group policy and browsing was fine. I then started to think about what I needed to do to move it in to production and replace the one that had the browsing issue. Then it hit me.... I have load balancing on my SonicWall. RDS is mapped through the firewall on https. Therefore requests that went out over https could go out over either interface, but always came back on one. This is why it would sometimes work. This is also why most other sites would work, but https (in this case Office 365 which always goes over https) would only work once in a while. Adding a route to force all traffic from the RDS server out over the interface that traffic will come in on fixed the problem.

@Dashrender said:

@dafyre said:

@Dashrender said:

@scottalanmiller said:

@FATeknollogee said:

@Jason said:

@FATeknollogee said:

Type 3: Users (are contractors), they connect via VPN from overseas

Seems like a bad idea. Usually employees are given VPN access from company owned devices. a VPN is too much exposure for non-company owned devices and for people who aren't full employees. I would look into some other form of access, RD Gateway with RDS or Ctirix etc for these people.

Are you saying access via ZT is not a good idea?

Correct. ZT is a VPN. VPNs from arbitrary devices is normally a bad idea. The only exception to this is when you would have happily exposed the LAN to the Internet and this is purely a handy control of IP addresses. If security is your goal, you are bypassing security using a VPN in this role. VPNs are very dangerous because they are about exposure.

The whole trusted network issue. LAN vs LAN-less

As more and more things move to networks that are not local to our computers, we're changing seeing how we trust things.

Traditionally we trust machines that are on our local LAN, but, if flip that on its ear and trust nothing, and always setup authenticated/trusted communications no matter where device is in comparison to us, then we are much safer.

I think that it is beyond time that we stop trusting machines on our local lan. Even my home network has the service discovery disabled, and each machine has its firewall turned on for that very reason.

I go back and forth on using the home networking features that Windows has these days.

I use them because they are there. I also have linux boxes at my house too, so there's that. 😄

We run E10.0.700.3 at the moment (1 Server 2012 VM that runs SQL 2012, 1 Server 2012 VM that runs the E10 appserver, and 1 Server 2012 VM that runs RemoteApp for the E10 client - all on the same ESXi host) and will likely move to E10.1 in the next few months. We actually found that at sites with low internet bandwidth, RemoteApp is a little slower than when the client is installed locally. One site running a T1 told us that, and we confirmed it to be the case. It may have had to do with the nice metro interface in E10. The sites with 35/5 coax or 10/10 fiber seem to run RemoteApp about the same as installing the client locally.

I actually heard someone say at Epicor Insights 2015 that Epicor 10 ran better when installed locally on client machines connecting over site-to-site VPN. We never really had to test that theory other than at the site with a T1 that I mention here.

@Dashrender logged in as the administrator there were no printers. I added and deleted the printer from there multiple times.

@PSX_Defector said:

Don't forget to force logoffs after an amount of time. Usually Acrobat only goes nuts when its been running for a long long time.

We have it set up to force logoffs, but I'm not so sure it is working like it should(obviously 🙂 ). We have to manual kick users off, quite frequently. Truthfully, I think the terminal servers and the session broker were set up incorrectly. I'm sure a few other things were missed as well. This was set up before I was hired. I really want to tear it down and build it out, correctly.