Issue:
The old SSLVPN RDS webApp to launch mstsc.exe no longer works after upgrading to 6.4, due to the Java plug-in going away with modern browsers, and other security enhancements.
Solution:
Create a set of webApps that open a TCP proxy port, and use the new Slingshot application launcher to start mstsc.exe.* **
*This option requires opening the chosen port in the firewall, between the user's workstation and the UW relay.
**SSO is not supported with the Microsoft RDS Client, due to security changes by Microsoft.
Please use the following steps to configure the two webApps necessary to open the TCP proxy port on the UW relay, then launch mstsc:
Create the webApp to open Proxy port:
Create Host object:
- Open webAdmin
- Right-click on Applications Admin
- Choose Create Host
- Enter the Host Name that will appear in webAdmin
- Click Next
- Click Close on the success message
On the Host object:
- Enter the host address of the server
- Enter the RDS connection port of the server, 3389 is the default RDS port
Create webApp object:
- Open webAdmin
- Right-click on Applications Admin
- Choose Publish Other Application
- Enter the Application Name that will appear in webAdmin
- Click Next
- Click Close on the success message
On the webApp object:
- Select the Properties tab
- Set the Application Type to Generic TCP Proxy
- Set External TCP Port to 3390
- Set Time to Live to 45
- Click the green + next to Assigned Host, and browse to the host previously created
- Click the green + next to Assigned Relay, and browse to your relay objects
- Select the Options tab
- Check the box for Keep Session Alive
- Click the Save button
Create/assign the link for this webApp:
- Select the Access Control tab
- Enter the Link Name that will appear in webAdmin
- Enter the Link Description that users will see under the tile that appears on their desktop, as this is the link that will initate the whole RDS process, this should be named appropriately
- Click the green + next to Menu, and browse to the menu folder you would like the link to appear in
- Click the green + next to Assign To, and browse to the users you would like to have access to the link
- Check box to Open link in new window
- Click the Save button
- Click OK on the warning about the link being created.
- Refresh webAdmin
Create Slingshot webApp to launch mstsc.exe:
- Open webAdmin
- Right-click on Applications Admin
- Choose Publish Slingshot Application
- Enter the Application Name that will appear in webAdmin
- Click Next
- Leave context set to Use Default Context
- Click Next
- Enter the path to the application: c:\windows\system32\mstsc.exe
- Enter the Command Line Parameters to connect to the proxy port: /v:PORTALADDRESS:3390
- Click Next
- Leave virtual App field blank.
- Click Next
- Select the Menu where you would like the link to appear in
- Leve box checked to open link in new window
- Click Next
- Select the users you would like to have access to the link
- Click Next
- Click Done on the success message
Set the Slingshot link to not be visable to users:
- Open webAdmin
- Expand Link-Menu admin
- Browse to, and select, the Slinghost link created earlier by the wizard
- Select the Options tab
- uncheck all the options for the Link Properties field
- Click the Save button
Set the Proxy webApp to call the Slingshot webApp, after opening the proxy port:
- Open webAdmin
- Expand Applications Admin
- Select the Slingshot webApp object created earlier
- Highlight and copy the webApp's dn from the dop of the page, example: cn=Slingshot mstsc-App,o=stoneware
- Select the proxy webApp object created earlier
- Paste the previously copied dn into the Startup URL field, example: cn=Slingshot mstsc-App,o=stoneware
- Preface the dn in the Startup URL field with: /StartWebApplication/
Example: /StartWebApplication/cn=Slingshot mstsc-App,o=stoneware - Click Save
Logout/Login to UW and test the webApp