Skip to content

Latest commit

 

History

History
47 lines (36 loc) · 4.1 KB

README.md

File metadata and controls

47 lines (36 loc) · 4.1 KB

cRemoteDesktopGateway

This repository contains the cRemoteDesktopGateway PowerShell module, containing Microsoft Windows PowerShell Desired State Configuration (DSC) resources to manage Remote Desktop Gateway (RDG).

Resources

  • ESNAD_cConnectionAccessPolicy set connection access policy
  • ESNAD_cRemoteDesktopGatewayServer set remote desktop gateway properties
  • ESNAD_cResourceAccessPolicy set resource access policy
  • ESNAD_cSSLCertificate set SSL certificate binding for Remote desktop Gateway

ESNAD_cConnectionAccessPolicy

  • Ensure: Wheter the rule should be present or removed
  • RuleName Rule name
  • Usergroups Contains user groups that are associated with the connection authorization policy (CAP).
  • Status Specifies whether this connection authorization policy (CAP) will be used to evaluate a user for authorization. 0 - No, 1 - Yes.
  • AuthMethod: Specifies how the RD Gateway server authenticates users. 0 - No authentication, 1 - Password authentication, 2 - Smart card authentication, 3 - Password and smart card authentication.
  • AllowOnlySDRTSServers: Specifies whether connections are allowed only to Remote Desktop Session Host servers that enforce Remote Desktop Gateway redirection policy. 0 - No, 1 - Yes.
  • IdleTimeout: Specifies the time interval, in minutes, after which an idle session is disconnected. A value of zero specifies an infinite amount of time.
  • SessionTimeout: Specifies the action the server takes when a session times out. 0 - Disconnect the session, 1 - Silently reauthenticate and reauthorize the session.
  • SessionTimeoutAction: Specifies the action the server takes when a session times out. 0 - Disconnect the session, 1 - Silently reauthenticate and reauthorize the session.
  • EvaluationOrder: Specifies the evaluation order of the connection authorization policy (CAP). The CAP in which EvaluationOrder is set to a value of '1' is evaluated first.

ESNAD_cRemoteDesktopGatewayServer

  • MaxConnections: Specifies the maximum number of connections allowed by the administrator. If this item is set to zero, no new connections are allowed.
  • RequestSOH: Specifies whether to request clients to send a statement of health. 0 - No, 1 - Yes.
  • SSLBridging: Specifies whether to use SSL Bridging. 0 - No SSL bridging, 1 - HTTPS-HTTP bridging, 2 - HTTPS-HTTPS bridging.
  • CentralCAPEnabled Specifies where to store connection authorization policies (CAPs). 0 - Local Network Policy Server, 1- Central Network Policy Server.
  • EnableOnlyMessagingCapableClients Specifies whether only clients that support logon messages and administrator messages can connect. 0 - No, 1 - Yes.

ESNAD_cResourceAccessPolicy

  • Ensure: Wheter the rule should be present or removed
  • RuleName: Resource access policy rule name
  • Status: Specifies whether this resource authorization policy (RAP) will be used to authorize a user. 0 - No, 1 - Yes.
  • PortNumbers: Specifies the port numbers for the ports through which connections are allowed for this policy. To allow connections through any port, specify '*' .
  • ComputerGroupType: Specifies the computer group type. 0 - RD Gateway-managed group, 1 - Active Directory Domain Services network resource group, 2 - Allow users to connect to any network resource.
  • ComputerGroup: Specifies the computer group that is associated with this resource authorization policy (RAP).
  • UserGroups: Specifies the user groups that are associated with this resource authorization policy (RAP). A user must belong to one of these groups to access the RD Gateway server.

ESNAD_cSSLCertificate

  • Thumbprint: Contains the thumbprint of the SSL certificate to use.

Author

The author of this module is Bart Danse.