Server 2019 Remote Desktop RDWeb - WebClient (Version Version 1.0.21.0)

%3CLINGO-SUB%20id%3D%22lingo-sub-1229864%22%20slang%3D%22en-US%22%3EServer%202019%20Remote%20Desktop%20RDWeb%20-%20WebClient%20(Version%20Version%201.0.21.0)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1229864%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20this%20weekend%20installed%20the%20%22new%22%20HTML5%20based%20WebClient%20to%20allow%20remote%20access%20to%20our%20RDS%20Farm%20(till%20now%20its%20been%20used%20internally%20only).%20This%20is%20SO%20MUCH%20better%20than%20the%20original%20RDWeb%20solution%20!!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20only%20thing%20that%20I%20would%20like%20to%20add%20to%20it%20would%20be%20MFA%20authentication%20with%20Azure%20AD%20which%20we%20use%20for%20as%20much%20as%20we%20possibly%20can.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20this%20possible%20%3F%26nbsp%3B%20If%20so%20does%20anyone%20have%20a%20link%20to%20a%20decent%20%22how%20to%22%20tutorial%20document%20or%20video%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESetting%20up%20the%20WebClient%20was%20simple%20and%20seems%20to%20be%20a%20perfect%20solution%20to%20preparing%20for%20the%20%22everyone%20working%20from%20home%22%20that%20might%20be%20required%20as%20a%20result%20of%20the%20Coronavirus%20measures.%20Its%20just%20that%20without%20MFA%20I%20have%20some%20nagging%20security%20concerns....%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAndyBH%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1953123%22%20slang%3D%22en-US%22%3ERe%3A%20Server%202019%20Remote%20Desktop%20RDWeb%20-%20WebClient%20(Version%20Version%201.0.21.0)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1953123%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F582625%22%20target%3D%22_blank%22%3E%40AndyBH%3C%2FA%3E%26nbsp%3BIt's%20possible%20to%20publish%20the%20webclient%20through%20AzureAD%20Application%20Proxy%20(thus%20creating%20an%20enterprise%20app).%20After%20that%20you%20can%20configure%20a%20conditional%20access%20rule%20making%20MFA%20required.%20Attach%20this%20rule%20to%20the%20Enterprise%20app%20and%20there%20you%20go%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBest%20regards%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESSjvD%3C%2FP%3E%3C%2FLINGO-BODY%3E
Regular Visitor

 

I have this weekend installed the "new" HTML5 based WebClient to allow remote access to our RDS Farm (till now its been used internally only). This is SO MUCH better than the original RDWeb solution !!

 

The only thing that I would like to add to it would be MFA authentication with Azure AD which we use for as much as we possibly can.

 

Is this possible ?  If so does anyone have a link to a decent "how to" tutorial document or video ?

 

Setting up the WebClient was simple and seems to be a perfect solution to preparing for the "everyone working from home" that might be required as a result of the Coronavirus measures. Its just that without MFA I have some nagging security concerns....

 

 

Thanks,

 

AndyBH

 

 

1 Reply

@AndyBH It's possible to publish the webclient through AzureAD Application Proxy (thus creating an enterprise app). After that you can configure a conditional access rule making MFA required. Attach this rule to the Enterprise app and there you go

 

Best regards

 

SSjvD