So this is the first time i have really came across the need in Server 2012 for Remote Desktop Session Host Configuration. We have a client that needs to allow generic accounts to log into their terminal server from internally, but prevent these accounts from external.
In Server 2008 R2 it was easy. Add a new connector, add a new NIC, and setup as needed. In Server 2012, Microsoft decided we don’t need to do that anymore. Well I’m sorry, but i do.
So after lots of research, i found what i needed to do. Locate the registry keys on a Server 2008 R2 machine, import them into the Server 2012 machine, move a few other files, and away you go.
Step by step.
- Copy c:\windows\system32\tsadmin.dll
- Copy c:\windows\system32\tsconfig.dll
- Copy c:\windows\system32\wts.dll
- Copy c:\windows\system32\tsconfig.msc
- Copy c:\windows\system32\tsadmin.msc
- Copy c:\windows\system32\en\tsconfig.resources.dll
From the Server 2008 R2 machine to the Server 2012 machine
Export the following keys
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MMC\SnapIns\FX:{80aaa290-abd9-9239-7a2d-cf4f67e42128}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MMC\SnapIns\{9910DD01-DF8C-11D1-AE27-00C04FA35813}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MMC\SnapIns\FX:{48128E8C-DFEA-4722-BD00-9D39C3B371F9}
- HKEY_CLASSES_ROOT\CLSID\{9910dd01-df8c-11d1-ae27-00c04fa35813}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MMC\NodeTypes\{F86E6446-AAFF-11D0-B944-00C04FD8D5B9}
And import into the new Server 2012 machine.
I have exported everything you need here TSADMIN
Once you have these steps all done, you will need to reboot the server to make sure all is working. Then run create a shortcut to the file, and your good to go.
From here you can create the secure remote connector like you could in Server 2008
A guide for this is here
Creating a Secure Terminal Server
« MYOB, QuoteWerks and other databases disconnection/crashing Create a secure Terminal server »