I have Windows Server 2008 R2 servers with RemoteApps.
The clients are using Windows 7 Pro SP1 and Windows XP SP3 (with the latest RDP update installed).
I want to have SSO enabled for both the RD Web Access page and the RemoteApp Programs listed there.
I can have SSO enabled for one option, but never got it to work on both:
- For SSO on the RD Web Access page, I changed C:\Windows\Web\RDWeb\Pages\Web.config:
uncomment <authentication mode="Windows"/>
comment <authentication mode="Forms"> section and <modules> and <security> sections in <system.webServer> section - For SSO on the Remote App Programs I used a trusted certificate, and made the changes to the client.
For example for Windows 7: set AllowCredentialsDelegation for the Remote Desktop Server.
The SSO for Remote App only works when I select the option "This is a private computer".
I think here is the problem: when using SSO for the web page I cannot select "This is a private computer".
I also changed the C:\Windows\Web\RDWeb\Pages\en-US\login.aspx and default.aspx file, so that the option "This is a private computer" is selected by default, but he doesn't seem to use this when using SSO on the web page.
When I disable the SSO, and log on once with the private option selected, then enable SSO again, it works, but only for that user.
We are in an enviroment with about 300 users, so I can't do this for every user.
Any tips are welcome :)