We recently deployed an RDS environment with a Gateway. The RDWeb and Gateway certificates are set up and done correctly as far as we can see. Access is only being restricted to users in our domain.
We are seeing this generic error on Windows when trying to connect:
Remote Desktop can't connect to the remote computer...for one of these reasons:
1) Your user account is not authorized to access the RD Gateway
2) Your computer is not authorized to access the RG Gateway
3) You are using an incompatible authentication method
On Mac and iOS clients we see an error stating the access was denied due to a Connection Access Policy (TS_CAP).
Our only workaround (which is probably not acceptable in production) is to set the Network Policy Server Connection request policy to accept users without validating credentials (underForwarding Connection Request).
In Server Manager the error states:
The user "XXX", on client computer "xxx.xxx.xxx.xxx", did not meet connection authorization policy requirements and was therefore not authorized to access the RD Gateway server. The authentication method used was: "NTLM" and connection protocol used: "HTTP". The following error occurred: "23003".
Anyone have any ideas? We are at a complete loss.