RE: RES: RE: RES: TSWEB through ISA 2004 Issue

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Sat, 26 Feb 2005 08:02:24 -0600

At the end of the article at
http://isaserver.org/tutorials/Publishing_Terminal_Services_and_the_TSAC
_Client__Updated.html

Comments:

The TSAC client allows any machine running Internet Explorer to access
the Windows 2000 Terminal Server. After reading through the procedures
for publishing the TSAC site, it might seem quite simple to get it
running. Indeed the procedure is quite easy. However, there are some
things to watch out for:

Keep in mind that when you type in the Server name in the log on dialog
box in the TSAC log on screen, that this name needs to resolve to the IP
address of the one you used in the RDP Server Publishing Rule.
 
Remember to make the web server a SecureNAT client. This step is often
forgotten, and if you don't do this before beginning the rest of the
process, you might find yourself in an hours long troubleshooting
session trying to figure out why it doesn't work. 

If you want to require authentication at the TSAC web site, keep in mind
that your only option is Basic Authentication. The Web Proxy service
will not pass Digest or Integrated Authentication credentials. 

If you want to improve the level of security, enable authentication on
the external interface of the ISA Server. Set the authentication options
for the Inbound Web Requests Listener used to listen for the
IIS/Terminal Server. You also have the option to enable SSL on the
Inbound Web Requests listener. 

I recommend restarting the ISA Server and the IIS/Terminal Server after
the configurations are completed. Try this option if you have manually
restarted the services and things still don't seem to working. 


Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls


-----Original Message-----
From: Dan Crain [mailto:DanC@xxxxxxxxxxxx] 
Sent: Friday, February 25, 2005 4:10 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: RES: RE: RES: TSWEB through ISA 2004 Issue

http://www.ISAserver.org

Got it to work, but not the way you would think.
When you're at the TSWeb page, instead of entering the computer name for
the terminal server, we entered the ISA servers IP address and it
worked. Which makes since...when you use the remote desktop connection,
you use the ip address also. Hmmm.
Thanks for everyones help....
Dan

-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
Sent: Friday, February 25, 2005 4:31 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: RES: RE: RES: TSWEB through ISA 2004 Issue

http://www.ISAserver.org

Take a look at these:
http://isaserver.org/pages/search.asp?query=tsac 

-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 

-----Original Message-----
From: Dan Crain [mailto:DanC@xxxxxxxxxxxx]
Sent: Friday, February 25, 2005 13:16
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: RES: RE: RES: TSWEB through ISA 2004 Issue

http://www.ISAserver.org

Yes..it does try to connect..takes about 10 seconds then it comes back
wuth the can't find server error... 

-----Original Message-----
From: Tiago de Aviz [mailto:Tiago@xxxxxxxxxxxxxxx]
Sent: Friday, February 25, 2005 4:08 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RES: RE: RES: TSWEB through ISA 2004 Issue

http://www.ISAserver.org

No, I mean, afterwards. Does the TSAC actually try to connect? Try
running network monitor and see what you can get.

-----Mensagem original-----
De: Dan Crain [mailto:DanC@xxxxxxxxxxxx] Enviada em: sexta-feira, 25 de
fevereiro de 2005 17:53
Para: [ISAserver.org Discussion List]
Assunto: [isalist] RE: RES: TSWEB through ISA 2004 Issue

http://www.ISAserver.org

It does download the client because that got blocked by Explorer at
first. 

-----Original Message-----
From: Tiago de Aviz [mailto:Tiago@xxxxxxxxxxxxxxx]
Sent: Friday, February 25, 2005 3:51 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RES: TSWEB through ISA 2004 Issue

http://www.ISAserver.org

Perhaps any protection existent on the client`s browser that prevents
the ActiveX component from executing or connecting to the remote RDP?

-----Mensagem original-----
De: Dan Crain [mailto:DanC@xxxxxxxxxxxx] Enviada em: sexta-feira, 25 de
fevereiro de 2005 17:43
Para: [ISAserver.org Discussion List]
Assunto: [isalist] TSWEB through ISA 2004 Issue

http://www.ISAserver.org

TSWebpage works through the server. Get to the logon on page fine. 
When you type in the terminal server name it come back with "Computer
could not be found"

This work fine on the internal network throught the Webpage but come
back with the error when you are requesting it from the outside.

A regular Remote Desktop Connection works fine from the outside.

Any ideas?

Thanks,
Dan Crain

Daniel A. Crain
Systems Administrator
Dean, Ringers, Morgan and Lawton, P.A.
201 E. Pine Street, Suite 1200
Orlando, FL 32802
Phone: (407) 422-4310
DanC@xxxxxxxxxxxx
 


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tiago@xxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
Danc@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tiago@xxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
Danc@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
Danc@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx




Other related posts: