How to Install Standalone Remote Desktop Gateway on the Microsoft Windows Server 2019 #RDP #Remote Desktop Services Gateway #Gateway #Microsoft #Server 2019

Today, I am going to show you how to deploy simple Remote Desktop Gateway on the Microsoft Windows Server 2019 without complete Remote Desktop Services Infrastructure. It means I don’t have a farm of RD session host servers sitting behind and I don’t want to deploy Connection broker, web access and session host server (e.g. complete infrastructure).

Login to Windows Server 2019.
Open server manager and select add server roles and features.
On the Before You Begin page, click Next.
On the Installation Type page, select Role-based or feature based Installation.
On the Server Selection page, make sure select the Windows 2019 server and click Next.
On the Select server roles page, select Remote Desktop Services, click Next.
On the Select features page, click Next.
On the Remote Desktop Services page, click Next.
On the Select role services page, select Remote Desktop Gateway.
On the Add features that are required for Remote Desktop Gateway page, click Add features.
On the Select role services page, click Next.
On the Network Policy and Access Services page, click Next.
On the Web Server Role (IIS) page, click Next.
On the Select role services page, click Next.
On the Confirm installation selections page, select Restart the destination server automatically if required.
Click Yes on the restart warning message page and then click Install.
On the Results page, make sure installation progress without issues, click Close.
On the Server Manager, select Tools, click Remote Desktop Services and then click Remote Desktop Gateway Manager.
On the RD Gateway Manage page, select the windows server 2019 gateway server (in my case is CGY-RDSH01), click View and modify certificate properties of Configuration Status.
On the Properties page, in my case, I would like to access corporate network (servers) from External, so I need to purchase and install certificate from public CA. Select Import a certificate into the RD Gateway CGY-RDSH01 Certificates (Local Computer) Personal Store, click Browse and Import Certificate.
I have done exported the wildcard certificate .pfx file from other server and copied it to gateway server, select the .pfx file, click Open.
Enter Private key password, click OK.
Make sure the certificate successfully imports to RD Gateway server, click OK.
On the Properties page, click OK.
On the RD Gateway Manager, expand the RD gateway server, select Policies, click Create New Authorization.
On the Authorization Policies page, select Create a RD CAP and a RD RAP (recommended), click Next.
On the Connection Authorization Policy page, type the name for the RD CAP, in my case is RD CAP Policy.
On the Requirements page, select Password and click Add Group at User group membership (required).
Enter the security group name which allows to connect to the gateway server, in my case is Domain Users, click OK.
On the Device Redirection page, in my case, I allow device redirection for all client devices, select Enable device redirection for all client devices, click Next.
On the Session Timeout, select enable the, and change the idle and session timeout period settings as your requirements, click Next.
On the RD CAP Summary page, click Next.
On the Resource Authorization Policy page, type the name for the RD RAP, in my case is RD RAP Policy, click Next.
On the User Group, in my case is Domain Users, click Next.
On the Network Resource, in my case, select Allow users to connect to any network resource (computer), click Next.
On the Allowed Ports, select Allow connections only to port 3389, click Next.
On the RD RAP Summary page, click Finish.
On the Confirm Policy Creation page, click Close.
On the RD Gateway Manager, select the Gateway server (in my case is CGY-RDSH01), click Add RD Gateway Server Farm members at Configuration Status.
On the Properties page, select Server Farm, type the Gateway server name for RD Gateway server farm member, in my case is CGY-RDSH01, click Add.
On the Properties page, click Apply.
Make sure the Status of Gateway server shows OK (it may need to take some time for the server to start services), click OK.
Now, it’s the time to test gateway function from External client machine.
Open Remote Desktop Connection from External Client.
Enter computer name of corporate machine (client or server), click Show Options.
Select General and enter User name, click Advanced.
On the Advanced page, click Settings at Connect from anywhere.
On the Connection settings page, select Use these RD Gateway server settings, type FQDN of gateway server to the server name filed.
On the Logon settings, select Use my RD Gateway credentials for the remote computer, click OK.
On the Remote Desktop Connection page, click Connect.
Enter the password of domain user, click OK.
It will connect to the machine directly from external.