Solved

SBS 2011 RDP Certificate Subject Error

Posted on 2012-03-22
2
1,793 Views
Last Modified: 2012-03-22
Just finished migrating an SBS 2003 to SBS 2011.  When remote users access Remote Desktop through RWA they get the following error:
Your computer can't connect to the remote computer because the remote desktop gateway server address requested and the certificate subject name do not match.

We are using a self-issued certificate.  The access url is mail1.(companyweb).org/remote and the certificate subject line shows remote.(companyweb).org/remote.  This worked on the SBS 2003 but not after the migration.
0
Comment
2 Comments
 
LVL 56

Accepted Solution

by:
Cliff Galiher earned 500 total points
ID: 37752493
SBS 2008 and SBS 2011 use the RDGateway service to provide the remote desktop magic for RWA. one security item of RDGateway that SBS 2003 didn't have is that the certificate name MUST match the URL use to access RWA. The URL is defined when you run the "Internet Address Wizard" from the SBS console. It will default to remote.<some-company>.com, but if you choose the "advanced" option (available partway through e wizard) you can then change the leading remote.* to mail1.* and will will be right in your world again. But is does mean you will have to re-run the wizard.

-Cliff
0
 

Author Closing Comment

by:chapton_computer_services
ID: 37754476
Worked as promised.  Thank you Cliff!
0

Featured Post

Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Written by Glen Knight (demazter) as part of a series of how-to articles. Introduction One of the biggest consumers of disk space with Small Business Server 2008(SBS) is Windows Server Update Services, more affectionately known as WSUS. For t…
The articles for turning off the Client firewall policy on the internet are for SBS 2008 and don't really help for SBS 2011. They actually moved the Client firewall policy. In 2011, the client firewall policy has moved to the SBS computers conta…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now