I am at the end of my rope on this one and need some expert assistance - please!
I have a Windows 2012 Server setup as a stand-alone RDS RemoteApp web server. There are 2 published programs and I can access them NO PROBLEM from anywhere on my internal network and via VPN when visting the RDWEB site.
From the Internet, I can logon to RDWeb site without issue. I can also see the list of published apps, get the connected to Work Resources prompt in the system tray, view the feed of published apps, etc. However, no matter what I do, when I try to launch a published RemoteApp program while connected to the Internet, I get repeated prompts to logon again and each time, it reads "The logon attempt failed". I absolutely cannot get this thing to work from the Internet.
I've done a ton of reading and tried countless settings adjustments, all with no success. When I run BPA, I do get an error which reads the "The RD Gateway server" must be configured to use a valid SSL certificate". I have imported a valid GoDaddy SAN cert and the name I'm using to access from the outside world is one of the Subject Alternative Names. It imports OK and I see no issues when looking at it in RD Gateway Manager. The roles I have configured are:
RD Web Access
RD Connection Broker
RD Session Host
Again, I've spent hours double-checking group memberships, redirect settings, SSL bindings, adding the FQDN to local trusted sites, etc, etc. Nothing I do seems to let me launch a RemoteApp from the Internet. I don't even care about SSO, the second logon is fine, I just need it to let me in.
I've tried connecting from both Win 7 64-bit and Win 8 64-bit clients with no luck. I'm using IE 11 on both.
One more key note, I'm not using 443 for this RDWeb site. I'm coming in on a different port and have configured that in the RDS settings (and IIS SSL bindings). I actually jumped from 2008 R2 to 2012 because I read that 2012 supports alternate port coming inbound from the firewall. When I test internally, I'm doing it on that custom port and it works fine so I don't think that port has anything to do with it. Just mentioning it nonetheless.
Please help and thanks in advance! 3 screenshots attached.