Windows 2012 RDS Collection published app configuration.

We have a Windows 2012 RDS collection - 1 connection broker, 2 session hosts.

I have published an application and able to access it from RD WEB without a problem.

There are two issues:

1. When I click on the app from the RE WEB page, I see a RDP file being downloaded and I need to open it to access the app.  How do I make it so that user can just click on the app and open?

2. After the app is opened, I check the drives that the app can access by clicking FILE>OPEN.  I see the C drive of the web server is available to the users.  How do I hide it?

Thanks,
nav2567Asked:
Who is Participating?
 
Cliff GaliherConnect With a Mentor Commented:
1) That is completely up to the browser and how it handles known mime types. That isn't a setting controlled by RDS. So if you allow users to access rdweb with chrome or Firefox or whatnot, you necessarily accept those behaviors. Note that Microsoft has modern remote desktop apps for all major current OSes now that can find rdweb by email address, can get a lost of published apps, and will connect users without requiring a prompt, all without opening a single browser window. If you really want a predictable user experience, this is the recommended way to provide it.



2) You can't with native RDS. Remoteapp is just a GUI wrapper, but the app is still running on the server and has access. You can and should lock down access with ntfs permissions, and users should not be using admin accounts, but you can't hide the drive any more than you could hide the c drive of a local machine from a local user. Exact same principles. The only way to avoid the remoting experience natively is to run the app locally. App-V has gained a bit of traction in this space.
0
 
nav2567Author Commented:
1. If that is the case, users who use the RD WEB to access the published app will end up endless number of .RDP files in their download folder, right?  How could Microsoft come up with a design like that?  This does not make any sense.
0
 
Cliff GaliherCommented:
1) again, this is up to the browser. You are "blaming" Microsoft for something they don't control. MS used to lock down rdweb to IE and it only worked with IE and active-x enabled and you didn't "see" the .rdp file. But as IE faded, Firefox became dominant, and active-x was loathed, they were criticized.

So it was a no-win choice. Keep it IE only, and get the behavior you want, or open it up to other browsers, and accept *their* default behavior. MS chose the latter. But in So doing, they relinquished control of the behavior. This is 100% on the browser being used.

With that said, .rdp files are simple text files. You can have hundreds of thousands and never have a problem. Mountain, molehill.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.