Remote Desktop connection from outside network stopped working - certificate

I connect from my home PC (Win10 Pro) to my office PC (Win10 Ent.) regularly.
Now I can't RDP from my home computer to office directly. But I can connect from home PC to my office server and from the office server to my office PC. Both office computers are on the same corporate network and a home PC is outside the corporate network (connected via OpenVPN to the corporate network).
There is no IP specific firewall rule blocking the connection (I changed no settings and one day just couldn't connect to the office PC any more). I can connect to my office server, but not to the office PC.

I tried several trials commended by MicroSoft answers and one of the posts directed me to check the RDP certificates.
My office PC was publishing several Remote Desktop certificates, from which one just expired and RDP from my home PC stopped working. The new RDP certificate was issued too, but it wasn't trusted on office PC as soon as it wasn't in Trusted Root CAs. When I entrusted the certificate and rebooted the office PC, RDP started working.
The question would be why there was an RDP certificate without the proper trust?

Related

Difference between Remote Desktop Services vs Windows Terminal Server vs Remote Desktop Session Host

Could someone explain me the difference between them?
Furthermore I have heard that Windows Terminal Server can be used to deploy software to multiple computers in the network in an organisation by creating a GPO. Could someone give me the steps to do this as well?
Remote Desktop Services is set of different roles that work together to provide VDI or remote app experience to the end user. It has following core architecture components:
RD web access -------------> web page that list available apps to access
RD gateway -------------> allow & block traffic
RD connection broker ------> load balance traffic between session hosts
RD session hosts ----------> these are the servers where applications or VDI are run from
Window Terminal Services is same as RDS. Microsoft renamed it in 2008. Terminal server essential is session hosts: https://learn.microsoft.com/en-us/windows/win32/termserv/terminal-services-is-now-remote-desktop-services
I am not sure about the GPO part

Cannot browse a local easyphp web server using the local IP address

I am running easyphp with apache version 2.4.18 x86 (32-bit) on Windows 10.
On the PC where easyphp is running, I can connect using either localhost or http://computername, but if I try to connect through the local IP address which is http://192.168.0.10, I get a white page without any error message.
And the most strange thing, if I plug an iPhone (USB) with a shared connexion in the PC (the PC gets 2 network connections), then I can access to http://192.168.0.10 through the PC (still the wifi IP local address and not the iPhone local network address).
If I unplug the iPhone, then it fails again to connect to http://192.168.0.10.
Any explanation ?
So it was a firewall problem.
Evene when desactivating the firewall, the web site was not reachable.
I've added manually the
EasyPHP16\eds-binaries\httpserver\apache2418vc11x86x160927105506\bin\eds-httpserver.exe
in the Windows firewall rules, and it worked.
The two strange things is that disabling the firewall did not arrange anything, and lanching the webserver did not pop up the firewall dialog.
Hope this helps.

Manually configure routing tables for azure virtual network (point-to-site)

I am having trouble connecting to my virtual network using the azure VPN client on windows 10 (I get an error about the certificate not found).I found a way to manually configure the VPN, I can successfully connect to it, ping my virtual machines from my local machine, ping my local machine from my virtual machines, remote desktop to it with the virtual network IP address (or hostname) and even connect to my shared folders on my local machine from the Virtual machines. What I can't do, and want to do is to connect to my shared drives on the VMs from my local machine (it works perfectly when I connect with the azure vpn client from windows 7). I've noticed when you connect through the vpn client it actually sets up the routing tables for you. So my question is: How do you configure it manually with powershell?
PS: For some reason you can't go to the IPV4/6 or any properties on your VPN connection on windows 10, So i have to do everything through powershell.
The problem wasn't the routing tables. The problem was that there was credentials stored in my my Credential Manager (Control Panel\All Control Panel Items\Credential Manager) for the VM which was incorrect, I think, I cleared it, and all worked. And by the way, I got the Azure VPN client to work on my windows 10 machine with help from this article

Force windows xp to log into another user account on boot

A kiosk pc we have at work had some trial kiosk software by kioware (http://www.kioware.com) installed on it. The pc was setup to boot into a windows xp account running this software and the software locks down the computer completely only allowing you to reboot the machine. This software’s trial period has now expired and I need to be able to get into the administrator windows account in order to register this software.
Before the kiosk software expired I could switch user accounts under windows, however now all I can do is reeboot and the software just shows a trial period expied message. The computer was setup to boot straight into the kiosk user account.
There is another user account on the pc which has full administrator access. How can I force this machine to boot into the other windows xp administrator user account setup on this computer?
Just realised you could still hit Alt-F4 in the kiosk software to log off to the other Windows Xp account even though the software had expired.

SSRS 2008 Access from Desktop PC

I have an instance of SQL Server 2008 and SSRS 2008 running on a desktop PC for to be used for development. This PC is registered under my user id and I can remote desktop into it and connect to SSRS just fine from my laptop (also registered under my user id). Also, I can access the website from my laptop when I am NOT logged into the PC (i.e. after a reboot and before logging in).
When another team member tries to connect to SSRS via the web (SSRS is running on port 8080) he cannot connect. I have tried different options like adding his as a user on the PC and granting permissions for him on the Home folder in Report Manager. Nothing seems to work. He CAN connect to the PC over remote desktop so I know that the connectivity is there and since I can access port 8080 from my laptop he should be able to access port 8080 as well.
Anyone have any thoughts on how to grant access to this team member? I am open to all ideas that do not involve writing custom code (which i really should not have to do to fix this issue). This used to work with SSRS 2005 but I know that it used IIS then and now it uses http.sys directly.
Thanks!
Your colleague needs permissions at the file system level to the SSRS folders:
C:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\ReportManager
and
C:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\ReportServer
in addition to access granted to the website in IIS.
Are these computers in a domain?
What operating system?
Without more information about your network it seems difficult to diagnose this issue. He cannot connect to port 8080 at all, as though the port was blocked? Or is SSRS replying with an error page?
If he can't connect to port 8080 at all it is almost certainly a packet filtering or firewall issue. What happens if you use a telnet application to send an HTTP GET request from his computer to the server on port 8080?
If there are error messages describing them would be quite helpful in finding a resolution.