Салимжанов Р.Д
Part 2 Basic Configuration of Windows Server 2019 (RDP, DHCP)
Salimzhanov R.D.
В первой части, мы рассмотрели, как настроить сетевые компоненты, а также рассмотрели создание учетных записей пользователей и настройку прав доступа.
Сейчас мы рассмотрим настройку удаленного доступа и установку необходимых служб (DHCP-сервер).
Воспользуемся протоколом Remote Desktop Protocol (RDP) — это протокол удаленного рабочего стола, который предоставляет возможность удаленного управления компьютером через сеть. Пользователь может подключаться к удаленному компьютеру и управлять им, как если бы он находился непосредственно перед ним. Протокол RDP обеспечивает безопасное и зашифрованное соединение, что позволяет защитить данные и предотвратить несанкционированный доступ к компьютеру.
Для подключения удаленного стола, следует перейти “Диспетчер серверов” и найти там в локальном сервере пункт “Удаленный рабочий стол”:
Нажимаем на него, и выбираем “Разрешить удаленные подключения к этому компьютеру”:
Далее выбираем пользователей, которым разрешим подключение:
Нажимаем “Добавить”:
Выбираем пользователя “USER_admin”:
Нажимаем “ok” и теперь этот пользователь может подключится к серверу, проверим подключение через основной ПК, заранее дав ему доступ:
Открываем основной ПК, пишем в поиске “Подключение к удалённому рабочему столу”:
Далее прописываем IP сервера:
Прописываем пользователя и пароль:
Нажимаем “да”:
Теперь мы подключились:
DHCP-сервер (Dynamic Host Configuration Protocol) — это сервис, который автоматически распределяет IP-адреса между устройствами в сети. Это позволяет упростить процесс настройки сетевых устройств и обеспечивает централизованное управление IP-адресами.
Установка и настройка DHCP-сервера на Windows Server может понадобиться в следующих случаях:
1. Автоматическое назначение IP-адресов: DHCP-сервер автоматически назначает IP-адреса устройствам в сети, что облегчает управление сетью. Это устраняет необходимость вручную настройки IP-адресов на каждом устройстве и помогает избежать конфликтов IP-адресов.
2. Управление адресами: DHCP-сервер управляет пулом доступных IP-адресов и может динамически выделять и освобождать их по мере необходимости. Это позволяет эффективно использовать доступные адреса и предотвращает избыточное расходование адресов.
3. Улучшенное контроль безопасности: DHCP-сервер обеспечивает возможность контроля доступа к сети через использование фильтра MAC-адресов и других методов аутентификации. Это помогает обеспечить безопасность сети и предотвратить несанкционированный доступ.
Для настройки и установки DHCP в диспетчере серверов нажимаем на “Управление” и “Добавить роли и компоненты”:
После следуем инструкции в скринах:
Далее уже выбраны нужные нам компоненты, но для определенных задач следует выбирать конкретно что вам нужно, оставляю ссылку на описание компонентов URL: https://info-comp.ru/softprodobes/572-components-in-windows-server-2016.html
Ждем установки:
После установки слева появился DHCP сервер:
Далее переходим в меню “Средства” и выбираем “DHCP”:
В разделе IPv4 создаем область:
Далее мы можем, добавить машину как отдельный DNS сервер, или создать на этой машине, просто нажав “Далее”.
Точно также, если надо мы можем добавить WINS серверы, если требуется:
Теперь появился пул адресов:
А да и еще, нажав на флажок, диспетчер попросит создать вас две новые группы:
(там нажимаем “Фиксировать” и они автоматически создаются)
Осталось теперь только протестировать:
В следующий части базовой настройки Windows Server 2019, разберем:Настройка DNS-сервера и Active Directory (AD)
1) Как включить и настроить удаленный рабочий стол (RDP) в Windows? // [электронный ресурс]. URL: https://winitpro.ru/index.php/2013/04/29/kak-vklyuchit-udalennyj-rabochij-stol-v-windows-8/ / (дата обращения 01.08.2024).
2) Помощник Админа // [канал]. URL: https://t.me/channel_adminwinru (дата обращения 01.08.2024).
Estimated reading: 3 minutes
996 views
RDP (Remote Desktop Protocol) is the protocol that allows a user to connect to a Windows Server through a graphical interface over any network.
In fact, there are several ways to enable Remote Desktop on Windows Server 2019 and 2022. So you can choose one of them that is suitable for you to enable RDP on Server 2019. After RDP is enabled, you can access the remote server from your local device
Method 1. Enable Server 2019 RDP from Server Manager
- Step 1. Click on the Start button and you can see Server Manager.
- Step 2. Click on “Local Server” on the left in Server Manager window. We can see that Remote Desktop is “Disabled”.
- Step 3. Click on the “Disabled” text to open the “System Properties” window, and then locate on the “Remote” tab.
NOTE: The System Properties window can also be accessed from Control Panel option by clicking on System and then on Remote settings in the left panel or from the Windows command prompt by executing the below command.
SystemPropertiesRemote
- Step 4. Tick “Allow remote connections to this computer” in the “Remote Desktop” tab.
- Step 5. You’ll receive a warning message after the above step, click on “OK”
Now, Remote Desktop may still show as “Disabled”; you can refresh or press Control + F5 to refresh to “Enabled”.
Method 2: Using the Command Prompt
- Step 1. Search cmd in the search box to open Command Prompt.
- Step 2.In the Command Prompt window, type the following command and press the enter key: net start termservice
Method 3. Allow Remote Desktop on Win Server 2019 from Powershell
If you can’t enable RDP from Server Manager, you can try to enable Remote Desktop in Windows Server 2019 with Powershell.
- Step 1. Search “PowerShell” in the Search box and then select Run as Administrator.
- Step 2. The registry value that enables/disables Remote Desktop can be modified using the Set-ItemProperty cmdlet
Set-ItemProperty -Path 'HKLM:\System\CurrentControlSet\Control\Terminal Server' -name "fDenyTSConnections" -value 0
- Step 3. Once this is completed, the
Enable-NetFirewallRule
cmdlet can be used to set the Windows firewall to allow remote desktop connections.
Enable-NetFirewallRule -DisplayGroup "Remote Desktop"
Note:With this method if you want to disable Remote Desktop connection you can change the value 0 to 1
Set-ItemProperty -Path 'HKLM:\System\CurrentControlSet\Control\Terminal Server' -name "fDenyTSConnections" -value 1
Method 4. Using Windows Firewall
- Step1: Press Start and enter firewall.cpl in the text box and press the enter key.
- Step 2.On the Windows Defender Firewall page, click on the Allow an app or feature through the Windows Defender Firewall option.
- Step 3. Click on the Change settings button. Scroll down and tick the Remote Desktop and Remote Desktop (WebSocket) option in the list.
Method 5.Using Group Policy
In addition, Remote Desktop can also be enabled by using Group Policy.
- Step 1. Press Start and enter “gpedit.msc” to open Group Policy .
- Step 2. Navigation:
Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host\Connections
- Step 3. In the right pane, double click on “ Allow users to connect remotely by using Remote Desktop Services.”
- Step 4. Select “Enabled” and click on “OK”.
There you have it. Once you’ve completed these steps, you’ll be able to use Remote Desktop on Windows Server. You can now enjoy wider connectivity and access to your files, data, and apps.
XP/VS Terminal Server
A multi-user Remote Desktop access solution to turn any modern Windows system into a fully-featured RDP server.
Version 1.0.968 • Windows • 9.7 MB • Changelog
Written on 01 October 2023
On Windows Server 2019 the ability to enable Remote Desktop lets you access your device from another location using the Remote Desktop Protocol (RDP) to offer assistance or control a device without being physically present at the location.
By default, only two users can access your Windows Server 2019 remotely. With Thinstuff XP/VS Terminal Server, you can effortlessly overcome this limitation and connect with multiple users at the same time.
In this guide, you will learn the steps to enable Remote Desktop to manage or access files and apps with multiple users on Windows Server 2019 remotely.
In case you are using Windows Server 2019 Essentials edition, Remote Desktop is already enabled by default so you might want to continue with installing XP/VS Server directly.
Due to security reasons Remote Desktop is disabled by default on Windows Server 2019!
Step 1: Enable Remote Desktop on Windows Server 2019 using the Server Manager
To enable Remote Desktop on Windows Server 2019 with the Server Manager, use these steps:
Step 2: Install XP/VS Terminal Server
To grant remote access for multiple users on Windows Server 2019 download and install XP/VS Terminal Server as following:
- 1. Download XP/VS Terminal Server from here.
- 2. Open the installation package as local administrator.
- 3. The installation package automatically includes a 14-day trial license. Please make sure to choose at least the Standard version for your trial.
- 4. After successful installation of XP/VS Server you have to reboot your machine.
- 5. You might also want to add additional Remote Desktop users as per default only Administrators can connect on server operating systems.
Once you have completed these steps, you can connect to your computer using any modern Remote Desktop app (recommended). You can also silently install XP/VS Server as described here.
Is my version of Windows supported?
Why can I only connect with my Administrator account?
How to Allow RDP on Windows Server 2019? Configuring Remote Desktop Computer Protocol (RDP) on Windows Server 2019. Remote Desktop Protocol (RDP) is a valuable feature in Windows Server 2019 that allows you to remotely manage and administer your server. With RDP, you can connect to your server’s desktop interface from a remote location, making it easier to perform various administrative tasks. In this article, we will explore how to enable and configure RDP on Windows Server 2019.
Introduction to RDP
Remote Desktop Protocol (RDP) is a proprietary protocol developed by Microsoft. It enables users to connect to a remote computer or server over a network connection. RDP provides a graphical interface to the remote machine, allowing users to interact with it as if they were physically present at the remote location.
RDP is an essential tool for system administrators and IT professionals as it simplifies server management, troubleshooting, and maintenance. By configuring RDP on Windows Server 2019, you can securely access and control your server remotely, which can be particularly helpful in scenarios where physical access to the server is not possible or practical.
Prerequisites
Before we dive into the steps for enabling and configuring RDP on Windows Server 2019, make sure you have the following prerequisites in place:
Windows Server 2019: You should have a Windows Server 2019 machine up and running.
Administrator Access: You need administrative privileges to configure RDP settings.
Network Connectivity: Ensure that your server is connected to a network with internet access. RDP typically uses TCP port 3389, so ensure that this port is not blocked by any firewall or security software.
Enabling RDP on Windows Server 2019
Here are the steps to enable RDP on Windows Server 2019:
Access Server Manager:
Visit to your Windows Web Server 2019 device.
Click on the Windows icon in the taskbar, then select “Server Manager” from the menu.
Open the “Add Roles and Features” Wizard:
In the Server Manager dashboard, click on “Manage” from the top menu.
Select Functions in addition to Features open the wizard.
Role-based or feature-based installation:
In the moreover consists of wizard, click sticking to on the before you begin internet site.
Select “Role-based or feature-based setup” and also click “Following.”
Select the server:
Ensure that your Windows Server 2019 machine selected and click “Next.”
Select a role:
Scroll down and also choose “Remote Desktop Computer Solutions” from the listing of duties.
A dialog box will pop up, informing you about the required role services. Click “Add Features” to include them.
Role Services:
In the “Remote Desktop Services” role, select the following role services:
Remote Desktop Session Host (RD Session Host): This service allows multiple users to connect to the server simultaneously.
Remote Desktop Computer Licensing (RD Licensing): This service manages licenses for RDP connections.
RDP Web Access (RD Web Access): This service provides web access to RDP resources.
Remote Desktop Gateway (RD Gateway): This service allows RDP traffic to pass through firewalls.
Click “Next” to proceed.
Web Server Role (IIS):
If prompted to add features required for Remote Desktop Web Access, click “Add Features.”
Click “Next.”
Role Features:
Review the role features and click “Next.”
Confirm Installation Selections:
Evaluation your choices and click “Set up” to start the setup procedure.
Install and Configure RD Licensing (if needed):
If you haven’t already set up RD Licensing, you will be prompted to do so. Follow the on-screen instructions to configure the RD Licensing server.
Installation Progress:
The installation may take some time to complete. Once it’s done, click “Close” to exit the wizard.
Configuring RDP Settings
After enabling the RDP role, you need to configure its settings:
Open Remote Desktop Licensing Manager:
In Server Manager, click on “Tools” at the top-right corner.
Select “Remote Desktop Licensing Manager.”
Activate the Licensing Server:
Right-click on your web server in the left pane and select “Turn on Web Server.”
Follow the activation wizard to activate your licensing server.
Set Licensing Mode:
Right-click on your server again and select “Properties.”
In the Licensing tab, choose the licensing mode (Per User or Per Device) that suits your needs.
Configure Remote Desktop Session Host:
In Server Manager, click on “Remote Desktop Services” in the left pane.
Under “Collections,” right-click on “RD Session Host” and choose “Properties.”
In the “RD Session Host Server Settings” tab, configure user access settings, such as session limits and security settings.
Configure Remote Desktop Gateway (Optional):
If you want to allow RDP connections through a firewall or from external networks, configure the Remote Desktop Gateway by following the setup wizard in Server Manager.
Allow RDP Access Through Windows Firewall:
If you have Windows Firewall enabled, ensure that an exception for RDP (port 3389) is allowed.
User Permissions:
Make sure that the users or groups you want to grant RDP access to are added to the “Remote Desktop Users” group on the server.
Restart Services:
To use all the modifications, reboot the “Remote Desktop Computer Solutions” on your web server.
Connecting to the Server via RDP
Once RDP is configured, you can connect to your Windows Server 2019 machine from a remote computer using the following steps:
Remote Desktop Client:
On your remote computer, open the Remote Desktop Client application (mstsc.exe).
Enter Server Information:
In the Remote Desktop Client, enter the IP address or hostname of your Windows Server 2019 machine.
Authentication:
Click “Connect” and enter your username and password with appropriate permissions on the server.
Remote Desktop Session:
You should now be connected to your Windows Server 2019 machine’s desktop remotely.
Security Considerations
While RDP is a powerful tool for remote server management, it is crucial to keep security in mind. Here are some best practices to enhance the security of your RDP setup:
Usage Solid Passwords: Guarantee that all customer accounts have solid, distinct passwords.
Network Security: Protect your server with a firewall and ensure that only necessary ports (such 3389 for RDP) are open.
Network Level Authentication (NLA): Enable NLA to add an extra layer of security by requiring users to authenticate before connecting to the server.
Limit Access: Only grant RDP access to trusted users and IP addresses.
Regular Updates: Keep your server and RDP components up to date with the latest security patches and updates.
Remote Desktop Gateway: Consider using a Remote Desktop Gateway to control and secure
Read more article: RDP not working on windows server
In the era of connectivity and remote work, having tools that allow us to remotely access and control our servers is essential. One of the most important features of Windows Server 2019 is Remote Desktop, which gives us the ability to remotely access our server and manage it efficiently. Below, we will explore how to enable and activate Remote Desktop in Windows Server 2019, so you can enjoy its benefits and functionalities.
Step 1: Login to the Server Manager
The first thing you need to do is to access the Server Manager on your Windows Server 2019. You can do this through the «Start» menu and selecting the «Server Manager» option in the list of programs. Once the Server Manager window opens, you are ready to get started.
Step 2: Enabling Remote Desktop in Windows Server 2019
To enable Remote Desktop you have to follow the instructions provided below.
-
In the Server Manager window, find and select the «Manage» option in the upper right corner. Next, a menu will pop up, where you will need to click on «Add Roles and Features». This will open the Add Roles and Features Wizard.
-
The wizard will guide you through a series of steps. On the «Before you begin» page, you can read relevant information about the process. Click «Next» to continue.
-
On the «Installation type» page, select the «Feature or role-based installation» option and click «Next».
-
Then, on the «Select Server» page, make sure your server is selected in the list and click «Next».
-
Next, on the «Server Roles» page, scroll down until you find the «Remote Desktop Services» option and check the box next to it. A pop-up window will appear asking you to add some additional features for Remote Desktop. Click «Add Features» to accept and continue.
-
On the «Features» page, you do not need to make any additional selections. Click «Next» to continue.
-
On the «Remote Desktop Services» page, different Remote Desktop service roles will be displayed. In this case, select «Remote Desktop Session Server» and «Remote Desktop
-
Administration Tools». Next, a pop-up window will appear asking if you want to add additional features. Click «Add Features» to accept and continue.
-
On the «Installation Summary» page, the selected options will be displayed. Verify that everything is correct and click «Install» to begin installing the selected roles and features.
The installation process may take a few minutes. Once finished, a confirmation window will be displayed. Click «Close» to close the wizard.
Step 3: Configuring Remote Desktop in Windows Server 2019
Now that you have enabled Remote Desktop, it is necessary to perform some additional configurations to make sure everything works correctly.
-
In the Server Manager window, click on the «Tools» option in the upper right corner and select «Remote Desktop Services». The Remote Desktop Services Manager window will open.
-
Then, in the Remote Desktop Services Manager window, make sure that the «Remote Desktop Session Host Settings» option is selected in the left pane. In the right pane, right-click on your server and select «Properties».
-
Then, in the Remote Desktop Session Host Properties window, select the «Network Settings» tab and verify that the «Allow connections from computers running any version of Remote Desktop» and «Allow connections only from computers running Remote Desktop with Network Level Authentication» options are enabled. This will ensure that remote computers can securely access the server.
-
If you want to limit the number of simultaneous Remote Desktop sessions, you can do so on the «Sessions» tab. Here you can set the maximum session limit and configure additional options according to your needs.
-
Click «OK» to save your changes.
Step 4: Configure Firewall to allow Remote Desktop connections to reach your server
To allow Remote Desktop connections to reach your server, you need to configure the Windows Firewall.
-
Open the «Control Panel» on your server and select «System and Security», then click «Windows Firewall».
-
In the Windows Firewall window, select «Advanced Settings» in the left pane.
-
In the left pane, click «Inbound Rules» and then select «New Rule» in the right pane.
-
The wizard to create a new rule will open. On the first page, choose «Program» and click «Next».
-
On the next page, select «This program path» and click «Browse». Navigate to the location of «termsrv.exe» on your server (usually «C:\Windows\System32\termsrv.exe») and select the file. Then click «Next».
-
Then choose «Allow connection» and click «Next».
-
On the «Profile» page, select the network profiles for which you want to allow Remote Desktop connections (e.g. «Domain» and «Private»). Then click «Next».
-
Finally, on the «Name» page, enter a descriptive name for the rule (e.g. «Allow Remote Desktop Connections») and, if desired, provide an additional description. Then click «Finish» to complete the Firewall configuration.
Conclusion
In summary, enabling and configuring Remote Desktop in Windows Server 2019 is a simple but important process to remotely access and manage your server. Through the above steps, you were able to enable this feature, configure the connection options and set the necessary rules in the Windows Firewall.
Remember that Remote Desktop gives you the flexibility and convenience of managing your server from anywhere, which is especially useful in remote work environments or when you need to access your server from different locations. However, it is important to make sure you maintain the security of your server and apply best practices in terms of passwords, authentication and Firewall settings.
I hope this article has provided you with a clear guide on how to enable and activate Remote Desktop in Windows Server 2019. Remember to always consult Microsoft’s official documentation or seek additional assistance if you have any questions or face any specific issues during the process.
Take full advantage of Remote Desktop on your Windows Server 2019 and manage your server efficiently and accessible from anywhere!