Azure Terminal Services

Posted on 02-05-2021 by admin

-->

Mar 11, 2014 Terminal Services or Remote Desktop Services) does not include license mobility to a public cloud, so unfortunately you are not able to use TS in an Azure VM. If you are an ISV you may be able to use a Service Provider License Agreement (SPLA) in a SaaS offering. The Internet has indeed transformed the way we work and communicate. Flexibility is an underlying theme throughout the modern workplace which gives users the freedom to work on a variety of different platforms while engaged on a single task or assignment. However, there are times when users need to use a specific application which only runs on Windows. If the user is on a non-Windows device such as an App. Remote Desktop Services (RDS), known as Terminal Services in Windows Server 2008 and earlier, is one of the components of Microsoft Windows that allow a user to take control of a remote computer or virtual machine over a network connection. RDS is Microsoft's implementation of thin client architecture, where Windows software, and the entire desktop of the computer running RDS, are made. First published on CloudBlogs on Apr, 26 2007 Part I in a series. Jump to Part I, Part II, Part III Historically, printing redirection has been difficult for Terminal Services(TS) customers. To successfully redirect a given user's client printer to the terminal server, the proper drivers ne. In digging through the Microsoft Product Use Terms and Licensing information, I see that if we purchase RDS CALs with Software Assurance, we gain the License Mobility benefit, which allows us to deploy the licenses on a server from an Authorized Mobility Partner (i.e., Azure in this case).

Use the Windows Authentication section of the Azure Multi-Factor Authentication Server to enable and configure Windows authentication for applications. Before you set up Windows Authentication, keep the following list in mind:

After setup, reboot the Azure Multi-Factor Authentication for Terminal Services to take effect.
If 'Require Azure Multi-Factor Authentication user match' is checked and you are not in the user list, you will not be able to log into the machine after reboot.
Trusted IPs is dependent on whether the application can provide the client IP with the authentication. Currently only Terminal Services is supported.

Important

As of July 1, 2019, Microsoft no longer offers MFA Server for new deployments. New customers that want to require multi-factor authentication (MFA) during sign-in events should use cloud-based Azure AD Multi-Factor Authentication.

To get started with cloud-based MFA, see Tutorial: Secure user sign-in events with Azure AD Multi-Factor Authentication.

Existing customers that activated MFA Server before July 1, 2019 can download the latest version, future updates, and generate activation credentials as usual.

Note

This feature is not supported to secure Terminal Services on Windows Server 2012 R2.

To secure an application with Windows Authentication, use the following procedure

In the Azure Multi-Factor Authentication Server click the Windows Authentication icon.
Check the Enable Windows Authentication checkbox. By default, this box is unchecked.
The Applications tab allows the administrator to configure one or more applications for Windows Authentication.
Select a server or application – specify whether the server/application is enabled. Click OK.
Click Add…
The Trusted IPs tab allows you to skip Azure Multi-Factor Authentication for Windows sessions originating from specific IPs. For example, if employees use the application from the office and from home, you may decide you don't want their phones ringing for Azure Multi-Factor Authentication while at the office. For this, you would specify the office subnet as Trusted IPs entry.
Click Add…
Select Single IP if you would like to skip a single IP address.
Select IP Range if you would like to skip an entire IP range. Example 10.63.193.1-10.63.193.100.
Select Subnet if you would like to specify a range of IPs using subnet notation. Enter the subnet's starting IP and pick the appropriate netmask from the drop-down list.
Click OK.

Next steps

How to Install, Run and Login Azure CLI on Linux Ubuntu

Microsoft is a leading global vendor of computer software; hardware for computer, mobile and gaming systems; and cloud services. Microsoft's corporate headquarters is located in Redmond, Wash., and it has offices in more than 60 countries.

Microsoft Azure is an ever-expanding set of cloud services to help your organisation meet your business challenges. It’s the freedom to build, manage and deploy applications on a massive, global network using your favourite tools and frameworks.

Azure provides solutions for all industries. Bring together cloud services and products tailored for your industry to help meet your specific needs and drive innovation.

Azure is the only consistent hybrid cloud, has more regions than any cloud provider, delivers unparalleled developer productivity and offers more comprehensive compliance coverage – including meeting the requirements of the General Data Protection Regulation (GDPR).

The Azure command-line interface (Azure CLI) is a set of commands used to create and manage Azure resources. The Azure CLI is available across Azure services and is designed to get you working quickly with Azure, with an emphasis on automation.

Key Characteristics
Azure CLI capabilities make it easy to work with different programing languages and software environments. For example, Azure CLI:

Is available to install in Windows, macOS, and Linux environments.

Can also be run in Docker and Azure Cloud Shell.

Offers command-line flexibility when managing an Azure solution.

Supports long-running operations.

Has the ability to use one subscription for all commands, or vary subscriptions per command.

Allows for querying of command-line results with query output returned in your format of choice.

Has the flexibility to work with multiple clouds.

Provides configurable settings for logging, data collection, and default argument values.

Is deployed with Resource Manager deployment templates.

Install and run the Azure CLI (Linux)
Get packages needed for the install process:
sudo apt-get update
sudo apt-get install ca-certificates curl apt-transport-https lsb-release gnupg

Download and install the Microsoft signing key:
curl -sL https://packages.microsoft.com/keys/microsoft.asc |
gpg --dearmor |
sudo tee /etc/apt/trusted.gpg.d/microsoft.gpg > /dev/null

Add the Azure CLI software repository:
AZ_REPO=$(lsb_release -cs)
echo 'deb [arch=amd64] https://packages.microsoft.com/repos/azure-cli/ $AZ_REPO main' |
sudo tee /etc/apt/sources.list.d/azure-cli.list

Update repository information and install the azure-cli package:
sudo apt-get update
sudo apt-get install azure-cli

Run the Azure CLI with the az command. To sign in, use the az login command.
az login

If the CLI can open your default browser, it will do so and load an Azure sign-in page.
Otherwise, open a browser page at https://aka.ms/devicelogin and enter the authorization code displayed in your terminal.
Sign in with your account credentials in the browser.

Please subscribe to support our channel.
To be aware of our new videos please subscribe our channel.

Visit our website https://www.sdk-it.com
Visit our youtube channel
Watch IT & Learn IT & Apply IT.

Enjoy!

Foxski76