Provision and manage mobile devices - Managing Enterprise Devices and Apps - page 333

manually. For example, you can use remote connection profiles to configure a collection of
desktop computers in the office so that it is possible for appropriately authenticated users on
the Internet to establish remote desktop connection sessions. Through these sessions, these
users would be able to interact with their office desktop computers directly, allowing access
to files, shared folders, and resources such as printers.
You can configure remote connection profiles to:
■ Force the use of a known Remote Desktop Gateway (RD Gateway) server. Incoming
connections will only be allowed if they are initiated from this address. You can config-
ure RD Gateway servers with secure authentication policies so that connections from
external clients are appropriately vetted before being forwarded to computers that
can host remote desktop connection sessions on protected networks.
■ Configure a collection of computers to allow inbound Remote Desktop connection
sessions.
■ Limit inbound Remote Desktop connection sessions to users who are listed as primary
users of a computer.
■ Configure Windows Firewall with advanced security rules so that inbound connections
are possible if the computer connects to a domain or private network.
Figure 7-9 shows the creation of a remote connection profile in which an RD Gateway
server has been specified and settings allowing connections from primary users are enabled.
FIGURE 7-9 Create Remote Connection Profile Wizard