Configuring SSO on a Client Computer
Follow these steps to con?gure Single Sign-On on a Windows Vista computer.
1.Open Local Group Policy Editor. Click Start-Run-type gpedit.msc, and press Enter.
2.Expand and navigate to Computer Con?guration- Administrative Templates- System-Credentials Delegation.
3. Double-click Allow Delegating Default Credentials.
4. In Properties on the Setting tab, click Enable and click Show.
5. In Show Contents, click Add and add the terminal servers to the policy list by typing
the pre?x termsrv/ in front of the server name (for example, termsrv/TServ1 ).
6. Click OK three times to close all the dialog boxes.
Prepare and Configure the Use of Terminal Services RemoteApp (TS RemoteApp)
In the following sections, we’ll discuss a new feature of Terminal Services for Windows 2008 called Terminal Services RemoteApp (TS RemoteApp). In previous versions of Termi- nal Services, the only option was to publish the full Desktop, but with TS RemoteApp, now individual applications can be published. What this means is that, instead of launching a new Desktop session to run an application that is running on the terminal server, you can publish an individual application from the terminal server and it will appear as if is it is running on the client’s local computer. No longer will users have to deal with the confusion of running two different Desktops to run all their applications. Before we dive too deep into TS RemoteApp and its features, we need to install the Terminal Server role on our Windows 2008 server.
Installing Programs to Be Used with TS RemoteApp
TS RemoteApp is made available through the installation of Terminal Services on Windows Server 2008. As the administrator of the server installs applications on the server, they can be added to a published list of programs that users will be able to access. In Exercise 2.10, you’ll install the Terminal Services role and change the user mode to allow applications to be installed correctly on a TS server.
Installing the Terminal Services Role
Follow these steps to install the Terminal Services Role for Window Server 2008.
1.Open Server Manager. Click Start-Administrative Tools-Server Manager.
2. Under Roles Summary, click Add Roles.
3. In the Add Role Wizard, on the Before You Begin page, click Next.
4.On the Select Server Roles page, check Terminal Services. If Terminal Services is already installed, this check box will be grayed out.
5. Click Next.
6. On the Introduction to Terminal Services page, click Next.
7. On the Select Role Services page, select Terminal Server and click Next.
8. On the Uninstall and Reinstall Applications for Compatibility page, click Next.
9. On the Specify Authentication Method for Terminal Server page, select the authenti- cation you will be using and click Next. If you select Require Network Level Authen- tication, only computers running Windows Vista with RDC 6.0 or higher will be allowed to connect to the server. If you select Do Not Require Network Level Authen- tication, any RDC client can connect to the TS server.
10. On the Specify Licensing Mode page, select the licensing mode you will be using and click Next.
11. On the Select User Groups Allowed Access to this Terminal Server page, add the
users or groups that you will allow to connect and click Next.
12. On the Con?rm Installation Selections page, verify settings and click Install.
13. After the installation, you will be prompted to restart the server to ?nish the installation process. Click Close and Yes to restart the server.
After you install the Terminal Services role, you need to install the programs that are going to be published. Before you install a program on a terminal server, the server needs to be placed in install mode, and after installation is complete, the server needs to placed back into execute mode.
To change the system to install mode, type change user /install at the command prompt.
To change the system to execute mode, type change user /execute at the command prompt.
To get additional information or help, type change user or change user /? at the command prompt.