I'm done browsing the forums and the Internet. Time to ask for help.
Just set up a new Server 2012 Standard DC in the lab. Have installed RDG on it and am presently using a self-signed certificate. When I attempt to connect remotely I get the "user account not in RDG permissions list", and it is. Here's what I've
got. Note that I'm testing this with the domain administrator account, domainname\administrator
Checked that firewall port 443 is opened. I note there are three selections for that port in advanced FW settings. The only one active is the one for HTTPS. That should be all I need.
Checked the groups allowed in both the RD_RAP and the RD_CAP policies, and "Domain Users" is the group present in both.
RD_CAP is set to enable device redirection for all clients.
RD_RAP is set to allow users to connect to any network resource.
The Administrators account is a member of domain users and is set to control access through NPS network policy.
When I connect to https://servername.local I'm not getting any certificate errors, indicating that the workstation, which is not a domain member, has the root certificate property installed. If I log in from /RDWeb
it uses port 3398 and doesn't go through the gateway.
If I set up RDP to use the gateway of domainname.local, it connects, prompts me for login information which I enter, Then tells me the administrator account is not listed in the RD Gateway's permission list.
I'm stumped at this point.
EDIT: I just checked the event viewer, and it shows two events. Event 200 is "The user "LAB\Administrator", on client computer "172.20.65.23", met connection authorization policy requirements and was therefore authorized to access
the RD Gateway server. The authentication method used was: "NTLM" and connection protocol used: "HTTP"."
This is followed by event 301 which is "The user "LAB\Administrator", on client computer "172.20.65.23", did not meet resource authorization policy requirements and was therefore not authorized to resource "labserver".
The following error occurred: "23002".
I've deleted and recreated both policies and still get the same in event viewer. What am I missing?