We are currently using Citrix for Remote Application access via the internet but are looking to move to RDS and just have some questions on a similar setup. RDS will be installed on Windows Server 2012 R2:
Currently we have two VMs on the internal network that host apps and citrix settings, these servers are domain joined. And one server in our DMZ that hosts the web site and secure connection along with RSA authentication, this server is not part of the domain. A user goes to the web page and logs in with their AD account and RSA code and are presented with apps which then open from the internal citrix servers, this is all secured using a third party SSL cert.
I want to replicate this within RDS. I have read up on the server roles but i'm unsure on the following:
- I only want to use 2 servers within the LAN, can the Connection broker and Session host be installed on the same server and on both servers for high availability?
- Just ran through the Install of the Roles for RDS and via a standard deployment it won't let me continue unless I specify a server to install the Web Access role. I don't want the Web Access role internally this needs to be on the Server within the DMZ. Do I have to have an internal one even if im not going to use it?
- How do I install the Gateway role on a server within the DMZ that is not domain joined? And will this also install the Web role on that server? Do I have to have it on the LAN during installation then move it to the DMZ once the role is deployed?
- If the Gateway is not domain joined will users have single sign on at the web page?
Thanks