This article describes how to restrist Remote Desktop Connection over RAS Secure Client Gateway port for the end users.
To restrict Remote Desktop Connection for end users follow these steps:
Open to Remote Application Server console.
Open the list of Gateways within your farm.
Highlight the Gateway.
Head to Tunneling Policies tab.
Double click the policy (Usually Default policy is used. If you happen to use another policy make sure to double click the used one).
Click "None" checkpoint.
- Apply new setting in RAS Console.
Note: Performing these actions will restrict native MSTSC from accessing the Gateway on the RAS Gateway port (default 80) So if the end user will try using MSTSC ipaddress:80 it won't let them in. Same with RDP connection on the Client pointing to port 80.