I have a single 2012 R2 Standard server setup with all the RDS roles (RD Gateway, Broker, Session Host, Licensing, etc). I am able to publish apps and connect just fine only if the clients have the following setting: Local Policies > Security Options> Network security: LAN Manager authentication level - SEND NTLM response only. The default for windows clients is "Send LM & NTLM - use NTLMv2 sessions security if negotiated". In the past, I have just applied this setting to all the clients via GPO. However, this server will have primarily external users that are not a part of this domain. What setting(s) can I changed on the RDS server to prevent me from having to make any changes on the client's computers?
↧
