Single Sign On against a TS 2008 Farm

  • Thread starter Thread starter Ralph
  • Start date Start date
R

Ralph

Guest
Hello,

Does the new single-sign-on feature work against a Windows Server 2008 TS
Farm ?

I configured the Policy to enable credential delegation and SSO works when I
enter a TS name but when I try to use the TS farm name I am prompter for my
password
I see the same behaviour for RemotApp that point to the TS Farm.

I just want to know whether it should work or if you should read more
carefully the documentation :-)

Thank you, Ralph
 
Re: Single Sign On against a TS 2008 Farm

Limitations when using Single Sign-on,

- Single Sign-On works only when connecting from a Vista or Longhorn
client machine to a Vista or Longhorn server.
- If the server you are connecting to cannot be authenticated via
Kerberos or SSL certificate, Single Sign-On will not work. You can
circumvent this restriction by enabling "Allow Default Credentials with
NTLM-only Server Authentication" policy, though I would not recommend it.
(NTLM-only Server Authentication does not confirm the server's identity.
Sending your credentials to such server is dangerous.)
- If you have saved credentials for the target machine they take
precedence over the current credentials.
- Single Sign-On works only when using domain user accounts.
(Theoretically one can make it working for local accounts as well, but this
is not an officially supported scenario.)
- If the Terminal Server connection is configured to go through a TS
Gateway server then in some cases the settings of the TS Gateway server can
override the TS Single Sign-on setting.

Check following blog for more info on Single Sign-on,
http://blogs.msdn.com/ts/archive/20...gn-on-for-my-terminal-server-connections.aspx


"Ralph" <ralph@nospam.net> wrote in message
news:uuQ3rBNmIHA.748@TK2MSFTNGP04.phx.gbl...
> Hello,
>
> Does the new single-sign-on feature work against a Windows Server 2008 TS
> Farm ?
>
> I configured the Policy to enable credential delegation and SSO works when
> I enter a TS name but when I try to use the TS farm name I am prompter for
> my password
> I see the same behaviour for RemotApp that point to the TS Farm.
>
> I just want to know whether it should work or if you should read more
> carefully the documentation :-)
>
> Thank you, Ralph
>
>
>
 
Back
Top