Re: How do you prevent the security warning "unknown publisher" for all users?
Re: How do you prevent the security warning "unknown publisher" for all users?
Did you read the Step-by-Step guide? The answers to all of your
questions are there:
If you are already using an SSL certificate for terminal server or
TS Gateway connections, you can use the same certificate to sign
..rdp files. However, if users will connect to RemoteApp programs
from public or home computers, you must use either of the
following:
* A certificate from a public certification authority (CA) that
participates in the Microsoft Root Certificate Program Members
program (
http://go.microsoft.com/fwlink/?LinkID=59547).
* If you are using an enterprise CA, your enterprise CA-issued
certificate must be co-signed by a public CA that participates in
the Microsoft Root Certification Program Members program.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting:
http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___
"Saucer Man" <saucerman@nospam.com> wrote on 07 aug 2008 in
microsoft.public.windows.terminal_services:
> Ok. I was asking about a Cert in another post. If I get a CERT
> from GoDaddy for the TS Gateway, it should also work for
> digitally signing the .rdp files correct?
>
>
> "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote
> in message
> news:Xns9AF3C94CAF82veranoesthemutforsse@207.46.248.16...
>> That's done in RemoteApp Manager. You'll have to get a
>> certificate.
>>
>> Terminal Services RemoteApp Step-By-Step Guide
>> http://technet2.microsoft.com/windowsserver2008/en/library/61d24
>> 255 -dad1-4fd2-b4a3-a91a22973def1033.mspx?mfr=true
>>
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> ___ please respond in newsgroup, NOT by private email ___
>>
>> "Saucer Man" <saucerman@nospam.com> wrote on 06 aug 2008 in
>> microsoft.public.windows.terminal_services:
>>
>>> That's probably the issue. How do I digitally sign these .rdp
>>> files?
>>>
>>>
>>> "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se>
>>> wrote in message
>>> news:Xns9AF2A63192154veranoesthemutforsse@207.46.248.16...
>>>> But have you digitally signed your rdp files? Without that,
>>>> you'll not get rid of the warning.
>>>> _________________________________________________________
>>>> Vera Noest
>>>> MCSE, CCEA, Microsoft MVP - Terminal Server
>>>> TS troubleshooting: http://ts.veranoest.net
>>>> ___ please respond in newsgroup, NOT by private email ___
>>>>
>>>> "Saucer Man" <saucerman@nospam.com> wrote on 06 aug 2008 in
>>>> microsoft.public.windows.terminal_services:
>>>>
>>>>> Here is the exact message...
>>>>>
>>>>>
>>>>>
>>>>> Title Bar: Open File - Security Warning
>>>>> Message: The publisher could not be verified. Are you sure
>>>>> you want to run this software?
>>>>> Name: u:\folder\program.exe
>>>>> Publisher: Unknown Publisher
>>>>> Type: Application
>>>>> From: u:\folder\program.exe
>>>>>
>>>>> Run button Cancel
>>>>> button
>>>>>
>>>>> This file does not have a valid digital signature that
>>>>> verifies its
>>>>> publisher. You should only run software from publishers you
>>>>> trust. How can I decide what software to run?
>>>>>
>>>>>
>>>>>
>>>>> ...It doesn't mention website or file download.
>>>>>
>>>>>
>>>>>
>>>>> "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se>
>>>>> wrote in message
>>>>> news:Xns9AF1D604C7326veranoesthemutforsse@207.46.248.16...
>>>>>> Then I would expect this message:
>>>>>>
>>>>>> When users start a program, they get a "file download"
>>>>>> dialog box, or an error message: "Windows cannot access the
>>>>>> specified device, path, or file. You may not have the
>>>>>> appropriate permissions to access the item."
>>>>>> http://ts.veranoest.net/ts_faq_user_issues.htm#IEESconfig
>>>>>>
>>>>>> but you can give it a try.
>>>>>> _________________________________________________________
>>>>>> Vera Noest
>>>>>> MCSE, CCEA, Microsoft MVP - Terminal Server
>>>>>> TS troubleshooting: http://ts.veranoest.net
>>>>>> ___ please respond in newsgroup, NOT by private email ___
>>>>>>
>>>>>> "Saucer Man" <saucerman@nospam.com> wrote on 05 aug 2008 in
>>>>>> microsoft.public.windows.terminal_services:
>>>>>>
>>>>>>> We are not getting "a Website wants to start a remote
>>>>>>> connection". I don't know if the Cert applies here. I
>>>>>>> thought it was a Group Policy referring to trusted
>>>>>>> intranet sites that needs to be set. Am I wrong?
>>>>>>>
>>>>>>>
>>>>>>> "Vera Noest [MVP]" <Vera.Noest@remove-this.hem.utfors.se>
>>>>>>> wrote in message
>>>>>>> news:Xns9AF199A50F5DDveranoesthemutforsse@207.46.248.16...
>>>>>>>> Check if this helps:
>>>>>>>>
>>>>>>>> When users start a RemoteApp, they get a dialog box: "a
>>>>>>>> Website wants to start a remote connection. The publisher
>>>>>>>> of this remote connection cannot be identified."
>>>>>>>> http://ts.veranoest.net/ts_faq_user_issues.htm#RemoteApp_s
>>>>>>>> ig ni ng
>>>>>>>>
>>>>>>>> _________________________________________________________
>>>>>>>> Vera Noest
>>>>>>>> MCSE, CCEA, Microsoft MVP - Terminal Server
>>>>>>>> TS troubleshooting: http://ts.veranoest.net
>>>>>>>> *----------- Please reply in newsgroup -------------*
>>>>>>>>
>>>>>>>> "Saucer Man" <saucerman@nospam.com> wrote on 05 aug 2008:
>>>>>>>>
>>>>>>>>> When a user launches a RemoteAPP program, he gets an
>>>>>>>>> Open File - Security Warning. It says "The publisher
>>>>>>>>> could not be verified.
>>>>>>>>> Are you sure you want to run this software?" The
>>>>>>>>> dialog prompt
>>>>>>>>> refers to the drive letter mapping and the .exe in
>>>>>>>>> question. How can I set up the terminal server so these
>>>>>>>>> prompts do not happen to any user?
