How to install and configure Remote Desktop Services (RDS) on Windows 2016

hi everyone today I'm going to show you how to install remote desktop services on Server 2016 and configure it for internal use when it's joined to a domain so let's go to server manager doing this install there will be quite a few reboot required so what I'll do I'll pause the vid in between just to speed things up okay so now we want to click on add roles and features and next and we want to select Remote Desktop Services installation and click Next we're going to be doing a standard deployment like I said this is for internal use only whilst the server is on a domain so click Next and we're going to be using session-based Desktop deployment and click Next these are the features that are going to be installed so click Next this is our local server so I need to select this add it to the right hand plane click Next and make sure you check this box install the Andy web access role service on the Adi connection broker server which is this server and click Next and we do the same again next so this is what's going to be installed and what we'll do will allow the server to reboot automatically this does normally reboot twice so like I said doing this I will pause the vid the best I can so click restart and click deploy while you normally find with this it'll install half of each one then it will reboot and then after reboot it'll complete once it's complete I would reboot again because otherwise it'll say there's an outstanding reboot required and from experience it's easier to just do it straight after this so what I'll do I'll pause the vid for now as you see it's installed half for the first one it'll do this on the remaining two and then it will reboot and we started right the servers just rebooted so I'm going to go back into server manager when you log back onto the server you must be logged on as a domain admin if you logged on as a local admin it won't allow you to progress you need to log off and log on as a domain admin so we're just going to check the status now with the install so like I said I'll pause the vid to try and speed things up okay and as we can see you've got the most desktop services so we're going to click on this once oh there you go without me having to do it it's popped up to say it's going to continue with the install so we'll just wait for these to finish and then once they have I'll reboot the server again and as you can see the licensing window just popped up the same we have 120 days grace so we're gonna click close and what we're going to do now we're going to reboot the server before we proceed right so the server's just rebooted so I'm going to go back into server manager and we're going to just check the installed config and then I can explain what further configuration is required it is a pain having to restart the server so many times but if you don't you will get hold there's an outstanding reboot pending and it is just the nightmare so better be safe than sorry and there's our licensing window to say we have 120 days grace we are going to install the Adi licensing service and then guess what we're going to reboot the server again yes but I'll show you how to do that and I'll also show you how to generate self-signed certificate which we're going to use because this is in an internal server we won't be using Adi gateway and we won't be using any public certificates so click on Remote Desktop Services we'll just wait for this to check the config and give us an overview of what's installed okay so now we can let me just close this a sec okay so now we can see what's been installed and configured automatically and as you can see Adi Adi gateway isn't configured and Adi licensing isn't configured so click Adi licensed in click on the local server ad click next and this will install the licensing service so yes so we want to click Add this doesn't take too long okay and as you can see it's installed it's quite quick that's what we're going to do we're close this will give it a reboot quick just in case it asks and I'll pause the vid so one sec okay so the server's rebooted after we install in the Adi licensing server so let's go back the server manager and we want to wait for it to check the server and then we're going to click on the remote desktop services again and check the overview before we proceed okay so if we click on remote desktop services and wait for us to show us the overview again okay so here's our overview so if we just scroll down now wait for it to check the config and as you can see everything is configured apart from Adi gateway like I said we won't be configuring this this server is going to be used internally so we're going to be setting up a self-signed cert and yeah it's just going to be used on the domain so click licensee click on tasks and you want to go to edit deployment properties now there's a D gateway like I say it's not going to be used so make sure this option is selected our D licensing now depending on your licensing model depends on how you configure this we're using it on per user and our local server has been selected so click apply and now we want to click on certificates now we need to generate a self-signed certificate for each one of these so what would do yes we know but updates good old windows so I need to run PowerShell from an administrative prompt so so right click run as administrator and there's two commands we need to run so I've got these saved okay so the first one this is the name of the server so I was server in this instance is called a d1 so we're going to copy this text out I'm going to paste it in and press Enter that's the first command runs successfully now this password here this can be whatever you want it to be it's fine and this is why you need to run and this is going to be the password for the self-signed cert so we're going to paste that in there and press ENTER now the cert has been generated and the name of the cert is going to be a do one so we'll minimize this will click cancel for now and I'm going to run an MMC so run MMC and what we want to do we'll expand this and we want to add the certificate snap-in so selects difficult click add and we want to do computer account and click Next it's the local computer we're running on click finish and click OK now if I can just expand this a bit so you want to drill down till you see personal then certificate and there is the name of the certificate we've just generated so now we need to export this so right click all tasks and you want to export follow the wizard click Next and yes we do want to export the private key click Next click Next and we want to enter a password so the password is the one we entered in here so if I undo in fact why not just close that and open it back up it'll be easier okay so here's our password we have saved and if I put that in twice providing this the right one it allow us to export file name we're going to save it in my documents and we're going to call it a DP 0 1 and click Save and next and finish there you go our export is fine now we can close the MMC card at console and no you don't want to save any changes now ID license in click on tasks edit deployment and we need to go to certificates so as you can see it's not configured so we're going to select an existing certificate let me just drag this up a bit and we want to browse and there's that the certificate we exported it so click open enter password and allow certificate to be added to the trusted root certificate authority store on the destination computers you can also deploy this via group policy to the main join machines and you won't get the third error so we're going to click OK and as you can see this is ready to apply so we're going to click apply and success and we're going to repeat the process for the other to paste in check the box click OK and apply and finally the last one put the password in check the box ok apply so I was cert is all ready to use now we need to add license into our server so I've rebooted the server now we need to activate the server and this is where you would install any licensing as well and there will be a configuration error which we need to correct so if we click on stat go to Windows administrative tools and there's the little pop-up telling us it's not licensed and we have 114 days left by default this is 120 let me just close that little pop-up and the first part of this video I made a few days ago hence why we're a few days out so click on Remote Desktop Services and click on Remote Desktop Licensing Manager now if I close that window and maximize this you'll see we do indeed have an error so if we click reveal and just like I said this server isn't a member of the Terminal Server light licensing server group in Active Directory so providing your domain admin rights which we do that's why we've logged on with click add the group continue it's been added to the group updated is so we're fine so the next thing we need to do now is activate the server so right click activate server for this you will need internet access you can do it over the phone if you don't but it's a lot easier if you just do it online so click Next we're going for an automatic recommended yes we know click Next and this is where you don't there's some information so we're going to just put full stops and I'm going to select the UK and I'm going to click Next this is where you'd enter your support information if it's for a big company if you've got a support agreement in place so we don't and it's optional anyway so we're just going to click Next and if I take this take away you'll be able to see the server is indeed activated and we have 114 days left and we can use it as we wish after 114 days is gone this server will stop working so you need to license it to add licensing I can show you but obviously we don't have any license impacts so install licenses click Next and this is where you choose if you've bought a license in pack this is the normal one you see here you would buy that you would open it up it would give you a code you enter the code in there you follow it through Next Next Next and it adds the licenses to the server you will be asked if you can do it in user or device mode I can take you through some steps but it won't activate so if I just say I have service provider agreement and I click Next now this is not going to work but it would if you add the right keys 1 2 3 4 5 6 7 8 this would be your agreement number you'd click Next one sec let me just close that and this would be your prada version so we're running 2016 so why not we'll just use those license type now if you have one remote desktop server and it's only got one server in it I would do per user you don't want to do it per device so you'd click per user you'd enter the amounts of 25 for argument's sake you click Next and provide in the information you've entered is crap you will activate and it will add delight the licenses to the server so I'm going to just click cancel a sec when they activate you'll see a new line like this underneath and it will tell you what license type and how many and how many issued so that's that then when you reboot the server the licenses will be a slide and that's it sometimes you do get an error with licensing on these servers so what I'm going to do is show you how to use group policy so this server looks at itself for the licensing because sometimes it just doesn't work so now I'm going to show you how to create a group policy and assign it to that particular server in question which is a DPO one and you security filter in and disable the use of configuration side of the policy so click on start we're going to go to windows Administrative Tools we're going to open group policy management expand group policy objects right click and create new and we're going to call this our DP 0 1 and click OK select the policy remove authenticated users and now add the server you want to use and apply the settings to so what we've done there we've just selected computers because we're going to do it on the computer configuration side of group policy and in here we're going to put our DP 0 1 click check names let's find the server that's great now we're going to edit the policy let me just expand this so you can see and we're going to go to Administrative Tools sorry administrative templates windows components and you're looking for Remote Desktop Services here we are now under you we're going to be looking for the session host here it is and under year we're going to be looking for licensing so we want to set it to use the specified remote desktop servers as you know the service called IDP o1 so we would put the server name you a DP 0 and click apply you can use the IP address but I'd recommend the name and we want to set the licensing mode so we're using per user so click enabled click per user click apply click OK and close Group Policy down now this is a policy it's not linked to anything so what we're going to do we're going to make a new organizational unit and we're going to call this a DP or 1 farm and we need to move our server into you so if I just close this down open Active Directory users and computers and we're going to move this to a DP o1 farm click ok open group policy backup so we know our servers in that container and we need to link this now to our policy so link to existing group policy a DP or 1 ok so if we expand that look at the settings this is fine just click OK and you can see the policies link to this organization in the active directory our server is in there and it's using the server name as a security filter one thing we need to do so if we just expand group policies if you click on details here and we're only using the computer configure configuration so user configuration settings is disabled yes so the only thing applying now is the computer side hope you enjoyed the vid don't forget to Like and subscribe and thanks for watching you

Channel: J L

Views: 12,238

Keywords: how, to, install, and, configure, remote, desktop, services, RDS, on server, 2016, 2019, activate, terminal, cals, license mode, How to install and configure Remote Desktop Services (RDS)

Id: F_9tAAwYcng

Length: 22min 30sec (1350 seconds)

Published: Thu Dec 12 2019