Hi,
I have set up a Windows Server 2016 RDS environment which is as follows:
1 RD Gateway Server (RDGW1)
1 RD Web Server (RDWeb1)
5 RD Session Hosts (RDS1 to 5)
1 RD Broker (RDBroker1) - also does licensing.
gateway url is: gateway.domain.com which points internally and externally to the RDGW1 server.
The RD gateway and RD Web servers are in the DMZ.
We now want to implement Azure MFA using the NPS Extension as described here: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-nps-extension-rdg
To minimize impact, I set up another Gateway server in the DMZ called RDGW2, along with an NPS server in the LAN (NPS1). Following the documentation linked to above, I was able to successfully set this up.
To test, I have downloaded the RDP icon from the RDWeb page and edited it to direct via RDGW2 rather than RDGW1. I also created an External DNS entry for gateway2.domain.com pointing to the WAN IP for RDGW2. This works fine from outside of the network and I get MFA prompts and can see connections going through RDGW2.
I now need to publish 2 RDP shortcuts. One would be using the old non MFA gateway (RDGW1) - this is already there. The second would be the edited RDP Shortcut that uses the new MFA configured Gateway (RDGW2).
Is there any way I can publish the second RDP icon? Perhaps by editing the relevant web page or locating where the original icon is located? Publishing via RemoteApp is not an option. The reason for having both is to provide a transition environment and possible future DR environment (in case there are issues with Azure).
Thanks,