Single Sign On against a TS 2008 Farm

[Guest Ralph]

Hello,

 

Does the new single-sign-on feature work against a Windows Server 2008 TS

Farm ?

 

I configured the Policy to enable credential delegation and SSO works when I

enter a TS name but when I try to use the TS farm name I am prompter for my

password

I see the same behaviour for RemotApp that point to the TS Farm.

 

I just want to know whether it should work or if you should read more

carefully the documentation :-)

 

Thank you, Ralph

[Guest Ratnesh Yadav[MSFT]]

Re: Single Sign On against a TS 2008 Farm

 

Limitations when using Single Sign-on,

 

- Single Sign-On works only when connecting from a Vista or Longhorn

client machine to a Vista or Longhorn server.

- If the server you are connecting to cannot be authenticated via

Kerberos or SSL certificate, Single Sign-On will not work. You can

circumvent this restriction by enabling "Allow Default Credentials with

NTLM-only Server Authentication" policy, though I would not recommend it.

(NTLM-only Server Authentication does not confirm the server's identity.

Sending your credentials to such server is dangerous.)

- If you have saved credentials for the target machine they take

precedence over the current credentials.

- Single Sign-On works only when using domain user accounts.

(Theoretically one can make it working for local accounts as well, but this

is not an officially supported scenario.)

- If the Terminal Server connection is configured to go through a TS

Gateway server then in some cases the settings of the TS Gateway server can

override the TS Single Sign-on setting.

 

Check following blog for more info on Single Sign-on,

http://blogs.msdn.com/ts/archive/2007/04/19/how-to-enable-single-sign-on-for-my-terminal-server-connections.aspx

 

 

"Ralph" <ralph@nospam.net> wrote in message

news:uuQ3rBNmIHA.748@TK2MSFTNGP04.phx.gbl...

> Hello,

>

> Does the new single-sign-on feature work against a Windows Server 2008 TS

> Farm ?

>

> I configured the Policy to enable credential delegation and SSO works when

> I enter a TS name but when I try to use the TS farm name I am prompter for

> my password

> I see the same behaviour for RemotApp that point to the TS Farm.

>

> I just want to know whether it should work or if you should read more

> carefully the documentation :-)

>

> Thank you, Ralph

>

>

>