Security and privacy are essential when accessing remote desktops through the Internet. Thinfinity® Remote Desktop provides a reliable, state-of-the-art security that keeps the exchanged information safe.

Secure connections

All the connections to Thinfinity® Remote Desktop from the browser are performed over HTTPS. Thinfinity® Remote Desktop provides you with the means to install your own 256-bit SSL certificate.

Authentication levels

Thinfinity® Remote Desktop allows you to set different authentication levels. You can choose a simple User/Password authentication and specify your own credentials, or Active Directory authentication, which will enable you to authenticate against Windows local or domain users.

Access Profiles

The profile configuration gives you the possibility to restrict the access of different Active Directory users to different computers, thus strengthening the company's security scheme.

Thinfinity® Remote Desktop is composed of:

· a Server Machine running Thinfinity® Remote Desktop

· Thinfinity® Remote Desktop Web Client (which loads on an HTML5 browser)

Thinfinity® Remote Desktop is a secure, high-performance HTTP / WebSocket server, which serves the web pages needed to run the Thinfinity® Remote Desktop Web Client on the web browser.

When the end-user accesses the Thinfinity® Remote Desktop main page and enters the appropriate connection parameters, the Thinfinity® Remote Desktop Web Client communicates with the server, using WebSocket to start the connection to the remote-end.

If the connection fails to start using WebSocket, then Ajax will be used. This connection protocol is deprecated and will not be supported in future versions.

Once the connection is established, the server will receive RDP commands, optimize them for the web, and send the resulting data stream to the Thinfinity® Remote Desktop Web Client.

Load Balancing Architectures for Thinfinity® Remote Desktop Server:

Thinfinity® Remote Desktop can be configured in two different load balancing architectures:

· Thinfinity® Remote Desktop Load Balancer

· Thinfinity® Remote Desktop Load Balancer with a DNS for multiple brokers

Requirements:

Using Thinfinity® Remote Desktop Server, any Windows, Mac OS X, Linux, Android and iOS user can remote into a Windows desktop or work with a single Windows application.

Web Client

· OS independent

· HTML5-compliant Web Browser

- Internet Explorer 9.0, 10.0, 11.0

- Firefox 17+

- Chrome 22+

- Safari 6.0.1+

- iOS 5.1.1+

- Android 2.3, 4.0+

- Edge 38+

Server Machine

· Windows 8 32 and 64 bit

· Windows 10 32 and 64 bit

· Windows Server 2012 and 2012 R2

· Windows Server 2016

.Windows Server 2019

Thinfinity® Remote Desktop Server is a web application that allows users to access their Windows Desktops remotely from any device of their preference.

Why Thinfinity® Remote Desktop ?

1. Users can have access to all of their remote programs, documents, files, and network resources from anywhere as if they were in front of the remote machine.

2. It doesn't matter which device they have. It can be an iPhone, iPad, Android tablet, ChromeBook or any other device with a HTLM5 compliant browser.

3. In a local area network (LAN), Thinfinity® Remote Desktop Server enables secure access to any PC through a single public IP address.

Technology details:

The application takes advantage of the HTML5 technology and interoperates with almost every platform and browser.

Thinfinity® Remote Desktop Server does not require Flash, Java, ActiveX, Silverlight or any other setup on the end-user side and can be used from almost any device.

Furthermore, Thinfinity® Remote Desktop Server grants access to applications and desktops running on Windows Terminal Services. You can even remote into RDS / VDI platforms, such as session-based applications or virtual desktops.

Thanks to Thinfinity® Remote Desktop's cross-browser, cross-platform capability, Windows, Mac OS X, Linux, Android and iOS users can remote log in into Windows desktops and work with single applications through their favorite browser. The application supports Internet Explorer 9, Firefox, Chrome, Safari, and other HTML5 capable web browsers. IE8 and earlier versions may be enhanced with HTML5 features by the addition of the Chrome Frame plug-in.

See more:

Architecture

Copyright © 2020, Cybele Software, Inc. All rights reserved.

Use this section to cover the fundamental aspects of Thinfinity® Remote Desktop Server in order to get started.

You will learn to create all the necessary configuration in a simple step by step guide so that you can start enjoying the benefits of Thinfinity® Remote Desktop Server in a matter of minutes:

Find a more exhaustive reference of the available options here:

If you are upgrading from Thinfinity Remote Desktop Server 4.0, you'll have to perform the following steps :

1. Download the installer from this link:

3. Uninstall Thinfinity Remote Desktop Server 4.0.

4. Install Thinfinity Remote Desktop 5.0.

Your configuration files will be remembered after the update process.

By default this is stored in "C:\ProgramData\Cybele Software\Thinfinity\Remote Desktop Server\" and it won't be deleted when you uninstall the product.

Thinfinity® Remote Desktop Gateway listens by default on port 8443. If you see the message "Could not bind socket. Address and port are already in use" in the Thinfinity Remote Desktop Gateway Log ( by clicking on the "Show Log"), it means that you will have to use another port since this one is already in use by another application.

1. Identify a port number that is not yet in use in the computer where Thinfinity® Remote Desktop Gateway is installed.

2. Click on the binding you wish to change the port number and click on "Edit".

3. Press "Apply". Wait for a couple of minutes.

4. Verify whether Thinfinity® Remote Desktop Gateway is running in the status message.

What is Thinfinity Remote Desktop?

It's the first integrated solution to virtualize your applications, desktops, data, and access any host from a unified portal. Thinfinity delivers remote and virtual desktops to any device with an Html5 Browser anywhere

Technology details:

The application takes advantage of the HTML5 technology and interoperates with almost every platform and browser.

Thinfinity® Remote Desktop does not require Flash, Java, ActiveX, Silverlight, or any other setup on the end-user side and can be used from almost any device.

Furthermore, Thinfinity® Remote Desktop grants access to applications and desktops running on Windows Terminal Services. You can even remote into RDS / VDI platforms, such as session-based applications or virtual desktops.

Thanks to Thinfinity® Remote Desktop's cross-browser, cross-platform capability, Windows, Mac OS X, Linux, Android, and iOS users can remote login into Windows desktops and work with single applications through their favorite browser. The application supports Internet Explorer 9, Firefox, Chrome, Safari, and other HTML5 capable web browsers. IE8 and earlier versions may be enhanced with HTML5 features by the addition of the Chrome Frame plug-in.

The application administrator can set two user access security levels.

1. Application Login:

The first level provides access to users into the Thinfinity® Remote Desktop Server application.

2. Remote Desktop Credentials:

Once logged into the application, the users will have to provide the remote desktop credentials.

Now Thinfinity® Remote Desktop includes many new options and features that enhance the user experience:

New in 5.0 :

· Added support for VNC / RFB connections.

· Added support for Telnet / SSH connections.

· Integrated protection measures for DOS attacks.

· Multiple port listening for both HTTP and HTTPS redirection.

. Added support for native TOTP

And all the features from previous versions :

· 40% faster than previous version.

· Support for OpenID Connect protocol.

· Support for ForgeRock OAuth.

Once you have installed Thinfinity® Remote Desktop and connected for the first time, you can tailor it to serve your specific needs :

An RDP profile is a profile that safely connects users to their desktop and applications.

Read more:

Connecting to a remote desktop for the first time with Thinfinity® Remote Desktop is really easy:

In this help file you will find information about Thinfinity® Remote Desktop . This document is intended for administrators to set up and configure Thinfinity® Remote Desktop .

About us:

Cybele Software is a leading provider of software solutions that enable companies to extend their existing technology foundation by integrating with trend-setting technology innovations. Whether you want to improve the user interface for a mainframe application or need to enable remote Web access to Windows desktop applications, Cybele Software has a solution for you.

Since 2004, we have enabled companies to bridge the gap between cutting-edge technologies and proven client/server and mainframe systems. Our team of experienced developers strives to deliver flexible software solutions that increase the efficiency of and usability of legacy systems and data.

Cybele Software products are designed to provide the simplest implementation pathways possible, while ensuring the integrity and security of your existing environment. Our track record of delivering on these commitments is evidenced through our rapidly-expanding, global customer base.

Thinfinity® Remote Desktop is simple to deploy. All you need to do is install it on a machine that will act as an access point.

1. Download the installer from this link:

2. Execute the installer on the target machine. You will be presented with these options:

All Components

Broker and HTML5 Services

Reverse Gateway Only

3. Look for the "Thinfinity® Remote Desktop Manager" in the Start Menu.

Configuring a profile properly will allow you to take advantage of this feature and create the access scheme that suits better the company's needs.

Remember that each profile defines a single computer's desktop or application access, except for the "[any computer]" profile that gives access to all computers.

2. Press "Edit" to configure the profile and the following window will be presented:

3. First of all, type in a descriptive name for the profile in the "Name" field.

4. Specify the computer this profile will connect to. Enter the internal IP or computer name on the field Computer.

5. Set the credentials to log into the remote machine:

6. Go to the permissions tab and set up the permission preferences as follow:

(*) Thinfinity Remote Desktop supports a user changing the password at his next logon within the Thinfinity Remote Desktop web interface. Make sure to uncheck the 'Use standard browser authentication dialog' to enable this option

8. When you are done with the previous steps, press OK.

Disabling a profile will make it unavailable to all users.

If you disable a profile and later on decide to use it again, all of its settings will be kept on.

2. Select the profile you want to disable.

3. Mark the check-box located beside the profile name.

4. Observe that a "forbidden" image will be shown on the profile line.

5. Press "Apply" to save the changes.

1. Go to the Thinfinity Remote Desktop Server Manager's "Access Profile" tab.

2. Press "Add" to create a new profile and the following window will be presented:

Remember that once you remove a profile you won't be able to recover it.

2. Select the profile you want to remove.

3. Press the "Remove" button.

4. Press "Yes" on the confirmation message.

5. Press "Apply" to save the changes.

1. Open your preferred HTML5-enabled web browser in the computer where Thinfinity® Remote Desktop was installed.

You will be presented with the following screen:

3. In the 'Computer' field, enter the remote desktop IP you want to connect to.

4. Enter the Username and Password for the remote machine.

5. Press 'Connect'.

6. The remote desktop will show inside the browser and you can use it like a regular remote desktop session.

A Weblink profile is a profile that gives the users access to informed URL. These profiles will be presented along with the RDP profiles within the Web Interface.

2. Select the profile you want to modify and press "Edit" to configure the profile.

3. First of all, type in a descriptive name for the profile in the "Name" field.

4. Specify the "Web URL" you want the profile to connect to.

5. Go to the permissions tab and set up the permission preferences as follow:

(*) Thinfinity Remote Desktop supports a user changing the password at his next logon within the Thinfinity Remote Desktop web interface. Make sure to uncheck the 'Use standard browser authentication dialog' to enable this option

6. When you are done with the previous steps, press OK.

The "[+]" profile is the default profile for Thinfinity® Remote Desktop Server.

It has two special behaviors:

a. Allows access to all computers.

b. Let users choose freely their own settings at the connection moment.

Initially this profile comes with the "Allow anonymous access" option set.

If you want to grant this profile to a limited set of users and groups, follow these steps:

1. Select the [+] profile.

2. Observe that the "Remove" option is still disabled. That's because this profile can not be removed.

3. Click on the "Edit" option.

4. Uncheck the "Allow anonymous access".

5. Click on Add to select the users who will be granted with the "[+]" profile.

Disabling a profile will make it unavailable to all users.

If you disable a profile and later on decide to use it again, all of its settings will be kept on.

2. Select the profile you want to disable.

3. Mark the check-box located beside the profile name.

4. Observe that a "forbidden" image will be shown on the profile line.

5. Press "Apply" to save the changes.

1. Go to the Thinfinity Remote Desktop Server Manager's "Access Profile" tab.

2. Press "Add" to create a new profile.

3. Select the option "Web link" and the screen below will be presented.

Remember that once you remove a profile you won't be able to recover it.

2. Select the profile you want to remove.

3. Press the "Remove" button.

4. Press "Yes" on the confirmation message.

5. Press "Apply" to save the changes.

Read more:

This option enables you to tailor access profiles and let users seamlessly and safely connect their desktop, applications, weblinks, RFB/VNC and Telnet/SSH connections, using the current company's security policy.

You should use "Access Profiles" if you need to:

a. Restrict the application access with Active Directory Authentication.

b. Specify different access levels for different users and groups of users.

c. Make the users' experience faster by configuring predetermined RDP preferences for each profile.

d. Unify authentications in a Single Sign-on schema.

e. Allow external application to manage Thinfinity® Remote Desktop Server users and machine permissions through the use of a Web Service.

1. Go to the Thinfinity Remote Desktop Server Manager's "Access Profile" tab.

2. Press "Add" to create a new profile and the following window will be presented:

Disabling an RD Web Access Profile

Disabling a profile will make it unavailable to all users.

If you disable a profile and later on decide to use it again, all of its settings will be kept on.

2. Select the profile you want to disable.

3. Mark the check-box located beside the profile name.

4. Observe that a "forbidden" image will be shown on the profile line.

5. Press "Apply" to save the changes.

Configuring a profile properly will allow you to take advantage of this feature and create the access scheme that suits better the company's needs.

Remember that each profile defines a single computer's desktop or application access, except for the "[any computer]" profile that gives access to all computers.

2. Press "Edit" to configure the profile.

3. First of all, type in a descriptive name for the profile in the "Name" field.

4. Select the 'RD Web Access' Option.

5. Complete the 'RD Web URL' field with the Microsoft RD Web Access URL

6. Set the credentials to log into the remote machine:

6. Go to the permissions tab and set up the permission preferences as follow:

(*) Thinfinity Remote Desktop supports a user changing the password at his next logon within the Thinfinity Remote Desktop web interface. Make sure to uncheck the 'Use standard browser authentication dialog' to enable this option

8. When you are done with the previous steps, press OK.

Remember that once you remove a profile you won't be able to recover it.

2. Select the profile you want to remove.

3. Press the "Remove" button.

4. Press "Yes" on the confirmation message.

5. Press "Apply" to save the changes.

A VNC/RFB profile is a profile that safely connects users to a screen-sharing session.

An RD Web Access profile allows you to show Microsoft RD Web Access connections as regular Thinfinity Remote Desktop Server profiles.

Disabling a profile will make it unavailable to all users.

If you disable a profile and later on decide to use it again, all of its settings will be kept on.

2. Select the profile you want to disable.

3. Mark the check-box located beside the profile name.

4. Observe that a "forbidden" image will be shown on the profile line.

5. Press "Apply" to save the changes.

1. Go to the Thinfinity Remote Desktop Server Manager's "Access Profile" tab.

2. Press "Add" and 'VNC/RFB' to create a new profile and the following window will be presented:

Remember that once you remove a profile you won't be able to recover it.

2. Select the profile you want to remove.

3. Press the "Remove" button.

4. Press "Yes" on the confirmation message.

5. Press "Apply" to save the changes.

Configuring a profile properly will allow you to take advantage of this feature and create the access scheme that suits better the company's needs.

Remember that each profile defines a single computer's desktop or application access, except for the "[+]" profile that gives access to all computers.

2. Press "Edit" to configure the profile and the following window will be presented:

3. First of all, type in a descriptive name for the profile in the "Name" field.

4. Specify the computer this profile will connect to. Enter the internal IP or computer name on the field Computer.

5. Set the Port and Password to log into the remote machine:

6. Go to the permissions tab and set up the permission preferences as follow:

8. When you are done with the previous steps, press OK.

Configuring a profile properly will allow you to take advantage of this feature and create the access scheme that suits better the company's needs.

Remember that each profile defines a single computer's desktop or application access, except for the "[+]" profile that gives access to all computers.

2. Press "Edit" to configure the profile and the following window will be presented:

3. First of all, type in a descriptive name for the profile in the "Name" field.

4. Specify the computer this profile will connect to. Enter the internal IP or computer name on the field Computer.

5. Set the port to log into the remote machine:

bt - fix table below

6. Go to the permissions tab and set up the permission preferences as follow:

8. When you are done with the previous steps, press OK.

1. Go to the Thinfinity Remote Desktop Server Manager's "Access Profile" tab.

2. Press "Add" and "Telnet/SSH' to create a new profile and the following window will be presented:

A Telnet/SSH profile is a profile that safely connects users to a Telnet or SSH session.

Disabling a profile will make it unavailable to all users.

If you disable a profile and later on decide to use it again, all of its settings will be kept on.

2. Select the profile you want to disable.

3. Mark the check-box located beside the profile name.

4. Observe that a "forbidden" image will be shown on the profile line.

5. Press "Apply" to save the changes.

Although Thinfinity® Remote Desktop Server requires no installation on the remote desktops, you might need to enable RDP access if it is turned off.

Once the remote desktop is ready to receive RDP connections and you have set the port and authentication level in Thinfinity® Remote Desktop Server, you should be able to access it internally by typing into a web browser:

After accepting the certificate and informing the credentials you will see the Thinfinity® Remote Desktop Server main web interface:

This means that Thinfinity® Remote Desktop Server is running and you can use it within the LAN.

Remember that once you remove a profile you won't be able to recover it.

2. Select the profile you want to remove.

3. Press the "Remove" button.

4. Press "Yes" on the confirmation message.

5. Press "Apply" to save the changes.

After you verified that Thinfinity® Remote Desktop Server is running internally, you can make it available from the internet. If you have a static IP/domain, you might prefer providing internet access through your own external IP.

1. Test the access

Test the internet access by typing into a browser the following url:

or

2. Configuring the router:

Providing access to the internet through the external IP/domain, will require you to forward the port manually:

2.1. Port Forwarding:

a. Access the router by typing into a web browser the IP for the Default Gateway.

b. Authenticate with the router credentials.

c. Go to the port forwarding section and pick a port for internet access. It can be the same port number as the one Thinfinity® Remote Desktop Server is running on, or a different one.

d. Forward the internet port to the machine internal IP where you have installed Thinfinity® Remote Desktop Server and the port where it's running.

e. Save the changes.

An intermediate disk is a directory created by Thinfinity® Remote Desktop Server to keep files that users will exchange between the remote computer and the browser. This option is only available in RDP Profiles.

The intermediate files will be available to Thinfinity® Remote Desktop Server users on two places:

1) On the remote connection Windows Explorer, as a mapped drive:

Configuring an Intermediate disk is very easy:

If using Access Profiles:

1. On Thinfinity® Remote Desktop Server Manager, go to the Access Profiles tab.

2. Edit the RDP profile you want to enable the intermediate disk.

3. Open the resources tab.

4. Check the option "Enable Intermediate Disk", give a name to the disk and save the changes.

5. When you connect using this profile, look for this drive on the remote machine Windows Explorer.

If using other authentication methods:

1. On the Web Interface, open the tabbed option (plus [+] sign) and select RDP.

2. Go to the resources tab.

3. Check the option "Enable Intermediate Disk" and give a name to the disk.

4. Connect and look for the drive that was created, on the remote machine Windows Explorer.

Intermediate physical files location:

Inside the temporary folders, each user has its files kept separately from the others.

The temporary folder structure for the users John (blue), Mary (gray) and Peter(green) above would look like the image below:

A user will have access to an intermediate disk, if he/she has access to any profile associated with this disk.

When a profile is set to anonymous, all users that connect through it will also have access to the disk associated with this profile.

Thinfinity® Remote Desktop Server allows you to map remote drives that enable you to interchange files between the remote environment and the local one.

You can map remote drives using two different features:

The remote sound feature allows you to listen to the sound playing on the remote machine.

Follow the next steps to enable the remote sound on Thinfinity® Remote Desktop Server.

If you are using:

a. Access Profiles:

Enable the remote sound on Thinfinity® Remote Desktop Server Manager.

1. Go to the Access Profiles tab.

2. Edit the profile you want to enable the remote sound.

3. Go to the tab Resources.

4. Check the "Enable Sound" option.

5. The default sound quality is the "Optimal". You can also, increase the quality, by setting it up to Excellent, or make it lower, to gain performance.

6. On the Web Interface, connect to a remote machine using this profile and try to listen to any sound playing remotely.

b. Other authentication methods (none, "+" profile):

Enable sound right before connecting on the Web Interface:

1. Once on the Web Interface, open the Options (plus sign +) and open the "Resources" tab.

2. Check the option "Enable Sound".

3. Choose the quality.

4. Connect and play a remote sound, so that you can enjoy it from your preferred browser.

2. You will be presented with the following screen :

The "+" option represents the Any Computer profile: it enables the user to type the remote computer's IP and credentials, and configure the connection.

What you see depends on what is available for the authenticated user: When the Any Computer profile is the only one available, you will see that screen. If the Any Computer profile is not available, but you have access to other profiles, you will see the access profiles screen. If the authenticated user has access to both the Any Computer profile and other(s) profile(s), you will see an arrow to the right of the screen. Use it to switch between the Any Computer profile and the other(s).

3. Check the "Open in a new browser window" option, if you want the connection to be open on a new tab.

4. Connecting to an Access Profile:

A) Click on the profile you want to connect to.

B) You won't be allowed to change the computer's IP or the RDP options at this moment, because these are already set for each profile.

5. Connecting to Any Computer:

a) If you are in the access profiles page, click on the arrow to the left of the screen to go back to the Any Computer profile.

b) Enter the internal IP/host name for the computer you want to access and press connect.

c) Optionally you can specify the Username and Password so that it will be auto completed in the remote computer's dialog and stored by the browser for future access.

d) You can also change the RDP options by pressing the plus [+] sign in order to show the settings tabbed interface.

If you have already customized Thinfinity® Remote Desktop Server, check out the following sections to see how your changes will reflect on Thinfinity® Remote Desktop Server application:

Read more:

The shared folders are existing local network directories that you can map as a drive on Thinfinity® Remote Desktop Server remote connections.

Once set, they will be accessible from every connection and by all Thinfinity® Remote Desktop Server users.

Follow these steps to configure a new Shared Folder:

1. On Thinfinity® Remote Desktop Server Manager open the "Folders" tab.

2. Click on the bottom "Add" button.

3. Inform the "Network path" to be shared

4. Give a name ("Share name") to be shown on the remote mapped disks.

5. Press OK.

6. From now on, users will find this directory as a mapped drive in every Thinfinity® Remote Desktop Server connection, and also as a Remote location on the File Transfer Manager.

As you probably have realized, you can set as many Shared folders as you want and each one of them will be mapped as a different drive on the remote connection.

Sometimes you will need to access a remote desktop to connect to a single application. If you are an administrator you might also want to provide access to an application and not to the desktop.

This feature will be only available when you connect to remote desktops running on Windows server versions.

Configuring a profile to connect to an application

Connecting to an application using the Any Computer profile

a. Log in to Thinfinity® Remote Desktop Server.

b. Press the 'Options' button to show the settings tabs.

c. Go to the 'Program' tab.

e. Set up the other tabs options, if desired.

f. Press 'Connect'.

On the upper part of the screen you will see your remote files and folders. Browse to the remote location by double clicking on the folders on the right, or expanding the tree structure on the left.

In order to upload files, drag them from your local PC and paste them into the remote view area, or press the 'Browse' button.

The lower part of the screen shows the status of the files to be transferred.

Once a connection is established you have the possibility to perform File Transfers operations between the remote machine and the local computer:

1. Click on the connection middle top arrow, and the toolbar will be presented.

3. This is the screen where you can manage files and also transfer them.

Right click on a remote file to access these options:

Find the behaviour for each one of these options below:

Downloading and Uploading files

Downloading remote files:

1. Connect to the remote machine.

3. Open the "File Transfer" Manager from the upper connection toolbar.

4. Download the remote file to any local directory of your preference.

Uploading local files:

1. Connect to the remote machine.

2. Open the "File Transfer" Manager from the upper connection toolbar.

4. Go back to the connection screen and open the remote machine Windows Explorer.

Right click on the blank remote folder area any time to access the following options:

Find the behaviour for each one of these options below:

The supported shortcut keys in Thinfinity® Remote Desktop Server are the same as in regular RDP. Here is a list of the shortcut keys:

ALT+PAGE UP: Switches between programs from left to right.

ALT+PAGE DOWN: Switches between programs from right to left.

ALT+INSERT: Cycles through the programs using the order in which they were started.

ALT+HOME: Displays the Start menu.

CTRL+ALT+BREAK: Switches the client between full-screen mode and window mode.

CTRL+ALT+END: Brings up the Windows Security dialog box.

ALT+DELETE: Displays the Windows menu.

CTRL+ALT+MINUS SIGN (-): Places a snapshot of the active window, within the client, on the Remote Desktop Session Host (RD Session Host) server clipboard (provides the same functionality as pressing ALT+PRINT SCREEN on the local computer).

CTRL+ALT+PLUS SIGN (+): Places a snapshot of the entire client windows area on the RD Session Host server clipboard (provides the same functionality as pressing PRINT SCREEN on the local computer).

Thinfinity® Remote Desktop Manager

The Thinfinity® Remote Desktop Manager is a tool for administrators to set up general settings.

You can manage users, profiles, RDP preferences and settings related to the Thinfinity® Remote Desktop Server service.

To access the Thinfinity® Remote Desktop manager go over the Start Menu options and look for the "Thinfinity RDP Manager" item.

The Thinfinity® Remote Desktop Manager interface is composed by the following tabs:

The Thinfinity® Remote Desktop Manager main menu consists of two sub-menus:

The File Menu:

The File Menu is composed by the following options:

The Help Menu:

The Help Menu is composed by the following options:

In the Thinfinity® Remote Desktop Server manager 'General' tab you will find the following options:

Always remember to press 'Apply' in order to save the changes.

In the Thinfinity® Remote Desktop Server manager 'Broker' tab you will find the following options:

Thinfinity® Remote Desktop Server authentication can be integrated with Google OAuth 2.0 or a custom OAuth 2.0 server. Version 4.0 has added support for OpenID Protocol as well.

Read more:

In the Thinfinity® Remote Desktop Server manager "Authentication" tab you will find the following options:

Always remember to press "Apply" in order to save the changes.

In a multi-application Single-Sign-On environment users log in once into one application and gain access to all the other applications without being prompted to log in again for each of them.

Choose between Oauth/2, RADIUS, DUO or SAML using the "Add" button on the Authentication tab.

Read more:

In the 'OAuth/2' - 'Settings' section of the Thinfinity® Remote Desktop Server manager 'Authentication' tab, you will find the following options:

General tab

Server tab

In the 'OAuth/2' - 'Methods' section of the Thinfinity® Remote Desktop Server manager , you will find the following options:

Built-in configurations for OAuth 2.0 :

· Google

· Facebook

· LinkedIn

· Azure

· Dropbox

· Forgerock

Always remember to press "Apply" in order to save the changes.

Read more:

In the 'OAuth/2' - 'Mappings' section of the Thinfinity® Remote Desktop Server manager 'Authentication' tab, you will link your OAuth/2 users to Active Directory users or groups. In this way, you tell Thinfinity Remote Desktop Server that users that authenticate with certain OAuth/2 user are to be shown certain profiles, the profiles that are available for the Active Directory user(s)/group(s) you selected to link them with. That is, to complete this process you have to link the Active Directory user(s)/group in this tab to the Active Directory user(s)/group of the profile you want to enable for a certain OAuth/2 user.

The 'Mappings' tab can be organized in two different ways. By pressing the 'Switch base' button, you select whether you prefer to see a list of Remote Usernames above, that you will map with the Associated User(s)/Group(s) Access below, or a list of Associated User(s)/Group(s) Access that you will map with the Remote Username list below. This doesn't change the way it works, only the way it is shown. You might want to think that a certain remote username has several Active Directory groups it's associated with and thus choose to see the remote users above, or you might prefer to see, for example, a list of Active Directory users and link each of them with several remote users. You can try, and even go back and forth as you add users and decide which way works best for you. Switching the base doesn't change the users and their mapping.

In the credentials tab, you will find the following options :

Always remember to press "Apply" in order to save the changes.

How to set up multifactor authentication to your environment or virtualized application.

In this quick tutorial, we will show how to properly configure Okta OAuth 2.0 for Thinfinity Remote Desktop Server and Thinfinity VirtualUI.

1) Navigate to your Okta space, go to the Applications tab, and create a new application using the “Create New App” button :

2) Select OpenID Connect as the Authentication Method :

3) Give the application a name, and type in the URL you use to reach Thinfinity. Then press “Save”.

4) You should be redirected to the Application Settings. In here, press the “General” button, and edit the “Login information”.

Configure the “Initiate login URI” field, by adding the Thinfinity’s website address and “/Okta” at the end of the URL.

5) Copy and past both Client ID and Client Secret for future references :

6) Click on the “Assignments” tab and add your users to the Application :

7) Now , open either the Thinfinity Remote Desktop Server Manager or the Thinfinity VirtualUI Manager and navigate to the “Authentication” tab. Click on OAuth 2.0 and choose “Other”.

8) Enter your Client ID and Client Secret :

9) Click on the “Server” tab and add the following parameters :

Authorization URL: https://[MyOktaSpace].okta.com/oauth2/v1/authorize

Parameters: scope=openid+profile&state=okta

Token Validation Server URL: https://[MyOktaSpace].okta.com/oauth2/v1/token

Profile Information Server URL: https://[MyOktaSpace].okta.com/oauth2/v1/userinfo

Login username value in returned Json: preferred_username

You’ll also need to change the name of the Authentication Method to “Okta” ( Or to the URL you configure in the Initiate Login URI )

Press “OK” after you finish configuring the Authentication Method

10) Click on the “Mappings” tab and then press “Add” under the Authentication ID Mask.

Add the email address of the Okta user you want to validate and press “Ok”.

Then, under the “Associated Permissions” field, press on the “Add” button and search for the Active Directory User

After you add the appropriate mappings, click on the “Apply” button.

11) Navigate to the Thinfinity’s landing page, and you should see the “Login With Okta” option listed as an Authentication Method.

This tutorial will show you how to enable 2FA using Auth0 with Thinfinity VirtualUI .

Auth0 Guardian mobile application is required for 2FA.

1) Create a new application on Auth0’s administrator site, and chose “Single Page Web Application”

2) Copy your Client ID and Client Secret :

3) In the “Allowed Callback URL” , you need to add the URL that you are going to use to authenticate, and the VirtualPath of the Authentication Method ( OAuth by default )

4) To enable 2FA , click on the “Multifactor Auth” and enable “Push Notifications” :

5) Open the Thinfinity VirtualUI Server manager , navigate to the authentication tab , press “Add” -> ”OAuth2.0” -> ”Other”.

6) Add the following information :

This information can be verified in the “Endpoints” tab under Advanced Settings in the Application you created on Auth0’s interface.

Click on “OK” after you entered the information.

7) Click on the “Mappings” tab and then press “Add” under the Authentication ID Mask.

Add the email address of the Auth0 user you want to validate and press “Ok”.

Then, under the “Associated Permissions” field, press on the “Add” button and search for the Active Directory User

After you add the appropriate mappings, click on the “Apply” button.

8) Navigate to the Thinfinity’s landing page, and you should see the “Login With OAuth” option listed as an Authentication Method.

In the 'RADIUS' - 'Basic' section of the Thinfinity® Remote Desktop Server manager 'Authentication' tab, you will find the following options:

Thinfinity® Remote Desktop Server authentication can be integrated with a RADIUS account. On the links below you will find the information to set up Thinfinity® Remote Desktop Server to work with this.

Read more:

In the 'RADIUS' - 'Mapping' section of the Thinfinity® Remote Desktop Server manager 'SSO' tab, you will link your RADIUS users to Active Directory users or groups. In this way, you tell Thinfinity® Remote Desktop Server that users that authenticate with certain RADIUS users are to be shown certain profiles, the profiles that are available for the Active Directory user(s)/group(s) you selected to link them with. That is, to complete this process you have to link the Active Directory user(s)/group in this tab to the Active Directory user(s)/group of the profile you want to enable for a certain RADIUS user.

The 'Mapping' tab can be shown in two different ways to ease your mapping process. By pressing the 'Switch base' button, you select whether you prefer to see a list of Remote Usernames above, that you will map with the Associated User(s)/Group(s) Access below, or a list of Associated User(s)/Group(s) Access that you will map with the Remote Username list below. This doesn't change the way it works, only the way it is shown. You might want to think that a certain remote username has several Active Directory groups it's associated with and thus choose to see the remote users above, or you might prefer to see, for example, a list of Active Directory users and link each of them with several. You can try, and even go back and forth as you add users and decide which way works best for you. Switching the base doesn't change the users and their mapping.

In the credentials tab, you will find the following options :

Always remember to press "Apply" in order to save the changes.

Thinfinity® Remote Desktop Server authentication can be integrated with a TOTP (Time-based One-time Password) app. On the link below you will find the information to set up Thinfinity® Remote Desktop Server to work with this.

In the '2FA' section of the Thinfinity® Remote Desktop Server manager 'Authentication' tab, you will find the following options:

In the Thinfinity® Remote Desktop Server profiles editor "General" tab you will find these following options:

Credentials

Choose the credentials for logging into the specified computer:

See also, the credentials behavior when using the One-Time-URL.

The Profile Editor is the tool to create, configure and edit Thinfinity® Remote Desktop Server Access Profiles.

The first thing you have to consider is if you want to create an RDP Profile, a Web Link profile or an RD Web Access Profile.

These options are represented by the 'RDP Profile'/'Web Link'/'RD Web Access' radio button.

- An RDP Profile: is a Thinfinity® Remote Desktop Server connection to a machine or an application.

This is the RDP Profile Editor General tab view:

These are the profile properties you can edit:

The properties located inside the tabs will be described throughout the next subtopics.

You will find the following options in the "Access Profiles" tab:

In the Thinfinity® Remote Desktop Server manager "Access Profile" tab you will find the following options:

Always remember to press "Apply" in order to save the changes.

Read More:

When you can't access your Hyper-V Virtual Machine through a direct IP address or computer name, or you want to protect this virtual machine location, you can use the Hyper-V GUID to locate the virtual machine inside a Hyper-V Server.

Follow the next steps and learn how to configure a Hyper-V profile:

1. Add a new profile.

2. On the profile Computer field, inform the Hyper-V Server name or IP address.

3. Check the option "Connect to a Hyper-V" Virtual Machine.

4. Complete the 'Credentials', necessary to authenticate against the Hyper-V Virtual Machine.

5. If you know the Virtual Machine ID (GUID), you can inform it on the field "Virtual machine id" and skip step 6.

6. If you don't know the Virtual Machine GUID, click on the "Browse" button and a search dialog will be presented:

6a. Click on the Connect button and the list of virtual machines located on the Informed Hyper-V Server will be presented.

6b. If the Hyper-V Server requires authentication you can enter the credentials on the "Use these credentials" box, and the press Connect.

6c. Once the Collection is selected you can double-click on it or click on the OK button.

6d. The virtual machine GUID will be set on the correspondent field.

8. Once you are done configuring the profile, press 'OK' and then 'Apply'.

In the Thinfinity® Remote Desktop Server profiles editor "Display" tab you will find the following options:

When you need to connect to an RDS Collection Virtual machine (pooled or personal), you should set this option.

Follow the next steps and learn how to configure an RDS Collection profile:

1. Add a new profile.

2. On the profile Computer, inform the RDS server name or IP address.

3. Check the option "Connect to a Virtual Desktop on an RDS Collection".

4. Complete the 'Credentials' fields to authenticate against the virtual machine.

5. If you know the URL to the Terminal Service VM Host Agent (the URL follows this format tsv://VMResource.1.RD_Collection_Sa), you can inform it on the 'TSV URL' field and skip the next step.

6. If you don't know the TSV URL, click on the 'Browse' button and the following search dialog will be presented:

6a. Select whether you want to search for Personal or Pooled Virtual Desktop Collections.

6b. Click on the Connect button. If necessary, inform the credentials to authenticate against the RDS Server.

6c. The Collections found on the server will be presented on the bottom list. Select the one you want to create a profile for.

6d. Once the Collection is selected you can double-click on it or click on the OK button.

6e. The TSV URL will be set on the correspondent field.

8. Once you are done configuring the profile, press the OK button and then Apply the changes.

In the Thinfinity® Remote Desktop Server profiles editor "Resources" tab you will find the following options:

The Thinfinity.RemoteDesktop.Server.ini configuration file location depends on the Windows version Thinfinity® Remote Desktop Server is running at:

C:\ProgramData\Cybele Software\Thinfinity\Remote Desktop Server\Thinfinity.RemoteDesktop.Server.ini

or

C:\Documents and Settings\All Users\Application Data\Cybele Software\Thinfinity\Remote Desktop Server\Thinfinity.RemoteDesktop.Server.ini (older Windows versions)

Inside the ini file, create an [AutoDownload] section and use the 'Exclusion' key with the values that you want to exclude using Glob Expression Syntax (standard DOS mode), separated by the "|" char. You can also use the regular expression notation to indicate which files to exclude, except for the single pipe character, which is reserved for Thinfinity® Remote Desktop Server to notice separation between exclusion rules. Use the double pipe character, instead, within the regex for the "or" operator.

Take a look at the following example. Notice the use of ":" at the beginning of the jpg exclusion rule and the double pipe to note that files starting with the letter a or the letter b will be excluded.

In the Thinfinity® Remote Desktop Server profiles editor 'Program' tab you will find the following options:

All of these options enhance the look of the remote desktop and use more bandwidth.

On this tab you can configure the Thinfinity® Remote Desktop Server PDF Printer.

These are the options you will find in the Thinfinity® Remote Desktop Server profiles editor "Printer" tab:

In this tab you can configure the connection to open a specific application. The "Do nothing" option is selected by default. This option will show the whole remote desktop.

Start a Program option:

If you want to set a specific application to start with the connection, select the "Start a Program" option.

Once you close the program, the remote session will get disconnected.

This feature is only available within Windows Server versions.

When the "Start a Program" option is selected, you will be presented with the following options:

Launch RemoteApp:

The RemoteApp is a Terminal Services feature that allows Windows®-based application publishing. You can connect to an application using RemoteApp through Thinfinity® Remote Desktop Server, by selecting the "Launch RemoteApp" on the Program tab.

This feature is only available within Windows Server versions.

When the "Execute as RemoteApp" option is selected, you will be presented with the following options:

In the Thinfinity® Remote Desktop Server profiles editor "Advanced" tab will find the following options:

Select the users that will access this profile. If you don't select any users, this profile will not be accessed.

These are the options you will find in the Thinfinity® Remote Desktop Server profiles editor 'Permissions' tab:

If you want a user or a user group to access more than one computer, you need to create more profiles and then add this user to each profile.

The authenticated user will be able to choose which one of the available profiles to connect.

Read more:

In the Thinfinity Remote Desktop Server Profile Editor 'Authentication Methods' tab, you can define which application will be available after authenticating to Thinfinity.

The Authentication Methods available in the list are those configured in the 'Authentication' tab of the Thinfinity Remote Desktop Server Manager.

In the Thinfinity Remote Desktop Server Profile Editor 'Restrictions' tab, you can white list or black list the IP addresses which are allowed to connect to the configured application.

Access Hours

In the Thinfinity Remote Desktop Server Profile Editor 'Access Hours' tab, you can define the day and time your application will be available to your users.

The Web Link Profile Editor is the tool to create, configure and edit Thinfinity® Remote Desktop Server Web Links.

The first thing you have to consider is if you want to create an RDP Profile, a Web Link profile or an RD Web Access Profile.

These options are represented by the 'RDP Profile'/'Web Link'/'RD Web Access' radio button.

- A Web Link profile: is a link to an external website of your choice, which will be presented along with the profiles to the user.

These are the profile properties you can edit:

The properties located inside the tabs will be described throughout the next subtopics.

In the Thinfinity® Remote Desktop Server Web Link Profile Editor "Web Link" tab you will find the following options:

Select the users that will be allowed to access this profile. If you don't select any users, this profile will not be accessed.

These are the options you will find on the Thinfinity® Remote Desktop Server's profiles editor 'Permissions' tab:

If you want a user or a user group to access more than one computer, you need to create more profiles and then add this user to each profile.

The authenticated user will be able to from the available profiles.

The RD Web Access Editor is the tool to create, configure and edit Thinfinity® Remote Desktop Server RD Web Access.

The first thing you have to consider is if you want to create an RDP Profile, a Web Link profile or an RD Web Access Profile.

These options are represented by the 'RDP Profile'/'Web Link'/'RD Web Access' radio button.

- An RD Web Access: is an administrator profile to populate Microsoft RD Web Access remote apps and desktops links in the user view.

These are the profile properties you can edit:

The properties located inside the tabs will be described throughout the next subtopics.

In the Thinfinity® Remote Desktop Server RD Web Access Editor 'General' tab you will find the following options:

Permissions

Select the users that will access the connections in this computer's RD Web Access. If you don't select any users, those connections will not be accessed.

These are the options you will find in the Thinfinity® Remote Desktop Server RD Web Access editor 'Permissions' tab:

VNC / RFB Profile Editor

The Profile Editor is the tool to create, configure and edit Thinfinity® Remote Desktop Server Access Profiles.

This sections explains the VNC / RFB Profile Editor.

This is the VNC / RFB Profile Editor General tab view:

These are the profile properties you can edit:

The properties located inside the tabs will be described throughout the next subtopics.

In the Thinfinity® Remote Desktop Server profiles editor "Display" tab you will find the following options:

bt - ask Hernan can these links be removed

Read More:

Select the users that will access this profile. If you don't select any users, this profile will not be accessed.

These are the options you will find in the Thinfinity® Remote Desktop Server profiles editor 'Permissions' tab:

If you want a user or a user group to access more than one computer, you need to create more profiles and then add this user to each profile.

The authenticated user will be able to choose which one of the available profiles to connect.

Read more:

In the Thinfinity Remote Desktop Server Profile Editor 'Access Hours' tab, you can define the day and time your application will be available to your users.

bt - Ask Hernan - The links below are pointing to sections in RDP Profile Editor subsections

Read more:

· Display

· Resources

· Program

· Experience

· Advanced

· Printer

· Permissions

In the Thinfinity Remote Desktop Server Profile Editor 'Restrictions' tab, you can white list or black list the IP addresses which are allowed to connect to the configured application.

bt - Ask Hernan - The links below are pointing to sections in RDP Profile Editor subsections

Read more:

· Display

· Resources

· Program

· Experience

· Advanced

· Printer

· Permissions