Setting the Access Security Level
The application administrator can set two user access security levels.
1. Application Login:
The first level provides access to users into the Thinfinity® Remote Desktop Server application.
2. Remote Desktop Credentials:
Once logged into the application, the users will have to provide the remote desktop credentials.
You can only set default options for this security level when using Access Profiles.
Access Profiles
This option enables you to tailor access profiles and let users seamlessly and safely connect their desktop, applications, weblinks, RFB/VNC and Telnet/SSH connections, using the current company's security policy.
You should use "Access Profiles" if you need to:
a. Restrict the application access with Active Directory Authentication.
b. Specify different access levels for different users and groups of users.
c. Make the users' experience faster by configuring predetermined RDP preferences for each profile.
d. Unify authentications in a Single Sign-on schema.
e. Allow external application to manage Thinfinity® Remote Desktop Server users and machine permissions through the use of a Web Service.
RDP Profiles
An RDP profile is a profile that safely connects users to their desktop and applications.
Read more:
Creating an RDP Profile
1. Go to the Thinfinity Remote Desktop Server Manager's "Access Profile" tab.
2. Press "Add" to create a new profile and the following window will be presented:
3. Read the next topic (Edit a profile) to learn how to configure this profile.
Editing an RDP Profile
Configuring a profile properly will allow you to take advantage of this feature and create the access scheme that suits better the company's needs.
Remember that each profile defines a single computer's desktop or application access, except for the "[any computer]" profile that gives access to all computers.
1. Go to Thinfinity® Remote Desktop Server Manager's "Access Profile" tab. If it is not there, read the topic Access Profiles first.
2. Press "Edit" to configure the profile and the following window will be presented:
3. First of all, type in a descriptive name for the profile in the "Name" field.
4. Specify the computer this profile will connect to. Enter the internal IP or computer name on the field Computer.
5. Set the credentials to log into the remote machine:
OPTION
DESCRIPTION
Use the authenticated credentials
Sets a Single sign-on schema. The application credentials will be used to log in automatically on the remote desktop.
Ask for new credentials
Prompt the user for new credentials to access the remote desktop.
Use these credentials
If the credentials informed here are correct, this option will connect the user automatically to the remote desktop on selecting the profile, or after authenticating on Thinfinity® Remote Desktop Server, if this is the only profile the user have.
6. Go to the permissions tab and set up the permission preferences as follow:
OPTION
DESCRIPTION
Allow anonymous access
Use this option, if you want this profile to be available for everyone. This means that everybody accessing Thinfinity® Remote Desktop Server will see this profile. Checking this option will disable the user
Group or users access
To use specific users for this profile, uncheck "Allow anonymous access", press "Add" and choose the users and groups from the local domain.
This means that only users that authenticate with their correct Windows username and password will be able to use this profile. (*)
(*) Thinfinity Remote Desktop supports a user changing the password at his next logon within the Thinfinity Remote Desktop web interface. Make sure to uncheck the 'Use standard browser authentication dialog' to enable this option
7. You may want to configure other settings for the RDP connection. If so, check out the available options on Display, Program, Experience, Advanced and Printer.
8. When you are done with the previous steps, press OK.
Disabling an RDP Profile
Disabling a profile will make it unavailable to all users.
If you disable a profile and later on decide to use it again, all of its settings will be kept on.
1. Go to Thinfinity® Remote Desktop Server Manager's "Access Profile" tab. If it is not there, read the Access Profiles topic first.
2. Select the profile you want to disable.
3. Mark the check-box located beside the profile name.
4. Observe that a "forbidden" image will be shown on the profile line.
5. Press "Apply" to save the changes.
Removing an RDP Profile
Remember that once you remove a profile you won't be able to recover it.
1. Go to Thinfinity® Remote Desktop Server Manager's "Access Profile" tab. If it is not there, read the topic Access Profiles first.
2. Select the profile you want to remove.
3. Press the "Remove" button.
4. Press "Yes" on the confirmation message.
5. Press "Apply" to save the changes.
The "[+]" Profile
The "[+]" profile is the default profile for Thinfinity® Remote Desktop Server.
It has two special behaviors:
a. Allows access to all computers.
b. Let users choose freely their own settings at the connection moment.
Initially this profile comes with the "Allow anonymous access" option set.
If you want to grant this profile to a limited set of users and groups, follow these steps:
1. Select the [+] profile.
2. Observe that the "Remove" option is still disabled. That's because this profile can not be removed.
3. Click on the "Edit" option.
4. Uncheck the "Allow anonymous access".
5. Click on Add to select the users who will be granted with the "[+]" profile.
Weblink Profiles
A Weblink profile is a profile that gives the users access to informed URL. These profiles will be presented along with the RDP profiles within the Web Interface.
Creating a Weblink Profile
1. Go to the Thinfinity Remote Desktop Server Manager's "Access Profile" tab.
2. Press "Add" to create a new profile.
3. Select the option "Web link" and the screen below will be presented.
3. Read the next topic (Edit a profile) to learn how to configure this profile.
Editing a Weblink Profile
1. Go to Thinfinity® Remote Desktop Server Manager's "Access Profile" tab. If it is not there, read the topic Access Profiles first.
2. Select the profile you want to modify and press "Edit" to configure the profile.
3. First of all, type in a descriptive name for the profile in the "Name" field.
4. Specify the "Web URL" you want the profile to connect to.
5. Go to the permissions tab and set up the permission preferences as follow:
OPTION
DESCRIPTION
Allow anonymous access
Use this option, if you want this profile to be available for everyone. This means that everybody accessing Thinfinity® Remote Desktop Server will see this profile. Checking this option will disable the user selection.
Group or users accesss
To use specific users for this profile, uncheck "Allow anonymous access", press "Add" and choose the users and groups from the local domain.
This means that only users that authenticate with their correct Windows username and password will be able to use this profile.(*)
(*) Thinfinity Remote Desktop supports a user changing the password at his next logon within the Thinfinity Remote Desktop web interface. Make sure to uncheck the 'Use standard browser authentication dialog' to enable this option
6. When you are done with the previous steps, press OK.
Disabling a Weblink Profile
Disabling a profile will make it unavailable to all users.
If you disable a profile and later on decide to use it again, all of its settings will be kept on.
1. Go to Thinfinity® Remote Desktop Server Manager's "Access Profile" tab. If it is not there, read the Access Profiles topic first.
2. Select the profile you want to disable.
3. Mark the check-box located beside the profile name.
4. Observe that a "forbidden" image will be shown on the profile line.
5. Press "Apply" to save the changes.
Removing a Weblink Profile
Remember that once you remove a profile you won't be able to recover it.
1. Go to Thinfinity® Remote Desktop Server Manager's "Access Profile" tab. If it is not there, read the topic Access Profiles first.
2. Select the profile you want to remove.
3. Press the "Remove" button.
4. Press "Yes" on the confirmation message.
5. Press "Apply" to save the changes.
Read more:
RD Web Access Profiles
An RD Web Access profile allows you to show Microsoft RD Web Access connections as regular Thinfinity Remote Desktop Server profiles.
Creating a RD Web Access Profile
Editing a RD Web Access Profile
Disabling a RD Web Access Profile
Removing a RD Web Access Profile
Creating a RD Web Access Profile
1. Go to the Thinfinity Remote Desktop Server Manager's "Access Profile" tab.
2. Press "Add" to create a new profile and the following window will be presented:
3. Read the next topic (Edit a profile) to learn how to configure this profile.
Editing a RD Web Access Profile
Configuring a profile properly will allow you to take advantage of this feature and create the access scheme that suits better the company's needs.
Remember that each profile defines a single computer's desktop or application access, except for the "[any computer]" profile that gives access to all computers.
1. Go to Thinfinity® Remote Desktop Server Manager's "Access Profile" tab. If it is not there, read the topic Access Profiles first.
2. Press "Edit" to configure the profile.
3. First of all, type in a descriptive name for the profile in the "Name" field.
4. Select the 'RD Web Access' Option.
5. Complete the 'RD Web URL' field with the Microsoft RD Web Access URL
6. Set the credentials to log into the remote machine:
OPTION
DESCRIPTION
Use the authenticated credentials
Sets a Single sign-on schema. The application credentials will be used to log in automatically on the remote desktop.
Ask for new credentials
Prompt the user for new credentials to access the remote desktop.
Use these credentials
If the credentials informed here are correct, this option will connect the user automatically to the remote desktop on selecting the profile, or after authenticating on Thinfinity® Remote Desktop Server, if this is the only profile the user have.
6. Go to the permissions tab and set up the permission preferences as follow:
OPTION
DESCRIPTION
Allow anonymous access
Use this option, if you want this profile to be available for everyone. This means that everybody accessing Thinfinity® Remote Desktop Server will see this profile. Checking this option will disable the user selection.
Group or users accesss
To use specific users for this profile, uncheck "Allow anonymous access", press "Add" and choose the users and groups from the local domain.
This means that only users that authenticate with their correct Windows username and password will be able to use this profile.(*)
(*) Thinfinity Remote Desktop supports a user changing the password at his next logon within the Thinfinity Remote Desktop web interface. Make sure to uncheck the 'Use standard browser authentication dialog' to enable this option
7. You may want to configure other settings for the RDP connection. If so, check out the available options on Display, Program, Experience, Advanced and Printer.
8. When you are done with the previous steps, press OK.
Disabling a RD Web Access Profile
Disabling an RD Web Access Profile
Disabling a profile will make it unavailable to all users.
If you disable a profile and later on decide to use it again, all of its settings will be kept on.
1. Go to Thinfinity® Remote Desktop Server Manager's "Access Profile" tab. If it is not there, read the Access Profiles topic first.
2. Select the profile you want to disable.
3. Mark the check-box located beside the profile name.
4. Observe that a "forbidden" image will be shown on the profile line.
5. Press "Apply" to save the changes.
Removing a RD Web Access Profile
Remember that once you remove a profile you won't be able to recover it.
1. Go to Thinfinity® Remote Desktop Server Manager's "Access Profile" tab. If it is not there, read the topic Access Profiles first.
2. Select the profile you want to remove.
3. Press the "Remove" button.
4. Press "Yes" on the confirmation message.
5. Press "Apply" to save the changes.
VNC / RFB Profile
A VNC/RFB profile is a profile that safely connects users to a screen-sharing session.
Creating a VNC Profile
1. Go to the Thinfinity Remote Desktop Server Manager's "Access Profile" tab.
2. Press "Add" and 'VNC/RFB' to create a new profile and the following window will be presented:
3. Read the next topic (Edit a profile) to learn how to configure this profile.
Editing a VNC Profile
Configuring a profile properly will allow you to take advantage of this feature and create the access scheme that suits better the company's needs.
Remember that each profile defines a single computer's desktop or application access, except for the "[+]" profile that gives access to all computers.
1. Go to Thinfinity® Remote Desktop Server Manager's "Access Profile" tab. If it is not there, read the topic Access Profiles first.
2. Press "Edit" to configure the profile and the following window will be presented:
3. First of all, type in a descriptive name for the profile in the "Name" field.
4. Specify the computer this profile will connect to. Enter the internal IP or computer name on the field Computer.
5. Set the Port and Password to log into the remote machine:
OPTION
DESCRIPTION
Port
Port used by the VNC/RFB server installed on the destination machine.
Password
Password configured in the VNC/RFB server installed on the destination machine
6. Go to the permissions tab and set up the permission preferences as follow:
OPTION
DESCRIPTION
Allow anonymous access
Use this option, if you want this profile to be available for everyone. This means that everybody accessing Thinfinity® Remote Desktop Server will see this profile. Checking this option will disable the user selection.
Group or users accesss
To use specific users for this profile, uncheck "Allow anonymous access", press "Add" and choose the users and groups from the local domain.
This means that only users that authenticate with their correct Windows username and password will be able to use this profile.
7. You may want to configure other settings for the RDP connection. If so, check out the available options on Display, Restrictions, Access Hours.
8. When you are done with the previous steps, press OK.
Disabling a VNC Profile
Disabling a profile will make it unavailable to all users.
If you disable a profile and later on decide to use it again, all of its settings will be kept on.
1. Go to Thinfinity® Remote Desktop Server Manager's "Access Profile" tab. If it is not there, read the Access Profiles topic first.
2. Select the profile you want to disable.
3. Mark the check-box located beside the profile name.
4. Observe that a "forbidden" image will be shown on the profile line.
5. Press "Apply" to save the changes.
Removing a VNC Profile
Remember that once you remove a profile you won't be able to recover it.
1. Go to Thinfinity® Remote Desktop Server Manager's "Access Profile" tab. If it is not there, read the topic Access Profiles first.
2. Select the profile you want to remove.
3. Press the "Remove" button.
4. Press "Yes" on the confirmation message.
5. Press "Apply" to save the changes.
Telnet/SSH profile
A Telnet/SSH profile is a profile that safely connects users to a Telnet or SSH session.
Creating a Telnet Profile
1. Go to the Thinfinity Remote Desktop Server Manager's "Access Profile" tab.
2. Press "Add" and "Telnet/SSH' to create a new profile and the following window will be presented:
3. Read the next topic (Edit a profile) to learn how to configure this profile.
Editing a Telnet Profile
Configuring a profile properly will allow you to take advantage of this feature and create the access scheme that suits better the company's needs.
Remember that each profile defines a single computer's desktop or application access, except for the "[+]" profile that gives access to all computers.
1. Go to Thinfinity® Remote Desktop Server Manager's "Access Profile" tab. If it is not there, read the topic Access Profiles first.
2. Press "Edit" to configure the profile and the following window will be presented:
3. First of all, type in a descriptive name for the profile in the "Name" field.
4. Specify the computer this profile will connect to. Enter the internal IP or computer name on the field Computer.
5. Set the port to log into the remote machine:
bt - fix table below
OPTION
DESCRIPTION
Port
Port used by the destination server for Telnet Connections.
6. Go to the permissions tab and set up the permission preferences as follow:
OPTION
DESCRIPTION
Allow anonymous access
Use this option, if you want this profile to be available for everyone. This means that everybody accessing Thinfinity® Remote Desktop Server will see this profile. Checking this option will disable the user selection.
Group or users accesss
To use specific users for this profile, uncheck "Allow anonymous access", press "Add" and choose the users and groups from the local domain.
This means that only users that authenticate with their correct Windows username and password will be able to use this profile.
7. You may want to configure other settings for the Telnet / SSH connections. If so, check out the available options on Display, Program, Experience, Advanced and Printer.
8. When you are done with the previous steps, press OK.
Disabling a Telnet Profile
Disabling a profile will make it unavailable to all users.
If you disable a profile and later on decide to use it again, all of its settings will be kept on.
1. Go to Thinfinity® Remote Desktop Server Manager's "Access Profile" tab. If it is not there, read the Access Profiles topic first.
2. Select the profile you want to disable.
3. Mark the check-box located beside the profile name.
4. Observe that a "forbidden" image will be shown on the profile line.
5. Press "Apply" to save the changes.
Removing a Telnet Profile
Remember that once you remove a profile you won't be able to recover it.
1. Go to Thinfinity® Remote Desktop Server Manager's "Access Profile" tab. If it is not there, read the topic Access Profiles first.
2. Select the profile you want to remove.
3. Press the "Remove" button.
4. Press "Yes" on the confirmation message.
5. Press "Apply" to save the changes.