Remote Desktop Protocol Relay

The Remote Desktop Protocol Relay (RDP Relay) feature offers Single Sign-on capability and remote access to desktops through a secured connection.In a privileged session, an administrator user who is allowed to access various devices can sign on to many managed devices from a single workstation without knowing the authentication passwords of those devices. In addition, the user can remotely view the desktops of the managed devices and work on them.

You enable privileged sessions for an administrator user with the user's information. Then you associate the privileged session with a rule that controls the commands that the user can run on permitted devices and applications.

NOTE:RDP Relay is supported with the following installers:

  • Windows Installers

  • Generic Linux Installers

Configuring the RDP Relay

You can configure a RDP Relay for Windows machines to allow users to remotely access these machine without the privileged account credentials.

For steps to configure, see Work Flow to Configure Privileged Access for Windows

NOTE:In Windows 2008 R2, configure the following User Account Control settings:

  • Disable Switch to the secure desktop when prompting for elevation.

  • Set UAC: Behavior of the elevation prompt for administrators in Admin Approval Mode to a value other than Prompt for credentials on the secure desktop and Prompt for consent on the secure desktop.

Accessing the RDP Relay

After a RDP relay is configured by an administrator, the user can access the privileged session as follows:

  1. Click on home icon on the new Administration console.

  2. Specify the username and password to log in to Privileged Access Manager and click Login.

  3. Click > My Access and click the launch icon before the appropriate resource name.

  4. You can administer the active Remote Desktop Protocol Web Relay session as it opens in > Active Sessions. The administrator audits the user actions in this privileged session and views these reports in the administration console.

  5. Save and open the RDP file to launch the session.

NOTE:

  • RDP Relay Manager name is always shown in the RDP connection bar.

  • When connecting to the remote session specify the username in capital letters.

  • When establishing a remote session through RDP Relay, the following error may be displayed:

    The remote computer disconnected the session because of an error in the licensing protocol

    To continue establishing a remote session, perform the following steps before starting an RDP session:

    1. Install the latest version of Privileged Access Manager.

    2. Launch Internet Explorer in Run as administrator mode.