Remote Desktop Protocol Web Relay

This method has agent less access benefits. This feature works without any agent installed in the target machine. Using this method, you can provide access to the target RDP machine through a standard RDP client. This feature provides the ability to access Privileged Access Manager functionality without an agent for Privileged Access Manager on the target host. RDP Relay allows users to connect to a remote host without knowing the privileged account credentials such as password or identity certificate of the user. RDP Relay session videos can be captured only if the Privileged Access Manager is in Linux environment.

The functionality also provides clientless benefits. It is called "clientless" because no plugins or client software is required. Remote desktop gateway supports standard protocols like VNC, RDP, and SSH. Once the agentless module is installed all you need to access your desktops is a web browser.

NOTE:You cannot add scripts when you are using RDP Web Relay.

Advantages of Configuring the Remote Desktop Protocol Web Relay

  • You can configure a RDP Web Relay for Windows machines to allow users to remotely access these machine without the privileged account credentials

  • This method is beneficial if you do not want any operating system installed software or client.

  • Resolves issues with Network level Authentication users as they do not have to do any additional configurations.

  • No requirement of MSTC-RDP file to be downloaded. System from which you launched the RDP session can be lightweight in terms of space and memory.

Accessing the Remote Desktop Protocol Web Relay

After a RDP Web relay is configured by an administrator, the user can access the privileged session as follows:

  1. Log in using the Privileged Access Manager user credentials and click Login.

  2. Click > My Access and click the Start Session icon adjacent to the preferred resource name.

  3. You can administer the active Remote Desktop Protocol Web Relay session as it opens in > Active Sessions. The administrator audits the user actions in this privileged session and views these reports in the administration console.

File Transfer in the Remote Desktop Protocol Web Relay Session

Privileged Access Manager facilitates you to exchange files between your local drive and Remote Desktop Web Relay session. In the RDP session, a temporary drive named agentless_drive on Guacamole RDP is available during the privileged session. You can share files with download and upload options from the temporary drive.

IMPORTANT:Points to remember are as follows:

  • To transfer a folder or directory, it is required to compress the same.

  • You cannot terminate the session or switch to another session when the file upload or download is in progress.

  • The following file size limits have been tested. However, you can transfer files larger than these limits:

    • Upload - 2GB

    • Download - 500MB

Prerequisite

It is required to enable File Transfer in the Access and Monitoring Options of the Windows Agentless Assignment.

NOTE:If File Transfer is not enabled then an error message, You do not have appropriate permission to transfer files or use the Clipboard is displayed when user tries to perform upload or download action.

NOTE:When the File Transfer is enabled, the Clipboard toggle enables automatically.

To upload a file to Temporary Drive of Remote Desktop Protocol Web Relay session:

  1. With an active Remote Desktop Protocol Web Relay session in Access > Active Sessions, click View File System.

    The File Transfer and Download window is displayed.

    You can also use Ctrl+Alt+Shift key combination to view the File Transfer and Download window.

  2. Click Upload File.

  3. Select the preferred file to upload, and click Open.

    The uploaded file is saved in the temporary drive of active session and is visible on the File Transfer and Download window.

IMPORTANT:The agentless_drive on Guacamole RDP is a temporary drive and gets deleted when the RDP session is terminated. Therefore, it is required to move the downloaded file from the agentless_drive on Guacamole RDP to any drive on the RDP session for further use.

To download a file from Remote Desktop Protocol Web Relay session to the Local Drive:

  1. With an active Remote Desktop Protocol Web Relay session in Access > Active Sessions, click View File System.

    The File Transfer and Download window is displayed with files that are available for download.

  2. Identify and move the file that needs to be downloaded to the agentless_drive on Guacamole RDP, temporary drive.

  3. Click download icon against the preferred file from the list.

    The downloaded file is saved in the system from where you are accessing the RDP session. If a file is identified as corrupted or invalid, then you cannot download such file.