Connection Authorization Policies (CAPs) Connection authorization policies (CAPs) allow administrators to specify users, user groups, and optionally, computer groups that can access a TS Gateway server. TS Gateway Management creates CAPs. CAPs simplify administration and enhance security by providing a greater level of control over access to remote computers on the corporate network. Using CAPs, administrators can require that users, user groups, or computer groups meet specific conditions to access a TS Gateway server. Specific conditions can be listed for each CAP. For example, administrators can specify connection requirements such as the use of a smart card, may define specific user groups that are allowed to connect to resources on the corporate network, may define specific resources to which users can connect, may define specific user group membership requirements, and so forth. A user is granted access to a TS Gateway server only if he or she meets or exceeds the conditions specified in the CAP that contains their group name. Resource groups and Resource Authorization Policies (RAPs) After CAPs are defined, resource groups must be created and Resource Authorization Policies (RAPs) defined that allow users access from the TS Gateway server to specific remote computers on the network. CAPs and RAPs are created and managed by using TS Gateway Management console. Resource groups enable administrators to define the groups of remote computers that users can access. RAPs enable the management of user access to resource groups. Users connecting to the network through a TS Gateway server are granted access to specific remote computers on the network, only if they meet or exceed the conditions specified in at least one RAP. Instead of creating a resource group manually, a security group can be defined in Active Directory directory service, and is used to manage access conditions. To ensure that the right users have access to the correct remote computers on the network, administrators must plan and create resource groups carefully. Evaluation is required to determine which users should have access to each resource group, and then one or more RAPs must be created to grant the users access as needed. Monitoring capabilities TS Gateway Management provides the ability to view information active connections from clients to remote computers on the network through TS Gateway. This information includes the IP address of the client, the name of the user logged on to the client, the name of the remote computer to which the client is connected, and the length of time that the connection is idle, if applicable. Administrators can also specify events that they want to monitor, and then monitor these events by using Event Viewer.
Connection Authorization Policies (CAPs) Connection authorization policies (CAPs) allow administrators to specify users, user groups, and optionally, computer groups that can access a TS Gateway server. TS Gateway Management creates CAPs. CAPs simplify administration and enhance security by providing a greater level of control over access to remote computers on the corporate network. Using CAPs, administrators can require that users, user groups, or computer groups meet specific conditions to access a TS Gateway server. Specific conditions can be listed for each CAP. For example, administrators can specify connection requirements such as the use of a smart card, may define specific user groups that are allowed to connect to resources on the corporate network, may define specific resources to which users can connect, may define specific user group membership requirements, and so forth. A user is granted access to a TS Gateway server only if he or she meets or exceeds the conditions specified in the CAP that contains their group name. Resource groups and Resource Authorization Policies (RAPs) After CAPs are defined, resource groups must be created and Resource Authorization Policies (RAPs) defined that allow users access from the TS Gateway server to specific remote computers on the network. CAPs and RAPs are created and managed by using TS Gateway Management console. Resource groups enable administrators to define the groups of remote computers that users can access. RAPs enable the management of user access to resource groups. Users connecting to the network through a TS Gateway server are granted access to specific remote computers on the network, only if they meet or exceed the conditions specified in at least one RAP. Instead of creating a resource group manually, a security group can be defined in Active Directory directory service, and is used to manage access conditions. To ensure that the right users have access to the correct remote computers on the network, administrators must plan and create resource groups carefully. Evaluation is required to determine which users should have access to each resource group, and then one or more RAPs must be created to grant the users access as needed. Monitoring capabilities TS Gateway Management provides the ability to view information active connections from clients to remote computers on the network through TS Gateway. This information includes the IP address of the client, the name of the user logged on to the client, the name of the remote computer to which the client is connected, and the length of time that the connection is idle, if applicable. Administrators can also specify events that they want to monitor, and then monitor these events by using Event Viewer.
WS08TechnicalOverviewFinal_En.docx