Microsoft Remote Access App



Use the Microsoft Remote Desktop app to connect to a remote PC or virtual apps and desktops made available by your admin. The app helps you be productive no matter where you are. Getting Started Configure your PC for remote access first. Microsoft's app lets you access any Windows version going back to Windows 7, except for 'Starter' and 'Home' versions, for which you'll need a third-party app. Apple offers its $79.99 Apple Remote. Special thanks to fellow Microsoft Access MVP Karl Donaubauer for hosting the fourth annual Access DevCon and making it an online event during the COVID-19 lockdown. Remote App Presentation Overview. Remote Desktop and RemoteApp let your users run Access applications without having to installing anything on their local machine. If you want to access and control a computer from a non-Windows device, Microsoft's RDC app is available for Mac, iOS, and Android. Set Up Microsoft Remote Desktop Connection. Remote access to Windows apps 5 Conceptual architecture Figure 1, based on the overall business and technical objectives for the project as well as the assumptions, provides a graphical overview of the solution architecture. This architecture is suitable for 500 users requiring secure access to a Windows app from various mobile devices.

Overview:

Remoteapp is a virtual application solution that allows users to run windows-based applications regardless of what operating system they are using. It allows users to launch virtual applications from a server that appear on their computer as if it is installed locally, but in reality are running on a remote server. The user is able to open and save files locally, or open or save to their network drives, which are accessible from the remoteapps. Another way to think about RemoteApps would be it is the same as using gotowork (or any terminal server), except instead of interacting with an entire desktop on a server, you only interact with the application you are using.

Why use RemoteApps?

Scenario 1: A user is working from home and would like to edit a Word document that is located on their I: drive. Using RemoteApp, the user can open the Microsoft Word RemoteApp, browse to their I: drive and edit the document from home.

Scenario 2: A user is working from home (or on campus) and would like to use Photoshop but does not have Photoshop installed on their computer. By setting up access to RemoteApps, the user can use Photoshop as if it is installed on their local computer. You can access both files located on IAS servers, and on the home computer through RemoteApps.

Scenario 3: A user is using a Mac(or any non-windows device), but would like use software that only runs on a PC. With RemoteApps, the Mac user can run the application on their Mac, as well as open and save files both to their Mac or network drives.

What software is available through RemoteApp?

  • Microsoft Office 2010 Suite (Word, Excel, Powerpoint, Publisher)
  • Microsoft Office 2013 Suite (Word, Excel, Powerpoint, Publisher)
  • Adobe Acrobat Professional XI
  • Adobe Photoshop
  • Raisers Edge (Restricted to certain users)
  • Mozilla Firefox
  • Wordpad
  • 7-Zip
  • Adobe Illustrator CS6
  • Adobe InDesign CS6
  • Adobe LiveCycle Designer ES2
  • QuarkXPress
  • VLC Media Player
  • MikTeK 2.9

Note: If you would like certain software to be available through RemoteApp please contact the ITG Help Desk

How to launch a RemoteApp:

Accessing RemoteApps

1. If you are connecting from off campus or from the IAS wireless network, please install the OpenVPN client and connect to VPN first. After you are connected you can either use the remote resources method or web access. If you are using an ITG supplied desktop or iMac on campus then you do not need to connect to VPN. Please note connecting from the wireless network called Eduroam does not require VPN.

2. Launch a RemoteApp either by 'Remote Resouces' or Web Access:

Remote resources (Recommended for permanent access): This method will automatically give access to remoteapps without requiring the user to login more than once.

Open a web browser and login with network credentials to https://remoteapp.itg.ias.edu. Choose an app to open, which will download a .rdp file and request credentials for a session.

Tips:

Opening local files on your mac in a RemoteApp application:

When browsing to open/save a file, click on the 'home on vpn-***' drive. This will take you to the file system on your local mac.

Mimizing RemoteApps on a mac:

When a user minimizes a remoteapp on a mac, the app will be available to open in the top menu bar under the remoteapp symbol:

Disconnecting from RemoteApp sessions on Windows:

To disconnect all sessions for your remoteapps on a mac you can simply exit Microsoft Remote Desktop. On windows, you can right lick on the system tray icon and choose 'Disconnect all connections'.

-->

If your organization uses a remote access VPN solution, typically with VPN servers on the edge of your network and VPN clients installed on your users' devices, your users can use remote access VPN connections to access on-premises apps and servers. But you may need to optimize traffic to Microsoft 365 cloud-based services.

If your users do not use a VPN solution, you can use Azure Active Directory (Azure AD) Application Proxy and Azure Point-to-Site (P2S) VPN to provide access, depending on whether all your apps are web-based.

Here are the primary configurations for remote access:

  • You are already using a remote access VPN solution.
  • You are not using a remote access VPN solution and you want your remote workers to use their personal computers.
  • You are not using a remote access VPN solution, you have hybrid identity, and you need remote access only to on-premises web-based apps.
  • You are not using a remote access VPN solution and you need access to on-premises apps, some of which are not web-based.

See this flowchart for the remote access configuration options discussed in this article.

With remote access connections, you can also use Remote Desktop to connect your users to an on-premises PC. For example, a remote worker can use Remote Desktop to connect to the PC in their office from their Windows, iOS, or Android device. Once they are remotely connected, they can use it as if they were sitting in front of it.

Optimize performance for remote access VPN clients to Microsoft 365 cloud services

If your remote workers are using a traditional VPN client to obtain remote access to your organization network, verify that the VPN client has split tunneling support.

Without split tunneling, all of your remote work traffic gets sent across the VPN connection, where it must be forwarded to your organization’s edge devices, get processed, and then sent on the Internet.

Microsoft 365 traffic must take an indirect route through your organization, which could be forwarded to a Microsoft network entry point far away from the VPN client’s physical location. This indirect path adds latency to the network traffic and decreases overall performance.

With split tunneling, you can configure your VPN client to exclude specific types of traffic from being sent over the VPN connection to the organization network.

To optimize access to Microsoft 365 cloud resources, configure your split tunneling VPN clients to exclude traffic to the Optimize category Microsoft 365 endpoints over the VPN connection. For more information, see Office 365 endpoint categories. See this list of Optimize category endpoints.

Here is the resulting traffic flow, in which most of the traffic to Microsoft 365 cloud apps bypass the VPN connection.

This allows the VPN client to send and receive crucial Microsoft 365 cloud service traffic directly over the Internet and to the nearest entry point into the Microsoft network.

For more information and guidance, see Optimize Office 365 connectivity for remote users using VPN split tunneling.

Deploy remote access when all your apps are web apps and you have hybrid identity

If your remote workers are not using a traditional VPN client and your on-premises user accounts and groups are synchronized with Azure AD, you can use Azure AD Application Proxy to provide secure remote access for web-based applications hosted on on-premises servers. Web-based applications include SharePoint Server sites, Outlook Web Access servers, or any other web-based line of business applications.

Here are the components of Azure AD Application Proxy.

For more information, see this overview of Azure AD Application Proxy.

Note

Azure AD Application Proxy is not included with a Microsoft 365 subscription. You must pay for usage with a separate Azure subscription.

Deploy remote access when not all your apps are web apps

If your remote workers are not using a traditional VPN client and you have apps that are not web-based, you can use an Azure Point-to-Site (P2S) VPN.

A P2S VPN connection creates a secure connection from a remote worker’s device to your organization network through an Azure virtual network.

For more information, see this overview of P2S VPN.

Note

Azure P2S VPN is not included with a Microsoft 365 subscription. You must pay for usage with a separate Azure subscription.

Deploy Windows Virtual Desktop to provide remote access for remote workers using personal devices

Remote

To support remote workers who can only use their personal and unmanaged devices, use Windows Virtual Desktop in Azure to create and allocate virtual desktops for your users to use from home. Virtualized PCs can act just like PCs connected to your organization network.

For more information, see this overview of Windows Virtual Desktop.

Note

Microsoft Remote Desktop Download

Windows Virtual Desktop is not included with a Microsoft 365 subscription. You must pay for usage with a separate Azure subscription.

Microsoft Remote Access App Mac

Protect your Remote Desktop Services connections with the Remote Desktop Services Gateway

If you are using Remote Desktop Services (RDS) to allow employees to connect into Windows-based computers on your on-premises network, you should use a Microsoft Remote Desktop Services gateway in your edge network. The gateway uses Transport Layer Security (TLS) to encrypt traffic and prevents the on-premises computer hosting RDS from being directly exposed to the Internet.

Microsoft Remote Desktop App Android

See this article for more information.

Admin technical resources for remote access

Microsoft Remote Access App Ford

Results of Step 2

After deployment of a remote access solution for your remote workers:

Remote access configurationResults
A remote access VPN solution is in placeYou have configured your remote access VPN client for split tunneling and for the Optimize category of Microsoft 365 endpoints.
No remote access VPN solution and you need remote access only to on-premises web-based appsYou have configured Azure Application Proxy.
No remote access VPN solution and you need access to on-premises apps, some of which are not web-basedYou have configured Azure P2S VPN.
Remote workers are using their personal devices from homeYou have configured Windows Virtual Desktop.
Remote workers are using RDS connections to on-premises systemsYou have deployed a Remote Desktop Services gateway in your edge network.

Next step

Continue with Step 3 to deploy Microsoft 365 security and compliance services to protect your apps, data, and devices.