TSplus creates by default an icon for the Portable Client Generator:
It can also be accessed in the Sessions tab of the AdminTool:
It enables you to create 2 types of connection clients which can be copied to the users' Desktop or onto a USB stick for portable use.
Note: Connection Clients are not compatible with Mac computers.
Since TSplus 11.40 release, the client generator has been redesigned to be numerically signed and to avoid false/positive antiviruses reactions.
Instead of a ".exe" program, the new Client Generator is creating a flat encrypted file with the extension ".connect":
Pre-requisite on Client Side
On client side, each user will have to run a signed program named "Setup-ConnectionClient.exe” as a pre-requisite. This program is available on your server, in the TSplus program folder: TSplus\Clients\WindowsClient:
or on the TSplus\Clients\www folder:
or by downloading it.
Click on a tab to go to the corresponding information:
When you launch the client generator, the first tab displayed is the general tab, Here you will find all of the essential connection settings that you need to get you started.
Server Address: Enter the IP address of the server you would like the client to connect to.
Port Number: Enter the server port number. The default is 3389.
Username and Password: If you enter a username and password, the client program will not ask the user to retype it at each session.
To reset this logon/password saving, you must create and edit a shortcut of the Remote Desktop Client and add the -reset on switch at the end of the target field.
Domain name: Enter a domain name if any.
Preferred Display Mode: You can choose your preferred Display Mode from the following options:
The Classic Remote Desktop, displaying your remote session environment.
The Microsoft RemoteApp connection client, to display your remote applications as if they were installed locally. It has a better graphic performance over minimized applications.
Network speed: You can choose between two options depending on your network speed:
Client location: Define the location of your generated client.
On this tab, you can change the color and the session screen resolution.
You can also adapt your session for dual-screens, with or without span. The span option allows you to stretch your session across both screens.
You can allow the use of the TAB key in the session.
On this tab, you can choose which resolution you want to enable for the user:
You can check the boxes to enable smart-sizing of the Remote Desktop, and if you want the Remote Desktop not to hide or overlap the local taskbar.
The local resources tab gathers all the devices that you may redirect in your remote session.
The editable field next to the disks box allows to specify which disks are available in the remote session.
You just have to separate each letter of disk (C :, E: ...) by a comma.
When the disks box is ticked and no disk is specified, all the disks are included in the remote session.
Printers correspond to LPT ports, and COM Ports correspond to Serial Ports. Since TSplus 11.50 version, these local devices are selected by default.
Below, you can choose your option for printing, with the universal printer:
If you do not have a PDF Reader installed on your machine, we recommend the use of Foxit Reader. See our video tutorial on how to print.
You can set a startup application via the Portable Client Generator, and specify its path, directory and parameters, since the 11.30 release.
However, we recommend you to use the AdminTool to assign the desired applications.
TSplus offers two extra layers of physical security to keep your users' connections safe.
The connection can be locked to the ID of a USB key, locked to a computer name, or you can use both layers of security simultaneously.
In order to lock a connection client onto a USB key you can do so by copying the client generator located in : C:\Program Files (x86)\TSplus\Clients\WindowsClient
Now double click on the client generator and check the lock on serial number box located on the security tab. Once it is done, you can delete the client generator from the USB key.
The newly generated connection client will be placed on the desktop, don't forget to copy it back to the USB key! You can delete the client generator that you copied on the USB key afterwards.
You can define the time limit from the first use date of a generated client by entering the value on the time limit box. (which is by default set to "no limit").
Boxes below enable you to:
The client generator supports two-factor authentication since version 18.104.22.168. Two-factor authentication support also requires a Mobile Web edition or greater.
Please refer to Two-factor Authentication documentation page for more information on how to configure and enable two-factor autnentication for users and groups on your TSplus Remote Access installation.
Please note the following additional requirements to enable two-factor authentication for a generated client:
Since version 22.214.171.124, any previously generated client and any new client generated without 2FA support enabled will behave the same as before. If a user enabled for two-factor authentication attempts to login using a client generated without explicit 2FA support, the login will be denied as two-factor authentication is not possible and therefore will fail.
To add support for two-factor authentication, check the Enable 2FA checkbox before generating your client file. As a result, two-factor authentication will be validated when connecting to the Remote Access application server. If two-factor authentication is enabled on the application server and the connecting user is not configured, then the connection will be denied.
Be mindful that adding 2FA support to a generated client later is not supported. For example, adding 2FA support through command line against the generated .connect file is not supported.
Once a user has configured his account in an authenticator app, he or she will be able to connect using its password and the code provided by its authenticator app or by SMS.
If the targeted server possesses a specific and accessible domain name, as well as a valid SSL/TLS certificate installed, you can enable the "Use the targeted server as a Remote Desktop Gateway (RDG) to encrypt data transfer".
This option makes the RDP data transfer during the connection encrypted using TLS encapsulation, making it a suitable alternative to any VPN in term of data encryption.
Update TSplus Remote Access to the latest version on a server joined to the domain.
Generate a client from the Client Generator, checking the "Enable Single Sign-On (SSO)" box in the "Security" tab.
Connect from a machine joined to the domain using the generated client.
From the domain controller: 1. Open the Group Policy Management Console. 2. Right-click on the Organizational Unit (OU) where the Group Policy Object (GPO) should be applied and select "Create a GPO in this domain, and Link it here...". 3. Name the GPO (e.g., SSORDSMYSERVER) and click "OK". 4. Right-click on the created policy and select "Edit". 5. Navigate to the following location: "Computer Configuration / Policies / Administrative Templates / System / Credentials Delegation." 6. Double-click on "Allow delegating default credentials" to open the settings. 7. Enable the setting and click "Show..." 8. In the Value field, enter the server(s) in the format TERMSRV/serverfullyqualifieddomain_name and click "OK". 9. Click "Apply" and "OK" to close the window. From the client machine: 10. Update group policies by running the following command as an administrator: gpupdate /force.
You can also use this feature through mstsc configuration without using a generated client if the prerequisites mentionned above are met.
To do so, go to the advanced tab first, then on the "Connect from anywhere" section click on "Settings" and configure the Remote Desktop Gateway by :
Then go to the "General" tab, and :
You can also enable the Load Balancing to connect to one server of your farm.
Do not check the "Use Load-Balancing" box if you did not activate the Load-Balancing feature on your server.
You will need to enter the Gateway Web port, which should be the same as the default web port used on all the servers of your farm.
You can enable the logs for Connection Client on the client side by adding the following registry key:
[HKEYLOCALMACHINE\SOFTWARE\Digital River\ConnectionClient] "Debug"="true"
The logs are located in C:\Users\