Multi-Factor Authentication (MFA)

Remote Desktop Gateway users are required to use MFA in the form of a push notification from the Duo Mobile app. After entering successful authentication with username/password, a push notification will be sent to your mobile device. The user interface on your computer will not indicate that it's waiting on additional input from you, so please make sure you have your mobile device with you.

The SMS method for MFA cannot be used with the Remote Desktop Gateway.

If you need to set up the Duo Mobile app, please follow the instructions here: https://answers.uillinois.edu/illinois/mfa-device-management#duo-mobile.

Setting up your on-campus and off-campus computers:

On Campus Computer:

1. Configure your on-campus computer to allow Remote Desktop connections.
   • Networking, Remote Desktop Gateway Service, Configuring Windows To Allow Remote Connections.
   • If you are restricting Remote Desktop access by IP address, you'll need to allow incoming connections from the IP addresses of the Remote Desktop Gateway servers:
     • 128.174.67.144/28
   • Note: Some Departments may manage these settings. If you encounter any difficulty configuring Remote Desktop, contact your local IT Pro.
2. Make a note of the on-campus computer's name. You can find it in the Remote Desktop settings (from the article above), or follow the instructions from this article: 
   • Networking, Windows, Locating the Active Directory Computer Name.

Off Campus Computer:

On Windows 7 or greater computers, download a pre-configured RDP file from: https://go.illinois.edu/rdpgateway.

1. 1. Open the downloaded file.
   2. In the 'Computer' field, enter the name of your on-campus computer.
   3. Click 'Connect'
      1. You may receive a warning message stating: 'The publisher of this remote connection can't be identified. Do you want to connect anyway?'
      2. You may choose to click  'Don't ask me again for connections to this computer.'
      3. Click 'Connect.'
   4. Enter your Active Directory credentials to authenticate.
      1. If necessary, select 'Use another account.'
      2. In the 'User name' field enter: UOFI\YourNetID (replace Your NetID with your NetID).
      3. In the 'Password' field, enter your Active Directory password.
      4. Click on 'OK.'
      5. After you click 'OK' you will receive a push notification from Duo.  See additional information if you need to install Duo here: Multi-Factor Authentication (MFA), Introduction 
         1. You may receive a warning message stating: 'The publisher of this remote connection can't be identified. Do you want to connect anyway?'
         2. You may choose to click  'Don't ask me again for connections to this computer.'
         3. Click 'Yes'.

Note: If your off-campus computer is not running Windows, you will need to use a supported Microsoft RDP client that supports using a Remote Desktop Gateway server. Configure it to use server name: rdpgateway.illinois.edu and select either "prompt for authentication" or enter your credentials.

Establishing a connection to the on-campus computer from your off-campus computer:

1. Open the Remote Desktop Connection client.
2. In the 'Computer' field, use the pull down arrow to select the on-campus computer's name.
3. Click 'Connect.'
4. Authenticate using your Active Directory credentials.
1. If necessary, select 'Use another account'.
2. In the 'User name' field enter: UOFI\YourNetID (replace Your NetID with your NetID).
3. In the 'Password' field, enter your Active Directory password.
4. Click on 'OK.'
5. After you click 'OK' you will receive a push notification from Duo.  See additional information if you need to install Duo here: Multi-Factor Authentication (MFA), Introduction

Ending the Remote Desktop connection:

1. Click on the 'Start' button.
2. If you wish to have open programs continue to run, select 'Disconnect.' Otherwise, you may select 'Log off' which will close open programs.

Note: Under most circumstances, do not select 'Shut down'  This will turn off your on-campus computer, requiring physical access to turn it back on.

Licensing Considerations

Generally speaking, the units or groups managing the on-campus computer are responsible for any additional remote desktop services client access licenses (RDS CALs) that are required as part of their specific configuration. Use of the Remote Desktop Gateway service does not change the licensing model for remote access, only the means by which a user performs remote access. Additional RDS CALs usually only apply for remote access to servers configured as "Terminal Servers" or "Remote Desktop Servers".

Help:

If you have any questions, please contact the Technology Services Help Desk.