PuTTY SSH Remote Desktop

Windows "Remote Desktop" or "Terminal Services" is a feature available in modern Windows systems that allows you to login to a Windows computer over the network. Since direct connections to internal JLab systems are not allowed from the internet, to make such a connection from offsite, you must use software that allows you to create a secure "tunnel" through which the connection is made. This technique can be used to connect to individual Windows desktops (if properly configured), or designated Windows terminal servers on site.

Requirements

On the off-site system, you must have a remote desktop client program, included with Windows, but also available for LInux and Mac OS X systems (e.g. "rdesktop").You must know the name of the target Windows computer on site. This can be your Windows desktop computer, or other terminal server. The lab provides a central, general purpose Windows Terminal Server called "jlabts.jlab.org"You must have an account on the target system that is an Administrator or in its "Remote Desktop Users" group. Note: all JLAB domain users are allowed remote desktop access to JLABTS.If the target computer on-site requires a smartcard to log in, you will need to have the appropriate smartcard drivers, reader, etc. available on the off-site system.

Quick Instructions

The quick instructions are for advanced users. If you would like more detailed instructions, scroll down or click . These instructiosn assume you are using a Windows system from off-site with PuTTY.

In PuTTy the configuration settings are as follows: Session->Hostname: login.jlab.orgSSH->Tunnels->Source Port: 3391SSH->Tunnels->Destination: .jlab.org:3389 (or jlabts.jlab.org:3389 for the Windows terminal server)In Windows Remote Desktop Connection Computer: localhost:3391Username: jlab\

Stage 1:

Install PuTTy, available at the link above, and run it.Under "Category" on the left, expand "SSH" and scroll down and click "Tunnels" On the right under "Source port" type "3391"Under "Destination" type ".jlab.org:3389" replacing with, you guessed it, the Target on-site Computer's Name. (or jlabts, as mentioned above)Now click "Add" and a new entry will appear in the "Forwarded Ports" box.