How to access the new Windows 10 Remote Access Portal

Remote Access to the DCC Desktop or DCC Application

The Corporate Remote Access Gateway service is one which allows members of organisations working in partnership with Devon County Council and DCC employees to access many of its key ICT services.

It is important to note that not all applications are available through this service.  Access to additional applications may be made by contacting the Scomis ICT Service Desk on 01392 382222.

Important points to remember

To use the Corporate Remote Access Gateway, you must meet the following prerequisites:

  • You are a Devon County Council employee, or the organisation of your employ must have agreed to and signed Devon County Council’s Memorandum of Understanding (MOU); a copy of which is available from Devon County Council’s Information Governance section.
  • You must hold a Devon County Council corporate desktop user account.
  • The service is protected through a secondary authentication method; typically, this is referred to as Two Factor Authentication or Multi Factor Authentication. Therefore, to use this service you must hold access to one of the following:
    • Mobile phone with the ability to accept either text messages or incoming voice calls.
    • Smartphone with the Microsoft Authenticator App installed or the ability to accept either text messages or incoming voice calls.
    • Landline with the ability to accept incoming voice calls.
    • You must have access to a non-DCC desktop or laptop device with access to the public internet.
  • Devon County Council recommends that its partners use a Microsoft Windows 10 device and must use Microsoft Internet Explorer (not Edge)to access this service. See Useful Tips section on creating a shortcut to open in Internet Explorer.
  • If you are having to access the remote access portal from a Windows 7 device, see Windows 7 requirements for the required settings needed for successful connectivity.
  • You will need to have the URL https://app-rdweb.devon.gov.uk/ added to your Internet Trusted Sites.
  • The Scomis ICT Service Desk (01392 382222) will be able to advise as to whether your user account meets the service prerequisites.

How to access the DCC full desktop or DCC application

  1. Open Internet Explorer (note this will not work using Edge) and enter the address https://myapps.microsoft.com See Useful Tips section on creating a shortcut to open in Internet Explorer

 

 

2. When prompted enter your account name in the format firstname.lastname@devon.gov.uk 

eg – john.smith@devon.gov.uk

3. The service will automatically redirect your browser to Devon County Council’s internal authentication service; the Organisational Account name will already be completed; simply enter your DCC user account password. 

4. If you have not previously used the service, or, if Multi Factor Authentication has not been configured against your account, you will be guided through setting this up. 

We strongly recommend you set up a self service password reset (SSPR) to save you from having to contact the IT service desk each time your password expires. See SSPR setup for instructions.

5. Enter the additional information. It is advised you enter an individual work or personal phone number (not a team phone number) for authentication. Click Next 

6. If the verification code was sent by text, enter the verification code and click Verify. 

If verification was via a voice call follow the instructions on the verification phone call. 

7. At the Additional Security Verification page click Finished 
8. When the Apps page loads click Remote Access Gateway 

9. At the Work Resources prompt enter your account name with the domain name in the format  

Ds2\firstname.lastname and then enter your DCC user account password again. 

eg – ds2\john.smith

Click Sign In 

10. If you see the following error message, please follow steps 11 – 13 
11. If you are using the DCC Desktop on a device that isn’t corporately managed, you’ll need to add the web address to Trusted Sites.  To do this click on the cog icon for Settings, then choose Internet Options 

12. Select the Security tab and Trusted Sites, click on Sites (please note if you are unable to click on Sites or do not see the Security tab, the device must be managed and your IT department will need to add the Trusted Site). 

 

13. Add the url https://app-rdweb.devon.gov.uk to the Trusted Sites zone, click Close 

 

If you are unable to add the site to Trusted Sites.  Please contact your IT department to do this for you within Internet Explorer directly on your device or by a change in Group Policy.

Further Reading 

https://blogs.msdn.microsoft.com/asiatech/2014/08/19/how-to-add-web-sites-to-trusted-sites-via-gpo-from-dc-installed-ie10-or-higher-ie-version/ 

14. Click on the DCC Full Desktop or the relevant Application 

15. Depending on the security policies of your organisation (something outside the control of Devon County Council) you may be presented with the following warning upon launching the <DCC Full Desktop> shortcut. This security warning is by design to inform the user that a Remote Desktop session is about to be established with one or more local resource sharing options available (e.g. Printers), Some organisations will allow the users to hide this warning from appearing again by selecting “Don’t ask me again for remote connections from this publisher”; other users may have to accept / confirm this warning at the point of connection each time. 

Either way, continue by clicking Connect

 

 

 

 

16. To log off, click on Start button and then the DCC leaf logo

 

Note – if you get a session timeout, you can login with your username in any format (ie ds2\firstname.lastname, your DCC account in email address format – ie john.smith@devon.gov.uk or simply – firstname.lastname

ie john.smith

Then enter your password to reconnect.

17. Click Sign Out 
 

Useful tips

Password tips

Please remember to login at least once a month to keep your user account active. We strongly recommend setting up a Self Service Password Reset.

You can register to use a self-service password reset by going to the profile, select Profile and Set Up Self-Service Password Reset

 

Once you’ve registered, you can quickly reset your password should you forget it.

To manually change your password either :

  • Press CTRL+ALT+END and select the change password option or

 

  • Go to the Profile icon, select Profile and select Change Password option.

 

 

Security Verification

If you need to change your security verification, select the profile icon, select Profile and then select Additional Security Verification. Change your settings as required and Save you changes.

 

 

Printing

NB – By default, you should be able to print from the remote desktop connection. You can manually connect / disconnect your printer before connecting (see step 15) by clicking Show Details and selecting or deselecting Printers.

 

Shortcut to open directly in Internet Explorer

It is recommended you or your IT department create an Internet shortcut to your Desktop which opens up https://myapps.microsoft.com straight from Internet Explorer.

To do this, right click on your Desktop, select New, select Shortcut, Copy and paste the following path

“C:\Program Files (x86)\Internet Explorer\iexplore.exe” “https:\\myapps.microsoft.com”

Click Next. Give the shortcut a name, ie DCC Remote Access. Click Finish. You can then use this new shortcut to access the DCC Windows 10 remote access portal without having to remember to open it manually in Internet Explorer every time.

Note the above assumes Internet Explorer is installed in C:\Program Files (x86). If this directory doesn’t exist, try removing (x86) from the path or speak to your IT helpdesk.

Accessing the Windows 10 remote access portal from a Windows 7 device

If you are connecting to the Devon Remote Portal from a Windows 7 device please ask your IT department to apply the following –

  • Microsoft Easy Fix – 51044
  • Windows updates KB2574819 and KB2592687
  • Applying a registry fix to force the RDP client to fall back to RPC-HTTP connections instead of using HTTP/UDP. This can be forced by creating a 32bit DWORD registry value under HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client called RDGClientTransport with a setting of 1