Update end user experience and compatibility requirements for browser-based rdp #23271
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -144,7 +144,7 @@ To connect to a Windows machine over RDP: | |
| The App Launcher tile will launch a URL of the form `https://<app-domain>/rdp/<vnet-id>/<target-ip>/<port>`. You may also navigate directly to this URL. | ||
| 4. Select the port that you want to connect to. The port selection screen only appears if the Access application allows RDP traffic on multiple ports (for example, port `3389` and port `65321`). | ||
| 5. (Optional) In your browser settings, allow the Access application to access the clipboard. Clipboard permissions grant the ability to copy or paste text between the local machine and the remote Windows machine. | ||
| 6. Enter your Windows username and password. The section below on compatibility covers which formats are supported for login credentials. | ||
|
|
||
| You now have access to the remote Windows desktop. | ||
|
|
||
|
|
@@ -174,6 +174,56 @@ Browser-based RDP supports connecting to Windows machines that run the following | |
| | Other Chromium-based browsers (Opera, Brave) | ✅ | | ||
| | Internet Explorer 11 and below | ❌ | | ||
|
|
||
| ### User identifier formats | ||
|
|
||
| Browser-based RDP supports connecting to Windows machines with the following formats: | ||
|
|
||
| #### Security Accounts Manager (SAM) | ||
|
|
||
| SAM-formatted user identifiers are supported with and without spaces. | ||
|
|
||
| `domain\user with spaces` format: | ||
| - The domain may have a maximum of 20 characters. | ||
| - The username may have a maximum of 15 characters. | ||
|
|
||
| `.\user` format: | ||
| - This uses the default domain. | ||
| - The username may have a maximum of 20 characters. | ||
|
|
||
| Examples: | ||
| - `DOMAIN\user with spaces` | ||
ranbel marked this conversation as resolved.
Outdated
Show resolved
Hide resolved
|
||
| - `DOMAIN\user` | ||
| - `Username` | ||
| - `User Name` | ||
|
|
||
| #### User Principal Name (UPN) | ||
|
|
||
| UPN-formatted user identifiers are supported with spaces, quotes, and unquoted. | ||
|
|
||
| Examples: | ||
| - `"user with spaces"@domain.org` | ||
| - `user with [email protected]` | ||
| - `[email protected]` | ||
|
|
||
| :::note | ||
| Cloudflare will not configure any user identifier on the target. Any user identifier used to authenticate must be pre-configured on the server. | ||
| ::: | ||
|
|
||
| ### Clipboard file formats | ||
|
|
||
| Browser-based RDP supports the following formats for text-based copy and paste actions: | ||
|
||
| - "text/plain" | ||
| - "text/html" | ||
| - "image/png" | ||
| - "HTML Format" (via CF_HTML) | ||
| - CF_UNICODETEXT | ||
| - CF_DIBV5 (Windows native bitmap formats) | ||
|
|
||
asamborski marked this conversation as resolved.
Outdated
Show resolved
Hide resolved
|
||
| :::note | ||
| File transfer is not supported presently (see Known limitations below). Copying and pasting any file from the local machine to the remote machine or vice versa will not succeed. | ||
| ::: | ||
|
|
||
|
|
||
| ### Cloudflare products | ||
|
|
||
| <Render file="access/self-hosted-app/product-compatibility" product="cloudflare-one" /> | ||
|
|
@@ -183,7 +233,10 @@ Browser-based RDP supports connecting to Windows machines that run the following | |
| Browser-based RDP does not currently support: | ||
|
|
||
| - TLS certificate verification: Cloudflare uses TLS to connect to the target RDP server but does not verify the origin TLS certificate. | ||
| - [WARP authentication](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-sessions/#configure-warp-sessions-in-access). | ||
| - Clipboard copy and paste control: the ability to define if users can copy/paste content from the remote machine to their local machine and vice versa. | ||
| - Audio over RDP. | ||
| - File transfer. | ||
|
|
||
|
|
||
|
|
||
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@asamborski Could we add
.\usernameto the examples below? Do the same limitations apply to theUsernameandUser nameexamples?There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Will do! Same character limitations apply between usernames with space and without spaces. The only time that changes if if you specify the domain\ or use the default domain .\
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
8cc4506