How to Enable Remote Desktop on SCCM CMG

When you setup a SCCM CMG you can enable remote desktop on it. To enable the remote desktop on CMG server that is in Azure, you must first set up a cloud management gateway correctly. I have covered the steps to setup CMG in this post.

Starting with SCCM 1806, a CMG can also be a cloud distribution point to serve content to clients. This is really a good functionality. Because this reduces the required certificates and cost of Azure VMs.

The CMG uses Azure Cloud Services as PaaS, this service uses virtual machines (VMs) that will involve compute costs. By default the CMG uses a Standard A2 V2 VM.

When you create a CMG, you select how many VM instances support the CMG. By default it 1 and 16 is the maximum.

Why would you enable Remote desktop on SCCM CMG ?. If you want to access the IIS log files from the CMG Virtual Machine that runs the cloud service, enabling remote desktop makes sense. This also helps when you want to troubleshoot the Cloud Management Gateway (CMG) feature in SCCM.

How to Enable Remote Desktop on SCCM CMG

To enable remote desktop on SCCM CMG

  • Login to Azure Portal.
  • Navigate to Cloud Services (classic) and select the Cloud Management Gateway service.
  • Under Settings, select Remote Desktop and notice that RDP is disabled.
  • To enable Remote Desktop, click Enabled.

How to Enable Remote Desktop on SCCM CMG Snap1

After you click Enabled, create user name and password to access the CMG. Choose an encryption certificate and click Save.

How to Enable Remote Desktop on SCCM CMG

Look for the notification which says Successfully saved Remote Desktop settings.

How to Enable Remote Desktop on SCCM CMG

When Remote Desktop Services has been activated on CMG, you can connect to the Virtual Machine. Click Roles and Instances and click ProxyService (ProxyService_IN_0).

Connect to CMG InstanceWhen you click ProxyService (ProxyService_IN_0). On the right pane you got three options.

  • Connect – Downloads ProxyService_IN_0.rdp file. Using this RDP file you can connect to this virtual machine.
  • Reboot – Restarts the virtual machine.
  • Reimage – I haven’t used this option yet. Seems like the whole role instance is re-imaged and the local data will be lost.

Now click Connect to download the Remote Desktop file – ProxyService_IN_0.rdp.

Connect to CMG Instance

Double click the RDP file and on RDP box click Connect.

RDP CMG Instance

After you login to this virtual machine, open registry editor. Navigate to HKLM\SOFTWARE\Microsoft\SMS\Tracing\CMGSetup. The registry key TraceFilename tells us the location or path of CMG log files – E:\approot\logs\CMGSetup.log.

CMG log files

If you open E:\approot\logs you should see CMGService.log and CMGSetup.log files. I will publish about SCCM CMG log files in a separate post.

CMG log files

3 thoughts on “How to Enable Remote Desktop on SCCM CMG”

  1. Hi,

    Like some other people. We ar very interested to get un updated procedure for those they are using the modern Azure Scale Set because the Classic method is no more possible. Many things have changed since 3 years in Microsoft Azure.

  2. I am able to connect and all but i get a pop up everytime indicating a certificate error and it might be unsafe to proceed.
    It can’t validate the remote computers certificate. Do you think this is something we should take seriously and do something about? I have picked an encryption certificate on the Azure Portal


Leave a Comment