Microsoft small business knowledge base

Article ID: 2472211 - Last Review: February 26, 2014 - Revision: 10.0


Small Business Server 2011 Standard, Small Business Server 2011 Essentials, Windows Server 2012 Essentials and Windows Server 2012 R2 Essentials installs and configures the Remote Desktop Gateway role for use with the Remote Web Access website. The setup process does not install the Remote Desktop Gateway Manager management console. As a result, the Remote Desktop Gateway Manager mmc will not be listed under the Administrative Tools and in Server Manager, the Remote Desktop Gateway role will appear to not be installed . The service is however installed and is properly configured for use with the Remote Web Access website by SBS Setup and the Internet Address Management wizard. For troubleshooting purposes, it may become necessary to use the RD Gateway management console. The following command will properly install the RD Gateway Manager management console:

dism /online /Enable-Feature:Gateway-UI

This command must be run from an administrative level command prompt.

We do not recommend you use Server Manager to install the Remote Desktop Gateway role. The role is already installed and configured properly for use by the SBS components. If you manually install the RD Gateway role using Server Manager, the setup process will automatically launch the configuration wizard and it may be possible to misconfigure the service and break the Remote Web Access. If you have installed the RD Gateway Manager by either the DISM command or by using Server Manager, you can run the following command to remove the RD Gateway Manager.

dism /online /disable-feature:Gateway-UI

NOTE: Typically you should not need to install the Gateway-UI feature. If you have made changes to the web site regarding certificates try the following from an administrator cmd prompt first, and then attempt to connect via RWA to a client computer.

REG ADD HKLM\SYSTEM\CurrentControlSet\services\HTTP\Parameters\SslBindingInfo\  /v DefaultFlags /t REG_DWORD /d 1 /f
net stop tsgateway & net start tsgateway

More information

When you open the RD Gateway Manager console, you may receive the following warning message:

The certificate in IIS is different from the one RD Gateway service is running with. You must restart the RD Gateway service for the new certificate to take effect and doing this will disconnect all active connections. To restart the service now, click Yes. To restart the service manually later, click No.

You should click No to the warning message.

Once the RD Gateway Manager console completely loads, you may also see the following error message:

A server certificate is not yet installed or selected.

You can safely ignore this error message as well.

The warnings and errors occur because the RD Gateway service is installed and configured by SBS setup and not by the RD Gateway setup wizard. The configuration errors and warnings can be safely ignored. The RD Gateway is properly configured for use with the Remote Web Access site by Small Business Server setup.

Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use ( for other considerations.

Applies to
  • Windows Small Business Server 2011 Standard
  • Windows Server 2012 Essentials
  • Windows Small Business Server 2011 Essentials
  • Windows Server 2012 R2 Essentials
Additional support options
Ask The Microsoft Small Business Support Community
Contact Microsoft Small Business Support
Find Microsoft Small Business Support Certified Partner
Find a Microsoft Store For In-Person Small Business Support