====== Microsoft Remote Desktop on MacOS ======
This page describes how to connect to a Windows system at the institute, from your own Mac, either on the laptop or wireless network, or from outside the institute.

Alternatively, for PHYSICS, you can make use of the RDP gateway to access your Windows desktop. Please visit [[general:macos_desktop_gateway|this]] page for instructions.

===== VPN =====
If you are connected through our institute VPN, you should be able to connect directly (so you can skip the tunnel setup). The same is true for our wired (not wireless!) laptop net.

===== Tunnel (commandline) =====
Otherwise, a secure tunnel has to be set up using ssh. The tunnel connects a local ''port'' to a remote port on a specific machine. Once the tunnel is set up, a client program can comnnect to the local port, and the tunnel takes care of connecting that to the remote destination.

The port we want here is 3389, which is the port of the remote desktop protocol. This example logs in to ''ssh3.physics.leidenuniv.nl'' and sets up the tunnel to a remote Windows Desktop on a machine called SERVER:
  ssh -L 3389:SERVER:3389 username@ssh3.physics.leidenuniv.nl
Now, you probably don't want to remember this and type it all the time, so an easy solution is to add an alias in your ''.profile'' (which contains the settings that are executed every time you open a new shell in a terminal):
  alias SERVER='ssh -L 3389:SERVER:3389 username@ssh3.physics.leidenuniv.nl'

Some additional notes:
  * Users should use the appropriate ssh server for their own institute 
    * LION: ssh3.physics.leidenuniv.nl 
    * STRW: ssh.strw.leidenuniv.nl
    * Lorentz: ssh.lorentz.leidenuniv.nl
  * The machine to log in to  (''SERVER'') can just as well be your own desktop, if you have one (and if it has been set up to run RDP)
  * The ''SERVER'' could also be our Remote Desktop cluster ''%%rds.physics.leidenuniv.nl%%'' if you have access to that.
  * The ''username@'' part can be omitted if you have the same username locally on your Linux and on the ssh server.
===== Tunnel (GUI) =====
Another way to ease the setup of the ssh tunnel, is to use an additional application that manages these tunnels. Some choices are:
  * [[https://www.tynsoe.org/v2/stm|SSH tunnel manager]]
  * [[https://coretunnel.app|Core Tunnel]]
===== Microsoft Windows app (previously known as Microsoft Remote Desktop client)  =====
Microsoft has a rdp client for Mac, available for free through the [[https://apps.apple.com/us/app/windows-app/id1295203466?mt=12|App store]]. Download and install it, and then start it up. It will look like this (after you click the PC + ):
{{ :generic:macrdp2.png?direct&400 |}}
After you clicked the "+" you can add a new connection. This screen will pop up:
{{ :generic:macrdp1.png?direct&200 |}}
Give the connection a name that makes sense to you to remember. 

As pc name, fill in ''localhost'' if you are using the 'tunnel' setup. This will make the app connect to the local rdp port, which is forwarded through the tunnel to the remote machine. If you are not using a tunnel (local connection or VPN), fill in the full hostname and domain of the machine to which you are trying to connect.

You can also fill in the username if you want (or do that on the login screen). Make sure however, to add the domain, so in this case: ''STERREWACHT\username'' or ''PHYSICS\username''.
Close this window when done (use the Add button). 
Back in the first screen, it is time to start the connection. Click on the 'Friendly name' to start the connection.
{{ :generic:macrdp3.png?direct&400 |}}
You first have to specify your login information:
{{ :generic:macrdp4.png?400 |}}
Before you get to the windows login screen, a certificate warning is presented to you as in this image:
{{ :generic:macrdp5.png?400 |}}
The reason is, that you are connecting to ''localhost'' but the certificate is valid for the actual computer name. It is safe to accept this certificate and you can check the box to accept it permanently, so you will not get the same warning the next time.

Now you should see the familiar Windows log in screen and you can go about your business.

To access the remote system more quickly, you can save your username and password for your connection. To do this, go to ''Preferences'' (under the ''Microsoft Remote Desktop'' menu at the top), select the tab ''User Accounts'' and press the ''+'' button:
{{ :generic:rdp_useraccounts.png?400 |}} 
Fill in your username and password, give it a ''Friendly name'' and press ''Add'':
{{ :generic:rdp_adduseraccount.png?400 |}}
In the connection profile, you can select the ''Friendly name'' account under the ''User account'':
{{ :generic:rdp_useraccount_profile.png?400 |}}