Setting up Remote Desktop Access to Clients' PCs with Azure

Question

Setting up Remote Desktop Access to Clients' PCs with Azure

ronh 20

Is it possible to set up Microsoft Remote Desktop Access using Azure without port forwarding or 3rd party software? I'm looking for an easy way to log in to my clients' PCs to fix their technical problems. Ideally, I'd like to access all of my clients from the Azure portal. What steps do I need to take to set this up? Thank you.

Locked Question. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

0 additional answers

Answer 1

Nikhil Duserla 9,945 Microsoft External Staff Moderator

Hi @ronh,

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

Yes, you can configure Microsoft Remote Desktop Access with Azure without needing port forwarding or additional third-party software by utilizing Azure Bastion. Azure Bastion enables secure connections to your virtual machines (VMs) through the Azure portal via a web browser, eliminating the need to expose the VMs to the public internet.

Please ensure that the NSG associated with your VMs allows inbound RDP traffic from the Azure Bastion subnet. By creating an inbound security rule that permits traffic from the Bastion subnet to the RDP port.

Please refer to this for more information: https://learn.microsoft.com/en-us/azure/bastion/tutorial-create-host-portal

We also have Azure providing support for remote work through its networking services. https://learn.microsoft.com/en-us/azure/networking/working-remotely-support#extend-employee-connections-to-access-globally-distributed-resources

If you have any further queries, do let us know.

If the answer is helpful, please click "Accept Answer" and "Upvote it."

Nikhil Duserla 9,945 Reputation points Microsoft External Staff Moderator

2024-09-12T00:58:06.0166667+00:00

Hi @ronh,

Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
ronh 20 Reputation points

2024-09-12T19:15:13.1+00:00

Thank you for your response. This works perfectly
ronh 20 Reputation points

2024-09-13T20:37:43.9766667+00:00

Hello, I am now able to remote in to my Azure VM thanks for that. My next question is logging into local PCs that don't have azure installed. For example BOB just has a normal windows PC how do I remote into his (local version of windows)PC (on a different network) using Windows remote desktop without doing a port forward? Should I do this through a virtual network? For example if I have a client in a different city with a local windows install, how can I easily remote into that PC? thanks
Nikhil Duserla 9,945 Reputation points Microsoft External Staff Moderator

2024-09-16T05:59:00.4033333+00:00

Hi ronh,

Thank you for reaching out us again.

First, you'll need to enable Remote Desktop on the PC you want to connect to. This can be done by going to Settings > System > Remote Desktop and turning on Remote Desktop.

Remote Desktop Connection app on your local PC. Simply open the app, enter the IP address or hostname of the remote PC, and then enter the username and password.

Please refer to this link for more detailed information: https://learn.microsoft.com/en-us/azure/virtual-machines/windows/connect-rdp

If you want to connect to the PC from outside its network without doing a port forward, you can consider using a virtual private network (VPN). These services can provide a secure and encrypted connection to the remote PC without exposing it to the public internet. https://learn.microsoft.com/en-us/azure/networking/working-remotely-support#extend-employee-connections-to-access-globally-distributed-resources

If you have any further queries, do let us know.
ronh 20 Reputation points

2024-09-16T19:07:28.1+00:00

Thank you for your assistance, I have setup my VPN and successfully setup remote desktop on my virtual network. My last question is how does pricing work to keep computers connected and running on my vpn?
Nikhil Duserla 9,945 Reputation points Microsoft External Staff Moderator

2024-09-18T04:30:33.7366667+00:00

Hi ronh,

The pricing for keeping computers connected and running on your VPN will depend on the specific VPN solution that you are using.

To estimate the cost of running a VPN solution on Azure, you can use the Azure pricing calculator. The pricing calculator allows you to estimate the cost of running virtual machines, storage, and other resources on Azure based on your specific needs. You can also use the Azure pricing calculator to estimate the cost of data transfer between your VPN solution and other resources- https://azure.microsoft.com/en-in/pricing/details/vpn-gateway/
ronh 20 Reputation points

2024-09-26T18:23:21.27+00:00

How do I pause my VPN or downgrade without deleting the entire vpn? My current vpn is 250 a month I need to downgrade or pause the system.
ronh 20 Reputation points

2024-09-26T18:34:41.6366667+00:00

Basic $0.04/hour 100 Mbps Max 10

1-10: Included Max 128

1-128: Included

Would the above vpn work just for remote desktop control? Just need clients to sign into the vpn only when I need to remote desktop connect. Also is there a way to have a PC stay on the vpn network with the timeout? For example when logged in the the vpn it automatically logs my client off of the network in 2 or 3 hours automatically.

Thanks
Nikhil Duserla 9,945 Reputation points Microsoft External Staff Moderator

2024-09-27T08:40:42.7666667+00:00

Hi ronh,

Thank you for reaching to us again.

It's not possible to pause or suspend an Azure VPN gateway. The only option you have is to delete it and recreate it when needed.

However, you can downgrade an Azure VPN gateway from a higher SKU to a lower SKU. Ex: VpnGw4 to VpnGw1

Yes, you can use this VPN for remote desktop control. Once you have set up the VPN, you can use Remote Desktop Connection to connect to the remote computer. If you have any further queries on networking, I would request you to please post your queries in networking service area Q&A forum.
ronh 20 Reputation points

2024-09-27T22:45:21.6066667+00:00

Hello it only gives me the options to upgrade my VPN VpnGw1 is not listed. thanks
Nikhil Duserla 9,945 Reputation points Microsoft External Staff Moderator

2024-09-30T10:42:56.2166667+00:00

Hi ronh,

Could you please share some screenshots so I can investigate further?

Let me know if you need any more help!
Eric Tang 0 Reputation points

2026-09-16T04:24:21.52+00:00

Great answer for the Azure route. Worth adding for anyone finding this later: you don't have to be in Azure (or run VMs) to get this.

If the clients' PCs are physical/on-prem, an agent-based or ZTNA remote-access tool gives you the same "reach any client from one console, no port-forwarding, nothing exposed" without standing up Azure VMs — a small agent on each client dials outbound to a relay and you connect through it (works behind CGNAT too). Azure Bastion / AVD is the right fit if the machines already live in Azure; for scattered client PCs, agent/ZTNA is usually simpler and cheaper.