{"id":146,"title":"DMZ'de RDP Sunucusu ve AD Entegrasyonu","content":"<h1>DMZ'de RDP Sunucusu ve AD Entegrasyonu \u0130\u00e7in Edge Sunucu Mimarisi<\/h1> Bu mimariyi kurmak i\u00e7in a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 takip edebilirsiniz. Yap\u0131 \u00fc\u00e7 temel bile\u015fenden olu\u015facak: i\u00e7 a\u011fda AD sunucusu, DMZ'de RD Session Host sunucusu ve aralar\u0131nda k\u00f6pr\u00fc g\u00f6revi g\u00f6ren RD Gateway sunucusu. <h2>1. Fiziksel\/A\u011f Altyap\u0131s\u0131 Kurulumu<\/h2> <h3>A\u011f Segmentleri:<\/h3> <ul> <li><strong>\u0130\u00e7 A\u011f (G\u00fcvenli B\u00f6lge)<\/strong>: 192.168.1.0\/24<\/li> <li><strong>DMZ<\/strong>: 172.16.1.0\/24<\/li> <li><strong>\u0130nternet\/D\u0131\u015f A\u011f<\/strong>: Genel IP adresi<\/li> <\/ul> <h3>G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rmas\u0131:<\/h3> <ul> <li>D\u0131\u015f a\u011fdan DMZ'ye sadece port 443 (HTTPS) a\u00e7\u0131k<\/li> <li>DMZ'den i\u00e7 a\u011fa sadece AD kimlik do\u011frulama portlar\u0131 a\u00e7\u0131k: <ul> <li>LDAP (389\/TCP)<\/li> <li>LDAPS (636\/TCP)<\/li> <li>Kerberos (88\/TCP\/UDP)<\/li> <li>DNS (53\/TCP\/UDP)<\/li> <li>NTP (123\/UDP)<\/li> <\/ul> <\/li> <\/ul> <h2>2. Sunucu Kurulumlar\u0131<\/h2> <h3>\u0130\u00e7 A\u011fda AD Sunucusu Kurulumu:<\/h3> <ol> <li>Windows Server 2022 kurulumu<\/li> <li>Active Directory Domain Services (AD DS) rol\u00fcn\u00fc y\u00fckleyin<\/li> <li>Yeni bir domain olu\u015fturun (\u00f6rne\u011fin: company.local)<\/li> <li>DNS hizmetini yap\u0131land\u0131r\u0131n<\/li> <li>RDP kullan\u0131c\u0131lar\u0131 i\u00e7in AD gruplar\u0131 olu\u015fturun (\u00f6rne\u011fin: RDPUsers)<\/li> <\/ol> <h3>DMZ'de RD Session Host Sunucusu Kurulumu:<\/h3> <ol> <li>Windows Server 2022 kurulumu<\/li> <li>Sunucuyu AD domainine kat\u0131n (company.local) <pre><code >Add-Computer -DomainName company.local -Credential (Get-Credential) <\/code><\/pre> <\/li> <li>RD Session Host rol\u00fcn\u00fc y\u00fckleyin: <pre><code >Install-WindowsFeature RDS-RD-Server -IncludeManagementTools <\/code><\/pre> <\/li> <li>Gerekli uygulamalar\u0131 y\u00fckleyin (RemoteApp i\u00e7in kullan\u0131lacak)<\/li> <\/ol> <h3>RD Gateway (Edge Sunucu) Kurulumu:<\/h3> <ol> <li>DMZ'de Windows Server 2022 kurulumu<\/li> <li>Sunucuyu AD domainine kat\u0131n<\/li> <li>RD Gateway rol\u00fcn\u00fc y\u00fckleyin: <pre><code >Install-WindowsFeature RDS-Gateway -IncludeManagementTools <\/code><\/pre> <\/li> <li>Ge\u00e7erli bir SSL sertifikas\u0131 edinin ve y\u00fckleyin (wildcard veya RD Gateway sunucusu i\u00e7in)<\/li> <\/ol> <h2>3. RD Gateway Yap\u0131land\u0131rmas\u0131<\/h2> <ol> <li>RD Gateway Y\u00f6netim Konsolunu a\u00e7\u0131n<\/li> <li>Connection Authorization Policies (CAP) olu\u015fturun: <ul> <li>RDPUsers AD grubuna \u00fcye kullan\u0131c\u0131lar\u0131n ba\u011flanmas\u0131na izin verin<\/li> <\/ul> <\/li> <li>Resource Authorization Policies (RAP) olu\u015fturun: <ul> <li>RD Session Host sunucusuna hangi kaynaklara eri\u015filebilece\u011fini tan\u0131mlay\u0131n<\/li> <\/ul> <\/li> <li>SSL Sertifikas\u0131 yap\u0131land\u0131rmas\u0131n\u0131 tamamlay\u0131n<\/li> <li>RD Gateway \u00d6zelliklerinde, istemci ayarlar\u0131n\u0131 yap\u0131land\u0131r\u0131n: <ul> <li>Oturum zaman a\u015f\u0131m\u0131<\/li> <li>\u0130stemci adres alan\u0131 k\u0131s\u0131tlamalar\u0131<\/li> <li>\u015eifreleme gereksinimleri<\/li> <\/ul> <\/li> <\/ol> <h2>4. RD Session Host Yap\u0131land\u0131rmas\u0131<\/h2> <ol> <li>RemoteApp programlar\u0131n\u0131 yap\u0131land\u0131r\u0131n: <ul> <li>RemoteApp Manager'\u0131 a\u00e7\u0131n<\/li> <li>\"Publish RemoteApp Programs\" ile uygulamalar\u0131 ekleyin<\/li> <\/ul> <\/li> <li>Kullan\u0131c\u0131 deneyimi ayarlar\u0131n\u0131 yap\u0131land\u0131r\u0131n: <ul> <li>Masa\u00fcst\u00fc temas\u0131<\/li> <li>Oturum s\u0131n\u0131rlamalar\u0131<\/li> <li>Kaynak y\u00f6nlendirmeleri (yaz\u0131c\u0131, disk, vb.)<\/li> <\/ul> <\/li> <li>Grup ilkelerini ayarlay\u0131n: <ul> <li>AD'den g\u00fcvenlik politikalar\u0131n\u0131 uygulay\u0131n<\/li> <li>Kullan\u0131c\u0131 deneyimi ayarlar\u0131n\u0131 yap\u0131land\u0131r\u0131n<\/li> <\/ul> <\/li> <\/ol> <h2>5. RD Web Access Kurulumu (\u0130ste\u011fe Ba\u011fl\u0131)<\/h2> RD Gateway sunucusuna RD Web Access rol\u00fcn\u00fc ekleyerek kullan\u0131c\u0131lara web tabanl\u0131 eri\u015fim de sa\u011flayabilirsiniz: <ol> <li>RD Web Access rol\u00fcn\u00fc y\u00fckleyin: <pre><code >Install-WindowsFeature RDS-Web-Access -IncludeManagementTools <\/code><\/pre> <\/li> <li>RD Web sayfas\u0131n\u0131 yap\u0131land\u0131r\u0131n<\/li> <li>SSL sertifikas\u0131n\u0131 bu web hizmeti i\u00e7in de kullan\u0131n<\/li> <\/ol> <h2>6. Kullan\u0131c\u0131 Eri\u015fimi Kurulumu<\/h2> <h3>RDP \u0130stemcilerini Yap\u0131land\u0131rma:<\/h3> <ol> <li>RD Gateway sunucusu i\u00e7in bir .rdp dosyas\u0131 olu\u015fturun: <pre><code>full address:s:rdsessionhost.company.localalternate full address:s:rdsessionhost.company.localgatewayhostname:s:rdgateway.company.comgatewayusagemethod:i:1gatewayprofileusagemethod:i:1gatewayauthentication method:i:1 <\/code><\/pre> <\/li> <li>Bu dosyay\u0131 kullan\u0131c\u0131lara da\u011f\u0131t\u0131n veya grup ilkeleri ile otomatik yap\u0131land\u0131r\u0131n<\/li> <\/ol> <h2>7. G\u00fcvenlik ve Test<\/h2> <ol> <li>T\u00fcm sunucularda Windows g\u00fcncelle\u015ftirmelerini yap\u0131n<\/li> <li>Antivirus yaz\u0131l\u0131m\u0131 y\u00fckleyin ve yap\u0131land\u0131r\u0131n<\/li> <li>\u0130\u00e7 a\u011fdan ba\u011flant\u0131lar\u0131 test edin<\/li> <li>D\u0131\u015f a\u011fdan ba\u011flant\u0131lar\u0131 test edin<\/li> <li>Kaynak kullan\u0131m\u0131n\u0131 izleyin ve gerekirse performans ayarlamalar\u0131 yap\u0131n<\/li> <\/ol> <h2>Kullan\u0131c\u0131 Deneyimi<\/h2> T\u00fcm bu kurulum tamamland\u0131\u011f\u0131nda, kullan\u0131c\u0131lar: <ol> <li>RD Gateway'e HTTPS \u00fczerinden ba\u011flanacak (443 portu)<\/li> <li>AD kimlik bilgileriyle kimlik do\u011frulamas\u0131 yapacak<\/li> <li>RD Gateway sunucusu ileti\u015fimi i\u00e7 a\u011fdaki AD ile do\u011frulayacak<\/li> <li>Do\u011frulama ba\u015far\u0131l\u0131 olursa, RDP trafi\u011fi DMZ'deki RD Session Host'a y\u00f6nlendirilecek<\/li> <li>Kullan\u0131c\u0131 RemoteApp uygulamalar\u0131na veya tam masa\u00fcst\u00fcne eri\u015febilecek<\/li> <\/ol> Bu mimari, g\u00fcvenli\u011fi \u00fcst d\u00fczeyde tutarken AD entegrasyonunun avantajlar\u0131ndan yararlanman\u0131za olanak tan\u0131r.","excerpt":"DMZ'de RDP Sunucusu ve AD Entegrasyonu \u0130\u00e7in Edge Sunucu Mimarisi Bu mimariyi kurmak i\u00e7in a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 takip edebilirsiniz. Yap\u0131 \u00fc\u00e7...","created_at":"2025-03-24 14:10:29","updated_at":"2026-09-06 02:25:54","category_id":8,"view_count":1525,"reading_time":4,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-03-24 14:10:29","featured_image":"resimyok.jpg","slug":"dmzde-rdp-sunucusu-ve-ad-entegrasyonu","category_name":"Active Directory \/Azure","category_slug":"active-directory-azure","category_color":"#f59e0b"}