Systems · Remote Desktop
ZeroVDI
Securely publish Remote Desktop through the browser and the native Windows client.
ZeroVDI publishes Remote Desktop securely — through the browser and through the native Windows client. It is a lightweight Remote Desktop Gateway that exposes internal RDP hosts to authorised users without dropping them onto the network with a VPN.
The challenge
Giving people remote access to internal machines usually forces an uncomfortable choice: open RDP to the internet (a well-known attack magnet), or put everyone behind a full VPN (broad network exposure, heavy client setup). Neither is a good fit for a zero-trust posture, and neither gives users a clean, native way to see just the resources they are actually allowed to use.
The approach
I built an ASP.NET Remote Desktop Gateway that brokers RDP over a single, authenticated entry point, and paired it with a native discovery experience:
- A workspace feed implementing the RemoteApp and Desktop Connections protocol (MS-RDWR), so users subscribe directly inside the Windows Remote Desktop app and see their authorised resources listed.
- Per-user authorization — only the resources a user is entitled to are returned, and every generated
.rdpis pre-configured to route through the gateway. - A signed-in web console for browsing and launching resources, and a containerised deployment for easy, repeatable rollout.
The outcome
Remote access that is both safer and nicer to use: no exposed RDP, no blanket VPN, and a native, self-service experience where users simply subscribe once and find everything they are allowed to reach.