Migrated RD Gateway to the new server, this time implementing MFA via Microsoft Authenticator with a Network Policy Server extension rather than using Duo.