Is there any way we can restrict an exe or an application to not start if another user is already running the application?

We have a tool which conects to a Database and if the tool is used by two users at the same time it creats duplicate entries in  database. So do we have any options to restrict the access to an exe or application only for one user?

Hi,

I am facing above error. After every reboot of RDS server. RDS data base (RDCms) gose to recovery pending status due to that Remote desktop management service stops.

To fix this issue temperrory  i need take data base offline and online  through SQL management studio and then Remote Desktop  management  service starts successfully.

this happen after every server reboot.

I have provide sysadmin rights  and DB owner rights  to below users on the RDcms data base. But still facing same issue. Also

NT SERVICE\MSSQL$MICROSOFT##WID
NETWORK SERVICE
NT SERVICE\ALL SERVICES

-- Followed below articles but no success. Also provide "log on as a service" policy has been configured in default domain policies as per below articles

https://support.microsoft.com/en-in/kb/2832204

https://www.smallbusinesstech.net/more-complicated-instructions/windows/fixing-windows-internal-database-installation-error-on-windows-server-2012

server is using server 2012 standard OS.

Need your help to fix this.

Thanks, Sajjan T

Hello everyone,

We are having the "can't connect, RD Gateway server temporarily unavailable" on RDWeb, only when accessed externally. Internally, the same external URL works.

This feature was working externally some time ago and we are not sure of what exactly broke it.

BPA's only warning is:

"The RD Gateway server SSL certificate must be configured with a valid certificate subject name

Severity: Warning

Problem:
The Remote Desktop Gateway (RD Gateway) server Secure Sockets Layer (SSL) certificate may not have a valid certificate subject name.

Impact:
If the RD Gateway server is configured to use an SSL certificate with a certificate subject name that is not valid, users cannot connect to internal network resources (computers) through the RD Gateway server.

Resolution
Use the RD Gateway Manager tool to select a valid SSL certificate for the RD Gateway server to use."

We have tried other certificates and the result is the same. All other certificates are also ok, they are valid and were made from Let's Encrypt.

Any help will be highly appreciated!

I want to disable desktop from file explorer drop down menu through registry, script or group policy.

screen shot attached

Rox_Star

  We have deployed a RDS server D series V3 VM and a domain controller. which is B series. It is being used by 6 users only so its not a big environemnt. Just to add we are using Premium Disk and RDS server configuration is pretty beefy. The problem is:

1. RDS connection is very slow. Application takes long time to load up.

2. CPU usage on RDS server shows 100 %. 

Any help will be appreciated..

Hi folks,

I have 2 different Win10 laptops signing into my desktop via RD, but both show an older layout of icons than I currently have when working directly from the desktop PC.

If I rearrange icons on desktop, but then RD login, they are still the same as a month or two back.

If I rearrange via laptop when connected to the desktop, no changes are made when I got back to the PC to work.

Frustrating!

Any ideas why it isn't auto-refreshing/updating?

Hi Support,

 I have a Windows 2012 R2 standard that is hosting a LOB application.  7 users are logging in to it using rdp from different locations. The port 3389 is open and we have a static IP.  It was recently hacked.  I need to know  how to put either 2fa or any other safety measures to protect the server?

How can i get an alert if 5consecutiveinvalidauthenticationattempts have occurred?

I appreciate your help.

Jamshid

In earlier versions of Windows Server it was possible to install Remote Desktop Services (RDS) on a Domain controller.

On later versions it was not possible.

What about Windows Server 2019? Is it possible to configure a DC as a RDS?

Regards

Mario

Hi guys,

I am using a Securesign token to connect to an application through my RDP server.

For some reason when I put the USB in port, it takes around 1 to 2 minutes to be recognized by the server.

Another 2 minutes to have the pin screen show up which makes it tedious for users to use the USB to log into their application.

Is there a way to speed up USB processing of local resources on remote server? I am not moving any big chunks of information, it is mainly for authentication purposes.

I need to cut down the waiting time. Is it possible to enable something so that the server gives priority to any connected USBs so it can map them faster?

Thanks,
Teo

Teo

Hi guys,

I consider to create a RD Session host farm. Can anyone explain how software installation works if I add several Session Hosts to a collection? Is it necessary to install an application on each server of the collection manually or is there a simpler way to install an application on all hosts at the same time?

Some of our applications are required only by one RDS user or we own only a license for one installation. Is there a way that some users are connected to a specific RD Session host if they login (for example to the one with an installed graphic application)?

Regards,

Patrick

Dear readers I have the following issue when a user wants to reset their password via the RDWeb password reset.aspx

"Your password cannot be changed. Please contact your administrator for assistance." 

What I have done so far : 

- Went into the IIS Manager and set the "PasswordChangeEnabled" to true.
- Reset the IIS Manager via CMD.
- Activated the logging (which doesn't work by the way).
- Rebooted the host & client to be sure.

Does anyone else have this problem aswell or does someone know the solution to said problem?

Hope to hear from someone.

Kind regards,

Sander ten Voorden

I have a server running Windows Server 2008 R2 which I use as a Remote Desktop Server. Following a reboot the System event logs are full of the following entries "The following fatal alert was received: 40" and "The following fatal alert was received: 70".

I have rebooted again but this hasn't cleared the issue. The server is fully patched.

I have noticed that it coincides with users logging on and logging off.

The Schannel 36887 errors come in a long burst of events preceded by three events.

Source:        Service Control Manager
Event ID:      7036
Description:   The Portable Device Enumerator Service service entered the running state.

Source:        Microsoft-Windows-Winlogon
Event ID:      7001
Description:   User Logon Notification for Customer Experience Improvement Program

Source:        LsaSrv
Event ID:      45058
Description:   A logon cache entry for user *UserName*@mydomain.LOCAL was the oldest entry and was removed. The timestamp of this entry was...

Can anybody suggest what is causing this?

Kind regards

David

We have a external facing web access page that our users use to login from home. When launching the VDI using IE it automatically logs the user in with no prompt. When using Edge users get a 'Login Credentials' prompt when launching the VDI.

Anyone else have this and know how to fix.

Thanks

Hi. 

I have an issue where certain users logon chrashes when it is about to load Exlorer.exe. 
After that they can't press anything and their Desktop is empty with only their taskbar visible but frozen.  
But strangely they can press Windowskey + E and browse without problems.  
If I enter the task manager, there are no processes visible and the user list is also empty. 
There is no logic to when it happens. 

User 1 can have the problem on all my 4 RDS 2012 R2 servere, while other users are logging on fine. 
Right now i fix the problem by forcing the troubled users on another server when it happens. 

Here is my eventviewer log for it: 

I have a Windows Server 2016 Datacenter build that has remote desktop services installed and explorer.exe is crashing several times a day for multiple users. I've attempted to create user mode dumps by they only point to microsoft DLL's as being the cause of the problem (msvcrt.dll and NotificationController.dll)

The following shows the callstack for 3 recent crashes:

BUGCHECK_STR:  HEAP_CORRUPTION_ACTIONABLE_BIASED_HEAP_BLOCK

DEFAULT_BUCKET_ID:  HEAP_CORRUPTION_ACTIONABLE
PRIMARY_PROBLEM_CLASS:  HEAP_CORRUPTION
STACK_TEXT:  
00007ffc`dfa8e718 00007ffc`df9916c3 ntdll!RtlFreeHeap+0x143
00007ffc`dfa8e720 00007ffc`dda59dac msvcrt!free+0x1c
00007ffc`dfa8e728 00007ffc`a67878ed NotificationController!DllCanUnloadNow+0x2e13d
00007ffc`dfa8e730 00007ffc`a67a3512 NotificationController!DllGetActivationFactory+0xde62
00007ffc`dfa8e738 00007ffc`a678f7a5 NotificationController!DllCanUnloadNow+0x35ff5
00007ffc`dfa8e740 00007ffc`a678e1b8 NotificationController!DllCanUnloadNow+0x34a08
00007ffc`dfa8e748 00007ffc`a6773acf NotificationController!DllCanUnloadNow+0x1a31f
00007ffc`dfa8e750 00007ffc`a67734b6 NotificationController!DllCanUnloadNow+0x19d06
00007ffc`dfa8e758 00007ffc`a6774a72 NotificationController!DllCanUnloadNow+0x1b2c2
00007ffc`dfa8e760 00007ffc`ddb582d3 rpcrt4!Invoke+0x73
00007ffc`dfa8e768 00007ffc`ddbbbc0d rpcrt4!Ndr64StubWorker+0xbfd
00007ffc`dfa8e770 00007ffc`ddae68f9 rpcrt4!NdrStubCall3+0xc9
00007ffc`dfa8e778 00007ffc`df5012c9 combase+0x12c9
00007ffc`dfa8e780 00007ffc`ddaeb02b rpcrt4!CStdStubBuffer_Invoke+0x3b
00007ffc`dfa8e788 00007ffc`df54cebc combase+0x4cebc
00007ffc`dfa8e790 00007ffc`df54cb72 combase+0x4cb72
00007ffc`dfa8e798 00007ffc`df54b9f8 combase+0x4b9f8
00007ffc`dfa8e7a0 00007ffc`df549f8d combase+0x49f8d
00007ffc`dfa8e7a8 00007ffc`df54966b combase+0x4966b
00007ffc`dfa8e7b0 00007ffc`df563342 combase+0x63342
00007ffc`dfa8e7b8 00007ffc`ddb3a044 rpcrt4!DispatchToStubInCNoAvrf+0x24
00007ffc`dfa8e7c0 00007ffc`ddb38f5d rpcrt4!RPC_INTERFACE::DispatchToStubWorker+0x1bd
00007ffc`dfa8e7c8 00007ffc`ddb39aae rpcrt4!RPC_INTERFACE::DispatchToStubWithObject+0x15e
00007ffc`dfa8e7d0 00007ffc`ddb19707 rpcrt4!LRPC_SCALL::DispatchRequest+0x177
00007ffc`dfa8e7d8 00007ffc`ddb19d5c rpcrt4!LRPC_SCALL::HandleRequest+0x2bc
00007ffc`dfa8e7e0 00007ffc`ddb3411c rpcrt4!LRPC_ADDRESS::HandleRequest+0x36c
00007ffc`dfa8e7e8 00007ffc`ddb3597b rpcrt4!LRPC_ADDRESS::ProcessIO+0x91b
00007ffc`dfa8e7f0 00007ffc`ddb2862a rpcrt4!LrpcIoComplete+0xaa
00007ffc`dfa8e7f8 00007ffc`df96864e ntdll!TppAlpcpExecuteCallback+0x25e
00007ffc`dfa8e800 00007ffc`df969fb9 ntdll!TppWorkerThread+0x8d9
00007ffc`dfa8e808 00007ffc`dd228364 kernel32!BaseThreadInitThunk+0x14
00007ffc`dfa8e810 00007ffc`df9ae851 ntdll!RtlUserThreadStart+0x21

BUGCHECK_STR:  HEAP_CORRUPTION_ACTIONABLE_BIASED_HEAP_BLOCK

DEFAULT_BUCKET_ID:  HEAP_CORRUPTION_ACTIONABLE
PRIMARY_PROBLEM_CLASS:  HEAP_CORRUPTION
STACK_TEXT:  
00007ffc`dfa8e718 00007ffc`df9916c3 ntdll!RtlFreeHeap+0x143
00007ffc`dfa8e720 00007ffc`dda59dac msvcrt!free+0x1c
00007ffc`dfa8e728 00007ffc`a67878ed NotificationController!DllCanUnloadNow+0x2e13d
00007ffc`dfa8e730 00007ffc`a67a3512 NotificationController!DllGetActivationFactory+0xde62
00007ffc`dfa8e738 00007ffc`a678f7a5 NotificationController!DllCanUnloadNow+0x35ff5
00007ffc`dfa8e740 00007ffc`a678e1b8 NotificationController!DllCanUnloadNow+0x34a08
00007ffc`dfa8e748 00007ffc`a6773acf NotificationController!DllCanUnloadNow+0x1a31f
00007ffc`dfa8e750 00007ffc`a67734b6 NotificationController!DllCanUnloadNow+0x19d06
00007ffc`dfa8e758 00007ffc`a6774a72 NotificationController!DllCanUnloadNow+0x1b2c2
00007ffc`dfa8e760 00007ffc`ddb582d3 rpcrt4!Invoke+0x73
00007ffc`dfa8e768 00007ffc`ddbbbc0d rpcrt4!Ndr64StubWorker+0xbfd
00007ffc`dfa8e770 00007ffc`ddae68f9 rpcrt4!NdrStubCall3+0xc9
00007ffc`dfa8e778 00007ffc`df5012c9 combase+0x12c9
00007ffc`dfa8e780 00007ffc`ddaeb02b rpcrt4!CStdStubBuffer_Invoke+0x3b
00007ffc`dfa8e788 00007ffc`df54cebc combase+0x4cebc
00007ffc`dfa8e790 00007ffc`df54cb72 combase+0x4cb72
00007ffc`dfa8e798 00007ffc`df54b9f8 combase+0x4b9f8
00007ffc`dfa8e7a0 00007ffc`df549f8d combase+0x49f8d
00007ffc`dfa8e7a8 00007ffc`df54966b combase+0x4966b
00007ffc`dfa8e7b0 00007ffc`df563342 combase+0x63342
00007ffc`dfa8e7b8 00007ffc`ddb3a044 rpcrt4!DispatchToStubInCNoAvrf+0x24
00007ffc`dfa8e7c0 00007ffc`ddb38f5d rpcrt4!RPC_INTERFACE::DispatchToStubWorker+0x1bd
00007ffc`dfa8e7c8 00007ffc`ddb39aae rpcrt4!RPC_INTERFACE::DispatchToStubWithObject+0x15e
00007ffc`dfa8e7d0 00007ffc`ddb19707 rpcrt4!LRPC_SCALL::DispatchRequest+0x177
00007ffc`dfa8e7d8 00007ffc`ddb19d5c rpcrt4!LRPC_SCALL::HandleRequest+0x2bc
00007ffc`dfa8e7e0 00007ffc`ddb3411c rpcrt4!LRPC_ADDRESS::HandleRequest+0x36c
00007ffc`dfa8e7e8 00007ffc`ddb3597b rpcrt4!LRPC_ADDRESS::ProcessIO+0x91b
00007ffc`dfa8e7f0 00007ffc`ddb2862a rpcrt4!LrpcIoComplete+0xaa
00007ffc`dfa8e7f8 00007ffc`df96864e ntdll!TppAlpcpExecuteCallback+0x25e
00007ffc`dfa8e800 00007ffc`df969fb9 ntdll!TppWorkerThread+0x8d9
00007ffc`dfa8e808 00007ffc`dd228364 kernel32!BaseThreadInitThunk+0x14
00007ffc`dfa8e810 00007ffc`df9ae851 ntdll!RtlUserThreadStart+0x21

BUGCHECK_STR:  APPLICATION_FAULT_INVALID_POINTER_READ

PRIMARY_PROBLEM_CLASS:  APPLICATION_FAULT
LAST_CONTROL_TRANSFER:  from 00007ffca67659a6 to 00007ffcddab3de5
STACK_TEXT:  
00000000`30c9d488 00007ffc`a67659a6 : 00000000`02cb4260 00007ffc`dc0b5202 00000000`30c90000 00000000`00000000 : msvcrt!memcpy+0xa5
00000000`30c9d490 00007ffc`a67a3505 : 00000000`02cb4450 00000000`02cb44a8 00000000`30c9d488 00007ffc`a6776ea3 : NotificationController!DllCanUnloadNow+0xc1f6
00000000`30c9d4c0 00007ffc`a678f7a5 : 00000000`02cb44a8 00007ffc`a67e3d78 00000000`00000005 00000000`30c9d7b0 : NotificationController!DllGetActivationFactory+0xde55
00000000`30c9d4f0 00007ffc`a678e1b8 : 00000000`02c19c60 00000000`30c9d630 00000000`02cb4240 00000000`30c9d5c0 : NotificationController!DllCanUnloadNow+0x35ff5
00000000`30c9d530 00007ffc`a6773acf : ffffffff`ffffffff 00000000`02c0b4c0 00000000`30c9d9d0 00000000`30c9e190 : NotificationController!DllCanUnloadNow+0x34a08
00000000`30c9d8d0 00007ffc`a67734b6 : 00000000`10b44c38 00000000`00000002 00000000`087fd6c8 00000000`0787cc50 : NotificationController!DllCanUnloadNow+0x1a31f
00000000`30c9dad0 00007ffc`a6774a72 : 00000000`0000de00 00000000`00000000 00000000`0875f828 00007ffc`ddb5824a : NotificationController!DllCanUnloadNow+0x19d06
00000000`30c9dbf0 00007ffc`ddb582d3 : 00000000`02bf2d70 00000000`00000005 00000000`30c9dc70 00000000`30c9e158 : NotificationController!DllCanUnloadNow+0x1b2c2
00000000`30c9dc40 00007ffc`ddbbbc0d : 00000000`30c9e150 00000000`30c9e150 00000000`30c9e130 00007ffc`d2a54808 : rpcrt4!Invoke+0x73
00000000`30c9dcb0 00007ffc`ddae68f9 : 00000000`00a48b00 00000000`00000000 00000000`00a48b00 00000000`30c9e450 : rpcrt4!Ndr64StubWorker+0xbfd
00000000`30c9e380 00007ffc`df5012c9 : 00000000`00000000 00000000`30c9e5b0 00007ffc`d2a55090 00000000`10aaece0 : rpcrt4!NdrStubCall3+0xc9
00000000`30c9e3e0 00000000`00000000 : 00000000`30c9e5b0 00007ffc`d2a55090 00000000`10aaece0 00000000`10b03ab8 : combase+0x12c9

Any suggestions on how to find the cause?

So far...

The system is up-to-date as of this morning

The system has been restarted after the problem started.

sfc /scannow fixed one error:

Hi Guys:

I am stuck in a very strange problem and wonder if someone can help ASAP. It turs out to be a challenge as I have tried everything by the book but no luck.

I have remote desktop deployed with Hyper-V VM1 as RD Connection Broker which is also RD licensing server,Hyper-V VM2 as RD Session Host, Hyper-V VM3 RD Web Access which is also RD Gateway and DirectAccess server ---All running windows server 2012 R2 datacentre 

I have setup an A record corp.publicdomain.co.uk on public domain pointing to our public static internet address and have forwarded ports TCP 443 & UDP 3391 to VM3 (RD Web Access & RD Gateway).

The certificate is issued from our internal Enterprise sub-ordinate CA to *.internaldomain.com & corp.publicdomain.co.uk in CNAME and DNS. This certificates is also installed into Trusted Root authority Store of remote clients and they trust the remote desktop servers.

I have windows 10 Enterprise installed on remote clients which are domain joined and connected to our network with DirecAccess. We only use direct access to apply group policies. Through GP they are set to use our public domain corp.publicdomain.co.uk as RD Gateway, delegate default credentials TERMSRV*.internaldomain.com to ensure SSO and have a setup default RemoteApp connection through public address of RD Web Access. Clients run remote apps by going to Work Resources folder on the start menu and client on published apps icon.

Internally this works fine and also worked fine for remote clients until two days ago when suddenly they encountered a dialogue box:

Windows Security

Enter your credentials

Typer your username and passoword to connect to <FQDN of VM1> which is remote connection broker

and in red The logon attempt failed. Wont login even the credentials are entered again. 

As work around, I have now arranged to connect them through VPN and running apps from RD Web access page from local FQDN/rdweb of RD Web Access server.

I tried to connect from outside from windows 10 home, windows 10 pro and windows 7 and could connect through RD Gateway without any problem. So this pretty much narrows it down to windows 10 Enterprise (64-bit if this matters :))

Many Thanks

hi,

we're suffering from session hosts that produce black screen errors in a RDS 2016 farm.

already connected users can mostly work, all new connections end up with a black screen.

to resolve the error the server has to be restarted.

i can say that

- this error appears after error 1534 (Fehler bei der Profilbenachrichtigung des Ereignisses Delete für Komponente {709E2729-F883-441e-A877-ED3CEFC975E6}. Fehlercode: Das System kann die angegebene Datei nicht finden.) starts appearing in the eventviewer.

- upon checking the registry for this SID i end up at "ProfileNotifyHandler Class app id {E10F6C3A-F1AE-4adc-AA9D-2FE65525666E} inprocserver32, C:\Windows\System32\gameux.dll".

- starting explorer.exe per taskmgr does not open an actual explorer window although the process appears in taskmgr

- tskmgr, eventvwr, cmd can be started without problems

- affected users appear as active in RDS management

- no third party security software is installed

- farm is fully patched

- HKLM\Software\Microsoft\WindowsNT\CurrentVersion\ProfileGUID and ProfileList are ok (no old or .bak entries)

looking forward on how to resolve this without  rebooting the server or a permanent fix

thank you

best regards

I have randomly only Black Screen, when a User logs on to a Windows 2016 Terminal Server. Sometimes, I am able to log off the User, but sometimes not even this is working and I have to reboot the Server - in this case the server crashes on Reboot after a longer time out in the shutdown progress.

The Server ist fully patched trough Windows Update. I tried already lot of suggestions that I have found in forums on the internet - nothing helped. As lots of other Admins are facing a similar problem with in different configuration, I think this should be addressed by Microsoft - or does anyone have an idea on how to solve it?

- The Terminal Server is running on a Hyper-V Server 2012 R2 in my case - but I have seen other Admin having the same problem on hardware install as well
- Antivirus is Symantec Enterprise, but I have other Admins seen having same problem with other Antivirus
- Firefox is installed on my Terminal Server
- Only two Users are working on this Terminal Server
- The problem seems to occur at least one time a week - but I also have made 50 logins and logouts in a row with the user and it did not happen one time
- All Users (in my case both Users) can be affected by the problem
- Ctrl+Alt+End does not work (so the User could logoff himself or start Task Manager

Hi there,

Is it possible to register a remote PC that I would like to control to a publicly available RDP gateway?   I'd like to be able to register from the remote PC to establish the RD gateway as a relay to distributed devices rather than require the devices I want to connect to be within the network.