I have server 2012 R2 that was recently hacked. Is there any Microsoft product or third party product to encrypt the server data?
I appreciate your help.
Thanks
Jamshid
↧
encrypting the server
↧
One server in Connection Broker Collection is not getting users logged into it
I have a collection of 6 Session Host servers. All of the servers except one are allowing users to log in. I can see in server manager that I have 61 connections total, but none of them to this one specific server. I have confirmed that "Allow New Connections" is set to true. I'm not sure where else to look to find out why users are not being redirected to this one server.
↧
↧
Printers not available using remote desktop connection
Dear Concerns,
We are using Windows 7 for client and they use Remote Desktop Connection to run SAP application on server 2012 that is placed in another location. Our users are connected with that server using dedicated LAN through internet. The problem is we want to share printer and drives during remote desktop session, for this purpose we had make a tick sign on local resources on printers and drives in Remote Desktop Connection application. The drives are available during remote session but printer does not shown there. The model of printers are HP 2015, 2050, 2055, 4042. While these redirect printers are available in local server 2012. Please provide assistance regarding this.
Your kind reply will be highly appreciated.
↧
Remote App Full Desktop Access
Hi,
I'm just carrying out some experiments with Remote App (which I've not used before).
Basically it seems to work with at least some of the apps I need to publish, but I have found that non-admin users can still log into the full desktop using the RDP client - I understood it was either remoteapp or full desktop, but my test system seems to allow either.
Have I missed a setting somewhere? I won't want the users to be able to log into the full desktop.
Thanks
p.s. it's Server 2016
David
↧
RemoteAPP after windows 10 update 1803 are slow and right mouse button is not responding (it reacts only sometimes)
Hi,
our workstations with Windows 10 pro are in this weekend updated to version 1803. For main system we use RemoteAPP aplications on Windows server 2012R2 (Windows server 2012R2 is full updated). After update on client station are RemoteAPP slower, and right mouse button is unresponsive, or react verly long time...
It is a big problem for us.
PS: after replace mstsc.exe and mstscax.dll from older version Windows 10 is all OK. but this is not a solution.
Thanks.
↧
↧
Save website passwords not working properly with credential manager in windows 2012r2 RDS
Hello,
I can not beleive that we are the only one with this problem. I started a question about this issue a long time ago. (see https://social.technet.microsoft.com/Forums/windowsserver/en-US/03d614d5-5fb8-44ed-a2f7-3e439a62d265/web-passwords-not-saved-in-credential-manager?forum=winserverTS)
For now we had a workarround by using google chrome but because they will end the java and silverlight plugins we need to go back to Internet Explorer.
The problem:
When using Roaming Profiles in an RDS environment the Profiles are deleted at logoff (policy setting). The credential manager saves encrypted files in the directory "%USERPROFILE%\Appdata\Local\Microsoft\Vault . So when the profile is deleted at logoff the vault directory is lost and so are all the saved website passwords. So when we login to another server no saved website passwords are there.
So now we are testing with Universal Profile Disks. With UPD the localappdata folder is retained when logging into another server. BUT the credential manager is still not working properly.
When you save the passwords on server1 the passwords are saved in encrypted files in the users vault directory . When you login to server2 the files are still there but credential manager will not read them UNTIL you restart the credential manager service on that server. When restarting the service then Credential manager will read the vault directory and show the saved passwords.
I think the solution is that when a user logs on to a server then credential manager will need to read the password files in the vault directory. But that is not the case.
I hope that someone can help because this is crazy. I also contacted MS support but had no luck finding a engineer that understands the problem.
↧
Users get access to desktop trough remoteapp
When starting a remoteapp the user gets access to the underlying desktop. They even got the update notification, but I sorted this with registry key
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MusNotification.exe" /v "debugger" /d "rundll32.exe" /f
Which basically redirect the popup notification to rundll32 which again run silent. Found this on another forum.
Why are the users getting access to the desktop? Is there a way that one can restrict them with a GPO to avoid this?
We are running windows 2016 RDS
↧
Remote Desktop into Server 2016 gives black screen. Same issue as bug recently found/fixed in 2012 R2
Is anyone aware of a fix to this issue?
See the post from Sasha (Microsoft): here
Here is a post to the MS KB acknowledging and providing a resolution for 2012 R2:here
To resolve the issue when it happens, i need to kill the TermService service (it won't stop normally as it is in a deadlock state). I can then start the service again and it's business as usual until it happens again.
I can't see any info about this in RDS 2016... Anyone else? MS?
Thanks,
Stephen
↧
The Server Pool Does not Match the RD Connection Brokers That Are In It. Errors: 1. Cannot connect to any of the specified RD Connection Broker servers
I had recently installed RDS role and liscensed it with 50 User CALs. it got activated successfully. after 5 days, I logged i to deploy few RemoveApps, but am getting the above error. I tried restarting the server, I tried manually restarting the Remote Desktop Management service, but it wont start. it gives an error saying "The service has started and stopped"
The server is fully patched. there are no pending patches. Kindly help with a resolution.
↧
↧
2 separate certificates on Public and private IP addresses.
Hello,
we have servers with private and public IPs at the same time(using 1 NIC).
I am able to connect to it using hostnames: host123.companydaomin.com or host123.windowsdomain.local
for the second option we have applied the certificate host123.windowsdomain.local but we still need to have the ability to use another certificate which will cover name host123.companydaomin.com.
Is it possible to do it in windows 2012 r2?
One certificate can be mapped using steps from this link https://support.microsoft.com/en-us/help/3042780/remote-desktop-listener-certificate-configurations-in-windows-server-2
but I need 2.
↧
Unable to start RDMS service
am using Windows 2012 R2 server, I have licensed it with 50 user CALs. I want to deploy apps via RemoteApps, but I cant get into the overview of the Remote Desktop services. when I try to start the Remote Desktop management service, it throws an error saying"The Remote Desktop Management Service started and stopped.Some services stop automatically if they are not in use by other services or programs"
I really need to fix this. Please help.
↧
Limit windows server 2016 RDP sessions to one
Hi,
By default the number of available RDP sessions is 2, but I'd like to limit the number of RDP sessions of a windows server 2016 to only one (even if the user is an administrator). ¿Is that possible?
P.S. My server has no RDS role active.
Thanks in advance,
Patxi
↧
RemoteApp file type association
Hi,
In our environment we have 2 RDSH servers:
RDSH1: Session Host
RDSH2: RemoteApp with a couple of applications installed on it, like "Office"
Each RDSH in a different collection.
I enabled file type association on my RemoteApp, but unfortunately it's not working on the Session Host RDSH1.
The RDSH collections are added to the work resources on RDSH1, and users are able to access to the RemoteApps, but they .xlsx files can't be open using the RemoteApp, my users has to open excel and open the file, which is annoying for them.
Does anyone knows what is missing in this deployment to enable file type association on the session host.
Thanks,
Housam Smadi
If you found this post helpful, please give it a "Helpful" vote. If it answered your question, remember to mark it as an "Answer". This posting is provided "AS IS" with no warranties and confers no rights! Always test ANY suggestion in a test environment before implementing!
↧
↧
RDWeb Password Reset not working - Windows Server 2016
Dear readers I have the following issue when a user wants to reset their password via the RDWeb password reset.aspx
"Your password cannot be changed. Please contact your administrator for assistance."
What I have done so far :
- Went into the IIS Manager and set the "PasswordChangeEnabled" to true.
- Reset the IIS Manager via CMD.
- Activated the logging (which doesn't work by the way).
- Rebooted the host & client to be sure.
Does anyone else have this problem aswell or does someone know the solution to said problem?
Hope to hear from someone.
Kind regards,
Sander ten Voorden
↧
RDS 2016 - minimize or switching application crashes/freezing window.
Greetings everyone.
We are using an application with RemoteApp.
We had no issues with Windows Server 2012R2.
Installing the very same application on a Server 2016 Standard (new rds farm on WS2016), weird things started happening.
When a user is minimized or switching another application (full screen mode) the window goes freeze or show strange stripes.
If you right click on it choose expand/deploy the application normalize
Problem аppears on 10-20% workstation with different OS or CPU or Videocard or Screen resolution.
Thank you all for any help you could provide me.
Regards,
↧
2fa for access anywhere
Hello Support,
have server 2012 r2 essential. I have access anywhere set up and using a ssl certificate from Go Daddy. For security purposes I want to know if one can implement the 2FA for the remote users accessing their computers in the office? Thanks for your help.
Jamshdi
↧
Windows RDS Server 2019 looking for Windows 2016 Licensing Server
This is the most ridiculous thing I've ever seen. Our DC is Windows Server 2019 and we have a member server Windows Server 2019 as our RDS Server. I couldn't get the RDS server to see the DC running the RDS Licensing role, so I installed the
RDS Licensing role on the RDS server, activated it and installed the 10 per user pack. It obvious can't see itself, but what is even more weird is that it's asking for a Windows 2016 Licensing server when it should be looking for a Windows Server 2019 Licensing
server. What is really sad is that MS support isn't trained on Windows Server 2019 (BTW, a released product), so us as a MS Partner can't support our customers who embrace Windows Server 2019. If anyone has any ideas, I'd be open to a conversation.
↧
↧
Configuring RDWeb with custom RDS listening port
We are using a custom port for RDS on the server. Works properly
We also disable UDP via GPO for access to remote desktop server.
When I connect to the RDWeb I can access (SSL configured porperly) But now when I try to access any apps it fails on opening remote port.
RD GW Mgr -> Resource Auth Polciy -> Default policies created
RDG_AllDomainComputers -> Changed port from 3389 to match custom port
RDG_RDConnectionBrokers -> changed port from 3389 to match custom port
I have all RDS roles on single server. Using CA root Cert.
Any suggestions would be helpful.
Thanks,
SJ
↧
Windows update breaks Remote Desktop service on Windows 2008 R2
Dear Sir,
We hit the issue on 2 windows updates - KB4462915 & KB4462923 (KB4462927). Once we apply them, the RD connection via RD gateway to RD Host is not working. but the internal connection is no issue if I bypass the RD gateway.
In Event Viewer, I found the connection and resource authorization polices are passed but it can't connect to the farm address with warning / error message below in different logs
TerminalServices-Gateway Log: The user "DDD\ABC", on client computer "W.X.Y.Z", met connection authorization policy and resource authorization policy requirements, but could not connect to resource "farm.domain.name". The following error occurred: "817".
System Log: A fatal error occurred while creating an SSL client credential. The internal error state is 10013.
There are the system setting we applied on Remote Desktop Service (all RD servers are Windows 2008 R2),
- Only TLS1.2 is enabled with FIPS (Disabled TLS1.1/1.0)
- "Send NTLMv2 response only" is applied
- RD Gateway and Broker are in the same server and RD Host is in the other machine
If we can enable TLS1.0 on RD Gateway, the RD connection can be resumed but this is not a good solution and will leave the backdoor on server.
Besides, we tried to change security layer to negotiation or enabled back NTLMv1 on servers but they didn't help.
I suspect the main issue might be on the change by KB4462923(KB4462927) which fixes TLS1.0/TLS1.1 issue on FIPS (see below) but MS didn't have a fix for RDG / RDCB to support TLS1.2 completely
- Addresses an issue that makes it impossible to disable TLS 1.0 and TLS 1.1 when the Federal Information Processing Standard (FIPS) mode is enabled.
At this moment, we only can stop the windows update on RD gateway to prevent the blocking again on RD connection.
I tried to apply the latest windows update (up to Jan 2019) for the test but the problem is still there...
Does Anyone have the solution to enable TLS1.2 only for RD Service for Windows 2008 R2 with update applied?
Any advice is much appreciated..
MK
↧
Bg image vs solid color, adding to amount of network traffic?
Hi,
How does the RD protocol work? Would a RDS session background image add to the amount of network traffic compared to a solid color background?
Thanks
↧