I am looking for a way to allow domain users click the .rdp file and it can auto automatically logon the remote desktop server and run remote app with their AD credential. I currently published the remote app and downloaded the remote app .rdp file to the workstation. But it still requires users to type username and password to logon, then the remote app run.
Thanks,
Hanson
Hi,
For some reason I had to install a local printer queue on my Windows Server 2016 XENAPP server. We use RES Workspace Manager as well.
Now i can set a network printer as default, but how can i achieve this with a local printer queue?
Hello Everyone,
I recently took over our Remote Desktop Services and am trying to familiarize myself with it. I am noticing that some of our users while on the local network connect through the gateway server. I noticed some of them are Mac users and use the MS RDP client to connect to Remote Desktop Services. I realized that the latest update of the client forces users to go through the gateway no matter if they are on the local network or at home. Where the RDP client before the latest update didn't do that.
Also, I have a few windows users going through the remote gateway server when they are on the local network. I am not able to explain why that is happening. If someone could help me understand that it will be greatly appreciated.
Third I have noticed after the last windows updates the shift key when opening an Acess database is no longer working when using Remote Desktop. Is there a workaround for opening the Access database using the shift key?
Thank you,
Vince
Several users across two different terminal servers are being forced into using a temporary profile. I have no way of knowing if they are logging off (despite continued re-education) or if they are just disconnecting, leaving the session to be interrupted later. The only way I've found to fix it is to reboot the Terminal server.
If I check regedit under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList, I don't see a .bak. I can sometimes see the ProfileImagePath is to a temp folder.
The users have a roaming profile that's saved to the fileserver upon logoff. I can get into the folder, but if I try to go to a sub folder, I don't (as a domain admin) suddenly have access. So the profile server isn't able to do anything either. I could probably TAKEOWN on the folder, but that's not telling me what's causing this issue.
Is there anyway to fix this without rebooting? Also, what could be causing this? We've had more in the past 3 months than since I've started working here.
Ben Rollman
Team,
Thanks in advance, I've configured RDS environment with session host, web access, connection broker and a RD gateway server.
I've enabled MFA calling through Azure MFA Server using the below link which Microsoft suggests. But I wanted MFA calling for external users and not when users coming from internal IPs.
In MFA console we have trusted IPs tab where we have to put in the users IP or IP range, but here as the authentication is sent by the RD gateway server everything is ignored by the MFA server and for internal users as well I'm getting MFA Calling.
Has anybody tried it before? This cannot be achieved through Azure MFA but can be achieved through NPS policies but unable to achieve it.
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfaserver-nps-rdg
Running Windows Server 2016 Remote Desktop Services (session-based desktops).
Multiple session host servers, one DC, all running as VMs under Citrix XenServer 7.1. The servers are fully updated to present time as of 7 March 2019.
Every few days a user reports that after logging in to an RDS session he does not see his desktop but sees a black screen. When this happens, I can see that some users on that same RDS server still have their session working normally, but every user logging in after this also gets this black screen.
There are numerous references to this problem on the internet. It is apparently occuring since Server 2012 and has never been fixed.
Some people recommend to restart the Windows Audio service. Does not help in my case, never does when it happens to me. Other recommendations were to remove Firefox browser from the RDS session host servers. I did that two months ago and it seemed to help for one week but then it came back. I have not found any other recommendation - there seems to be simply no solution, except restarting that RDS session host server, which is a major inconvenience, it throws out the other users which still work, it takes 10 minutes or more to restart that server, and it can only be done manually. Most often it has to be force-restarted on top of it, as the server is totally unresponsive, and then some users may loose their user profile. Then I have to delete that user and recreate his user profile. Major trouble.
In the last few months I have rebuilt all RDS session host servers from scratch - total new installation, all updates, totally clean. It STILL happens.
From what I can find on the internet this problem occurs since the release of Windows Server 2012. This is seven years ago. I do not know if this happens to everyone, but there seems to be no common denominator from what I can find, it seems to happens on all sorts of environments, pointing to a bug within Windows Server itself.
Is there ANYTHING I can do about this?
WHEN IS THIS GOING TO GET FIXED? THIS IS A PROBLEM SINCE 2012 - 7 YEARS! WHICH COMPANY CAN AFFORD TO NOT FIX A GLARING BUG IN THEIR SOFTWARE FOR SEVEN YEARS? THE LICENSES ARE EXPENSIVE AND THEN IT DOES NOT EVEN WORK.
I keep researching for non-Microsoft solutions for RDS type because I simply cannot tolerate non-functional software. To the users it looks like it is me as admin who is not doing his job!
Atradius
I've seen this error discussed, but need little more detail. I want to understand how to create RDS Farms with correct initial settings to avoid this.
When clicking on a Remote Desktop Icon for a remote collection (Sage_Sales). I enter my credentials and see this dialog.
Then I see this warning about the certificate mismatch.
Then I see this error if I click [Yes]
Can someone explain why each dialog/error is displayed?
I want to be able to look back at this thread, and correct my configurations.
Regards
Hi,
Hoping someone could answer my question. We have a customer on Domain A currently with a domain trust to our environment Domain B, we host an RDS collection and they authenticate with their Domain A credentials to be able to access their Remote Apps over a site-to-site VPN. They wish to remove the Two-Way domain trust now and suggested using ADFS for authentication.
Is this possible? Without a domain trust how can we authenticate their users to our environment without their users needing to log in multiple times?
Thanks
C
Hi,
Is it possible to add a computer to a local computer group in RD Gateway using Powershell commands.
I want to be able to do this via a script e.g.
import-module RemoteDesktopServices
cd RDS:
cd GatewayServer
cd GatewayManagedComputerGroups
cd "<resource group name>"
cd computers
However if I DIR at this level the Permissble Options are only Get-Item or Remove-Item.Is there a way adding a computer using similar commands another way that I could automate this process?
Many thanks.
Scott.
Scott S.
Hello everyone!
Please note: All the servers in this case are WS2008r2 unless otherwise stated.
I've got a client whose active directory domain is let's say "int.domain.com". However the only 3rd party ssl cert I have to work with is a wildcard certificate for "*domain.com".
When users connect to the remote desktop service, ie they connect via rds.domain.com - they initially get the wildcard certificate, but when they are then directed to the individual remote desktop servers, they get an error because they then receive the self signed cert for the servers - rds1.int.domain.com and rds2.int.domain.com.
I've added the hostnames for rds1 and rds2 to the domain.com DNS on my domain controller, so that rds1.domain.com points to the IP address of rds1.int.domain.com etc.
I need a way of getting the rds service to use the rds1.domain.com and rds2.domain.com dns names so I can authenticate them using the wildcard cert.
Is this possible!?
Getting to where I HATE certs.
2 node 2016 RDS farm. Generated a SAN cert from my MS CA. It contains common name *.xxx.xxx. The SAN names are the Farm FQDN and the FQDN of both servers.
Imported this into the Server Manager RDS Deployment Properties successfully.
It WORKED properly after I imported those 2 certs that afternoon, several times.
Then, the next day, the 2nd server (not the first) decided it would use the Self-Signed RDS cert it has rather than the SAN cert assigned the previous day.
So, I have 1 server (which is a Gateway and session host) use the SAN cert, but the 2nd (session host only) uses a self-signed.
WHY? Any suggestions on how to fix?
I have an rds farm with three rds_host servers. I have defined three domain user groups for sage_sales, sage_admin and sage_outside.
I have three collections pointing to the three rds host servers; sage_sales, sage_admin and sage_outside.
In my tests:
When I setup a user Joe in the Domain user manager, and make him a member of the sage_admin group, he can log into the RDWEB portal by entering his domain.user/password and clicking sign in. He is presented with the collection icon as shown below.
Clicking on the Sage_Admin icon takes the user to a successful remote session on the correct rds host configured for sage_admin users.
When my test user Joe is a member of two groups (sales_group and admin_group), he is presented with two collection icons after signing into the rdweb portal as shown below:
However Joe can only connect using the Sage_Admin icon. When clicking the Sage_Sales icon, the following error dialog is displayed.
What is happening here? I can't find any difference in the group rights.
Does the Set Primary Group in the Domain User settings effect which icons are available in an rdweb session?
Comments on these configuration options would help. What a battle!!
When I log in RDS servers to try and publish applications to RD Web Access. The Collection tab is missing under my profile. Other users log into the server and the Collection tab is visible. Does anyone know the fix for this?
Hi Windows 10,
I am having an issue with Windows 10 - every day.
But last 3-6 months, remote desktop connections fail with a black screen on my network!
Now I have started to feel true hate towards this OS, as this error, now seems to settle as a forever error that will stay?!
Issue is using RDP to other Windows10 device on my network, now serves a black screen after connection has been idle for some time - or it just turns black, just as i log in?!
I am able to remove black screen - only if disconnect, and reconnect. But again. After some time. I get a black screen again?!
As Windows continues with their disapointments towards the proffesionals on Windows10 since release.
This error in question, I really want fixed - to be working as it has always been - since the dark ages . RDP should just work! Every time - all the time.
So anyone - before I look up a lawyer to fight this - Please assist with the right trick to get this fixed......
Awaitng that true fix------ anyone?
Regards, Kato.
I have created 2 new remote app connections for different modules of the same application in TS 2008 R2. I am trying to launch them via a remote apps web front end on a Win7 Enterprise workstation fully patched.
One connection works fine but the other errors out immediately with "This RDP file is corrupted. The remote connection cannot be started." If I do not digitally sign the connection to the remote app site both connections work fine. All other connections published on this server work fine.
Thanks
Sean
Sean Evans
Hello!
I am looking for explicit information about Disconnect option in Remote Desktop Services for Windows Server 2016.
Til now, I not found an official Microsoft doc talking about whats is the correct group that allow the non-admin group to disconnect an user for RDS Windows Server 2016. Could someone help me?
“Vote As Helpful” and/or “Mark As Answered” - MCSA - MCSE - http://www.ucsteps.com/
Keeping seeing this event id in DPM when I try to back up a sql db. Other db's backup on that server without issue. It's in the default instance. I have verified the permissions. SQL 2012 R2 DPM 2016 both server on 2012 R2 for the OS.
An unexpected error occurred while the job was running. (ID 104 Details: The parameter is incorrect (0x80070057))
Please advise how to fix