I've seen this error discussed, but need little more detail. I want to understand how to create RDS Farms with correct initial settings to avoid this.

When clicking on a Remote Desktop Icon for a remote collection (Sage_Sales). I enter my credentials and see this dialog.

Then I see this warning about the certificate mismatch.

Then I see this error if I click [Yes]

Can someone explain why each dialog/error is displayed?

I want to be able to look back at this thread, and correct my configurations.

Regards

I have an rds farm with three rds_host servers. I have defined three domain user groups for sage_sales, sage_admin and sage_outside.

I have three collections pointing to the three rds host servers; sage_sales, sage_admin and sage_outside.

In my tests:

When I setup a user Joe in the Domain user manager, and make him a member of the sage_admin group, he can log into the RDWEB portal by entering his domain.user/password and clicking sign in. He is presented with the collection icon as shown below.

Clicking on the Sage_Admin icon takes the user to a successful remote session on the correct rds host configured for sage_admin users.

When my test user Joe is a member of two groups (sales_group and admin_group), he is presented with two collection icons after signing into the rdweb portal as shown below:

However Joe can only connect using the Sage_Admin icon. When clicking the Sage_Sales icon, the following error dialog is displayed.

What is happening here? I can't find any difference in the group rights.

Does the Set Primary Group in the Domain User settings effect which icons are available in an rdweb session?

Comments on these configuration options would help. What a battle!!

Whenever I connect to more than one RDP session that is through a gateway, some of them will not allow me to log on.  I get the error "The logon attempt failed" and that is all.  If I disconnect from some of the other sessions and reboot my computer, I can then connect to the server that was given me said error.

I can also connect to the server giving me said error without closing down other sessions or rebooting by connecting through a Hyper-V virtual machine on my computer. 

None of this makes any sense.  Has anyone else seen this behavior?

James

I am looking for a way to allow domain users click the .rdp file and it can auto automatically logon the remote desktop server and run remote app with their AD credential. I currently published the remote app and downloaded the remote app .rdp file to the workstation. But it still requires users to type username and password to logon, then the remote app run.

Thanks,

Hanson

Hi Windows 10,

I am having an issue with Windows 10 - every day.

But last 3-6 months, remote desktop connections fail with a black screen on my network!

Now I have started to feel true hate towards this OS, as this error, now seems to settle as a forever error that will stay?!

Issue is using RDP to other Windows10 device on my network, now serves a black screen after connection has been idle for some time - or it just turns black, just as i log in?!

I am able to remove black screen - only if disconnect, and reconnect. But again. After some time. I get a black screen again?!

As Windows continues with their disapointments towards the proffesionals on Windows10 since release.

This error in question, I really want fixed - to be working as it has always been - since the dark ages . RDP should just work! Every time - all the time. 

So anyone - before I look up a lawyer to fight this - Please assist with the right trick to get this fixed......

Awaitng that true fix------ anyone?

Regards, Kato.

We recently setup a Windows 2016 RDS collection. This consists of the following servers:

 - Server 1 (RDS Broker, RDS Licensing)
 - Server 2 (RDSH)
 - Server 3 (RDSH)
 - Server 4 (RDS Web Access & RDS Gateway) (server 4 is located in our dmz)

We have an external dns record "apps.somedomain.co.uk" which points to server 4. 
We have an internal dns record "rds.somedomain.local" which points to server 1.

We can successfully browse and log into https://apps.somedomain.co.uk\rdweb, however, when we attempt to connect to the RDSH farm, using the RDP shortcut within the RDWeb portal, it attempts to log us directly onto the gateway/web access server (server 4) rather than query the broker and direct the session onto one of the RDSH servers!

Internally, if we RDP to rds.somedomain.local we are successfully redirected to one of the RDSH servers and we can see user session are being load balanced.

We have deleted and recreated the rds collection but we get the same issue. Below is a screen shot of what we see when using the RDP shortcut within the RDWeb portal. It appears both the 'remote computer' and the 'gateway' are pointing to the same dns record which resolves to the gateway/web access servers. How can we update the collection settings so the RDP shortcut has the correct dns address for both remote computer (ie: rds.somedomain.local) and gateway server (apps.somedomain.co.uk)?

Hello everybody,

I'm planning to install a new RDS farm with Server 2019. I'm customizing everything I need, but got stuck at the start menu.
How can I hide/remove the integrated Apps from start menu like Settings, Search and Windows-Security.
I'm ok with Settings and Search, but Windows-Security must be hidden before I can deploy this new farm.

Thanks for your help.

When I originally Activated the server licensing via Licenses Wizard using our schools Enrollment ID I may have used an older Enrollment ID number.

I think maybe that was the issue. All I know is when I when into the RD licensing Diagnoser it showed that the Remote Desktop Version Host Server Version is:  Windows Server 2016.

... AND I AM RUNNING WINDOWS 2019 ...

After trying everything i know DE-activating, then re-activating with a more current Enrollment ID for our high school. Did not change anything.

So, removed ALL the remote desktop services and then reinstalled and reactivated. Still did nothing to change the information in the Diagnoser.

The information still shows in the Diagnoser:  Windows Server 2016

HOW CAN I GET RID OF THIS PROBLEM? 

Thanks,

Dave

hi

for past months , every time we created a new PC we added some users in the Remote desktop users ( including user himself ) , now we have a new security policy that avoid the user to be in RDU list , how can i remove the users and keep others through GP ? i know how to add , but remove its not work for me.

in simple word i need to create policy , and put name in it , then deploy that policy to over wright the current names.

Osma Othman

Hi we have a mix of new and old HP thin clients. 

I have 2 RDS session Hosts (server 2016) and one of them is the Broker. 

Some of the thin clients do not have a setting for broker address or load balance URL 

should i just use DNS round robin to load balance between the 2 hosts ?

I would like to use User Profile Disks. - Is this supported with DNS round robin?

I am trying to connect to a remote computer that is Azure AD joined. Both the client and host computer are running Windows 10 version 1809. Currently I am connecting without NLA to be able to authentication myself, but I would like to connect with NLA.

According to this article: https://docs.microsoft.com/en-us/windows/client-management/connect-to-remote-aadj-pc this should be possible, providing you use the username format "AzureAD\JeroenDeWit" to connect. However, this results in an error stating "Your credential did not work. Remote machine is AAD joined. If you are signing in to you work account, try using your work email address." I can't post a screenshot because my account is not verified yet.

Other guides like https://cloudbuilder.io/documentation/Windows10Pro-RDP-AzureADJoined/ also suggest authenticating without NLA.

Am I doing something wrong or is Microsoft doing something wrong? :)

Hi All,

We have a RDS farm with 2 RDS Hosts and 1 RDS Broker, the user profiles saved on a shared folder.  we installed a print server on both RDS Hosts.

Everything works fine until when users tried to edit a xerox workcentre 5945 settings (set print password, print on one side ..).

we found that the settings not saved after print process lunch and everytime user must change the settings.

im trying to fix it, thanks for your help.

We have the following RDS 2016 configuration:

Server 1 - RDC Broker 
Server 2 - RDSH 
Server 3 - RDSH
Server 4 - RD Web Access & RD Gateway (sits in a DMZ)

To comply with PCI standards we would like to disable TLS v1.0 on our internet facing servers (ie: Server 4). If we disable TLS1.0, either manually through regedit or by using IIS Crypto, the shortcut within RD Web Access no longer works.

Has anyone managed to successfully disable TLS1.0 on their RD Web Access/RD Gateway server without breaking it? Any documention or guides on how to achieve this?

Hi Guys,

From last 3 months i am having issue with my Windows Server 2012, that after login it (RDP or VMWare Console), screen goes black with a cursor. I tried use Alt+Ctrl+End trick to get the task manager but that is also not appearing. I am using vSphere Client version 6.

Also i want to add, that if i login to Safe mode, i can see the display. (No issues)

Many Thanks.

Areeb Hassan

Hello!

I am looking for explicit information about Disconnect option in Remote Desktop Services for Windows Server 2016.

Til now, I not found an official Microsoft doc talking about whats is the correct group that allow the non-admin group to disconnect an user for RDS Windows Server 2016. Could someone help me?

“Vote As Helpful” and/or “Mark As Answered” - MCSA - MCSE - http://www.ucsteps.com/

I'm having an issue on a single RDS 2016 server at the moment where the start menu doesn't open.  

I've gone though lots of steps including sfc /scannow  (No errors)   DISM with all the options (No Errors)

I've cleared the Registry in firewall policy\restricted services\configurable\system.

I believe the issue is that I don't have any applications registered in the get-appxpackage at all, it just comes back blanks where as on working machines I get a list of about 15.

I've tried to install the packages by hand using variations of 

Add-AppxPackage -DisableDevelopmentMode -Register C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\AppxManifest.xml -Verbose 

This returns the following;

Add-AppxPackage : Deployment failed with HRESULT: 0x80073CF6, Package could not be registered.
An internal error occurred with error 0x800705AA. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
NOTE: For additional information, look for [ActivityId] 5597e571-c93a-001c-e6eb-97553ac9d401 in the Event Log or use the command line Get-AppxLog -ActivityID
5597e571-c93a-001c-e6eb-97553ac9d401
At line:1 char:1
+ Add-AppxPackage -DisableDevelopmentMode -Register C:\Windows\SystemAp ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : WriteError: (C:\Windows\Syst...ppxManifest.xml:String) [Add-AppxPackage], IOException
    + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand

If I then use Get-AppxLog -ActivityID5597e571-c93a-001c-e6eb-97553ac9d401

Time                      ID           Message
----                      --           -------
20/02/2019 17:22:29       301          The calling process is powershell.exe
20/02/2019 17:22:29       603          Started deployment Register operation on a package with main parameter: AppxManifest.xml and Options: 0. See
                                       http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       10002        Creating Resiliency File
                                       C:\ProgramData\Microsoft\Windows\AppRepository\75f29027-c919-4974-89c9-f53bb4413b5f_S-1-5-21-1787921346-3847137862-2124306101-500_1.rslc for
                                       Register Operation on Package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy.
20/02/2019 17:22:29       607          Deployment Register operation on package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy has been de-queued and is running
                                       for user FISRDS1\Administrator.
20/02/2019 17:22:29       613          Adding uri to the list of Uris: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\AppxManifest.xml.
20/02/2019 17:22:29       447          GetFullyQualifiedReference from the String Resource Map for package full name:
                                       Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy and reference string: Microsoft Corporation failed.
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.visualElements windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.search windows.fileOpenPicker windows.fileSavePicker windows.cachedFileUpdater
                                       windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch windows.fileTypeAssociation windows.protocol
                                       windows.appointmentsProvider windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks
                                       windows.webAccountProvider windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService
                                       windows.appointmentDataProvider windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience
                                       windows.dialProtocol windows.restrictedLaunch windows.accountPictureProvider windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.activatableClass.collector .
20/02/2019 17:22:29       10000        About to service package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy. Setting the package state to disabled returned
                                       with 0x80070490.
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.stateExtension windows.applyDataExtension windows.repositoryExtension
                                       windows.capability windows.MRT windows.visualElements windows.alarm windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.gameExplorer windows.search windows.fileOpenPicker windows.fileSavePicker
                                       windows.cachedFileUpdater windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch
                                       windows.fileTypeAssociation windows.contentType windows.protocol windows.appointmentsProvider windows.defaultPrograms
                                       windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks windows.webAccountProvider
                                       windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService windows.appointmentDataProvider
                                       windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience windows.dialProtocol windows.restrictedLaunch
                                       windows.integrityExtension windows.licensing windows.accountPictureProvider AppSync windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.DeviceSetupManager windows.activatableClass.collector windows.certificates windows.preCompilationExtension
                                       windows.ntServices windows.wmiProviders windows.iisModules windows.performanceProviders windows.eventProviders windows.runTime
                                       windows.DeviceAccess windows.indexedDB windows.MicrosoftAccountClient.SignOut windows.searchIndexer windows.geolocation windows.userDataAccess
                                       windows.repositoryExtension.remove windows.stateExtension.remove .
20/02/2019 17:22:29       827          Capability parsing started for the package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy
20/02/2019 17:22:29       5252         An internal error occurred with error 0x800705AA. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       306          error 0x800705AA: While processing the request, the system failed to register the windows.stateExtension extension due to the following error:
                                       Insufficient system resources exist to complete the requested service.
                                       .
20/02/2019 17:22:29       316          error 0x800705AA: Cannot register the request because the following error was encountered during the registration of the windows.stateExtension
                                       extension: Insufficient system resources exist to complete the requested service.
                                       .
20/02/2019 17:22:29       5252         An internal error occurred with error 0x80070002. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       331          error 0x80070002: While reverting the request, the system failed to de-register the windows.stateExtension extension due to the following
                                       error: The system cannot find the file specified.
                                       .
20/02/2019 17:22:29       300          error 0x80073CF6: Cannot register the Microsoft.Windows.Cortana_cw5n1h2txyewy package due to the following error: Package could not be
                                       registered.
                                       .
20/02/2019 17:22:29       605          The last successful state reached was ResolvedDeferredRegistrations. Failure occurred before reaching the next state RegistrationChanged. hr:
                                       0x80073CF6
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.stateExtension windows.applyDataExtension windows.repositoryExtension
                                       windows.capability windows.MRT windows.visualElements windows.alarm windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.gameExplorer windows.search windows.fileOpenPicker windows.fileSavePicker
                                       windows.cachedFileUpdater windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch
                                       windows.fileTypeAssociation windows.contentType windows.protocol windows.appointmentsProvider windows.defaultPrograms
                                       windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks windows.webAccountProvider
                                       windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService windows.appointmentDataProvider
                                       windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience windows.dialProtocol windows.restrictedLaunch
                                       windows.integrityExtension windows.licensing windows.accountPictureProvider AppSync windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.DeviceSetupManager windows.activatableClass.collector windows.certificates windows.preCompilationExtension
                                       windows.ntServices windows.wmiProviders windows.iisModules windows.performanceProviders windows.eventProviders windows.runTime
                                       windows.DeviceAccess windows.indexedDB windows.MicrosoftAccountClient.SignOut windows.searchIndexer windows.geolocation windows.userDataAccess
                                       windows.repositoryExtension.remove windows.stateExtension.remove .
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.visualElements windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.search windows.fileOpenPicker windows.fileSavePicker windows.cachedFileUpdater
                                       windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch windows.fileTypeAssociation windows.protocol
                                       windows.appointmentsProvider windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks
                                       windows.webAccountProvider windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService
                                       windows.appointmentDataProvider windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience
                                       windows.dialProtocol windows.restrictedLaunch windows.accountPictureProvider windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.activatableClass.collector .
20/02/2019 17:22:29       10001        Finished servicing package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy. Setting the package state to enabled returned
                                       with 0x0.
20/02/2019 17:22:29       401          Deployment Register operation with target volume C: on Package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy from:
                                       (AppxManifest.xml)  failed with error 0x80073CF6. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       404          AppX Deployment operation failed for package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy with error 0x80073CF6. The
                                       specific error text for this failure is: An internal error occurred with error 0x800705AA. See http://go.microsoft.com/fwlink/?LinkId=235160
                                       for help diagnosing app deployment issues.

I can't seem to get the system to re-register those applications!

Open to any suggestions?  (Please no, have you restarted the server!)

This happens on all users including local admin and new accounts.  Happens in Safe and Clean Boot.

Thanks.

I have a RDS 2016 Farm, with 2 CB's and 8 RSH servers. There are 4 collections with 2 RSH in each collection.

The issue is when I connect and launch the .RDP i created for one session collection, all of the other RSH servers are provide as the server holding the .RDP session which of course they are not.  the session collection has a set of apps setup on only two servers which are added to the collection (no other RSH are available in the collection)

How do we isolate the RSH/collection from the other RSH/collections so only the servers supporting the .rdp are queued?

We have a server farm of 12 Session Hosts and a Broker.  We have a major issue now that I can't find any info on.  Our users will start complaining they cannot get on the farm.  When you try and RDP you get Cannot connect, the two computers cannot connect in the time.  If I go into Hyper-V and go to this machine, I need to restart it.  That is the only way we have found to fix this issue.  However, when I clock on start and then the Power button, the menu that pops up is blank.  Let me be perfectly clear, this is NOT any admin setting or GPO.  I am the administrator and I do not have this set.  Also, if you restart, then the shutdown menu again works and it is ok for a while.  Soon after, this returns.  This is becoming a major problem for us as this started happening about shortly after the 3/19 patch KB4489889.

Anyone have any words of wisdom for this?  I have tried to find anything that relates to this.  And just to help I have included screenshots of the remote error and what the start menu shutdown options look like.

Brad

Unsure if this is the correct forum.

New SErver 2016 RDS Farm.  Attempting to use Internet Explorer (11 - fully patched) to access http://farmid_url/rdweb

IE states that Cookies are Disabled.

Cookies are NOT disabled.  I have also reset to default, emptied all history, etc.

Any Suggestions?