I have a 2008 R2 terminal server and a new 2016 server. under mstsc.msc (RDP) I am trying to connect to the 2016 server from the 2008 R2 and I am getting the RDP can't connect to remote computer for one of these reasons error. Everything is configured correctly and I can RDP from 2016 to 2008 R2 without an issue. 2008 R2 is using RDP 8.1 client and I have removed the NLA and firewall and tried still the same issue. I also tried another 2008 R2 server that is not RDS and same issue.

Ran netstat -ato and port 3389 is not listening on server 2016

Went to the regkey path and verified the default port is 3389, did not change it.

I did verify the TLS patch was installed but I do not know what else I can try to fix this issue, RDP works except from 2008 R2 to 2016 server OS, anyone got any other things I can try?

The security is set to negotiate and no NLA

I also was able to RDP from 2008 R2 to 2016 server without issue

I have found that other people have encounter this issue with server 2016 but not definite fix has been listed.

Hi,

We have an RDS/Rdgateway 2012 R2 in our enviorment that our customers using it to access a RDS server with mstsc and Rdgateway.

Lately one of our customers get this error

Your computer can't connect to the remote computer because the web proxy server requires authentication. To allow unauthenticated traffic to an RD Gateway server through your web proxy server, contact your network administrator.

I have check the RDS server and the RDgateway server for errors.

The only Error that we see is sometimes is the error 36874 and 36888, but the time of these errors is not corresponding with the above error.

There are more customers that access their RDS server from the same RDgateway server and we did not get any complaint from them.

Any suggestion?



Shahin

Newer Windows version clients (Windows 10) will not connect to the gateway and I get "The logon attempt failed"

Only when I set this registry key HKCU\Software\Microsoft\Terminal Server Client\RDGClientTransport to "1" on the client, it will connect.

When I do this it will connect using RPC-HTTP and in the Admin log of TerminalServices-Gateway it will say:

"The RD Gateway client supports HTTP proxy protocol but connected using Legacy RPC-HTTP."

On the firewall of the gateway, I have enabled all options for Remote Desktop for all profiles.

Remote Desktop - Shadow (TCP-In)
Remote Desktop - User Mode (TCP-In)
Remote Desktop - User Mode (UDP-In)
Remote Desktop Gateway Server Farm (RPC HTTP Load Balancing Service)
Remote Desktop Gateway Server Farm (RPC-EPMAP)
Remote Desktop Gateway Server Farm (TCP-In)
Remote Desktop Gateway HTTP Listener
Remote Desktop Gateway UDP Listener

What else could it be?

We have built a new TS Farm on Server 2016. We are using Windows 10 to connect to this server for terminal services. Most things are working fine, however, we have a couple lingering issues I was hoping to get resolved.

1. We have an error when our users log off the session. It appears to hang on a black screen and then issues a disconnection message. Since we have the option to reconnect automatically on disconnect, it tries to auto reconnect, which is not what we want. Has anyone run into this? I have tried a number of things and cannot seem to make it stop.

2. We are getting weird desktop icon refreshes when we browse the file system. Opening and moving around in folders causes the desktop to "blink". Can this be stopped?

Thanks for all your help!

Hi, hoping someone can help me out.

I have 3 virtual RDS servers (1 x Broker,Gateway and 2 x Session Hosts) all hosted on HyperV. The RDS servers are running Windows Server 2012 R2 and patched to the latest updates.

Our end users connect to the RDWeb URL to access their applications, one of these applications is the Remote Desktop Connection app (this is so they can remote onto other computers or servers within the environment).

The problem is, the users connect to RDWeb, launch RDP icon/app, pop in the system name and connect to it. While connected to that system, if they try and Alt + Tab between the apps they have open, it only tabs between the apps on their local Windows client OS computer.

I have tested myself and changed various settings under Apply Windows key combinationssuch as On the remote computer, Only when using the full screen but I still cannot Alt + Tab the between the apps I have open on this RDP connection via RemoteApps.

As a test, I launched RDP locally on the Session Host server and connected to another server and I was able to Alt + Tab the apps fine. So the RDP application itself seems to use Alt + Tab correctly on the Session Host server, however it does not work if you connect via RDP app/icon on RemoteApps.

I tried various other combination of Windows key shortcuts and none of them work, with the exception of Ctrl + Alt + End, this combination brings up the security dialog box.

RDP app shows it is Version 6.3.9600

Hopefully someone has some ideas on what I can check?

Thanks, Mick.

Hello,

I have the internal RDS Server name (rds.internal.lan) exposed in the RDP-window regardless of I start it from the Web access or Remoteapps and Remote Desktops. The objective is not to eliminate Certificate mismatch warnings.

I have a 2 server setup,

1) dc.internal.lan DC/DNS with 'pinpoint' DNS A record for rds.publicdom.com pointing to the server's private ip

2) rds.internal.lan with all RDS (also RDGW)Roles. 

Only Desktop Collection is published.

All roles configured with trusted certificate for rds.publicdom.com

Role          Level          ExpiresOn                           IssuedTo                                      
----          -----          ---------                           --------                                      
RDRedirector  Trusted        01/08/2021 00:59:59                 CN=rds.publicdom.com                                 
RDPublishing  Trusted        01/08/2021 00:59:59                 CN=rds.publicdom.com                                 
RDWebAccess   Trusted        01/08/2021 00:59:59                 CN=rds.publicdom.com                                 
RDGateway     Trusted        01/08/2021 00:59:59                 CN=rds.publicdom.com 

AND 

Subject              : CN=rds.publicdom.com
SubjectAlternateName : {rds.publicdom.com, www.rds.publicdom.com}
IssuedBy             : CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greate
                       r Manchester, C=GB
IssuedTo             : CN=rds.publicdom.com
ExpiresOn            : 01/08/2021 00:59:59
Thumbprint           : FDD6C6647131871F2KKK5197A29EE04FDFD90C4C
Role                 : RDGateway
Level                : Trusted

PS C:\> Get-RDWorkspace

I attempted to change the RDPublishedName with the tool from the below link, that runs fine, but makes the RDP Desktop unavailable.

https://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80

Is the HA configuration described in the very useful article below an option to configure the internal name correctly? 

https://msfreaks.wordpress.com/2018/10/06/step-by-step-windows-2019-remote-desktop-services-using-the-gui/

Any assistance will be highly appreciated.

Best regards

Tim K

What is the maximum amount of collections you can have in a 2016 RDS farm?

Thanks!

Hi Experts!

quick question, Is it possible to have a USB redirection in VDI Publish Apps ? In pooled we have simply access the usb but on our publish apps  we're not able too.  As you can see on the RD web page the drive L2 folder is created for USB redirection for publish user who they have access. And on the RWMVDPOOL desktop icon this is for pooled user which we're able to see the USB removable devices. Is there a step how to resolve on usb redirection for publish user in VDI.? 

Homer Sibayan

Hi!

I am testing RDS 2019 with RemoteApp, and I have problems with startup splash screens. Each splash screen creates a button on the client’s taskbar and does not disappear from desktop and taskbar after the appearance of the main window. For example, I run three RemoteApp and I have three splash screens and three program windows on my desktop. And even if I close these windows, the splash screens will still remain on desktop and cannot be closed. This happens only in RemoteApp and does not occur with a remote desktop mode. I tried to recreate an RDS farm again, but it does not help.

This does not happen with all programs (having splash screen), but with many. At the same time, there were no such problems at RDS 2012R2/2016. 

As RDCB and RDSH used Windows Server 2019 with latest cumulative update (2019-01). As clients used Windows 10 1709/1809 with same update.

In my environment I have an on-premise Remote Desktop Gateway that is configured to use Azure for MFA.  The configuration for this follows the steps outlined in the following article: Integrate your Remote Desktop Gateway infrastructure using the Network Policy Server (NPS) extension and Azure AD

The issue I experience appears to be limited to the following scenario.

I use Remote Desktop Connection Manager that is configured to use the RDG.  I connect to a Windows server and successfully negotiate the second factor of authentication.  So far so good.  The problem is when performing a Log Off or Disconnect from a Windows server, the Remote Desktop Connection Manager consistently freezes and is unresponsive for approximately 30 seconds.

This problem does not appear to affect RDP sessions which use the Remote Desktop Client (therefore still using the RDG) although the experience isn't necessarily the same.

My environment consists of the following 2 servers:

• Server 1 - Windows Server 2019 with both Remote Desktop Gateway with NPS Server Roles
• Server 2 - Windows Server 2019 with NPS Server Role and the Azure NPS Extension installed

The version of Remote desktop Connection Manager is "RDCMan v2.7 build 1406.0" and I am connecting from a Windows 10 Device with Build 1803.

UPDATE 1:

On the Windows 10 (1803) device, when the RDCM becomes responsive again, the following errors are logged in the Remote Desktop Services eventlog...

Level	Date and Time	Source	Event ID	Task Category
Error	10/01/2020 16:16:18	Microsoft-Windows-TerminalServices-ClientActiveXCore	1033	General	Component name:CheckInternetConnectionTask, :: 'Connection-to-server is alive. Server checked: https://externaladdresshere' in CheckInternetConnectionTask::ExecuteTask at 3639 err=[0x0], Error code:0x0
Error	10/01/2020 16:16:18	Microsoft-Windows-TerminalServices-ClientActiveXCore	1033	General	Component name:CheckInternetConnectionTask, :: 'Internet-connection is not alive. RdpX_InternetCheckConnection(http://www.microsoft.com) failed' in CheckInternetConnectionTask::ExecuteTask at 3620 err=[0xffffffff], Error code:0xFFFFFFFF
Error	10/01/2020 16:15:57	Microsoft-Windows-TerminalServices-ClientActiveXCore	1033	General	Component name:CAATunnel, :: 'Cleaning up CAATunnel' in CAATunnel::~CAATunnel at 121 err=[0x80004005], Error code:0x80004005

UPDATE 2:

I have now reproduced the issue when  connecting from a Windows 10 Build 1909 device.

Any help appreciated.  Thanks

Hello,<o:p></o:p>

Need to enable USB Redirection for all users in RDWeb Access.<o:p></o:p>

I have configured the below mentioned group policy on RD Connection broker and RD session Host but unable to redirect USB removal device (HDD) in RDWeb Access.<o:p></o:p>

Group Policy Path: “Computer Configuration” --> “Administrative Templates” --> “Windows Components” --> “Remote Desktop Services” --> “Remote Desktop Connection Client” --> “RemoteFX USB Device Redirection”.

Double-click on “Allow RDP redirection of other supported RemoteFX USB devices”.<o:p></o:p>

This opens a window to change the policy settings. Select the “Enabled” radio button. Under “Options”, set the “RemoteFX USB Redirection Access Rights” to “Administrators and Users”. Also, I have observed that USB removal drive redirection in working fine in my VDI collection.

Please assist.<o:p></o:p>

<o:p> </o:p>

Thank you.<o:p></o:p>

Hello everyone,

I'm still using windows server 2008 R2

And I have a question about the session broker.

If I have a farm with 2 servers. I'm connected to server A and I'm writing some text in a file, the server crash.

I reconnect to the farm,I'm also connected to server B, but I have lost my file. Is there a way that store the CACHE of a session, and restore it for the user who was deconnected from a server and reconnect to a new server of the farm ? And then I would be able to retrieve my file and continue to write my text.

I hope my question was clear enough :D

Thanks for your time and have a good day

Uhuru

Hello,

we have 20 Windows Terminal Server 2019 and 1 Connection Broker from 2019. our profiles are in our DC, which has Windows 2012 R2 but with Log off a copy of the profile is saved in WTS, our problem is when user deletes something with the next login deleted items will appear again. maybe someone has dasw problem too? or is there a solution?

Thanks

Hello,

I want to know if it's possible to have this infrastructure for RDS Computer-Based Deployment :

• RD Connection Broker and RD Web Access and RD Gateway on same server
• Using port 443 for RD Web Acces
• Using port 444 for RD Gateway, OR (if it's possible) keep port 443 for Gateway
• RDVH on a separated server

I'm working with Windows Server 2016 for the CB and Hyper-V Server 2019 for the RDVH.

Thank's in advance ! :)

yeet

I have two nodes that I am trying to set up a virtual machine-based deployment with.

Node1 has RDCB, RDGW, RDWA, RDVH all installed properly, and seem to work as expected.

Node2 has only RDVH installed, and it is not working correctly.

From Node2, in Server Manager under Remote Desktop Services, I get the error:  

The server pool does not match the RD Connection Brokers that are in it. Errors:
1. Cannot connect to any of the specified RD Connection Broker servers. Ensure at least one server is available and that the Remote Desktop Management (rdms), RD Connection Broker (tssdis), or RemoteApp and Desktop Connection (tscpubrpc) services are running.

Node1 (which hosts the RDCB) is online, and all of the three services above are running on it.

I can ping Node1 from Node2 and vice versa.

Node2 is apart of the server pool on Node1 and vice versa. I even removed them and re-added them.

I followed threads suggesting to open the RDCms database in SQL Management Studio, bring it offline and then back online, but this makes no difference (probably because RDCms was not in a recovery or pending state in the first place for me).

Uninstalling RDVH and re-installing RDVH directly onto Node2 makes no difference.

Uninstalling RDVH and re-installing RDVH through "Add RD Virtualization Host Servers" under Deployment Overview on Node1 fails with this error in Event Viewer under Microsoft-Windows-Rdms-UI/Admin :

Event ID 4119

RD Virtualization Host Configuration Failed on <server-name> With Error: At least one of the required services is not running on the server <server-name>.

Searching this event ID pretty much only brings up results about firewall blockages. I have no firewall set up, and so this is not the issue. I found absolutely no results online about not having a required service.

On Node2, I have the following services installed and running:

- Remote Desktop Configuration

- Remote Desktop Services

- Remote Desktop Services UserMode Port Redirector

- Remote Desktop Virtualization Host Agent

What service am I missing? Is it Remote Desktop Management (rdms)? How do I go about installing it? And why was it not already installed?

Both these servers have just gone though fresh OS installations, are fully updated, and have identical OS specs. 

I have removed/installed/rebooted both servers countless times to try to get a proper RDVH installation on Node2.

It makes no sense as to why this wouldn't be working out of the box.

Hello!

I'm having issues with my RD setup. I don't know exactly what happen, but it broke. If I try to log in via Internet Explorer it loads properly and I can access our resources. When I try Chrome/Firefox(from multiple computers in different locations) this happens. I tried to attach screenshots, but my account has not been verified to do so. Basically the page loads almost empty without any of the fields to enter Username or Password. If I examine the source of the page this shows:

<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="../Site.xsl"?>
<?xml-stylesheet type="text/css" href="../RenderFail.css"?>

<RDWAPage 
    helpurl="http://go.microsoft.com/fwlink/?LinkId=141038" 
    workspacename="Work&#32;Resources" 
    baseurl="https://EDITEDOUTFORSAFETY/RDWeb/Pages/en-US/"
    privacyurl=""
    >
  <RenderFailureMessage>
    <html xmlns="http://www.w3.org/1999/xhtml">
        <head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
            <title>Error: Unable to display RD Web Access</title>
        </head>
        <body>
            <h1>Error: Unable to display RD Web Access</h1>
            <p>An unexpected error has occurred that is preventing this page from being displayed correctly.</p>
            <p>Viewing this page in Internet Explorer with the Enhanced Security Configuration enabled can cause such an error.</p>
            <p>Please try loading this page without the Enhanced Security Configuration enabled. If this error continues to be displayed, please contact your administrator.</p>
        </body>
    </html> 
  </RenderFailureMessage>
  <BodyAttr 
    onload="onLoginPageLoad(event)" 
    onunload="onPageUnload(event)"/>
  <HTMLMainContent>

      <form id="FrmLogin" name="FrmLogin" action="login.aspx?ReturnUrl=%2FRDWeb%2FPages%2Fen-US%2FDefault.aspx" method="post" onsubmit="return onLoginFormSubmit()">

        <input type="hidden" name="WorkSpaceID" value="EDITEDOUTFORSAFETY"/>
        <input type="hidden" name="RDPCertificates" value="3C1BFF3D553CB91F896AA95498495CC52E63161E"/>
        <input type="hidden" name="PublicModeTimeout" value="20"/>
        <input type="hidden" name="PrivateModeTimeout" value="240"/>
        <input type="hidden" name="WorkspaceFriendlyName" value="Work%20Resources"/>
        <input type="hidden" name="EventLogUploadAddress" value=""/>
        <input type="hidden" name="RedirectorName" value="EDITEDOUTFORSAFETY"/>
        <input type="hidden" name="ClaimsHint" value=""/>
        <input type="hidden" name="ClaimsToken" value=""/>

        <input name="isUtf8" type="hidden" value="1"/>
        <input type="hidden" name="flags" value="0"/>


        <table id="tableLoginDisabled" width="300" border="0" align="center" cellpadding="0" cellspacing="0" style="display:none">

            <tr id="trWrongAxVersion" style="display:none" >
            <td>
                <table>
                <tr>
                    <td height="20">&#160;</td>
                </tr>
                <tr>
                    <td><span class="wrng">You don't have the right version of Remote Desktop Connection to use RD Web Access.</span></td>
                </tr>
                </table>
            </td>

AND MORE....

We want to deploy few new rds servers on server 2019 but it seems that the per user licensing is not working correctly if in a workgroup.

Evertime when a user logs in it gets the following message:

'There is a problem with your Remote Desktop license, and your session will be disconnected in 60 minutes, Contact your system administrator to to fix this problem'

In the gpo the license server is specified and the "per user" mode is selected. 

Same issue as :

https://social.technet.microsoft.com/Forums/windowsserver/en-US/e69d9a47-1e2a-4d37-8073-97327ac91154/problem-with-windows-server-2019-rds-license?forum=winserverTS

Good day,

I need assistance with my Server 2019 STD. I would like User to connect from any Computer to my Server 2019 using RDS, logging in from the computer and using programs, and I need to know what rolls I need to install and all the services I need to make this work. I do not want to use Per user Device Cal's.

I was reading if I use per device cals then it is locked to that Hardware device and the User can only use that device to log into the server.

Can someone please share some knowledge in how I am going to do this? 

Thank you in Advance