I have windows 7 SP1 on my client, and have 2 Station that both of them use Windows Server 2008R2 Sp1.I have a problem with remote desktop on server2.

When I try to connect to Server1 and 2 other session is active for other clients, a dialog appears to me that show me these 2 sessions and I can force one of them to be disconnected and then I connect to it.(It is ideal for me).

But in same situation in Server 2, remote desktop don't appears dialog and simply say to me "The computer can't connect to server".

I want too know which users are connected to Server2 now. Should I set any config on Server2?

Make the most of five things before five things: youth before oldness, health before illness, wealth before neediness, leisure before occupation, and life before death

Hi,

I have a 2008 Enterprise (SP2) Server running as "Terminal License Server". Everything works fine but now some users report that sometimes they cannot login to serveral terminalservers.

I checked, and indeed in the licensing diagnosis at one of the Terminal-Server (where the users cannot login) reports 2 Errors...

The Remote Desktop Session Host Server Configuration tool is running with local account credentials. In Licensing Diagnosis, the Total Number of licenses Available value may be inaccurate.

and

License server xyz.server is not available. This could be caused by network connectivity problems, the Remote Desktop Licensing service is stopped on the license server, or RD Licensing is no longer installed on the computer.

It's funny, because the license Server is up and running. The Licensing-Service is running too.

And when I push F5 suddenly the last error disappears...and some moments later its back.

Any Idea's? Reboot doesn't help, Restart of licensing-service doesn't work...

Best regards

Miranda

I am running Server 2012 Datacenter with Windows 7 Enterprise clients.  I have managed to deploy RDS for Managed Pools (VDI), and I have figured out how to connect via RDWeb and "RemoteApp and Desktop Connections."  However, I am having trouble making things work how I want to.  I believe I simply need a way to edit the RDP files created in "RemoteApp and Desktop Connections."  When I right-click them and hit Edit, I am brought to the Remote Desktop Connection screen, which show's the server and no hint of the VM it will actually be connecting to.  I can change settings and connect to the VM, but I can't save my changes to the RDP file.

Specifically, I want to disable some local resources by default without blocking them from the pool at the RDS server (so that users can manually choose to pass the resources on, but won't automatically have them all pass through).  As far as I can tell, the Remote Desktop Services Overview in the TechNet library doesn't have any information on this, but I would appreciate any relevant links if they do exist.

TS 2008 32bit Application Mode became Remote Administration Mode

Hi All

I've one TS 2008 32bit (not R2).

The problem is when we set up to Application Mode and run for few weeks. One day the TS became Remote Administration Mode suddenly.

No related event, the TS service still exist, but terminal service configuration showed that this server didn't installed the TS Role. 

Then we can do is remove TS service and reinstall it from server management. And this TS back to work.

But after few days, the problem occurs again. from 11/15 - 12/10, it happened at least 3 times.

any suggestion?

Johnny_Yao

Hi,

Clients running Win 7 SP1 have received an automatic Windows update (KB2592687) which prevents them from using Remote apps on our 2008 r2 Gateway server. The server has been working well previously for over two years. After this update, clients can be authenticated and then view the remote desktop, but then when they try to use an application, authentication fails.

Win 7 without SP1 client is OK, XP and Vista clients are OK. Uninstalling KB2592687 brings the RDP Client version of 6.2.9200 back down to 6.1.7601 and allows the client to use the gateway function as normal.

Is there anything I can do on the server to fix this besides removing this update on all the clients? The server is fully up to date with Windows updates.

I note that there's another thread on this issue:

http://social.technet.microsoft.com/Forums/en-US/winserverTS/thread/7fb6e2b7-04c9-4db8-8614-351a2cd1f693

which suggests ignoring client certificates will help. In my case, that option was already selected, and so made no difference.

There was a message about certificate corruption in event viewer, after the server updates had been applied. I thought this was the issue, so rebuilt the license database, but that made no difference to the problem.

Regards,

Steve

Steve

Hello.

Server 2008 R2 SP1, all updates

RDweb, RD Gateway Roles installed

Server has two network adapters: LAN (local IP) and WAN (DMZ IP)

Installing TMG 2010 with all updates (ver 7.0.9193.500) as Back Firewall

TMG has rule in Firewall Policy "Allow from Internal\Localhost\Perimeter to Internal\Localhost\Perimeter any"

I configure RD Web Access to provide users access to RemoteApp and Desktop Connection: go to RDweb site, Configuration tab, enter RD Session Host server name (FQDN).

After pressing "OK" i see error message:

"RD Web Access was not able to access server3.domain.local. Verify that the RD Session Host server name was entered correctly, that the server is running and connected to the network, and then try again."

In System log i see event 10009

Log Name:      System

Source:        Microsoft-Windows-DistributedCOM
Date:          12/6/2012 9:44:26 AM
Event ID:      10009
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      WWW.domain.local
Description:
DCOM was unable to communicate with the computer server3.domain.local using any of the configured protocols.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="49152">10009</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2012-12-06T05:44:26.000000000Z" />
    <EventRecordID>8921</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>WWW.domain.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">server3.domain.local</Data>
    <Binary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inary>
  </EventData>
</Event>

At the RD Session Host server i see two events in Security log:

Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          06.12.2012 9:53:26
Event ID:      4625
Task Category: Logon
Level:         Information
Keywords:      Audit Failure
User:          N/A
Computer:      Server3.domain.local
Description:
An account failed to log on.

Subject:
    Security ID:        NULL SID
    Account Name:        -
    Account Domain:        -
    Logon ID:        0x0

Logon Type:            3

Account For Which Logon Failed:
    Security ID:        NULL SID
    Account Name:        WWW$
    Account Domain:        DOMAIN

Failure Information:
    Failure Reason:        An Error occured during Logon.
    Status:            0xc00002ee
    Sub Status:        0x0

Process Information:
    Caller Process ID:    0x0
    Caller Process Name:    -

Network Information:
    Workstation Name:    -
    Source Network Address:    -
    Source Port:        -

Detailed Authentication Information:
    Logon Process:        Kerberos
    Authentication Package:    Kerberos
    Transited Services:    -
    Package Name (NTLM only):    -
    Key Length:        0

This event is generated when a logon request fails. It is generated on the computer where access was attempted.

The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.

The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).

The Process Information fields indicate which account and process on the system requested the logon.

The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.

The authentication information fields provide detailed information about this specific logon request.
    - Transited services indicate which intermediate services have participated in this logon request.
    - Package name indicates which sub-protocol was used among the NTLM protocols.
    - Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />
    <EventID>4625</EventID>
    <Version>0</Version>
    <Level>0</Level>
    <Task>12544</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8010000000000000</Keywords>
    <TimeCreated SystemTime="2012-12-06T05:53:26.074824300Z" />
    <EventRecordID>54591</EventRecordID>
    <Correlation />
    <Execution ProcessID="540" ThreadID="1104" />
    <Channel>Security</Channel>
    <Computer>Server3.domain.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="SubjectUserSid">S-1-0-0</Data>
    <Data Name="SubjectUserName">-</Data>
    <Data Name="SubjectDomainName">-</Data>
    <Data Name="SubjectLogonId">0x0</Data>
    <Data Name="TargetUserSid">S-1-0-0</Data>
    <Data Name="TargetUserName">WWW$</Data>
    <Data Name="TargetDomainName">DOMAIN</Data>
    <Data Name="Status">0xc00002ee</Data>
    <Data Name="FailureReason">%%2304</Data>
    <Data Name="SubStatus">0x0</Data>
    <Data Name="LogonType">3</Data>
    <Data Name="LogonProcessName">Kerberos</Data>
    <Data Name="AuthenticationPackageName">Kerberos</Data>
    <Data Name="WorkstationName">-</Data>
    <Data Name="TransmittedServices">-</Data>
    <Data Name="LmPackageName">-</Data>
    <Data Name="KeyLength">0</Data>
    <Data Name="ProcessId">0x0</Data>
    <Data Name="ProcessName">-</Data>
    <Data Name="IpAddress">-</Data>
    <Data Name="IpPort">-</Data>
  </EventData>
</Event>

AND

Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          06.12.2012 9:53:26
Event ID:      4634
Task Category: Logoff
Level:         Information
Keywords:      Audit Success
User:          N/A
Computer:      Server3.domain.local
Description:
An account was logged off.

Subject:
    Security ID:        DOMAIN\WWW$
    Account Name:        WWW$
    Account Domain:        DOMAIN
    Logon ID:        0x325a4cf

Logon Type:            3

This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />
    <EventID>4634</EventID>
    <Version>0</Version>
    <Level>0</Level>
    <Task>12545</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8020000000000000</Keywords>
    <TimeCreated SystemTime="2012-12-06T05:53:26.074824300Z" />
    <EventRecordID>54592</EventRecordID>
    <Correlation />
    <Execution ProcessID="540" ThreadID="1104" />
    <Channel>Security</Channel>
    <Computer>Server3.domain.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="TargetUserSid">S-1-5-21-3882217896-3255031834-2471755480-1945</Data>
    <Data Name="TargetUserName">WWW$</Data>
    <Data Name="TargetDomainName">DOMAIN</Data>
    <Data Name="TargetLogonId">0x325a4cf</Data>
    <Data Name="LogonType">3</Data>
  </EventData>
</Event>

Help, please!

Hello,

The following error, an authentication error has occurred The local security authority cannot be contacted, appears when domain users, who have historically connected successfully using RDP, attempt to connect.

About the same time, user shares on workstations can not be accessed from other workstations. A similar error appears, saying the computer is not accessible, logon failure: the user has not been granted the requested logon type at this computer. The shares on the servers are accessible, as always.

One domain account, however, shows none of the symptoms. This account is in the domain local group administrators, but not in the group Domain Admins.

I have carefully compared the working account with the other accounts on the network, and cant find a difference that would break RDP.

I created a new user account and added it to the same group accounts as the working account. The new user account cannot connect.

One change to the network is that one Ethernet switch was replaced, but if this or the router has problems, that would affect all users.

DNS seems ok; the windows clients are not registering with DNS, but this problem has been around for while; typing the IP address into the RDP screen had been the workaround.

I have tried changing the setting in System Properties, from Control Panel, System, Remote Settings, to allow connections from computers without NLA, after reading some of the forums.

Any ideas? User Rights?

thanks,

i have made a server 2008 R2 as a memeber server of 2008 R2 Domain

(All set up are Vertual mechine only It is a Test Lab in our organaization)

When I am trying to login remotely from my desktop (this desktop belongs company network and Domain ---this company network have access in that vertual network)

1.when I am trying to login into local server accont   It is posible

2.when I am trying to login into vertual Domain account .it will not directly login into the server rather that  Fisrt  i am geting local authentication windows after succesvely login into that  only i will get server 2008 login window .So i have to use swtch user then  domain\username ... password   Then able to get  domain account desktop.

Could anybody sugest a solution I done following things also

1.1.created  smsadmin user
2.create  sccm  group
3.added sccm group into administrators group
4.added sccm group into remote desktop users
5.added sccm group into the remote desktop option in memebre server finaly

6.Enabled "allow log on locally policy"

7.Enabled remote desktop desktop users policy  but not working out

shinu

Hi,

I'm having the following scenario:

I'm using RDS 2012 with a DNS name:

internally RDS.domain.com points to my RDS Web Access server

externally RDS.domain.com points to my TMG server witch forwards the requests to my RDS Gateway Server

this all works perfectly, I also have the setting : Bypass Gateway server for local addresses.

Now my problem:

When I'm external and I use a VPN connection (not over TMG), I cannot open a Remote App !

rds.domain.com is pointing to my web access server.

I'm getting the following error: Your computer can't access the remote computer because the Remote Desktop Gateway server is temporary unavailable.

It seems like my client does not know I'm connected to the domain, and tries to find the gateway server.

After further investigation, it seems that the Bypass Gateway server for local addresses does not know that I'm on the network, and tries to find the gateway server...

Is there any setting to change that can make this work ?

Thank you for your help

Hello.

I have a Windows 2012 server running RDS. Before RDS was installed a remote desktop session used all available monitors when 'use all my monitors for the remote session' was checked in the RDP client settings.

After I installed RDS the default session collection had a limit of 16 monitors that I was unable to edit. When I connected to the default session collection I could only get the remote session to display on 1 monitor.

I deleted that session collection, created a new one, and was able to edit the 'maximum number of redirected monitors' setting to the desired value of 2 but the remote session still only displays on 1 monitor. 

If the session collection is set to 2 monitors and the RDP client is set to 'use all my monitors' why is the remote session only displayed on 1?

Thanks.

Keith

Is RemoteFX specifically designed to exclude redirection of USB HID devices like the mouse and kbd? Based on the articles I've read so far, I haven't seen anything the specifically discussing support for or against this. My use case is simple: I have one computer with a dual-headed graphics card, two mice and two keyboards attached. I'd like to have an RDP session open via the standard mstsc client in a window on the second monitor, so a second family member can easily sit down and check her email via the RDP session when another user is already using the main system. The second mouse and kbd should be dedicated to that session so that events are not shared with the console session.

http://technet.microsoft.com/en-us/library/ff817578(WS.10).aspx

I've enabled the requisite GPOs per the article above, and I've set up the required registry key to expose these USB devices to mstsc. I am able to select those devices when configuring the client, however when I connect, no redirection actually occurs. No errors are displayed or logged to the event log.

Over the past few years I've solved this problem in various cumbersome ways, all of which involve running some flavor of linux in a VM set up to capture the mouse and kbd. That's computationally expensive and it seems this should be so simple with RemoteFX.... what am I missing?

Hello,

I am trying to change the text fields in server 2012 RDWeb Pages and I cannot seem to find it. I have tried changing in the following files

default.aspx

desktop.aspx

login.aspx

password.aspx

Beside the string L_CompanyName_text

but this doesn't work.

I have checked online and I only see references to 2008 and before. I have tried those as well but no success.

Any ideas?

Thanks

Hello

I am trying to activate Remote Desktop IP Virtualization on Windows 2008R2 but without success.

I followed instructions from here : http://technet.microsoft.com/en-us/library/ee308290(v=ws.10).aspx

And I have this error message in my log : 

La virtualisation IP des services Bureau à distance n’a pas pu charger C:\Windows\system32\TSVIPool.dll. Code d’erreur : 0x80070057.

In english : Remote Desktop IP Virtualization could not load C:\Windows\system32\TSVIPool.dll. Error code: 0x80070002

Source : TerminalServices-TSAppSrv-TSVIP

Event : 114

Does anyone have a feedback about this error message ? I looked online for it but didn't find anything related.

Thanks in advance, 

Thibault

PS : Here is the information from my registry concerning the configuration

Windows 2008 terminal server.

I configured and distributed a RemoteApp RDP file to our workstations, but on the first day, one Windows XP user, not realizing that the logon format needed to be domain\username, instead of calling me for clarification, just went manually to Remote Desktop Connection, entered the server name, and gracefully bypassed all my hard work in configuring RemoteApp, ending up with a full deskto on the server.

I know I can also set tthe Environment tab in ActiveDirectory users and computers to limit users to one application should they again bypass the RemoteApp. However, it seems to me that there should be some setting that limits users to using RemoteApp RDP connections on a particular server and not a generic RDP logon, but I can find nothing. Is there any such setting.

This is particularly important because we may use multiple RemoteApp connections and the occasional user may need regular RDP access (with desktop) to one of our other servers.

Hi,

I have a server in my DMZ that I want to run RemoteApp on. I don't want to open up port 3389 to everyone and I've read that it's possible to runnel RDP into the HTTPS connection to the RemoteApp website. I just can't get it to work properly! Can anyone guide me? The simple way? :-)

Regards, Allan Kjær. Microsoft MCP, MCSA + Cisco CCENT, CCNA + Check Point CCSA NGX R65, CCSE NGX R65.

It seems out of the blue, I can no longer RDP into any server.  The setup is AD 2008 R2, one physical host, with 3 VM's.  RDP has been fine for a couple of years, then just stopped. 

No updates were done as I run WSUS and haven't had tmie to log in to approve anything in maybe 3 weeks.  This issue occurs regardless of what system I am coming from (all Win7 systems).  Also i I am at the server and RDP to one of the VM's, no go tghere either.  However I can use Hyper-V manager to open standard console sessions to the VM's no problem, for what that's worth.  All clients are Win7 systems and also haven't been updated in 3 weeks. 

Interestingly, I also cannot pcAnywhere to the Hyper-V host.  I have this in place as a backup in case RDP has issues. 

So one would think something 3rd party is blocking this stuff.  I have SEP 11 running with a nearly default firewall, allowing all traffic from server to server.  Just the same I turned off this firewall, no change.  Oddly, Windows Firewall was started.  I generally disable the WFW service itself as that seems to be the only way to truely tuen if off, since having that plus a 3rd party firewall product is generally not recommended (two FW's on one system).  I've followed this practice for years and in various environments without problem.  I know you need WFW running to enable RDS, so I do that, then disable WFW. 

So I am lost as to how to troubleshoot this since it apepars Symantec isn't the issue, and WFW shoulnd't be since I switch off the service itself, and yet I am getting nowhere.  Event logs didn't log any errors at all during the times when I was testing this. 

From the client end, in the mstsc window when I click Connect, within 2 secons I get the standard "remote machine isn't RDP enabled, machine is turned off, or machine isn't on the netowrk" kind of error.  This happens the same if i use hostname or IP. 

Event Logs on both the client and the server(s) contain no entries in Systme or Application hat are timestamped around when I do my logging in attempts. 

I'm not sure if I can get anything from the Security event logs, it just has constant Succcess Audits for mydomain admin doing something or NULL SID doing something. 

Right now I have the following config:

RDSWA1 & RDSWA2 in an F5 load-balanced web farm.  Both are configured for "One or more RemoteApp sources" and have listed all the Session Hosts

RDSGW1 & RDSGW2 in an F5 load-balanced gateway farm.

RDSSH1 & RDSSH2 each hosting different applications.  For PoC reasons, I have SH1 hosting a Calc RemoteApp and SH2 hosting a WordPad RemoteApp.

Is it expected that if SH1 goes down, the web servers will display no RemoteApps at all?  I would expect the Web Servers to at least allow users to connect to WordPad.