Environment is Windows Server 2008 R2 web server with no AD Domain.

I have a user that connects to the server via RDWeb access to run a VB application. I just logged on to the server and see that there are 6 "active" sessions going for that user's login. The oldest session was initiated 20 days ago. I have the settings for that user at:

End a disconnected session: 30 minutes

Active Session Limit: 3 hours

Idle Session limit: 2hours

When a session limit is reached or connection is broken: End session

So how is it possible for these sessions to persist for as much as 20 days? Why are these settings being ignored?

Thanks for any answers.

Hi,

I am using handheld with Windows CE 5.0 as thin clients to connect to Terminal Services server. Everything works fine with Windows Server 2008R2, but I'm not able to connect to Windows Sever 2012. Terminal server is Windows Server 2012 Standard whit session-based Remote Desktop Services role installed. On Remote Desktop Host configuration NLA is disabled.  While connection following error appears: "Because of a security error, the client could not connect to the remote computer”.

Thanks

Dominik

Hi,

Is it possible to enable only RPC over HTTP for both pre 8 and 8 RDP clients?

Thank you

Hello,

I'm experiencing a weird problem when I'm connected to a Windows 2008 R2 Standard 64 bit server.
My desktop appears in complete. There are no icons and when I click the start button, I don't see anything other than the right side of the popped up menu. The rest is all gray (not grayed out, just gray, no text where the All Programs is).

I'm sure it's a security setting of Windows 2008 but how do I fix this problem?

The user I'm using is a regular domain user which I added to the local administrators group of the Windows 2008 server I want him to access.

Can any body help please?

Thank you,

I have this bizzaro issue happening in my RDSH 2008 R2 farm since the Holidays.

When someone prints certain PDF's from IE 9 (doesn't seem to happen in Google Chrome).  The print server that's also Windows Server 2008 R2 box gets the PDF's with funky characters added to the extension...like a box, a zero, random other stuff.

Windows 7 32 bit PC's that we have don't seem to get these things

When a new user logs into our RDS environment, a roaming profile is created for them.  However, the Start Menu shows recently used programs (Notepad, Internet Explorer, and Command Prompt).  Notepad and Internet Explorer even shows Recent files if you hover over the small arrows pointing to the right.

How do I get rid of this for all users?  Is it under C:\Users\Default?  Registry?  GPO?

Our RDS environment is Windows 2008 R2

Hi folks,

I appreciate a lot any help to my issues with RD web access externally through RD gateway. I have searched quite a lot but do not seem to find suggestions that could solve my problem.

My setup is a very simple one server (domain member of an internal domain) installed with all the RD services rolls (RD web access, RD gateway, RD session host, no RD session broker). The server has internal domain name and IP. A fire wall is setup at the edge of internal domain, which only pass through port 443. The fire wall captures an external FQDN with fixed IP and passthrough https request to the RD server in the internal domain.

The RD server (RD web access, RD gateway, RD session host) uses a self-generated certificate to sign everything (RD gateway certificate, Remote Apps, RD session host). the certificate is issued to the external FQDN, which is publicly accessible/routable/registered DNS name/IP.

Now I have installed this particular certificate also on my client pc under trusted root certification authority. I have no problem to connect to https://FQDN/RDWeb, being asked the RDWeb credential (internal domain admin credential). the Remote Apps list properly. If I click an App, I am asked the credential of RD gateway server. with my internal domain  admin credential, I have no problem to launch RemoteApps.

My issue is: how can I make single sign on to work. I read at microsoft guide stated that single sign on only works for client and server joined to the same domain. is this the case?

Please advice. What I have missed, or what I could do to make SSO work?

Thanks a lot.

Hi

I have a Speedtouch router at home with several PCs connected. I want to be able to access one of those machines from my office. I changed the router to forward port 3389 to the local (static) IP address of the relevant home PC. I also set the PC to allow remote desktop connections both locally and publically. I determined the external IP address of my router using whatismyip.com.

I am unable to connect from the office. Both office and home PCs are running Windows 7 Ultimate. It still fails if I switch the firewall off on the home PC.

I can connect via logmein in a browser. I can also connect using another local PC (also Windows 7 Ultimate) at home.

I've tried using PortQry from the office and it resolves the IP to a name but declares  port as 'FILTERED'

If I do a net stat -a -o on the home PC, it appears to show port 3389 as listening.

Is there a chance there is something I need to change on the office PC to make this happen?

I am tearing my hair out. Any help would be appreciated, thank you.

I have set up a test Server 2012 RDS collection (Single Server for now) and implemented User Profile disks.

I have two problems.

First: My generic test user can connect and does successfully use the user profile disk as expected. However, atlogoff, the system event log contains these errors:

The error (NTFS 137) is: The default transaction resource manager on volume C:\Users\ts3.test encountered a non-retryable error and could not start.  The data contains the error code.

The warning (NTFS 50) that concerns me is:

It appears that the user profile disk is being "disabled" or "disconnected" before the profile data is completely written at logoff. What can I do to troubleshoot this?

Second:

Update: A post from Mike Connor on the following page: -LINK- solved the problem described below. 

My administrative user always logs on now with a temporary profile. At the beginning, the UPD was working and mounting. That stopped working. In attempting to troubleshoot, I logged the admin user off and deleted the UPD disk file from the share. I remember it working again after generating a new UPD disk file in the share. Soon, it quit working again. I deleted the UPD disk file again from the share and ever since, it has never regenerated a new UPD andalways logs on with a temporary profile.

Hi Group,

We are starting to use our custom application in RemoteApp. It needs to print address labels. We use a Dymo 400 label printer. But, really it should work for any label printer.

The server is windows server 2008 R2. The clients are w7.

Initially, the symptoms were that the page in the label printer would come out but no data/text would be on it. It would be blank. So the printer got the print command but did not get the data.

We then took Wordpad and published it in RemoteApp. We typed on the page and printed to the label printer. Same thing, blank page came out. Then, went to print preview on wordpad. This took a few seconds. But once that was done, then, data started to show up on the label printer. We also changed a flag on the printer properties to only start printing when all the data was received.

We then opened our custom application and tried to print an address label. It worked. We thought, great, its fixed.

We then tried on our end-users computer. It is still printing blank pages from wordpad and our custom software.

It seems like some kind of caching/timing issue with the data transmission to the printer. Does anyone have any advice on how to solve this issue?

Thank you.

I have setup my new Hyper V test box and have created multiple VM's with Win 8 pro without issue.  Most importantly I am testing remotefx and realized that I needed to use Win 8 Enterprise to get the physical GPU to be allocated to the VM.  Now that I am testing the Win 8 Enterprise with Remotefx I am getting random black screens or disconnects via rdp.  This only happens on Win 8 Enterprise. I have built 3 win 8 enterprise vm's from scratch to make sure I did not due somthing wrong in the build.  All systems are fully patched with the latest integration software too.

I am using a an NVIDIA Quatro 2000 with drive 9.18.13.1090 that I downloaded on Dec 31st.

Thank you

John

Hello,

I am creating a new Remote Desktop High Available cluster that contain the followin servers :

2 Gateway and web Access servers in an NLB node (srv-gw01 - srv-gw02)
2 Broker and RD Session host configured with the Broker High Availability (srv-tse01 - srv-tse02)
2 MS-SQL servers in a AlwaysOn cluster for the Broker HA Database (srv-db01 - srv-db02)

The High Availability of the cluster work as expected only if I disconnect my session before taking down a server as you can see with my tests :

Test 1 (working) :
1) Start a rdp session on the Gateway NLB floating IP
2) Work on the remote applications
3) Notice the name of the TS server I am connected on (srv-tse02 in this case)
4) Close my remote session (with CTRL + ALT + END)
5) Disconnect the network of a Gateway and the server srv-tse02
6) Start again a rdp session
--> This work fine I work now on srv-tse01

Test 2 (not working) :
1) Start a rdp session on the Gateway NLB floating IP
2) Work on the remote applications
3) Notice the name of the TS server I am connected on (srv-tse01 in this case)
5) Disconnect the network of a Gateway and the server srv-tse01
--> The remote application stuck (normal), tell me "Reconnecting" but never reconnect. If I try to start a new session it still not work, seems to try to connect me on srv-tse01 (that is down) as I see in the event log :

Log Name : Microsoft-Windows-TerminalServices-SessionBroker/Operational
Message : Service Broker for remote desktop connections has successfully processed the connection request for user DOMAIN\myuser. Redirection information:
Target Name = SRV-TSE01
Target IP address = 192168111192
Netbios target = SRV-TSE01
Target = FQDN SRV-TSE01.domain.local
Found disconnected session = 0x1.

It seems that if a rdp session still exist on a TSE server it try to connect me on that server even if it's down. But this is not the way it should work (in my opinion).

Has anyone encountered that problem before ? Any suggestions will be realy apprecied :)

Best regards

Gabriel

I want to access windows server 2008 R2 from my windows 8 laptop.

Somehow I cannot connect to it, however I can connect from my Windows 7 pc. I can even remote desktop to my windows 7 pc from windows 8 laptop.

Why can I not connect from windows 8 to server 2008.

My credentials are right. Tested it multiple times. 

Telnet 3389 is open.

Disabled firewall and anti-virus.

All I can see is that I don't have the normal three options on this screen, but surely it's not required to connect to a server 2008.

Any help, please. Greatly appreciated

I have a 2012 TS gateway for remote access for our Session Host server.

The TS gateway is on the LAN and the Firewall forwards request from our external IP on to the TS Gateway, in the past 2008 and R2 we have just had 80 and 443 open  and it works fine, as it still does on 2012.

I want to enable the 2012 UDP option 3391 so I asked our ISP to also open the UDP port 3391 both ways.

Now RDS doesn't work properly, I can see in the TS Gateway monitoring that clients are connected http and usually 2 UDP connections, The Client when you click on the connection button we get connection is good or excellent and UDP is enabled.

From the Client end the best way to explain the experience is things will work smoothly for a while then hang if you try to resize windows it takes a while to do, what is really interesting is if you set of a video in a portion of the screen this will continue to stream ok whilst the rest fails to redraw correctly.  Also interestingly if you move the Windows Media Player around the video moves around flawlessly but the surround stays where it was originally.

Turn off UDP and things go back to normal, I would like UDP to work because on constrained connections the experience isn't brilliant.

Is there anything I'm doing wrong should I ask for established related through the firewall? is there anything I can look at to see how I can improve this. 

If I force an internal client to connect to the Gateway the UDP experience is absolutely fine. 

Its a bit frustrating that I can only test this issue remotely.

Any help would be appreciated, as the information on the internet is scanty

Thanks Gordon.

I had a fairly basic question around SSL certificates and using a wild card.  RDS was fairly straight forward to setup but SSL certificates are always confusing so I wanted to ensure I set this up correctly.

We have 4 servers (Broker, Gateway, Host and Web) setup for RDS and we would like Single Sign On to work both internally and externally over the WAN. How does authentication work?  Will just a normal SSL certificate work? I readwe need to use a wild card SSL certificate?  Then add the names of each of the internal RDS servers and the external/WAN domain name to the certificate?  Or is the setup different?

Something like this?  Does the $200 dollar one work?

http://www.sslshopper.com/best-ssl-wildcard-certificate.html 

Hello,

I have about 20 servers in my network. They are all running Windows Server 2008 R2. I have worked a little bit with RDS. However, I would like to accomplish a certain task and I am not sure if this possible with RDS on Windows Server 2008 R2 or Windows Server 2012.

I would like to build an access method to these 20 servers. They are all VMs running on VMware. I would like to provide a web page, maybe by using a Web Access server,  which lists a TS icon for each server. Then you click on it and a TS session opens and you can log in.

I understand if I want to provide this to external users then I have to use a Gateway server but how to I add an icon for each server so a TS session can be established. I hope my question makes sense. If not please let me know.

Thank you
Mc2102

I am currently setting up server 2012 VDI using 2 servers. A connection broker, web access, licenseing server and a VM Host server. I have followed the wizards, created my master image, created the collection, and setup group policy to add the group I want to give RDS access to Allow log on through terminal services & Remote Desktop Users group. 

When I connect using my admin account everything works, it connects to the connection broker and then forwards to one of the running VMs.

When I connect using a non-admin account I am prompted with: The connection was denied because the user account is not authorized for remote login. I also get the following in the event log:

TerminalServices-SessionBroker

TerminalService-SessionBroker-Client

--

I searched the internet high and low and I can not figure this out. I have even put the the non-admin users in the remote desktop users on the server just to see what would happen, same results if trying to connect to the pool. But I am able to connect directly to the server. I am also able to directly connect to a VM in the pool using a non-admin account. 

Any help would be appreciated. 

Hi i'm going mad can someone please point me in the right direction.

I have a single server running 2008 R2, 8 cores, 16gb, dual nics, this is configured as;

- Hypervhost01.domain.domain.co.uk (hyper-v, rd session host in redirection for vm pools) 192.168.0.13 + 192.168.0.210 for vmnetwork
   - tag.domain.domain.co.uk (rd connection broker, rd gateway, rdweb) 192.168.0.17 vmnetwork
   - webapps.domain.domain.co.uk (rd session host) 192.168.0.211 vmnetwork
   - xpvmpool (3 xp systems) dhcp
   - win7vmpool (3 win7 pro systems) dhcp

I can get the remote desktops to connect directly and via rdweb and they appear to be working on the lan without any problems, no matter what I do I can not get a remote app to launch. 

 I can add and remove them, they appear in rdweb, the connection fires up and then throws the error - Remote Desktop Connectio could not find the destination computer.  This can happen if the computer name is incorrect or the computer is not yet registered with Session Broker.  Try connecting again, or contact your network administrator.

On the Broker server the event log for TerminalServices-SessionBroker shows 3 entries

Event 800
RD Connection Broker received connection request for user DOMAIN\user.
Hints in the RDP file (TSV URL) = tsv://VMResource.2
Initial Application = rdpinit.exe
Call came from Redirector Server = webapps.DOMAIN.DOMAIN.CO.UK
Redirector is configured as Virtual machine redirector

Event 804
RD Connection Broker could not find an assigned Personal Desktop for user DOMAIN\user. HRESULT = 0x80070001

Event 802
RD Connection Broker failed to process the connection request for user DOMAIN\user.
Failed to find Resource Plugin OR an end point for the user.
HRESULT = 0x80070001.

There are no personal desktops, there are only the pools, the webapps server has never been told about the existance of personal or pooled desktops.  The other event logs have no entries happen at the same time or within a few mins of the above error.

All the applications and desktops are set to run through rdgateway.domain.domain.co.uk and if I open an https connection to the address I get a credential prompt and after entering the username it gives a blank page as expected.  Removing rdgateway from the app manager makes no difference and it will be needed later as I have to publish via ISA2006.

hypervhost01 session brokers group has tag in it, web access computers has tag in it.
webapps TS Web Access group has tag in it.
tag session brokers group has hypervhost, tag and webapps in it, web access computers has tag in it.

I don't know why hypervhost has a local session brokers group.  All of the VM machines including the servers have been configured with the powershell script.

Anyone got any suggestions please, I have been on this project 3 weeks now and formatted the server twice trying to get to grips with RDweb and publishing it to the outside world.

Reagrds,

Kane.