Hi Guys,

I have a RDS Farm set up to use a Licence server, however I have noticed that it is dishing out multiple licences for multiple devices.I have had a look and found that this issue can be caused by deploying devices from a image that has not been sysprep' correctly.

The issue I have is I can see from the licence report that there are multiple devices that share the same RDS Licence Hardware ID but have different SIDs when you use PSGETSID.   Feel like I am going round in circles trying to find the reason.

All servers involved are Server 2012  and new licences purchased.   Hopefully it is something I missed (would be happy with that as it is driving me crazy).

Any suggestions would be helpful.  

I am on Windows 8.1 64bit HP Pavilion 15 Notebook.

I recently ran into an issue where the Remote Desktop shortcut on Remote Web Workplace Server 2012 R2 stopped working and issued the "Remote Desktop Services has Stopped" error forcing you to close the window.

This was only happening on one users PC on the network and I have listed the information from event logs as shown below.

Faulting application name: mstsc.exe, version: 6.3.9600.16384,
time stamp: 0x5215e2b5
Faulting module name: ntdll.dll, version: 6.3.9600.16502, time stamp:
0x52c359e8
Exception code: 0xc0000005
Fault offset: 0x000000000004bb96
Faulting process ID: 0x1178
Faulting application start time: 0x01d082774ee70730
Faulting application path: C:\Windows\System32\mstsc.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report ID: 9351a32d-ee6a-11e4-8261-a0d3c15c4c90
Faulting package full name:
Faulting package-relative application ID:　

After some troubleshooting I decided to do a full reinstall of windows from the recovery partition. I installed all available updates and updates all drivers, which seemed to resolve the issue above.

However, a new issue cropped up with the same RWW Shortcut where instead of "Remote desktop has stopped working" error the connection bar got stuck seemingly forever at "Initiating remote connection".

At this point I created a fresh RDP Shortcut to the same server with the same information in both (Server name, gateway, redirections) so that both shortcuts had identical data within.Note: all RDP files connect fine apart from the one on Remote Web Workplace.

I then opened both shortcuts side by side in Notepad and began comparing and altering configuration parameters. I found that after removing the following information I was able to connect using the previously broken RDP shortcut.

loadbalanceinfo:s:tsv://MS Terminal Services Plugin.1.Hosted_Desktop
use multimon:i:1  

signature:s:

Does anyone have any suggestions as to why the above information was causing the issue in the first place?

I'm using RDCMan and it has been using a lot of memory and crashing.  With 12 connections it uses 1,548,976 K of memory and crashes with an "Unhandled exception" "Not enough storage is available to process this command. (Exception from HRESULT: 0x80070008)."  I love this program and want to know if there's a way to fix this on my end.  It seems like other people are not having this issue.  I'm running a fresh install of Win7 Ent.  I have .NET 3.51 and 4 installed. Do I need to installed .NET 2.0?

Here is the info from the crash:

Hello,   I have a remote client that loses his wireless connection often.  He's on a portable device that moves around a lot.  What happens is when he loses the connection the session stays open on the server.  When the connection comes back and he reconnects he 'sometimes'  gets the same session.  The application he's running only allows a user to be logged into one computer at a time. When the new session starts, the programs see it as a different computer and won't let him log back in.

What I'm trying to figure out is how to make sure he always get logs back into the open session.  Other people have said that it's because he's logging back in to quick and the remote desktop host didn't have time see that's he's disconnected, but there have been situations where that user has left the session running over night, after getting disconnected,  and still get's a new session. 

Another part of the problem is that if I were to some how automatically close the session after the user lost connection, the programs that he was running still shows him as logged into in that computer/session id. For example if I were to end his session, the program never has a chance to call home to say this user is logging out.  Now less he happens to get the same session id  he can't log back into the program. I have to going in that program and manually tell it he's logged out.  So it seems closing the disconnected session isn't a good way to do it, because it would still require human intervention.

I have a handful of users (about 5 out of over 1000) who are experiencing an issue where hyperlinks in Outlook and OneNote will quit working.  They click the hyperlink, the mouse cursorturns to an hour glass for a few seconds, and then nothing (no error message).  Hyperlinks will be working correctly the first part of the day, and then sometime throughout the day, they will stop functioning.  Sometimes logging off, and back on, fixes the issue, and sometimes it does not.

This is on a shared desktop environment using Citrix XenApp 6.0.  The servers are Windows 2008 R2.  It doesn't matter what server the user connects to (there are about 20 different servers).

Roaming profiles are redirected to a network location.
The users profile folder is deleted from the server at log off.

The problem can be temporarily resolved by doing a reset of Internet Explorer (Tools, Internet Options, Advanced, Reset), but this is not a permanent fix and must be done frequently.

Anyone have any idea what could be causing this?

Thanks.

We've been having a problem with the mouse cursor in RDP sessions on one of our Windows 2008 R2 Servers.

When connected with RDP the host mouse cursor will lag behind the client mouse cursor. This is visually distracting and disruptive for our users. I would post an image of the behavior, but my account is not yet verified.

We unfortunately cannot pinpoint where this started, as the users did not report it until sometime after it had started. This server is a VM running on VMWare VSphere, but we have been in touch with VMWare and they told us it is a Microsoft / RDP problem, and not a VMWare problem. This issue does not present when you are connected with the VMWare console. None of our other VMWare servers are having this issue. We have tried changing VMWare graphics and mouse drivers, adjusted hardware acceleration, all without effect. We've also checked cursor shadowing, and the cursor scheme is set to none.

Any help would be greatly appreciated, thank you.

Hello,

I have a 2012 R2 server = joined to a domain. I have configured everything and thought I was good to go. Users can sign onto the server and everything looks normal but - if I go to: Server Manager|| Remote Desktop Services|| Collections|| then to the Connections window at bottom right - it does not show any of the connections. Normally I would use this for shadowing user sessions. Not sure what I am missing. 

I have another 2012 R2 server that is doing remote Desktop Services and it looks behaves normally.

Why would I not see the connection to the server here?

I have Windows Server 2012 R2 in a workgroup, and i want to make it Remote Desktop Session Host server. I have installed this role and also Remote Desktop Licensing. Then i activate server and install licenses on this server. I set licensing mode per user and point to this server via local policy. RD Licensing Diagnoster displays no errors, it say that Creds and Connectivity is available. Also i see no warnings from client. But RD Licensing Manager displays that i have all licenses available, but zero issued, even if i have 5 different users connected via RDP. Why it dont issue licences? Is this normal?

Hi All,

i'm going to do some tests for the future infrastructure for SaaS.

Actually i'm going to tests the usage of the User Profile Disks. I'm facing to a strange behaviour with the storage of UPD on DFS. The idea to do that is to offer high availability of the profiles.

When i try to setup the path for the UPD in a Collection, i get an error "The network location is unavailable". But when I test the DFS all is right...

I would know if it's possible to use DFS as storage for UPD. And if yes how to setup that.

Thank you.

Hi,

• 1 RD Gateway
  
• 1 RD Web Access Server
• 1 Session Broker / RD Licensing
  
• 2 Session Hosts

I've got an official wildcard SSL Thawte certificate (*.externaldomain.com)
The external domain is connect.externaldomain.com
The internal windows domain is internaldomain.local
A DNS zone (externaldomain.com with CNAME to rd-gatway.internaldomain.local) on the internal DNS exists.

After starting a remoteapp 'wordpad' two certificate warnings appeared,"Certificate Mistmatch" and "The certificate is not from a trusted certifying authority.

After acknowledging these messages 'wordpad' started in the end.

To get rid of these errors I have changed:

• Changed published FQDN with Set-RDPublishedName.ps1 to connect.externaldomain.com
• wmic /namespace:\\root\CIMV2\TerminalServices PATH Win32_TSGeneralSetting SetSSLCertificateSHA1Hash="12345567890" on all servers

Source: https://social.technet.microsoft.com/Forums/windowsserver/en-US/563fc463-3bac-4319-b417-e63116acb777/certificate-mismatch-rds-session-host?forum=winserverTS

When starting wordpad again the following correct message occurs:
Publisher: *.externaldomain.com
Remote computer: connect.externaldomain.com
Gateway server: connect.externaldomain.com

And now I'm getting the following error:
The following Remoteapp program is not in the list of authorized programs

Any help will be very appreciated.

Markus Petersen

I have a lot happening within my GPO's for RDS and everything is working pretty good, however.  Is it possible to set RDS to use the most recent session used instead of being prompted with the screen below?  I need multiple sessions allowed however.

Hi,

I have a problem with remote desktop licensing in following scenario:

- RDS license server: Windows 2012 R2. This server is a member of our domain
- RDS session host: Windows 2012 R2. This server is in Workgroup
- RDS license server is configured in group policy on session host as well as the licensing mode, Per User.

For sessions hosts in domain, everything works fine, but for some reason I cannot get this server in workgroup to "see" the licenses in license server. In w2k8 environment it was possible by creating same local user with admin rights on both, the licenses server and on the session host, but this trick doesn't seem to work on Windows 2012 environment. I get following error message on Licensing Diagnoser: "To identify possible licensing issues, administrator credentials for license server "server.domain.com" are required.".

Any ideas?

Hello.

Scenario: RDS deployment (RDCB server, 2x RDSH servers, 1x RDWA server), 2xRDGW servers in a NLB farm (outside of the RDS deployment), all servers living in a abc.local domain. There's a session collection containing both RDSHs. Since users are connecting almost exclusively from the internet and are not domain-joined, we've acquired a wildcard certificate (from public CA) for a xyz.com domain and applied that certificate to the RDS deployment.

There's also certificate (from public CA) for the RDGW NLB name (say gw.xyz.com).

Since users are connecting from outside of the network/domain, we generate custom RDP files for them containing the required parameters like:

loadbalanceinfo:s:tsv://MS Terminal Services Plugin.1.<session_collection_name>

workspace id:s:rds.xyz.com

etc. to make that work. The RDP file is also signed using rdpsign using the hash of the *.xyz.com certificate.

So far so good. Now, with this configuration, users can connect to the farm (using the rds.xyz.com as computer name). But in older OSes like Windows 7 or Vista, there will be a untrusted cert. warning upon connection to the target RDSH server (those are using the default pre-generated selfsigned certificates).

Users using W8/8.1 do not get this warning.

What should we do in order for the W7/Vista users to not get this warning? Our thought was to install the *.xyz.com certificate on the RDSH servers and forcing them to use that by modifying the WMI class Win32_TSGeneralSetting as explained for example at http://ryanmangansitblog.com/2013/03/10/configuring-rds-2012-certificates-and-sso/

However when we do this, users can't connect at all getting a authentication error: An authentication error has occurred (Code: 0x607)

What's the problem with this? How can it be resolved? Is there a better technical documentation what and when actually verifies the certificates? Is it the RDGW? Is it the RDCB? Something else? Why is the behavior different between OSes (using same RDC version)?

I presume (correct me if I'm wrong) that the user connects to the RDCB that wants to create/redirect the session to one of the RDSHs. At that moment it checks the certificate installed on the RDSH, but since it's *.xyz.com and the computer lives in AD domain abc.local, that check will fail. Would modifying an alternate DNS suffix to xyz.com on the RDSH help? Or something else?

Thanks in advance.

Hi,

I'm building Web Application Proxy with ADFS Preauth for RD Web and Gateway. Can anybody help with these 3 questions:

1. ADFS:
   What is the best way to configure Relying Party Trusts in ADFS for RD Web and Gateway?
   
   
2. RD Web:
   If I configure RD Web for windows integrated authentication, then I can logon to ADFS and successfully access the RD Web page, however no credentials are passed through to the client for connecting via RD Gateway.
   If I configure RD Web for forms based authentication then I have to logon twice however it appears to set a TSWAAuthHttpOnlyCookie cookie correctly and credentials are passed through to the client for connecting via RD gateway.
   How do I achieve SSO for both RD Web and RD Gateway?
   
   
3. RD Gateway:
   I can't get gateway to work through WAP. I am wondering if this might be because it is attempting to authenticate with NTLM instead of Kerberos? I get repeated auth popups with "the logon attempt failed". Nothing useful in Web Application Proxy log. In the headers below extracted from fiddler my WAP is 'rdsext.lab.local'.

About the only doco I've found on this is here: https://technet.microsoft.com/en-us/library/dn765486.aspx

Any assistance appreciated!
Simon.

RDG_OUT_DATA https://rdsext.lab.local/remoteDesktopGateway/ HTTP/1.1
Cache-Control: no-cache
Connection: Keep-Alive
Pragma: no-cache
Accept: */*
Cookie: TSWAAuthClientSideCookie=Name=lab%5Ctestuser&MachineType=public&WorkSpaceID=CB1.lab.local
User-Agent: MS-RDGateway/1.0
RDG-Connection-Id: {9DB5E643-DA7E-4D22-89FF-F6AB061CFBDE}
RDG-Correlation-Id: {6BB275E1-B8E1-44EE-B45C-ABE1BCA00000}
RDG-User-Id: dAB0AEAAcwBsAGEAYgA=
Host: rdsext.lab.local
Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGA4AlAAAADw==

Been fussing with this for days and getting no love.

Trying to connect with Windows 7 Ultimate to Windows 2012 Server Data Center edition from outside my home network, from Starbucks or McDonald's or work to my server at home.

Performed all these steps as found in this promising and helpful article:

http://windows.microsoft.com/en-US/windows7/allow-remote-desktop-connections-from-outside-your-home-network

1. Allow remote connections to the computer you want to access. DONE - ADDED ROLE TO SERVER AND NON-ADMIN ACCOUNT TO RDP GROUP, using Network Level Authentication. Connecting from Win 7 so this authentication method shouldn't be an issue, I presume.

2. Make sure Remote Desktop is able to communicate through your firewall. DONE - FOR BOTH PUBLIC AND PRIVATE ASPECTS OF THE RULE.

3. Find the IP address of the computer on your home network that you want to connect to. DONE - using ipconfig /all

4. Open your router's configuration screen and forward TCP port 3389 to the destination computer's IP address. DONE - NOT TCP/UDP but only TCP, internal and external port ranges the same. Note: Using a wifi signal booster in the far end of the house, is this a problem requiring additional config? I don't believe it has an ip address or acts like a router. But in desperation I may try disconnecting it and heading out again to the local Starbucks to try connecting.

5. Find your router's public IP address so that Remote Desktop can find it on the Internet. DONE - Using 'what is my ip' , easy enough.

6. Open Remote Desktop Connection and connect. DONE, I THINK, BY ENTERING [router public ip]:3389.

But the message result is always the typical: 

1) Remote access to the server is not enabled.

>>>But this is not true, as I am able to RDC at home to the server machine.

2) Remote computer is not turned off. 

>>>But this not true, as I just left home 30 mins and it's rarely off, only rebooted sometimes.

3) The remote computer is not available on the network.

>>>Not sure what this means. Of course the remote computer is not on the network I'm on right now; it's on my home network. But I can ping my router ip via cmd, so coming from outside can be done; through my router I should be able to reach inside my home network w port forwarding. But no love. So...what to do, what to do....go to the pros, what do you think?

Is the wifi range booster an issue?

Is connecting to Data Center edition an issue?

What if I deselect 'Use Network Level Authentication, will that work but raises the security risk?

Is there anything to configure on the Remote Desktop client advanced/Connect from Anywhere/Settings dialog regarding an RD Gateway? 

Thanks for any input!!

/Markus

AskMarkus

Hello, Dear Colleagues.

Need your help.

We are using WS 2012 R2 Remote Desktop Services. Single user every day deal with the problem: Could not find a part of the path ''C:\Users\<USERNAME>.000\AppData\Local\Temp\***.tmp"

Environmental variables TMP and TEMP points to "C:\Users\<USERNAME>.000\AppData\Local\Temp". But there is no folder "C:\Users\<USERNAME>.000"

To reassign variables and make logoff helps for one day.

Someone met such a problem?

Thanks.

Hello Community,

I am running scripts on one of our internal server - Windows Server 2008 R2, which I connect by remote desktop connection service. My thought is, I want to share a link to the users who are running on local windows 7 machine, which leads directly to that folder on the remote server where the script results are stored.

Ofcourse remote desktop connection needs Computer name, User name and password. So, can the link that I want to share open up this dialog box asking for details and take the user directly to the folder. 

I know this sounds like what we do in Mapping a network drive. But just hoping if this means anything.

Looking for some replies.

Thanks,

Sai