Hello

I have a 2008r2 server which is in work group and not connected to internet.I need to enable multiple RDP session on the server.

I need to install licensing server and per device CALs on the same server. I have been provided the Enterprise Agreement number for the CAL license

Please let us know how best i can implement this

Hi,

I am in the process of setting up a new domain for my business and I like the look of the Server 2012 R2 Standard with the Essentials Experience role as it seems to give me a lot of functionality with a lot less effort that manually configuring the various server roles. However, one feature I am keen to use is RDS and RemoteApps. Is there a recommended way to install these in combination? I have two servers both running Server 2012 R2 Standard.

If I try installing the essentials role first and then using the connector on the second server before running the RDS installation wizard it didn't seem to work. I enabled anywhere access on the essentials box first and created a remotewebaccess.com subdomain.

The way I have managed to get it to work is to first install AD Domain Services on the essentials box, then create my domain and join the second server to the new domain. Once that is complete I installed (but did not configure) the essentials role on the first box and then ran the RDS wizard on the second box - the essentials box was configured with RD Web Access and Connection Broker and the second server was configured as the RD Session Host. Then I completed the essentials configuration and set up anywhere access and finally tweaked the RD Gateway settings to use the remotewebaccess.com subdomain. As I say, this works but it doesn't feel like the correct way to get this working.

Thanks in advance for any assistance :)

Hi there,

First time setting up an RDS farm and ran into some trouble which I can't figure out how to fix. Searching the internet doesn't bring anything back either so I'm hoping someone here can shed a light into this problem.

I'm running a Connection broker (which does also licensing and web access, no gateway in this environment) and 2 session hosts. I have managed to create a collection and publish a remoteapp which I can access but now everytime I want to change something I get 2 issues, first of all, when I open Server Manager I get the following:

The maximum number of concurrent shells for the Remote Desktop Services plug-in has been exceeded. Restart Server Manager, and then try again.

(Sorry but I'm now allowed to post images cause account is not verified and it seems I can't verify it? meh)

Restarting Server Manager only brings up the same thing. But clicking ok makes it go away.

After that if I try to change any setting in RDS I get the following popup:

A Procedure imported by "Microsoft.VisualBasic.Activities.Compiler.dll" could not be loaded.

On top of these two issues, every time I try to login as admin to these session hosts I get a temp profile, not sure that' s related at all.

The second error is driving me mad and I don't know what else to do. Can anyone help?

Thank you in advance!

Gui Neto

Hi,

My company provides network facilities for a french legal profession.

The WAN covers around 5000 sites. On each site there are several users.

Depending of the site size, the bandwith goes from 2Mbps to 4Mbps. The latency is 50ms, 80% of the time. 20% of the time, the latency is up to 50ms (mainly due to parameters we cannot control).

We offer a cloud infrastructure for the softwares editors but some of them have decided to deploy solutions based on Remote Desktop Services. Basically, they deploy their solution on our cloud infrastructure and ask users to connect it using Terminal Server. I guess the advantage is they only have to deploy once their solution but the problem for us is that the user experience is directly dependant on the WAN latency.

My question is quite simple: In this situation (WAN network with latency spikes), is it a good practice to deploy a Remote Desktop Services based architecture ?

Thanks in advance for your answers.

Hey Guys,

My Setup
2 x Windows Server 2012 R2 with RDS. Both of them are in the same farm and on both is the broker installed in high availability mode.

My Problem
When the User is logging in to farmname.domain.ch he enters the password and normally it's fine. But if the broker is changing the terminalserver because the other one has less load, the have to enter the password again.

Solution with Problem
Configuring Single Sign-On (http://social.technet.microsoft.com/wiki/contents/articles/5466.deploying-rd-session-host-servers-or-farms.aspx).
I Configured the part in the GPO. Then I should create a kerberos identity for the farmname, but there is also written that this is not supportet if the connection broker runs as a node in a failover cluster and that's my main problem..

Question
What ist the solution if my connection broker(s) run as a node in a failover cluster?

Please help me :-)
If you need some more information or you don't understand my english, just ask.

Thank you
Dominik

Hello everybody, 

Faced with strange situation. I have DFS namespace based on Windows Server 2012R2 and same RDS server. Issue is very simple: if you map DFS share to network drive, no matter how, via logon script or via group policy, the first user which logs in get this drive ok, second logged in user gets red X on this drive but still able to access it. 

If I map this drive via GPO, after second user log in I can see warning in Event Viewer

The user 'R:' preference item in the 'Test DFS mapped drive {7CDE4506-692E-422B-9299-D12CB15F7CC6}' Group Policy Object did not apply because it failed with error code '0x80070055 The local device name is already in use.' This error was suppressed.

No matter if checkbox "Run in logged-on user's security contest" were marked or not. 

After some tests I recognised following:

1. If you map drive manually from Windows Explorer, second logged in user gets same red X on that drive

2. If you map drive manually and use "connect using different credentials" options and even enter credentials of logged on user, then the problem goes away.

3. So I created script which do it in following way:

net use Z: /delete

net user Z: \\dfsnamespace\root /user:domain\%username%

This works fine but I'm wonder that this bug a bit well known on Google and there is no any reaction from MS as well about this point. Could please hint me anything about this issue? I don't like this workaround and I think there has to be another way to solve this issue.

trying to set up RDS and a virtual desktop but keep getting this error: "unable to create the reference virtual desktop. invalid class"

Also when i try to manually create a virtual desktop collection, the "available virtual desktop templates:" doesnt have any templates to choose from. i was thinking that the hyper -v VM's that i created would be in the list, but their not. Thanks in advance for the help and your time!

Would like to setup a RDS server with win 2012 server. The server will be dedicated to just the roles needed to implement a RDS server. We already have a Domain controller. Had setup a RDS server with Win2008 server sometime ago and that was fairly straightforward.. Have being reading several post on different forums to get ideas, but it seems confusing. Do I join this new server to the domain before proceeding to add the roles or leave that to do  last?

I saw on some post the they mention a SQL server. Is that really needed to implement RDS? All we need to have about five thin clients connect to the network to use resources on the LAN.  Pls advise steps and exact roles need for such basic setup. TIA.

Greetings,

We currently have issues with opening the access to people working outside of the office for our VDI solution.

We recently bought the SSL certificate and we got a domain name already (let's call it domainname.com) as well as a local AD (let's call it local).

People at the office have no problems connecting to the server's local addresse (let's call it server.local), but whenever someone tries to open a RDP connection at home at server.domainname.com it does not work, even if the connection is initiated through https://server.domainname.com/RDweb.

Whenever the RDP is started, the certificate is validated but after the user type his/her credentials in we get:

"Your computer can't connect to the remote computer because an error occured on the remote computer computer that you want to connect to. Contact your network administrator for assistance."

In the even logs, on the home computer I have the following (under RemoteApp and Desktop Connections":

"Remote application (server.local) is launched on RemoteApp and Desktop connection (server.local) but no stored credentials are used for single sign on. (Reason - RemoteApp and Desktop connection does not exist)". Event ID: 1041

Under the server, I have Event ID: 301 in TerminalServices-Gateway, the exact log is (sorry that server is in French):

L’utilisateur « local\user » sur l’ordinateur client « 0.0.0.0 (censored home IP) » ne répond pas aux exigences de la stratégie d’autorisation d’accès aux ressources et n’a pas été autorisé à se connecter à la ressource « server.domainname.com ». L’erreur suivante s’est produite : « 23002 ».

Roughly translated:

"The user « local\user » on the client's computer « 0.0.0.0 (censored home IP) » does not meet the requirements of the authorization policy for the resources access and the connection to the resource has been denied "server.domainname.com". The following error occured : "23002 ".

Does anyone got an idea as to what the problem could be and how it could be resolved?

Thank you in advance for your time and help.

Hi,

I have run into a problems regaring Outlook attachment on our RDS 2012 R2.

If a user starts outlook, create a new e-mail and use the button "Attach file" thing goes SLOW.
The user will try to attach a file from his home directory(network share) Z:\something(pdf or word).
A dialog pop up is showen:
Laster ned(norwegian) = Downloading.
For a file on 81 kB takes around 10 secounds.

BUT! if a try to "drag-drop" the same file into to the e-mail it goes Instant!

this problem only happens when the user try to use the Attachment buttton in Outlook:

I did run a test on my local computer to a network share and every thing is fine there.
so i think this is only related to the RDS.

About the user:
- YES the user have folder redirect. redirecting to his home directory. (Appdata is not redirected)

- This have worked before

- The Folder z:\ is located on a Filserver with all the permission needed.

This have been done.

• - Restart of the server
• Updateing Windows server 2012 R2 to lates patch
• updating Office 2013 pro Plus
• Disable Addons
• Disable antivirus
• Trying to start in safe mode.

If any one have run into this problems before on RDS please replay.

all the best

Martin

asd

I know that there is many questions and requests about RDS licensing

I've recently purchase 10 per user licenses to be able to use RDS I installed Broker/Web Access/Licensing services on the same server (say RDServer) on which I installed the 10 per user licenses.

I've deployed Host server (no VDI) on this same server (RDSServer). At first, I wanted to use this server as an entry point to access other servers on my LAN. So, 10 users can open, simultaneously, up to 10 sessions on RDSServer and from this server each user can open a classic terminal service session on other servers (up to 2 sessions simultaneously on that server)

Now, things changed, I need to install Host Server on the servers in LAN, so the 10 users can open more then 2 sessions on them

My question is: Do I need to purchase more licenses ?

Any help please ?

Microsft states: (https://technet.microsoft.com/en-us/library/3660ac5a-7468-48d3-b7e8-5529de8fb6c5)

Verify that you have purchased enough CALs for the Terminal Server license server and that the Terminal Server Licensing mode matches the type of CAL available on the license server. Terminal Server licensing modes determine the type of CAL that a license server issues to a client. In Windows Server 2003, two types of CALs are available: Per User and Per Device. A Per Device CAL gives each client computer or device the right to access a terminal server that is running Windows Server 2003. A Per User CAL gives one user the right to access a terminal server from an unlimited number of devices. In this case, only one CAL is needed instead of a CAL for each device. Per User CALs are not monitored by Terminal Server. This means that even though there is a Per User CAL in the license server database, the Per User CAL is not decremented when it is used.

Hello Forum!!

I have an ESXi 5.5 running on a DELL R720 with 2 6-core Prozessors an 96 GB RAM.

On this Server are 4 Windows 2012R2 Server. 2 Domain Controler, 1 Exchange 2013 and 1 RDS Server. All servers have the last updates.

The RDS Server has 6 cores an 48GB of RAM for about 55 Users running Office 2013 and Management Software based on SQL Server.

The clients are connected via LAN and WAN. The Clientdevices are Thinclients, WIN7 and WIN8 PCs.

The whole system is running performantly, the RDS Server is running at 50 - 70 Percent of Prozessorutilization and using about 20-25 GB Ram (as TASKMANAGER is displaying). Excel and Winword ie. are loading in about 3-5 seconds.

First I recognized, that he RDS Server starts slowing down, when some users (no special users) disconnect their sessions. When about 8-10 sessions are disconnected, loading Excel or Word takes about 30sec. to 1 minute. Opening TASKManager takes about the same time.

When I was logging off 4-6 disconnected users, no matter which users, the server is comming back to the normal performance. The same occours when some people are coming back from the break at about 10:00, the server also goes back to normal performance.

I did not see any changes in Prozessor-Utilization and only a small amount of memory is becoming free.

i.e: 55 Users connected, 7 disconnected, 65% Utilization, 26GB used ---> slow

loging off 5 Users: 62% Utilization, 24GB used ----> performing system

In another thread, a suggestion was setting the autologoff time down to 1 minute. First I set it from 6 to 3 hours, for 2 days no problem occours, then I set it to 30 min, 1 week no problems, now its 1 minute. No problems for about one week, too.

Today the problem occours again.

Ie. unable to start Process Monitor, with about some patience the Gui of Processmonitor appeared after about 15 min. Unable to unload Office Scan. After a long time the gui for entering the unload password appeared, but I was unable to key in the password.

After Processmonitor-Gui was visible I did some testing:

Doble Click Excel, no process visible in Process Monitor. About 30-45 sec later, excel.exe is visible and availiable in about 3-5 sec. From becoming visible as a process and excel is availible for use in 3-5 sec is normal performance.

Disk IO from the view of the resource manager is about 3-6 MB per sec. In the vSphere Client I found the same counts.

Nothing special occours, when the server is slow.

IE. today I resolved the problem, with killing some console tasks (pcntmon.exe) from the Office Scan AV Scanner.

I was installaing check_mk in an instance on the esx. I did not found any relavant information or reason, what makes the server slow.

Today I heard from a friend, that in their company, they had a similar problem with some windows 7 machines. Their solution was in kb3083710. But this patch is only for windows 7 an 2008r2.

Does anybody know someting, that a similar patch is availiable for windows 2012r2 ??

Thanks a lot for any ideas and help.

Regards from Austria

Reinhold

Hello, we have a 2012 Server R2 that we use a Terminal Server.  Users are having problems printing to redirected printers(network printers seem ok).  Sometimes it will work and other times it won't work at all or it will work until they log off then won't work after that.  I have the Group Policy set to use easy print driver first which has always worked in the past and we install drivers for the printers that don't work well with Easy Print.  I have tried changing the Group Policy, changed the Spool folder permissions, restart print spooler, restart the server but doesn't help.  I do get the event entries below but a google search has lead to dead ends.  This just started in the past 2 weeks so not sure what could have changed.  Thanks for any help.

Event Errors:

The document Print Document, owned by (user), failed to print on printer HP LaserJet 700 M712 PCL 6 (redirected 67). Try to print the document again, or restart the print spooler.

Data type: RAW. Size of the spool file in bytes: 197590. Number of bytes printed: 0. Total number of pages in the document: 1. Number of pages printed: 0. Client computer: (Server). Win32 error code returned by the print processor: 122. The data area passed to a system call is too small.

Windows could not load print processor hpcpp165 because EnumDatatypes failed. Error code 126. Module: 7\hpcpp165.dll. Please obtain and install a new version of the driver from the manufacturer (if available), or choose an alternate driver that works with this print device.

Windows could not load print processor hpzppwn7 because EnumDatatypes failed. Error code 126. Module: 7\hpzppwn7.dll. Please obtain and install a new version of the driver from the manufacturer (if available), or choose an alternate driver that works with this print device.

Failed to upgrade printer settings for printer 1802 driver HP LaserJet 400 M401 PCL 6. Error: 1801. The device settings for the printer are set to those configured by the manufacturer.

Hello,

We currently have a signing issue on our remoteapp. I edited the \\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\CentralPublishedResources\PublishedFarms\ - RDPFileContents string and added line there.

I tried to undo the change in the RDPFileContents string, so that the signing would be correct again, but unfortunatly that doesn't work. When I try to open the remoteapp, the signing issue persists.

Is there a way to recreate the collection RDPFileContents string? Or is the only way to recreate the collection again?

Thanks in advance,

Ingmar

I am having a windows 10 os and when I try the remote desktop function available on the MY COMPUTER properties.so in the remote connections toolbar I am able to find only the remote assistance , my system is not showing the remote desktop options(allow remote connections to this desktop) I am not able to find those options.

I have tried enabling it firewall , didn't work out .

Anyone know how to fix it would be really helpful.

Hi,

I don't know if this is the right place for this, but here it is...

I'm trying to add a application to my RemoteApp program list.

Here is what I did :

In "Publish RemoteApp Programs" I clicked "Add..."

In the "File Name" I put "\\SERVER.DOMAIN.local\d$\FOLDER\FILE.exe"

and I get this error:

<Quote>

you must specify a file from the rd session host server

SERVER.DOMAIN.local by using the UNC path; for example

\\SERVER.DOMAIN.local\c$\path\filename.exe.

If the problem persists, ensure that the following Windows Firewall exceptions are enabled:

1. File and Printer Sharing (SMB-Out).

2. File and Printer Sharing (SMB-In).

</Quote>

This is AFTER I:

1. opened the Firewall on BOTH servers (the RemoteApp AND the server where the file is located)

2. Mapped the foler to "Z" on the RemoteApp server

So I did a Bath file pointing to it, now it is working, but it is not 100% a RemoteApp!

explanation :

I'm running a program that needs Pervasive, so I installed it on the server, but not on my PC (for the test)

When I run the RemoteApp for the web on my PC, the program is looking for the DLL files for the Pervasive on MY PC, and not on the server...

Please help, Thanks

In server 2012 R2 RDS is it possible to manage the RDS collection created on the broker from a different server if your broker goes down?  We use round robin which is why we have the broker currently as a stand alone.  But if we loose the broker can we mange the collection from a different 2012 R2 server until we can being the broker back online?

Thanks,

Ryan

This TechNet article states:

Q. Can I install Remote Desktop (RD) Connection Broker and RD Session Host role services on the same server to consolidate servers?

A. Technically you can. Be aware, however, that if you create a farm of multiple RD Session Host servers with one RD Connection Broker (running on one of your RD Session Host servers), then the RD Connection Broker is the single point of failure. Although you have multiple RD Session Host servers, your users won’t be able to reach them if the RD Session Host server that also runs RD Connection Broker fails.

You could expand the previous scenario by installing the RD Connection Broker role on both RD Session Host servers and making RD Connection Broker also highly available. For production environments, however, we always advise you to install the RD Session Host and RD Connection Broker role services on dedicated servers.

I'm having trouble understanding how this would work. How would inbound tcp/3389 traffic know to go to the RDCB process vs the RDSH process?

E.g.

1) A user connects to server1 via "rdp.contoso.com:3389" and disconnects.

2) Due to load balancing, the user is later reconnected to server2 which runs the Connection Broker.

In Step 2, the RDCB does what? If it sends the user back to "rdp.contoso.com" on port 3389, the loop might go on forever.

I have a Windows remote desktop server and IEESC is disabled for administrators and users, however random users are getting a pop up when they browse the internet. 

I have checked the following reg keys are both set to 0

1. HKEY_LOCAL_MACHINE\ SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}\IsInstalled. 

2. HKEY_LOCAL_MACHINE\ SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}\IsInstalled. 

I have deleted the user profiles but still appearing. 

I remember when installing the RDS role you get the warning IEESC will be disabled for better experience so not sure why this is popping up all of a sudden. It's been working fine for some years. 

Any help or advice would be much appreciated. 

Thanks