on a new windows  server 2012 with the "remote desktop session host" role enabled, and "Remote desktop Licensing" we are unable to locate the "remote desktop services manager" snapin.

can you please advise

We ended up using the powershell script here https://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80 to re-publish the FQDN of the server. Also changed the DNS so the FQDN pointed internally.

I think this script must have set the FQDN in a part of the config that had never been specified before, causing the RD Gateway to refer to itself by its FQDN to hand off requests. These requests failed at our firewall because we only allow port 80, 443 , 3391 through. 

We don't have the option to add port 3389 to the loopback rule on the firewall and we don't want to open 3389 either, otherwise this would resolve the problem immediately.

Is there another way we can resolve? maybe changing the code and reversing the hand off requested.

Thanks

Chris

Hello Community,

I'm working on MS Remoteapp via Server 2012 R2. I want to Publish the Connection Via GPO to my Clients.

When I manuelly enter the URL via gpedit.msc everything works fine. 

But when i enter the URL in my GPO on my AD Server the clients don't get the URL. What's wrong here? What i have to do, that they get the URL?

I'm happy to read your answer. Thank you..

Hi all,

I have a client that is running an old Compaq ProLiant ML530 Server.

They are running Windows Server 2000 on it!!!
It is used as a TS license server.

Is it possible to migrate the licenses to a new server with Windows 2012 R2, without receiving any major disruption?

I can only find answers that it goes to a Windows Server 2008.

Would be nice to be able to help them before someone closes the door too hard. :)

Grateful!

Fredrik

I'm seeing the following 311 Event ID in my Remote Desktop Services logs on a Windows 2012 R2 server when trying to connect to the RDGateway server using itself as an Remote Desktop Gateway server:

The user DOMAIN\User, on client computer "IPv4 IP Address", did not connect to the following network resource: "hostname" because the remote computer does not support secure device redirection. Try selecting another network resource or possibly lower RD Gateway security by modifying RD CAP to allow client connections to resources that do not enforce device redirection.

• DOMAIN\User is a Domain Administrator account
• IPv4 IP Address is the external IP address of the PC from which I'm attempting the connection
• hostname is the name of the server I'm trying to connect to (which is the RD Gateway Server itself)

I can RDP directly onto the server, so I don't believe it's a problem with the Remote Desktop client application on my PC.  I can also use the RDGateway server to connect to other machines on the same network and domain as the RDGateway server - it only fails when I attempt to connect to the RD Gateway server using the RD Gateway server.  All machines on the domain are Windows 2012 R2, but I can only surmise there's a difference somewhere between the working servers and the RDGateway server which is causing this error.

Looking through some articles the only suggestion is to remove the Only allow client connections to Remote Desktop Session Host servers that enforce RD Gateway device redirectionoption from the CAP, however that appears to make the connections less-secure, and also shouldn't be necessary being as it works for all the other PCs I'm connecting to.  To confuse matters further, I have another completely separate environment built from the same scripts where this works as expected!  Finally, to add insult to injury, this does appear to work following a reboot of the RDGateway server (not a practical solution for a production environment, obviously!).

Any ideas, assistance or thoughts would be greatly received.

in my office, i have deployed a test VDI scenario with server 2012 R2.

all RDCB + RDWeb + RDVH are installed on one server.

i have a sysprepd Generation1 windows 8.1 VM as template VM in my hyper-V console which is in shut down state.

using create virtual desktop collection option, i am creating a "managed pooled virtual desktop collection" and i have selected that system creates 2 VMs for me.

at the end of the "managed pooled virtual desktop collection", system stops on the VM creation procedure.

i has created 1st VM and has turned it on and VM booted and mini-setup done. 

but it doesn't create the 2nd VM and stops in that state for ever.

i checked RDVH event log and i found this event 15090  :

'pool-vm2' failed to modify resources. (Virtual machine ID CF2DB197-613D-4E0E-9DC5-CB11B3286580)

i have to cancel the task and system removes that VM.

why system stops in that state ? what does it mean here :  failed to modify resources ?

really need help.

thanks in advanced

Hi everybody, 

unfortunately I wasn't able to find a conclusive answer to my question yet and https://support.microsoft.com/en-us/kb/2833839 only got me so far.

I need to set up a fairly basic RDS environment in which eight users need to connect to a Windows Server in order to run a number of applications in a remote session. Remote desktop sessions would suffice, I do no intent on deploying virtualized desktops.

Since we have an extremely tight budget, I'm looking for the 'smallest' solution possible in terms of licensing cost and hardware. So far, I came to the conclusion that I would need to get one Windows Server 2012 Standard licence with 8 RDS CALs. Unfortunately there is no DC in the network as of now. Can such a RDS environment be deployed on one instance of Server 2012 Standard? Would it make sense to use Hyper-V in order two virtualize two servers and how could that setup look like? 

Thank you in advance! 

HI,

I have a new VM Windows 2012 R2 (Vmware) and Office 2007.

Users are connected through RDP and through Cockpit.

using both methods users complains about performance issues when working with outlook (Ex. moving from one email to another can take 20-30 Sec.) also working with Word can be slow.

I have windows 2003 with office 2003 terminal server working with no issues on the same Virtual infrastructure.

Any Ideas?

Regards,

2012 RDS Setup

- 1 2012 Server with Gateway, Connection Broker, and Web Access roles on it

- 1 2012 Server acting as a Session Host

I was able to connect through Web Access to the desktop of the session host server. However, we receive a certificate error.

To fix the cert error we tried to change the published FQDN Name with the powershell command Script from TP/Microsoft: Set-RDPublishedName.ps1. This script worked and the FQDN name is changed, but the connection from Web Access doesn't work at all anymore. We are getting the error message "Your computer can't connect to the remote computer because the Remote Desktop Gateway and the remote computer are unable to exchange policies...".

If I configure a RDP connection instead of going through Web Access I do not get this error.  

Thank you in advance for any advice regarding these problems.

I've set up a single Server 2012 R2 Gateway/Session/RDWeb server. At some point during setup, the WebFeed stopped working and I can no longer connect using the RemoteApp and Desktop Connections control panel or the Remote Resources connection in the Mac RDC client.

Trying to connect to https://domainname.com/RDWeb/Feed/webfeed.aspx receives an Error code: "0x80040205, 0x1F4" on Windows connections and nothing on the Mac except an empty Remote Resources list.

Looking at the inetpub logs, the following events are recorded during the connection attempt:

------------------------------------------------------------------------

#Software: Microsoft Internet Information Services 8.5

#Version: 1.0

#Date: 2016-03-28 15:35:38

#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken

2016-03-28 15:35:38 172.xxx.xxx.xxx GET /RDWeb/Feed/webfeed.aspx - 443 - 50.xxx.xxx.xxx TSWorkspace/2.0 - 302 0 0 155

2016-03-28 15:35:38 172.xxx.xxx.xxx GET /RDWeb/FeedLogin/WebFeedlogin.aspx ReturnUrl=%2fRDWeb%2fFeed%2fwebfeed.aspx 443 - 50.xxx.xxx.xxx TSWorkspace/2.0 - 401 2 5 144

2016-03-28 15:35:38 172.xxx.xxx.xxx GET /RDWeb/FeedLogin/WebFeedlogin.aspx ReturnUrl=%2fRDWeb%2fFeed%2fwebfeed.aspx 443 - 50.xxx.xxx.xxx TSWorkspace/2.0 - 401 2 5 12

2016-03-28 15:35:50 172.xxx.xxx.xxx GET /RDWeb/FeedLogin/WebFeedlogin.aspx ReturnUrl=%2fRDWeb%2fFeed%2fwebfeed.aspx 443 domain\username 50.xxx.xxx.xxx TSWorkspace/2.0 - 200 0 0 105

2016-03-28 15:35:50 172.xxx.xxx.xxx GET /RDWeb/Feed/webfeed.aspx - 443 - 50.xxx.xxx.xxx TSWorkspace/2.0 - 500 0 0 188

-----------------------------------------------------------

The 401 entries lead me to believe authentication is being denied somewhere for some reason, but I haven't been able to figure out where.

Looking at the server's Security log, I see the logon attempt followed immediately by a logoff notification. I see the logon attempt is using NTLM:

-----------------------------------------------------------

Detailed Authentication Information:
    Logon Process:        NtLmSsp
    Authentication Package:    NTLM
    Transited Services:    -
    Package Name (NTLM only):    NTLM V2
    Key Length:        128

-----------------------------------------------------------

Any help is appreciated.

Additional information

I looked at another server that has a working feed, and found this series of events in the inetpub log file:

-------------------------------------------------

#Software: Microsoft Internet Information Services 8.5

#Version: 1.0

#Date: 2016-03-28 16:24:41

#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken

2016-03-28 16:24:41 192.xxx.xxx.xxx GET /RDWeb/Feed/webfeed.aspx - 443 - 50.170.136.41 TSWorkspace/2.0 - 302 0 0 799

2016-03-28 16:24:41 192.xxx.xxx.xxx GET /RDWeb/FeedLogin/WebFeedlogin.aspx ReturnUrl=%2fRDWeb%2fFeed%2fwebfeed.aspx 443 - 50.xxx.xxx.xxx TSWorkspace/2.0 - 401 2 5 102

2016-03-28 16:24:41 192.xxx.xxx.xxx GET /RDWeb/FeedLogin/WebFeedlogin.aspx ReturnUrl=%2fRDWeb%2fFeed%2fwebfeed.aspx 443 - 50.xxx.xxx.xxx TSWorkspace/2.0 - 401 2 5 36

2016-03-28 16:24:54 192.xxx.xxx.xxx GET /RDWeb/FeedLogin/WebFeedlogin.aspx ReturnUrl=%2fRDWeb%2fFeed%2fwebfeed.aspx 443 foundation\mcsadmin 50.xxx.xxx.xxx TSWorkspace/2.0 - 200 0 0 1580

2016-03-28 16:24:55 192.xxx.xxx.xxx GET /RDWeb/Feed/webfeed.aspx - 443 S-1-5-21-484763869-xxxxxxxxxx-xxxxxxxx-xxxx 50.xxx.xxx.xxx TSWorkspace/2.0 - 200 0 0 1483

2016-03-28 16:24:55 192.xxx.xxx.xxx GET /RDWeb/Feed/rdp/mstsc256.ico - 443 S-1-5-21-484763869-xxxxxxxxxx-xxxxxxxx-xxxx 50.xxx.xxx.xxx TSWorkspace/2.0 - 200 0 0 519

2016-03-28 16:24:55 192.xxx.xxx.xxx GET /RDWeb/Feed/rdp/cpub-Remote_Server_Co-Remote_Server_Co-CmsRdsh.rdp - 443 S-1-5-21-484763869-xxxxxxxxxx-xxxxxxxx-xxxx 50.xxx.xxx.xxx TSWorkspace/2.0 - 200 0 0 47

---------------------------------------------------

The same 401 status codes are there, but it looks like the feed is supposed to return with the user SID and allow access. Instead, I'm getting a 500 status code on the non-working server.

WS2012 RDSH/RDCB/RDG/RDWEB. The RDSH is dedicated; other RDS roles are on another server.

On the RDSH, the logs have many of these events:

Log Name:      Microsoft-Windows-RemoteApp and Desktop Connections/Admin
Source:        Microsoft-Windows-RemoteApp and Desktop Connections
Date:          4/10/2016 11:50:36 PM
Event ID:      1026
Task Category: None
Level:         Warning
Keywords:     
User:          DOMAIN\Username
Computer:      RDSH.DOMAIN.LOCAL
Description:
The installation of the default connection has been cancelled. A default connection cannot be used on a system that is part of a Remote Desktop Services deployment.

User: DOMAIN\Username

They repeat every 1.5-2 hours for each logged on user.

My web searches so far have turned up only one way this can happen: If a user tries to use RemoteApp and Desktop Connections to set up a feed from the RDCB...but that's not happening.

Misconfiguration? Or just log noise?

TIA

We currently have 3 RDS servers in production and all servers have Office 2013 installed. What we have found is that this software also has Lync (Skype for Business) and One Drive installed. We need to remove these applications from Office 2013.

My question is "Do we have to put the RDS servers in install mode before proceeding" or could we just make the change in the software w/o doing this first. We need to select "change" for Office 2013 and then select these 2 applications and mark as "not installed".

I know there are many documents about putting these servers into install mode when installing software, but there really isnt anything for uninstalling software on a RDS server

Thank you in advance for your help with this.

Hi,

We are running several RDS 2012R2 servers and some users need to use the on-screen keyboard.
I've created a tile linked to OSK.exe and they can also use the search field on the right-hand side to type and search for OSK.

On all servers users will get the error: On-screen Keyboard does not work any more / Cannot start on-screen keyboard

When an administrator starts the osk it works fine.

How can we make sure users can use the OSK?

We are running Thin Client Remote Terminals to a Windows Server 12r2. Everyday between 3:15 pm and 3:45 pm our Sage MAS100 Accounting software shuts down and I have to reboot the server.  This is the error information we get.

Problem signature:

  Problem Event Name:                        InPageError

  Error Status Code:                              c00000c4

  Faulting Media Type:                         00000000

  OS Version:                                          6.3.9600.2.0.0.16.7

  Locale ID:                                             1033

  Additional Information 1:                 8f57

  Additional Information 2:                 8f576e02d4f9fa20886d32d3ed351da3

  Additional Information 3:                 8f57

  Additional Information 4:                 8f576e02d4f9fa20886d32d3ed351da3

Read our privacy statement online:

 http://go.microsoft.com/fwlink/?linkid=280262

If the online privacy statement is not available, please read our privacy statement offline:

  C:\Windows\system32\en-US\erofflps.txt

I have checked the server logs looking for a program attempting to run at that same time but I am not that Server savvy. I was good with our old domain server but Terminal Services is Greek to me.  

I have never used RDS so this is where I need the help.  We have a requirement to stand up a small RDS farm in our PCI compliant zone.  But we don't want to do more than we have to regarding overall server footprint.  We have a federated AD Azure presence now and want to make use of RemoteApp for our call center agents.

Their application desktop would have the O365 Pro suite, a few other MS available RemoteApps and then we have a few applications that would have credit card information and we need to keep those isolated on premises.  I know Azure has been doing more for PCI compliance but I thought at this point, keep it simple and isolated.

What would I need on prem to make these separate farms look or act like one seamless desktop to our users?

Hi Guys,

Need Help...

The Scenario.  

*Upgrading the existing 2003 terminal servers to Remote Desktop Services 2012 R2 *

1) Have installed two servers with Windows Server 2012 R2 on our VM enviroment ( ABC1.domain.com and ABC2.domain.com )

2) Have created a server group for these servers under server manager dashboard.

3) Configured RDS roles on these servers ( Designated each servers for different roles such as RD Connection  Broker, RD Web access role, RD Session host role's accordingly based on each servers capacity).

4) Activated the installed terminal licences on ABC1.domain.com using RD Licensing Manager.

I am now stuck at this stage,

Create and install certificates for server authentication, single sign on, and establishing secure connections.

( Creating CSR's and installing certificates)

Configuring round robin /load balancing for the RDS Server.

Could some one please help on this..

Thanks in Advance

Murugupandian Pandi

I have an interesting situation. I have a test system that I am learning how to configure RemoteApp and Desktops. The system is a 2012 R2 Server. A while back I had installed the service and made some configuration changes, once of them was removing the QuickSessionCollection and replacing it with another. I ran into some issues and ended up uninstalling the Remote Desktop Services. Tonight I decided to try again and again installed the Remote Desktop Services and configured it. All seemed to be working according to plan until I went on to RDWeb. I noticed that some of the Applications were duplicated. Of the applications that were duplicated only one of the 2 would work. The one that would not work would give the following error.

What I think is happening is that these applications are somehow the remains of my previous install. I searched hi and low but no one else seems to have encountered this issue. I think that if I locate the source, I should be able to remove these entries and all should be well. If anyone has any ideas, please let me know as I am anxious to understand how this works.

Thanks in advance for any help or suggestions.

We have a Windows Server 2012 R2 Standard. We have remote users that have physical dedicated computers at the office, and we need them to be able to remote in and be authenticated through Active Directory and also be able to have access to a shared drive, private drive, Word, Excel, Internet Browser etc..
Currently they are using Teamviewer to log into their own dedicated office work computers but going forward they will have a few remote employees that wont have dedicated computers at the office location. How can we setup the network so they can remote in?

What do we need to make this happen? Remote Desktop Services with RDS Cals? Hyper-V Machines with .vdi templates? what would be the most conventional and cost effective way to go? Looking for a "somewhat simple" best practice that we can standardize for future projects.  Thanks for taking the time to read this. We have googled the question and haven't come up with anything substantial to work with. Thanks Again

Hello everybody,

I started to create a test lab for vdi environment. I installed a physical machine with hyper-v 2012 (with the role of RD Virtual Host) and a Windows Server 2012 R2 (with the role of RD Connection Broker and RD Web Access). 

Then I created a collection from a windows 7 template but I am facing a very annoying issue:

when I log in to every VM into the collection via the Remote desktop web access the VM ask me to restart. As mentioned on the title it is a vdi pooled connection and I have enabled the "RollBack feature".

I temporary found a workaround removing the rollback checkpoint, restarting the VM and then re-creating it but every time I recreate the VM on the collection I need to apply this workaround. Because I am planning to work with 30/40 VM, It is not a solution.

To notice that if I remote desktop to the VM without using the the Remote desktop web access the VM doesn't ask me nothing.

The template has been created on the same hardware and as a further try I even created a new template starting from a VM (after apply the workaround) but I am still facing the same issue.

There is a way to understand for what reason the VM ask to be restarted? From the registry I didn't find nothing useful.

Thanks.

Denis