Dear All,
We are planning to deploy Windows 2016 RDS infrastructure. does Windows 2016 RDS support windows 2008 RD sessions?
↧
Windows 2016 RDS Deployment
↧
RDS UPD - Found the problem but I do not know how to resolve it.
Hello,
I am using UPD through my RDS collection. The collection contains :
- 1 RDCB also doing RDWA and RDSH
- 1 other RDSH
I am regulary getting temporary profiles on my second RDSH, only when the credentials are not filled by the user (RemoteApp or saved credentials on the Remote Desktop App).
My collection is used for a RemoteApp.
I think the RDCB mounts the UPD for a very short time and when it redirects on the 2nd RDSH, the UPD has not enough time to be available if the credentials are filled immediatly...
The GPO "Always prompt for password" for RDS is not a good solution as the user has to click on details while the RemoteApp is loading and fills twice his credentials.
Can someone tell me how to resolve it ? Is there a way to delay redirection on the 2nd RDSH ? Or another solution I do not see ?
Thanks in advance,
Best Regards,
Thomas.
↧
↧
Drive Redirection for Remote Desktop but not RemoteApp possible?
Hello,
I have a RDS 2016 farm. I want to allow drive redirection for full Remote Desktop but not when users launch any RemoteApps. Is this possible?
All I can see is the redirection options within the session collection properties, but this covers both Remote Desktop and RemoteApps. Can I apply a separate redirection policy that only affects RemoteApps?
Thanks,
↧
Help with CAPTCHA on Web RDS
I am trying to find a workaround for my company to secure our Web RDS gateway. Putting it on the VPN is the last option we want to take, and as such I have been looking into implementing CAPTCHA to stop brute force attacks from occuring. Any help on how
to do this would be great! P.S: Multiple Factor Authentication is simply not an option. Otherwise we would go with this.
↧
Server 2012 RDS App Hangs During Logon - Single User
Apologies in advance if this has been asked, but I've been spending the best part of 2 weeks trying to find an answer to this issue online.
I have a Windows Server 2012 R2 server running Remote Desktop Services in a Quick Start deployment for Session-based (as opposed to Virtual machine-based). This has been running perfectly fine for over a year without issues, but since a couple of weeks ago 1 user can't launch applications properly. When trying to log in it just sits loading the app. If I click Details, it displays the Windows Server 2012 R2 login process with the username and underneath it says "Preparing Windows" and the dotted circle has stopped moving.
When this first happened I restarted the server and removed the local profile but they were still unable to load the application. In the end I created them a new account and transferred their files across to their new profile. That was on 19/06/18 and today
they have the exact same problem which I have resolved for them in the same way - creating yet another account for them and transferring their files.
I can't keep creating a new account for this user every 6-10 days or so. This issue has happened on 18/06, 29/06, 03/07 and today (09/07).
So far I have managed to rule out our AV products as tried to log on with them disabled which experienced the same issue.
I have also managed to rule out GPO settings on the user account (even though the same settings are applied to 200+ accounts which are working fine) by moving the user account in AD to a new OU and disabling inheritance before logging back on and getting the same issue.
I can't find anything in the Windows Event Logs and the server processes hundreds of connections without issues, nor can I find anything concrete online aside from issues when renaming admin accounts or removing temporary profiles (these are not even being created but are not forbidden from doing so) or dead forum posts where no-one has answered in over 3 years or try adding the site to Trusted Sites Zone. I even ran sfc /scannow on my server and it found nothing to fix.
I know the issue must be with the profile as I can load applications perfectly fine as my account from my PC but when I try as the user having issues I see the same as they do. Nothing changes on my PC between it loading fine for me and not for them so please don't say there is something on my PC or in my IE/computer policy setup.
The user is getting more and more frustrated about the issue and I am getting to my wits end trying to solve it. Any assistance would be heartily received.
↧
↧
2012 R2 RDS Temporary Profile issue
I have set up a standard 3 node 2012 R2 RDS for testing. All virtualized on VMware ESXi 5.0. I have a connection Broker, session host, and web access server. I have published several applications and I can access them without a problem. Here is my issue:
When I try to log on to my session host server either locally or thru RDP, I am always logged in with a Temporary profile. It does not mater what user account I use. Even logging on locally as the administrator I get a temporary profile.
All windows updates are installed and current.
I have removed the server from the domain, deleted the account, and rejoined it to the domain.
I have deleted all .bak registry entries from here:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
There is a hotfix here for a similar issue on 2012 but it does not apply to 2012 R2
The only event viewer errors are:
1515 (Windows has backed up this user profile. Windows will automatically try to use the backup profile the next time this user logs on.)
1511 (Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off.)
Any suggestions to resolve would be greatly appreciated.
Russ
↧
RDP service down and "access denied" when trying to restart
I cannot connect to my PC via Remote Desktop. Seems the reason for this is that 3389 port is not listened by anyone (as reported by netstat -a -o), and the Remote Desktop Services is not started - which seems to be the problem.
When I try to start the service, I get "Access denied" Error #5.
The Remote Desktop Service settings list NetworkService account as the one to be used to launch the service. I tried to "update" it in the settings (with no password entered) - however the result is the same.
Please let me know what is the correct way to setup the RemoteDesktop Services service wrt credentials used by it, or what could be other issues with this error.
Thank you!
↧
Outlook 2013 on RDS server sends Private Key prompt to the console instead of the users session
Hello,
I have a Win2k12R2 single server RDS environment with Office 2013 Pro installed.
All works fine except when a user is trying to open an email that was sent encrypted. On a local version of
outlook 2013 this opens fine, however in the RDS environment when the user clicks on the email, it doesn't open. No errors and a blank preview pane.
But...I noticed that on the console of the RDS server, a prompt is displayed when the users selects the encrypted email, which says:
"Windows Security
Credential Required
Do you want to allow the app to access your private key?"
There is no app listed. Just a blank area with the lock icon (see attachments).
If we click Allow, the users email in his RDS session opens fine and will continue to do so until they logoff of the
RDS server. This is bizarre behavior as an application in the users session is causing a prompt on the console of the RDS server.
Any help would be greatly appreciated.
Screen shot of users Outlook showing selected encrypted email which does not open or display anything in the preview pane:
Screen shot of RDS server console of popup which appears when the user clicks on the encrypted email above.
Screen shot of users Outlook now showing the encrypted email, AFTER clicking allow on the RDS server console:
↧
Launching an application in an RDS session automatically
I want to be able to launch an application inside an RDS session when the session launches while still being able to see the desktop. Is this possible?
I edited the remote desktop icon I downloaded from the Work Resources\RemoteApp and Desktops in RDWeb so only a desktop would show:
remoteapplicationmode:i:1 to i:0
...
alternate shell:s:||epds
remoteapplicationprogram:s:||epds
...
remoteapplicationname:s:EPDS
and removed EPDS from the last three
I would rather be able to launch the EPDS application and be able to expose the desktop simultaneously. Is this possible
If I have to reconfigure the Remote Desktop Connection icon, what are the steps to do this?
↧
↧
2012 RDP / RDS Remote Desktop Terminal Server incompatible with Windows 2016 Domain Controllers? Access Denied
So we have a few 2012 R2 Terminal Servers at my company that were working fine until we started the process of replacing our Domain Controllers with new Windows 2016 Servers.
Since then our users are getting intermittent "Access Denied" errors when they try to RDP to these terminal servers.
Generally the "Access Denied" error occurs when a terminal servers starts to use one of the newly added 2016 domain controllers. We can workaround the problem by sending an command telling the terminal server to use one of the older 2012 R2 domain controllers instead. Then things work again.
So the question:
Is there a misconfiguration with the new 2016 domain controllers or can an adjustment be made with the 2012 Terminal Servers?
Is the problem that Windows 2016 Domain Controllers are not compatible with 2012 R2 Remote Desktop Services servers?
We are having problems finding documentation on this.
What we do know is that if we decide to start upgrading to new 2016 Terminal Servers we will have to purchase new 2016 RDS Cals (not sure if we are budgeted for that...)
For those interested, you can find out the domain controller you are using by running the following elevated PowerShell command (this assumes the command is run remotely as you might be locked out due to the RDP access denied error):
nltest /Server:<your-terminal-server> /DSGETDC:<ad domain>
to specify the domain controller you want to be on (in our case we want to switch to back to a 2012 R2 domain controller), the command is:
nltest /Server:<your-terminal-server> /SC_RESET:<ad domain>\<specific domain controller>
↧
Only Domain Admins can access RDS 2016 webfeed.
I have an RDS 2016 collection setup on a single VM with some AD tools published out. All authorized users can access the tools through the web interface. However, only accounts that are Domain Admins can access the /feed/webfeed url using the Mac client
or the Remote Desktop app.
↧
Black Screen on all new Connections, SessionHost has to be rebooted
hi,
we're suffering from session hosts that produce black screen errors in a RDS 2016 farm.
already connected users can mostly work, all new connections end up with a black screen.
to resolve the error the server has to be restarted.
i can say that
- this error appears after error 1534 (Fehler bei der Profilbenachrichtigung des Ereignisses Delete für Komponente {709E2729-F883-441e-A877-ED3CEFC975E6}. Fehlercode: Das System kann die angegebene Datei nicht finden.) starts appearing in the eventviewer.
- upon checking the registry for this SID i end up at "ProfileNotifyHandler Class app id {E10F6C3A-F1AE-4adc-AA9D-2FE65525666E} inprocserver32, C:\Windows\System32\gameux.dll".
- starting explorer.exe per taskmgr does not open an actual explorer window although the process appears in taskmgr
- tskmgr, eventvwr, cmd can be started without problems
- affected users appear as active in RDS management
- no third party security software is installed
- farm is fully patched
- HKLM\Software\Microsoft\WindowsNT\CurrentVersion\ProfileGUID and ProfileList are ok (no old or .bak entries)
looking forward on how to resolve this without rebooting the server or a permanent fix
thank you
best regards
↧
One RD Licensing Manager for all servers
Hello,
I have several servers in my company and there is a need to connect remotely more users with multiple servers.
Example:
Server1.net.local has an offica installed
Server2.net.local has SQL SMS installed
The server3.net.local has Chrome installed
The server4.net.local is DC and wants to have an RDP license management server installed on it and on servers 1,2,3 to use the RDP license which is installed on the server 4 ( 20 RDP CAL User)
For example, as the first server logs in 3 users, on the second server 2 users, on the third server 4 users, on the fourth server 3 users and Additionally one user caller No. 1 has a simultaneous connection to server no. 1, 2 and 4, user of no. 2 has an open connection to server 1.3 and user no. 3 has an open connection to servers 1,2,3,4.
I still have 5 licenses on the main server for the available licenses.
The remaining servers connect only to the server managing the licenses and check whether they can allow the user to connect or the number of licenses has been used.
The point is that on each of the servers I have installed other software and needs each user to be able to simultaneously connect to more than one server.
However, the SH and Collections configuration consists in creating server farms including High availability (has one DNS entry to different IP addresses and unilaterally separates connections) so that you can connect to servers but you can not connect simultaneously to more than one server which is SH because when you try to connect to the other server, when you are connected to one of the servers, you get the message that the connection has been redirected to the first one and the next connection can not be opened.
I supported this movie:
https://www.youtube.com/watch?v=pnscjO1QAmU
I will be grateful for the help because I can not find out how it can be configured.
I have several servers in my company and there is a need to connect remotely more users with multiple servers.
Example:
Server1.net.local has an offica installed
Server2.net.local has SQL SMS installed
The server3.net.local has Chrome installed
The server4.net.local is DC and wants to have an RDP license management server installed on it and on servers 1,2,3 to use the RDP license which is installed on the server 4 ( 20 RDP CAL User)
For example, as the first server logs in 3 users, on the second server 2 users, on the third server 4 users, on the fourth server 3 users and Additionally one user caller No. 1 has a simultaneous connection to server no. 1, 2 and 4, user of no. 2 has an open connection to server 1.3 and user no. 3 has an open connection to servers 1,2,3,4.
I still have 5 licenses on the main server for the available licenses.
The remaining servers connect only to the server managing the licenses and check whether they can allow the user to connect or the number of licenses has been used.
The point is that on each of the servers I have installed other software and needs each user to be able to simultaneously connect to more than one server.
However, the SH and Collections configuration consists in creating server farms including High availability (has one DNS entry to different IP addresses and unilaterally separates connections) so that you can connect to servers but you can not connect simultaneously to more than one server which is SH because when you try to connect to the other server, when you are connected to one of the servers, you get the message that the connection has been redirected to the first one and the next connection can not be opened.
I supported this movie:
https://www.youtube.com/watch?v=pnscjO1QAmU
I will be grateful for the help because I can not find out how it can be configured.
↧
↧
Copy/paste of CF_HTML formatted content not working
Hello,
I did post this issue in a reply in another thread, but though best to create a new post for this issue.
I have a RemoteApp that uses CF_HTML formatted content and the only way this content can be copy/pasted from the app to the local user's computer is if drive redirection is disabled.
This issue affects Windows 7 machines but does work on Windows 10. So seems to point to a bug/limitation in the older RDP protocol.
RDS farm is Windows Server 2016.
Only info I can find online is: https://www.spicelogic.com/docs/WinHTMLEditorControl/KnownIssues/150
and this which only relates to Citrix: https://support.citrix.com/article/CTX221798
Is anyone able to shed any light on this issue and if there is any solution (other than just disabling drive redirection, which is far from ideal)?
Thanks,
↧
Remote Desktop Session Host Windows Explorer Image preview missing
We have 2 Windows Server 2012 r2 Remote desktop Session host with Session Broker.
All users cannot preview jpeg images on Windows Explorer (either thumbails and Preview Pane). Instead they can see icons instead preview.
Under Control Panel > Folder Options > View > Make sure "Always show icons, never thumbnails" is unchecked.
Under Control Panel > System > Advanced > Performance > Settings > Visual Effects > make sure "Show thumbnails instead of icons" is checked.
All users have this issue, Administrator (builtin) not.
Some months ago the preview works correctly but now the issue is present.
The issue is related to network folders or local folders.
How can I resolve the issue?
Thank you
Daniele Castelli
↧
Terminal Server 2016 , explorer.exe crash loop event 1000
I switch our company from Terminal Servers 2008 R2 which worked great to a Server 2016 RDS setup
We have 10 server and around 250 users , and atleast 10 times a day a user will complain about desktop flashing constantly or taskbar stuck, it mostly happens on login but also sometimes while in the middle of a working session, only solution is to sign off and login to another server.
on examining event log i see explorer.exe has crashed with event 1000 faulting module ntdll.dll or kernerbase.dll
if i enable crash dumps for these error and analyze with win debugging it always points to twinui.dll.
i run sfc.exe and dism.exe repairs for my servers,no errors were found.
this is the event
Faulting application name: explorer.exe, version: 10.0.14393.2097, time stamp: 0x5a820b61Faulting module name: ntdll.dll, version: 10.0.14393.1715, time stamp: 0x59b0d03e
Exception code: 0xc0000005
Fault offset: 0x0000000000015983
Faulting process id: 0xdb1c
Faulting application start time: 0x01d3d3ebdc19bc86
Faulting application path: C:\Windows\explorer.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: 3be1d252-22bb-4c22-aec1-3246d3785036
Faulting package full name:
Faulting package-relative application ID:
↧
How to determine RDP version used in the remote session on the server?
Hi!
I need to determine the version of RDP used by connected client in the terminal session on Windows Server 2012 R2.
For Windows Server 2008 I found this solution:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/8863a44e-9393-43f8-8c1f-6180eff08495/how-can-you-tell-what-version-of-the-remote-desktop-protocol-an-rdp-session-is-using?forum=winserverTS
But there is no RDS Manager where I can see session Status in Windows Server 2012 R2. How can I determine RDP version? With PowerShell maybe or something else?
↧
↧
Switching from Device to User CALS
Hi,
We use a single RDS license 2012R2 server with our Citrix XenDesktop setup. We wish to switch from Device to User Cals. How would this be achieved? Just a single GP with the setting enabled and User selected and then applied to the RDS license server or is their more to it than that?
regards,
↧
Remote Desktop Services - Redirection of additional supported devices is disabled by policy.
I have a Windows 2008 R2 server running the Remote Desktop Services role. Whenever I reboot or restart the "Remote Desktop Services UserMode Port Redirector" service , I get the Event ID 36 error:
Redirection of additional supported devices is disabled by policy.
I verified that no such policy exists using RSOP.MSC. I looked at the following location:
Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection\Do not allow supported Plug and Play device redirection
This is set to "Not Configured".
For fun, I've tried both enabling and disabling this setting (rebooting after each change), and it had no effect on the problem.
Additionally, I verified that the setting was disabled within the Remote Desktop Session Host Configuration utility:
RDP-Tcp -> Right-Click -> Properties -> Client Settings
Redirection
Supported Plug and Play Devices
For fun, I tried this setting both enabled and disabled, rebooting after each change, but this had no effect on the error.
Clipboard redirection does work.
I also followed all the instructions on the following article without success:
http://technet.microsoft.com/en-us/library/ee890928(v=ws.10).aspx
In the same domain, there is a Small Business Server, and there it works.
I hope anybody can help me on this issue, because for now my only option is reinstalling the server, and I would rather not because I cannot afford downtime that long.
Thanks!
↧
RDS cal License Migration Partially
We have few hundred RDS CAL license in server 1 and New Server 2 having 0 licenses in server 2 . Both are at different locations but in same network with different scope
of IP.
We want to move some(about 250) of the RDS CAL License from server 1 to server 2.
We want to move some(about 250) of the RDS CAL License from server 1 to server 2.
Is this technically possible ? ==> Please advise steps
Does it needs microsoft involvement(Such as change in license agreement /Authorization numbers) etc ? ==> Please advise the process..
Scenerio is like that :
Current
Server 1 ==> 500+ Licenses
Expected
Server 1 (OS 2K12) ==> 250
Server 2(OS 2K12) ==> 250
Thanks & Regards
Sach Dev Thakur
↧