Hi all

Currently running in Per User licensing mode.  The RDS platform is within the license grace period, however via RDS Manager added license server and activated by clearing house.  No valid licenses added as yet, so running in temp license allocation mode. Confirmed RDSH is configured to use RDSL by using RD Licensing Diagnoser.

With reference to: https://technet.microsoft.com/en-gb/library/cc725933.aspx and considering Per User mode.

My understanding is that the RDSH MUST be able to contact an RDSL, but only when the RDSH deems applicable - so perhaps this transaction is instigated upon a new client not seen on the RDSH before?  However during testing new clients don't appear to trigger the RDSH to RDSL connection and can still run published apps .

• RDSL service running and RDS Manager configured for Per User mode.  Using RD Licensing Manager I can see 2012 R2 licenses issued for each new user - all ok so far.
  
  
• I disable RSDL licensing service - previously connected users can still connect and I assume RSDH validates license and doesn't need to contact RDSL at this point - not sure when in the future it will though?
  
  Are there reg keys defining this cached information, can they be deleted forcing the RDSH to contact the RDSL again as if it's a new user not seen before?
  
  Here's the weird part - new users never seen on the RDSH before can still open applications!  No licenses appear on the License Manager (obviously as the service is stopped).  
  
  But why can new users connect successfully?
  
  I'm wondering if its due to the Grace period?
  
  

You must configure RD Licensing correctly in order for your RD Session Host server to accept connections from clients. To allow ample time for you to deploy a license server, Remote Desktop Services provides a licensing grace period for the RD Session Host server during which no license server is required. During this grace period, an RD Session Host server can accept connections from unlicensed clients without contacting a license server. The grace period begins the first time the RD Session Host server accepts a client connection. The grace period ends after whichever of the following occurs first:

• A permanent RDS CAL is issued by a license server to a client connecting to the RD Session Host server.
• The number of days in the grace period is exceeded

Re the bullets above, I'm wondering that as I'm currently using temp licenses that the RDSH reverts to the grace period functionality when it cannot communicate with the RDSL, hence my users are still able to connect when teh RDSL service is stopped?

• If I delete c:\windows\laserver\*.* on the RDSL to clear the previously issued license list, I note the RDSH servers do not request licenses for users previously connected.  
  
  How can I delete the RDSH license cache?
  
  
• I note several articles pointing to issues when the grace period expires even though a RDSL is configured, this CONCERNS me significantly as we shall be rolling out the LIVE platform soon.  The previous PoC remained in grace period throughout its testing life so I'm unsure how this will pan out.
  
  In order to resolve articles point to simply deleting the reg key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\RCM\GracePeriod, however doesn't this simply reset the grace period?
  
  The RDSH connects to the RDSL and obtains a new temp license upon every new user, but when the RDSL service is disabled why do I see new users still connecting?
  
  HELP! 

And thanks

Lea

Hello, we have a IT of RDP VDI with 4 host physical (not in cluster), one day we saw this event (8462) in 3 of 4 servers:

"Remote Desktop Virtualization Host failed to set zeroconfig information from the virtual machine [VM-XXX] ."

There 6 VM machines affected by this error. This error continues begin to appear from 4 hours, then not happened any more.

The service browker is working fine, the database too.

Questions:

1- Whats does mean this error? its has impact in the final user?

2- What causes this error?

3- How I fix it?

Thanks

Hi

Using 2012R2 with all RDS roles on one xox (test purpose).

I have configured the RD web access and gateway, so its possible from the internet to access the server through https.https://server.domain/RDWeb I have a thrusted 3.part wildcard certificate on the domain and it works fine.

What I want is to protect the https://server.domain/RDWeb to require a client SSL certificate (selfsigned). I tried to add this to the website and are asked for certificate, but get a runtime error in the browser and from the eventlog on the server:

Event code: 3005
Event message: An unhandled exception has occurred.

Process information:
    Process ID: 1272
    Process name: w3wp.exe
    Account name: IIS APPPOOL\RDWebAccess

Exception information:
    Exception type: NullReferenceException
    Exception message: Object reference not set to an instance of an object.
   at Microsoft.TerminalServices.Publishing.Portal.RWSCPubAndTsAccessor.GetApplications(String strSid, Boolean onlyShowAvailableByDefaultResources, AppInfo[]& apps, AppInfo[]& desktops)
   at Microsoft.TerminalServices.Publishing.Portal.RapWebService.GetRemoteApps(String strUserIdentity, Boolean onlyShowAvailableByDefaultResources)
   at Microsoft.TerminalServices.Publishing.Portal.WebFeed.GetDataForFeed(String userIdentity, String folderName, Dictionary`2& resource_list, Dictionary`2& ts_list, List`1& folders, Boolean& supportsReconnect)
   at Microsoft.TerminalServices.Publishing.Portal.WebFeed.GenerateFeed(String userIdentity, FeedXmlVersion xmlVersion, String folderPath, Boolean writeXmlDecl)
   at ASP.en_us_default_aspx.Page_PreInit(Object sender, EventArgs e)
   at System.Web.UI.Page.OnPreInit(EventArgs e)
   at System.Web.UI.Page.PerformPreInit()
   at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)



Thread information:
    Thread ID: 25
    Thread account name: IIS APPPOOL\RDWebAccess
    Is impersonating: False
    Stack trace:    at Microsoft.TerminalServices.Publishing.Portal.RWSCPubAndTsAccessor.GetApplications(String strSid, Boolean onlyShowAvailableByDefaultResources, AppInfo[]& apps, AppInfo[]& desktops)
   at Microsoft.TerminalServices.Publishing.Portal.RapWebService.GetRemoteApps(String strUserIdentity, Boolean onlyShowAvailableByDefaultResources)
   at Microsoft.TerminalServices.Publishing.Portal.WebFeed.GetDataForFeed(String userIdentity, String folderName, Dictionary`2& resource_list, Dictionary`2& ts_list, List`1& folders, Boolean& supportsReconnect)
   at Microsoft.TerminalServices.Publishing.Portal.WebFeed.GenerateFeed(String userIdentity, FeedXmlVersion xmlVersion, String folderPath, Boolean writeXmlDecl)
   at ASP.en_us_default_aspx.Page_PreInit(Object sender, EventArgs e)
   at System.Web.UI.Page.OnPreInit(EventArgs e)
   at System.Web.UI.Page.PerformPreInit()
   at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

If I change the APPpool from Integrated to Classic pipeline I'm able to get to the web form where I can enter username/password but I just get "The user name or password that you entered is not valid. Try typing it again."

So how is it possible to get it all combined so we require a client certificate to be able see the RD webaccess and preferable get SSO as well? I'm able to get it work on seperate sites, but not combined.

Thanks

Kim

I have a Windows 2012 R2 Standard server which is acting as an application server. It's running on VMware 5.5. There's another 2012 R2 server instance-domain controller-running as another VM.

Users connect into it using RDP from Windows 7 PCs. One user has a debit card PinPad that connects to one of the PCs via COM1 serial port. This PinPAD used to pass-through to the old terminal server, but the new server does not see it on any of its COM ports.

On the server I have made sure that the OU containing the terminal server has all of the "Disable redirection..." settings DISABLED, and I also set that on the default domain policy.

The client has the appropriate boxes checked to forward local devices in the RDP session shortcut.

This system has a credit card swiper that connects via USB and that works properly.

I did some searching and found a few articles related to this on 2008 but didn't directly help.

Thanks in advance for any help!

-Greg C

Greg Charland Charland Technology - Business Tech Experts 888-928-3336 gregc at charlandtech dot com

Hello. We have a small (25 user) well-functioning 2008r2 domain. We would like to upgrade it in a couple years with plenty of time before it reaches end-of-life.

In the meantime, we would like to introduce two new 2012r2 RDS servers. I found a chart that shows that 2012r2 RDS License Server cannot run on a 2008r2 (domain controller) server where my license server is now. I searched quite a bit but I could not find an answer for the following question(s).

Is it a supported configuration to install and run 2012r2 License Server on one of the two 2012r2 RDS servers I will be introducing to the domain?

If I can do this, should I, or do I have to, move my 2008r2 licenses over to this new license server, or should I leave the 2008r2 licenses where they are and just put the 2012r2 licenses on the new license server?

Are there any Microsoft documents that explain or detail this configuration?

Thank You

I have set up a test Server 2012 RDS collection (Single Server for now) and implemented User Profile disks.

I have two problems.

First: My generic test user can connect and does successfully use the user profile disk as expected. However, atlogoff, the system event log contains these errors:

The error (NTFS 137) is: The default transaction resource manager on volume C:\Users\ts3.test encountered a non-retryable error and could not start.  The data contains the error code.

The warning (NTFS 50) that concerns me is:

It appears that the user profile disk is being "disabled" or "disconnected" before the profile data is completely written at logoff. What can I do to troubleshoot this?

Second:

Update: A post from Mike Connor on the following page: -LINK- solved the problem described below. 

My administrative user always logs on now with a temporary profile. At the beginning, the UPD was working and mounting. That stopped working. In attempting to troubleshoot, I logged the admin user off and deleted the UPD disk file from the share. I remember it working again after generating a new UPD disk file in the share. Soon, it quit working again. I deleted the UPD disk file again from the share and ever since, it has never regenerated a new UPD andalways logs on with a temporary profile.

Good Day to everyone.

I have a huge problem and spent a lot of time on it already. Read a lot of information in the Internet and here, but nothing helps

I'l start from the begining. What I have:

RDS farm - 2 RDS on 2008R2 in domain in main office, where we publish different applications. 

I needed to give users ability to change passwords themselves for users in foreign regions,that are not in domain 

I install KB2648402 that give such functional to 2008R2. After installation, all users that are not in domain have to enter password for two times: First - in RD WEB and Second - in RDS GAteway (as I understand).

During all info, I understand that in my situation WEB SSO must working, but it doesn't work. Delegate of cred doesn't helped.

Any ideas?

Hi ,

I have a server 2012 with 40 remote desktop users.

The system locale for non-unicode programs is set to English.

Now I have noticed that some programs need the Hungarian system locale for non-unicode programs.

Do I need to change it for all remote desktop users separately or is it automatically changed for all users in the same time if you change it ?

Kr,

Joeri

Hi

I want to know if it s possible to make a RDS server into Microsoft Azure network and join this server to a On premise domain ?

I have work Apps in my on premise domain and i need to build a remote desktop for my nomad user.

Someone can explain how can i do that , do i need Gateway for secure access ? do i need to build DMZ

Thanks

Windows 2008 R2 Hyper-V VM

The icons on the user's session desktop are neutral. Under Properties -> General one can see the UNC path of the redirected folder.

No such items appear in the actual folder as viewed with Explorer or using the dir command.

Any help would be greatly appreciated

Hi,

is it possoble to publish metro app with RDweb? we have server 2012 R2 with some metro apps and we want to make them availble to our users throuw the RDweb.

There is no problem with publishing the .exe s but how can we do this with metro apps? if this is not possible what is the altenative action?

Thanks

Shahin

Hi,

This one is driving me nuts. 

I have a Windows Server 2012 R2 with RDS setup (RD Connection Broker, RD Gateway, RD Session Host, RD Licensing and RD Web Access roles installed on the domain member server). I have a GoDaddy SSL cert installed on the IIS and RDS. 

Everything is playing ball except for RemoteApp.

I can connect to the RD Web Access site internally and externally and see the RemoteApp applications.

Opening the apps internally isn't a problem - all work as expected. However, trying the same externally gives the error "Your computer can't connect to the remote computer because an error occurred on the remote computer because the remote desktop gateway server address requested and the certificate subject name not match".

It's true - they don't and I don't know why they don't! 

The external FQDN of the RDS is "RDS.domain.com", and this matches the SSL cert on the RD Web Access site and the RD Gateway.

But when opening a RemoteApp, the certificate error pops up and the cert name is now "REMOTE.domain.com", the SSL certificate we use for our SBS 2011 RWA and Exchange Server (another GoDaddy certificate).

Both the SBS/Exchange Server and RDS Server are on the same external IP address. The RS 2012 R2 Web Access is using TCP 4411 for HTTPS access rather than 443 (checks out in the IIS bindings for the RDS) as 443 points to the SBS.

We do have another RDS, an older Windows 2008 R2 and that uses the "Remote.domain.com" certificate.

I'm guessing the issue is there - the RD Gateway for the 2008 RDS resides on the SBS server.

Could the RemoteApp be connecting to the SBS because they are defaulting to HTTPS TCP port 443 rather than the RDS 2012 on port 4411?

Is it even going to be possible to run both RD servers on the same external IP?

Can anyone offer any advice?

Cheers

Neil

I am in a test environment with a 2012r2 session host and with a 2012R2 gateway.  We published an application that currently requires us to modify the registry, specifically the 'InactiveTitleText' value in HKCU\control panel\colors.  In a remote desktop session, the registry change works fine, and the app displays as expected. However, once we are in a remoteapp session directly to the app, it will overwrite our registry value('InactiveTitleText') back to the default value of ' 0 0 0'.

Is there a different location for this value in the registry for a remoteapp session? How can I get this value set to a specific value within a remoteapp session besides the default value of '0 0 0'? Or is there no workaround for this? Settings in RDS I'm missing maybe?

I have a server setup as a DC with AD and RDServices installed.

I have a second server with the GW and CB and IIS and licensing and whatever else it installed.

I am using no-ip.biz to provide the external name / DNS for RDWeb.

I am using DSL and have the ports 443; 3389; and 3391 open.

_______________________

Internally, I can open RDWeb, click on an app and VOILA! It opens just fine.

Externally, I can open RDWeb, login with my credentials, click on an app . . . . then wait for it... wait for it andBOOM! The really helpful "...gateway unavailable..." message appears.  At this point, it might as well be theBlue Screen of Death.

I am not an ordinary dummy but I am extraordinarily challenged.  LOL.

DNS is my biggest weakness - but I am almost at wits end, thinking there has to be something I need to do in DNS to make this work.  Many of you say (in other posts) create an A record for external and internal and etc etc etc.  I am supposed to be a professional and "get it"......  but I don't.  That's my weakness.  I am a DNS Flunky.

But alas, I hope my brothers and sisters who are great at quantum physics and algebraic triginometric pi-alpha equations can help me out here.

Embarrassed?  Sure... but at least I am asking for some help.

Hell, I'd even open up a rescue session so I could watch what the hell you do to fix this damn thing.

_________________

In all seriousness, guys, I am really stuck and need some guidance and help.  Anything someone will do to resolve this would be more than appreciated.

Chris

Hi everyone

i recently set Remote Desktop Getway( in Windows Server 2012 r2 ) for our company in order to manage remote desktop connections, but i encounterweird behavior of remote desktop getway, it randomly can not establish connection with internal resource, this happen for random client in random time( some clients can not connect to e.g. x.x.x.x but they can connect to y.y.y.y and some times there is no problem and they can connect everywhere and sometimes they can connect to y.y.y.y and can not connect to x.x.x.x). for sake of clarity i have added screen shot( which seemingly i could not upload ) of the error and the related logs

Remote Desktop connection (error window):

your computer can not connect to remote computer because an error occurred on the remote computer that you want to connect to. connect your network administration for assistance

and in rdg event viewer i see event ids:

312

313

313

200

300

302

303

i have done following actions and troubleshooting but still could not solve the problem:

1) i have changed firewall rule to allow all traffic from/to RDG sever ( to make sure that firewall does not block anything from RDG )

2) i have checked "Allow the maximum supported simultaneous  connections"

3) there is no logging information in internal resource related to remote desktop connection error

4) there is no problem with remote desktop certificates ( i have checked them Thousand times )

5) there is no problem in client remote desktop connection ( i have checked advanced setting and there is no problem with rdg getway server setting i have also checked this one thousand times)

6) our clients have any flavor of windows os, from xp to server 2012 (this problem is not related to only one flavor )

7) i have run vmware workstation, and tested this problem from different virtual machine and the funny thing is i faced different behavior( everything randomly change )

please help, nothing make sense and i have no clue where the problem is

i appreciate any comment or suggestion

thank

I have a Windows 2008 Server that I have been connecting to once a month remotely to apply OS updates.  Often, I reboot that server and it uses auto-logon to login and run an application. 

Today, I rebooted the server and when I try to connect with RDP, I get the login prompt and enter my credentials, I see a few expected messages fly by on the host OS (the last one I see is the word Welcome), but then the screen goes black.

The apps on the server are running successfully because our applications can connect to them, we just can't logon to the desktop of the Windows Server 2008.

I made no configuration changes (I NEVER do) other than to apply the latest Windows Server updates.

I would prefer not to drive to the computers location, or try to coordinate a time to have the server hosting company assist me with troubleshooting; but is there anything else I can do?  Any ideas about what might cause this?

I use Remote Desktop Connection Manager v2.7 build 1406.0
OS is Windows 8.1

I protect the credentials storend in the .rdg file with a certificate.
This certificate resides on a smart card.

When I open the file it asks for the smart card, then I enter the PIN and then RDCMan crashes.

Any ideas? :)

Hello all,

I have configured the connection bar settings on my virtual desktop collection with the following code:

Set-RDVirtualDesktopCollectionConfiguration –CollectionName NAME -CustomRdpProperty "displayconnectionbar:i:0" -ConnectionBroker BROKER

If I connect through my rdweb page the desired result is achieved. However if I use the rd client app provided in the windows store:



the connection bar is still there. Is there a different setting that the rd client application needs to have so I can remove the connection bar?

Thanks,

Scott

I have a Server 2008 R2 with Remote Desktop Services with around 50 clients that connect and start and run an application that must runt in a the resolution 1024x768. Most clients have higher resolution than 1024x768 in their own screen.

Can I from within the server force connections to use 1024x768? I have googled this til my fingers bled but can't find the answer. All suggests to set it from the client with the mstsc.exe /h:768 /w:1024 but that is NOT an option in this case. I must have the possibility to control it from within the server and set it to all connections/users at once.