I am planning to buy Windows Server 2016 Essentials, Can more than 1 user do a remote login session into the server?
For example: 3 user accounts and 3 RDP sessions
Should I make additional CAL related purchases as well?
↧
Windows Server 2016 Essentials - Multiple RDP sessions?
↧
RDP screen goes black after successful remote login
I have a Windows 2008 Server that I have been connecting to once a month remotely to apply OS updates. Often, I reboot that server and it uses auto-logon to login and run an application.
Today, I rebooted the server and when I try to connect with RDP, I get the login prompt and enter my credentials, I see a few expected messages fly by on the host OS (the last one I see is the word Welcome), but then the screen goes black.
The apps on the server are running successfully because our applications can connect to them, we just can't logon to the desktop of the Windows Server 2008.
I made no configuration changes (I NEVER do) other than to apply the latest Windows Server updates.
I would prefer not to drive to the computers location, or try to coordinate a time to have the server hosting company assist me with troubleshooting; but is there anything else I can do? Any ideas about what might cause this?
↧
↧
RDWEB | Frequent disconnections
Hi
I have a 1 in all farm (all roles on 1 server) and when connecting remotely I frequently get disconnected. I have to kill the app from Task Manager, then login again and relaunch whatever remote app I was using.
This is the error that comes up:
What could be causing this?
Thanks, M
Maelito
↧
RDP disconnect while Using VPN Service ( Windows Server 2016 )
Hello everybody , my problem is that sometimes I've to use VPN over my RDP Server but once I Click connect to VPN , the RDP disconnects directly and I cannot reconnect again till I reboot the SERVER again , I use Windows Server 2016 .
I've read some solutions that says I need to uncheck the Default Gateway in IPV4 options but I can't find this option in Windows 2016
Can you please help me to solve the issue and connect the VPN over RDP ?
↧
RDS Deployment plan Licenses
Hi All,
Need a suggestion and recommendation
We are team of 10 and were using 4 servers as Jump servers to access our environment
Team has grown to 30 now and 4 servers with limted 2 rdp sessions are not enough, i have some RDS license
- Should i install the RDS license on each jump server ?
- Can i use a single server with RDS license and may give some session based access to team
Please advice and suggest a best solution where i can fulfill the requirement using minimum number of license
Thank you so much
Rahul
↧
↧
RDS - User profile service failing login rather than creating temporary profile
I have a session host group that uses user profile disks. When I try to login a second time into the group with a user account, I expect that the user should get logged in with a temporary profile due to the other session locking the UPD. Instead, the user profile service is failing the login due to the inaccessible profile. On my previous domain, this wasn't an issue.
I checked and verified the obvious GPO setting, "Do not log users on with a temporary profile" was NOT enabled. I'm not sure what else could prevent the temporary profile from being created.
↧
Cannot connect using to Server 2019 using rdp app on Windows 10, iOS or Windows Mobile
I can connect to my server using the desktop app on Windows 10. (I am not using a gateway.)
If I however use the UWP Windows 10 app (from the Store), or the iOS app from the AppStore, or the RDP app from Windows Mobile from the Store I cannot connect from within the LAN nor from the internet and get the following series of events on the server:
Information26-6-2019 13:04:01RemoteDesktopServices-RdpCoreTS148RemoteFX module
Information26-6-2019 13:04:01RemoteDesktopServices-RdpCoreTS148RemoteFX module
Information26-6-2019 13:04:01RemoteDesktopServices-RdpCoreTS148RemoteFX module
Information26-6-2019 13:04:01RemoteDesktopServices-RdpCoreTS145RemoteFX module
Information26-6-2019 13:04:01RemoteDesktopServices-RdpCoreTS102RemoteFX module
Information26-6-2019 13:04:01RemoteDesktopServices-RdpCoreTS72RemoteFX module
Warning26-6-2019 13:04:01RemoteDesktopServices-RdpCoreTS144RemoteFX module
Information26-6-2019 13:04:01RemoteDesktopServices-RdpCoreTS141RemoteFX module
Information26-6-2019 13:04:01RemoteDesktopServices-RdpCoreTS72RemoteFX module
Information26-6-2019 13:04:01RemoteDesktopServices-RdpCoreTS72RemoteFX module
Information26-6-2019 13:04:01RemoteDesktopServices-RdpCoreTS65RemoteFX module
Information26-6-2019 13:04:01RemoteDesktopServices-RdpCoreTS131RemoteFX module
Information26-6-2019 13:04:01RemoteDesktopServices-RdpCoreTS103RemoteFX module
Information26-6-2019 13:04:01RemoteDesktopServices-RdpCoreTS148RemoteFX module
Information26-6-2019 13:04:01RemoteDesktopServices-RdpCoreTS148RemoteFX module
Information26-6-2019 13:04:01RemoteDesktopServices-RdpCoreTS148RemoteFX module
Information26-6-2019 13:04:01RemoteDesktopServices-RdpCoreTS145RemoteFX module
Information26-6-2019 13:04:01RemoteDesktopServices-RdpCoreTS102RemoteFX module
Information26-6-2019 13:04:01RemoteDesktopServices-RdpCoreTS72RemoteFX module
Warning26-6-2019 13:04:01RemoteDesktopServices-RdpCoreTS144RemoteFX module
Information26-6-2019 13:03:43RemoteDesktopServices-RdpCoreTS141RemoteFX module
Information26-6-2019 13:03:43RemoteDesktopServices-RdpCoreTS72RemoteFX module
Information26-6-2019 13:03:43RemoteDesktopServices-RdpCoreTS72RemoteFX module
Information26-6-2019 13:03:43RemoteDesktopServices-RdpCoreTS65RemoteFX module
Information26-6-2019 13:03:43RemoteDesktopServices-RdpCoreTS131RemoteFX module
Information26-6-2019 13:03:38RemoteDesktopServices-RdpCoreTS103RemoteFX module
Information26-6-2019 13:03:38RemoteDesktopServices-RdpCoreTS148RemoteFX module
Information26-6-2019 13:03:38RemoteDesktopServices-RdpCoreTS148RemoteFX module
Information26-6-2019 13:03:38RemoteDesktopServices-RdpCoreTS148RemoteFX module
Information26-6-2019 13:03:38RemoteDesktopServices-RdpCoreTS145RemoteFX module
Information26-6-2019 13:03:38RemoteDesktopServices-RdpCoreTS102RemoteFX module
Information26-6-2019 13:03:38RemoteDesktopServices-RdpCoreTS72RemoteFX module
Warning26-6-2019 13:03:38RemoteDesktopServices-RdpCoreTS144RemoteFX module
Information26-6-2019 13:03:38RemoteDesktopServices-RdpCoreTS141RemoteFX module
Information26-6-2019 13:03:38RemoteDesktopServices-RdpCoreTS72RemoteFX module
Information26-6-2019 13:03:38RemoteDesktopServices-RdpCoreTS72RemoteFX module
Information26-6-2019 13:03:38RemoteDesktopServices-RdpCoreTS65RemoteFX module
Information26-6-2019 13:03:38RemoteDesktopServices-RdpCoreTS131RemoteFX module
The last event 103 in detail:
Source: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS
Date: 26-6-2019 13:04:01
Event ID: 103
Task Category: RemoteFX module
Level: Information
Keywords:
User: NETWORK SERVICE
Computer: [Domain]
Description:
The disconnect reason is 14
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-RemoteDesktopServices-RdpCoreTS" Guid="{1139c61b-b549-4251-8ed3-27250a1edec8}" />
<EventID>103</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>4</Task>
<Opcode>17</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2019-06-26T11:04:01.400433100Z" />
<EventRecordID>25927928</EventRecordID>
<Correlation ActivityID="{f4208e27-0719-4d0a-aa89-7ba13ae70000}" />
<Execution ProcessID="396" ThreadID="8172" />
<Channel>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational</Channel>
<Computer>[Domain]</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="ReasonCode">14</Data>
</EventData>
</Event>
The mobile apps work just fine connecting to my Windows 10 PC.
If there is anybody who can shed light on this, I would be very grateful.
Leo
Edit: I would like to add that the error message on the client is:Your password may have expired or the remote pc might not accept blank passwords
↧
RD Gateway in perimeter network with RODC
Hi all,
I am rather unclear about how to set up RD Gateway and Read Only Domain Controller in perimeter network. I have read some of the popular blogs, among those: https://techcommunity.microsoft.com/t5/Enterprise-Mobility-Security/RD-Gateway-deployment-in-a-perimeter-network-Firewall-rules/ba-p/246873 . But I would need a step-by-step guide on how to practically implement this.
I have a two-firewall setup of" internet-outer firewall- perimeter network - inner firewall- corporate internal domain". I have full rights in the internal domain (10.10.1.0/24), but have limited rights in the perimeter network (172.1.0.0/0.0.255.255),
which is another domain. I have setup a RODC, and have joined this to the internal domain, and promoted as RODC successfully. Have set up "allowed" and "denied" password replication policies. I have placed RODC in the perimeter network.
I have setup a RD gateway server, and currently has not joined neither internal domain nor domain in the perimeter network. It is only set up as a member in perimeter network. I have full rights to configure firewall ports both on the outer firewall and inter
firewall. The intended RD Gateway and RODC should be in the perimeter network subnet, but do not joined the perimeter domain (obviously). there are no firewall between RD Gateway and RODC in the perimeter network.
What I want is to configure the RD Gateway in perimeter network to answer all RDP requests from internet, and authenticate users towards the RODC. If a user is authenticated, she will be allowed (by RAP) to connect to RDSH in the internal domain through say 3398 (I will reassign an uncommon port in the RAP and on the internal firewall NAT to session host).
I know I would need to open ports for RODC to replicate with RWDC. for testing purpose I can manually cache the users passwords. What I fail to understand, is how the RD Gateway in perimeter subnet(172.1.0.0) to contact a DC (in my case the RODC) on the
same subnet for authentication. what would I do to let RD Gateway look for my RODC? should I put the RODC as the DNS server on the NIC of RD Gateway? I tried this, and it does not seems to work."There are currently no logon servers available to service
the logon request".
Please help and I would be very grateful your assistance.
↧
Authentication issues accessing RemoteApp and Remote Desktop externally
I am having issues with domain-joined client computers connecting to a RemoteApp or Remote Desktop session via the internet. I have the feed set up so that the shortcuts appear in a start menu folder. When the client (Win 10 or 8.1) is on our internal network, the shortcuts to RemoteApps and Desktops work immediately without the user being challenged for credentials. However, when connecting from the internet, the user is challenged for credentials. External access is via a Windows Server 2012 R2 machine running the Web Application Proxy role. The RD web interface is published via the web application proxy using pass-though. The gateway, web access and broker roles are all installed on the same Server 2016 Standard box. There are 2 distinct problems when clients try to connect externally:
1) On Win 8.1 the client can enter their credentials and connect. We want them to not be prompted - the user experience should be the same both within the internal network and externally.
2) On Windows 10, the client enters their credentials, which are then rejected - the user cannot access the RemoteApp or desktop externally, the credentials dialogue box simply opens again.
I have implemented group policies on the clients to enable caching of credentials and automatic pass through authentication. These policies include: "Allow delegating default credentials" for our terminal servers the "Set RD Gateway authentication method" policy set to "Use locally logged-on credentials".
I can't see anything logged on the broker/gateway to indicate why auth is failing on the Win 10 clients, either in the Security logs or the Remote Desktop specific Applications and Services Logs. Is there something I can enable to log and audit this information and help get to the bottom of this?
Thanks in advance!
Matt Nock
↧
↧
Gateway not always bypassed when connected to local network over VPN
Hello,
We have setup an RDS environment for remote app and remote desktops.
For internal addresses, we are bypassing the Gateway.
For this specific app, we are perfectly able to access the remote app via the internal network. We don't want to expose the App externally.
People who need to use the app from home, need to startup a VPN session so that they are connected to the local network. This seems to work but NOT all the time. Sometimes, the Gateway is not bypassed and we get the error that access is not authorized.
What could be the reason for this?
What would also help is to know how RDS detects if the connection is local or not (some very general info is there on the web like: "the client will check if it can reach the target system" -> How?)
Is there some logging available where we can see what goes wrong?
Thanks,
WiM
↧
Proxy Policies
We have 22 Thin Client servers with domain FL @ 2016. All 22 servers are running 2016 Standard. DC's are Server 2016 Standard. We are also all Windows 10. Patched and running fine.
We are migrating to a new web filter that requires us to Use automatic configuration script. We have tried pushing it out with GPO and registry keys. I have also tried applying the setting locally on the machine.
We can see the Automatically detect settings change. It shows it has applied with gpresult /r but the address never shows up in the address bar. I can manually add it to an account but we have over 1k users in different OU's and this will not work.
No events in the event log and the WinHTTP Web proxy Auto service is running.
I created a separate OU just for this test and it is applied to our user.
This has our Filter engineer baffled and I have been trying for days.
Any help would be great.
Thanks.
↧
Can not issue licenses from Server 2019
Hi,
I recently installed Windows Server 2019 on our company's server machine (PC A). The purpose is to have multiple users who have Win 10/7 Home/Professional to log on PC A to use software installed on it. The schematic diagram of what I'd like and the current situation can be seen below.
However, I could not set the RD licensing manager (after activation succeeded) to issue the licenses. Here are what I have done:
I purchased the RD CALs (5 per device CALs) and installed the manager on PC A. See below for the running status.
I did some search online but the answers vary themselves. I realized that the first problem is that, I could not find the RD Session Host Role in the Server Manager->"Add roles and features", as many were advising installing from many blogs I found, see below
Many people's screenshot is different than mine. So I tried to do the "Remote Desktop Services Installation", which gives me these errors (one if I do quick, one if I do standard installation):
That's where I feel confused. I searched again and realized that my configuration is a "Workgroup" mode, not the "domain" mode, and I don't know how to convert this standalone-server PC A to a domain host. Any advice will be appreciated!
↧
RDWeb access to session collections return error" no computers available in the pool ... but.
I have a fairly large Windows 2016 RDS deployment, and growing. Consists of 2 Connection brokers (load balanced) 2 rdweb servers and 5 collections of RDS session hosts, from 1 to 4 servers in each. F5 load balancer in front of the various farms with more than one SH. Certificates are all configured and trusted.
Connection via the F5 load balancer name occurs without a hitch, connections are spread across the nodes fairly evenly and users reconnect to disconnected sessions.
The collections are published to RDWeb access. All the session hosts are enabled to allow connections. When I click on one of the collection names, I get prompted to enter credentials which i do, then I'm told there are no computers available in the pool.
If I log into one of the session hosts first, directly via rdp client to the server name, and leave a disconnected session... then access the collection via rdweb I connect to the disconnected session without issue. As long as I leave a disconnected session behind, I can connect to it via rdweb access to the collection.
This happens with every collection I have configured. I've delete and recreated them all with the same result.
If I restart the session hosts in the farm, i can occasionally, briefly, connect without having a disconnected session already in place., Once i log off i can not log on again. I get the no computers available in the pool error from then on. Also, I can't always get this to work. Sometimes I reboot the SH and still get no computers in the pool.
I've dug through event logs, looking @ connection broker client and server logs but see nothing relevant. All the SH join the collections in the broker-client logs and complain about lacking resources to allow redirection on connection but that is because I've disallowed broker load balancing that via group policy for F5 compatibility.
I'm not sure where else to look for clues. Anyone seen this?
Is it possible that RDWeb access to the collections is dependent on the load balancing done by the connection broker and that by disabling that for f5 compatibility i've broken RDWeb connections to the collection?
↧
↧
Move an RDS server between domains and migrate user profile data
Because the Source and Destination computer is the same device, will the User State Migration Tool (USMT) work?
Sorry, can't post links. It's the "usmt-migrate-user-accounts" page on Windows deployment section of "docs DOT microsoft"
Also looked at ADMT but never used it and unsure of implications.
"windows-server-2008-R2-and-2008/cc974455(v=ws.10)" page on "docs DOT microsoft"
Any help/guidance appreciated.
↧
Remote Desktop Not Connecting to Session Hosts from certain networks
If I put the IP address in of the Remote Session Host server (there is only one) it works. It connects through the gateway and then connects and authenticates successfully to the server.
Also if I connect to another internal PC remotely on the network through the rd gateway using DNS name it also works fine.
Finally if I connect from outside the office network using hot spot it will resolve both the remote session host and remote PC by DNS name. If I switch it back to the LAN it reverts to orignal behavior. I have seen this at multiple places.
There must be a different way it is connecting on one network than on the other network that causes this odd behavior.
Also Remote apps through RD Web will not open after successfully authenticating through gateway ut will work outside of network.
↧
RDS CAL loading & activation timing...
Hi all,
A vCloud provider handed over 2 servers to me, one to be DC and one to be RDS.
They decided it was a good idea to load the RDS server roles and per User CALS into the RDS Server before handing over to me without telling me.
I then begun to setup the DC and joined the RDS server to the domain after that without knowing or checking RDS roles were installed...and now we are getting a warning the CALS are not activated...Remote Desktop Licensing service also will not start.
Do we need to remove RDS roles and start again or can the CALS be reloaded and activated?
vCloud admins tell me they want to remove RDS roles and start again...WTF!?
As always, thanks in advance...
durrie.
↧
RDS Profile automatic deletion
I have an RDS 2016 environment using Profile disks presenting Apps.
The problem I have is that some Users turn off their devices without logging out.
I have discovered that by doing this the profile disk stores setting like local printers (Pass through).
So when the device comes back again and pick up its profile disk, if go by another session host, the printers don’t work.
At the moment the work around is disconnecting the session, deleting its profile disk and reconnect witch creates a new profile and works fine.
Is there a way to delete the profiles that are not in use and not delete the template,Or on the Session collection
registry where it allows to “delete temporary folders on exit” , also delete
profile disk.
↧
↧
Error in data encryption - RDP
Remote Desktop Connection
Because of an error in data encryption, this session will end. Please try connection to the remote computer again.
A number of our users are getting disconnected from RDP this morning. The RDP server is across a Site-to-Site VPN to Azure. Perhaps coincidentally, when they reconnect they have lost the saved username and are presented with "Other user".
Server went through updates at the weekend and was restarted last night. Reconnecting instantly works fine.
Anyone seen this?
↧
Using RemoteDesktop_SuppressWhenMinimized for a nested RDP session
Hello,
I have the following senario:
I need to run automation tests on a VM configured as a Jenkins Slave. In order to run the test i need a working RDP session to the VM so that GUI is rendered. I need to launch and RDP session from a remote matchine (Jenkins Master) to a VM (Jenkins Slave). I need to keep this RDP session active even when there is no RDP session to Jenkins Master.
Finally, I expect to be able to launch a jenkins job which will start on Jenkins Master which will perform the following steps:
1. on Master : launch RDP session to slave
2. on Slave : Run automation script.
The Problem:
RemoteDesktop_SuppressWhenMinimized registry entry is not working for this senario and as soon as i minimize the RDP session from Jenkins Master to Jenkins Slave, the job fails because it cannot find element to click.
↧
RDP not connecting to any PC
I got a weird problem once or twice a week RDP stops to connect to any PC in network and stucks at "initiating remote connection" asks a correct login/password though
You still can connect to PC that have this issue via rdp, but not to any other PC from them
I've encountered this problem on 2 systems win server 2008 r2 and on win server 2016
Also when this happens ICQ stops working too (and yeah i know its 2019)
Issue resolve itself after a reboot but thats a not ideal solution
Any ideas what it could be?
You still can connect to PC that have this issue via rdp, but not to any other PC from them
I've encountered this problem on 2 systems win server 2008 r2 and on win server 2016
Also when this happens ICQ stops working too (and yeah i know its 2019)
Issue resolve itself after a reboot but thats a not ideal solution
Any ideas what it could be?
↧