Hi,

We have a Remote Desktop Service environment hosted in Azure Virtual Machines, the environment consists of 3 servers - a domain controller, a Remote desktop session host and a RD web gateway.

We are having issues when users access to published remote app via web gateway, the session will be disconnected randomly if you leave the remote app idle for a little while.  The disconnections happens very frequent, users can get disconnected for every 2 to 3 minutes.  Event log under TerminalServices-LocalSessionManager is showing event ID 40 - Session has been disconnected, reason code 0.

I have done the following however problem still exists:

1.Enable Keep Session alive settings.

2. Disable RDP-timed out.

3. Trusted SSL certificate from authority

4. Disable IPV6

Some analysis i found out:

1. Disconnection only happens to RemoteApp, while RDP session directly to Remote Desktop Session Host is always alive.

2. When multiple users access to RemoteApp concurrently, they get disconnected, but not at the same time.

3. I have continuous ping from Remote Desktop Session Host to Web Gateway server and the packet didnt drops.

Been cracking my head many days to troubleshoot this issues, I hope the experts here can help me.  Thanks!!

Regards,

Lih Ping 

Our company needs give everyone RDP access to Windows 2012 R2 standard server. I have read about some articles about adding RDP CALs etc. Can anyone help to answer the question below? thanks

1. Can RDP licensing server be on the same Win 2012 AD server? We only have one server, does not want to buy another server.

2. I have added RDP Role/Feature on the server, what are next steps?

3. How to get RDP trial? (120 days?)

Hi,

I got one Windows Server 2008 R2 Standard that is already configured as Terminal Server (RDSH) it only contains Microsoft Office 2010 Professional SP2. I have joined this host to the AD domain and it can communicate to the licensing server as well.

Note: I’m running VMware vSphere as the hypervisor.

I need to deploy around 45 more terminal servers VM and wondering if I can just clone the fully configured VM above and then change the IP address and server name manually (rename the server and then re-join the domain). Would that be possible or is there any caveats that I need to know before doing this way?

Thanks.

/* Server Support Specialist */

system: VPS windows server 2008r2 at a remote location, directly exposed to internet

Administration is possible only viaRemoteDesktop.

I cannot disable&replace the default administrator account with a different username...which means I get a lot of brute force attacks.

I created rules in the firewall to limit the scope of the remote IP addresses, even limited the scope of the RDP rules down to my client IP address only.I tested the rules by trying to access the vps server from a wifi hotspot (starbucks was useful for once) and indeed I was not to rdp into myserver.

Yet I still find Nigerian , chinese taiwanese iranian and so on based IP addresses in the event log under audit failures. 

I didn't want to limit the ip scope, because if my ISP changed my IP address ,I'd lose access to my VPS server... then again, why are the Nigerians still getting in?

Anyway,is there a way to replace the username and password login with a public/private key method like it is under Linux? Or perhaps is there a better solution?

Hope someone can help.

Thank you in advance! 

Paolo

I have deployed a RemoteApp from Server 2012. If run the RemoteApp as a user who is a member of the Domain Admins group it works correctly. If I run the RemoteApp as a user who is not a member of the Domain Admins group I get a message stating "The program did not start on the remote computer. For assistance, contact your system administrator."

If I log onto the Terminal Server and receive a full desktop, the application runs for for all users. There appears to be some difference on how security is handled through RemoteApp versus receiving a full desktop. I have searched over 30+ articles now and all seem to say the error occurs when the application is reliant on a shared or mapped drive which has not yet mapped. This application does not rely on a mapped drive. Thank you in advance for your help. 

I have two RDS servers running Server 2012, and since a couple of days users are reporting they get disconnected often. In the eventlogs, I found a couple of events where a user was disconnected without further information. I also found a lot of "Failed to create KVP sessions string" events. I couldn't find any relevant information about this event, but it appears the most at moments when users are being disconnected from the RDS server.

This is the event:

Log Name:      Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational
Source:        Microsoft-Windows-TerminalServices-RemoteConnectionManager
Date:          3/12/2013 10:01:26 AM
Event ID:      1152
Task Category: None
Level:         Error
Keywords:     
User:          SYSTEM
Computer:      TS02.contoso.com
Description:
Failed to create KVP sessions string. Error Code 0x8007007A
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-TerminalServices-RemoteConnectionManager" Guid="{C76BAA63-AE81-421C-B425-340B4B24157F}" />
    <EventID>1152</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x1000000000000000</Keywords>
    <TimeCreated SystemTime="2013-03-12T09:01:26.771581100Z" />
    <EventRecordID>11344</EventRecordID>
    <Correlation />
    <Execution ProcessID="836" ThreadID="840" />
    <Channel>Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational</Channel>
    <Computer>TS02.contoso.com</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <UserData>
    <EventXML xmlns="Event_NS">
      <Param1>2147942522</Param1>
    </EventXML>
  </UserData>
</Event>

Does someone have any idea what might cause this error? Thanks!

Hi,

I'm troubleshooting connectivity for the following setup:

1x RD Gateway server

1x RD Connection Broker Server also License server

1x RD Web server

1x RDSH server with multiple RemoteApps

Gateway is configured to allow bypass for local connections.  Certificate has the correct name and is successfully installed. Certificate is from an internet CA.

When users come in over the internet RemoteApps launch pretty quickly every time.  When users connect over the LAN RemoteApps launch successfully but much slower.  When users connect over some VPN connections the connection times out when launching a RemoteApp.

Over VPN I can see a successfull CAP and RAP in the Gateway Event log.  I can also see a successful connection and successful redirection from the gateway to the connection broker over HTTP.  In the SessionBroker log I can see a successful connection, but then when the redirect to RDSH is attempted event 819 occurs "This connection request has timed out. User could not log on to the end point within the alloted time. Remote Desktop Connection Broker will stop monitoring this connection request."

When you connect over the LAN it takes longer but successfully redirects, and when connecting over the internet (non VPN) it connects quickly and successfully.

Any ideas?

Thanks

Tim

We have a small RDS farm running on Windows Server 2012 R2.

All the RDS hosts and related servers are virtual servers running on vSphere 5.5 (hardware version 8 if that makes any difference).

I've seen various articles about configuring RemoteFX in Group Policy, but they are confusing.

I'm not asking about improving things like watching YouTube videos etc., I'm asking about improving graphics in general, like screen redraws and displaying mouse movements, keystrokes, etc.

What are the best things to do to improve these things within an RDS farm??

I will try increasing the video RAM within the host servers' VM settings but this is a guess, and these hosts are logged into by multiple users over VPN connections...

Thank you, Tom

One of our session host servers (2012 R2 with Desktop Experience installed) has recently been changing themes to a custom one instead of the Windows default. The issue is this custom theme contains some high contrast settings that paradoxically make things more difficult to read and some text to not appear at all unless selected. In some cases the anomalies show up even then the "Windows basic" theme is selected.

The only "fix" we have seen is to delete the user's profile, but the problem will re-occur eventually.

We could disable the Themes service but I would rather know what the cause of this is. Has anyone seen something similar or know where to look? Here is what we are seeing:

Cheers,

Bryan

We have an application that has very poor performance and freezing when using RemoteApp's.  When the application is run through RDP (full desktop or single app) the performance is great.  We are also using a program to publish the application (2X). When the application is published as a single app, the performance is poor and freezing issues occur.  If we publish a full desktop using 2X, the application performs as normal.

It seems the application only performs poorly when it's not contained in a re-sizable window.  At anytime there is a re-sizable window around the application, it performs perfect.

Has anyone experienced anything like this?  The application works great through RDP but we need a different solution. 

Hi All

Im in the process of planning an RDS 2012 R2 deployment, but am fairly new to some of the more recent architecture features.  I have a couple of querys. Im planning for a Connection Broker HA via DNS Round Robin (although I know MLB is better, but for now looking for answers for this scenario\approach).  There will also be a 2 or more Session Host Servers behind the CB HA. 

1. firstly, is it also necessary to create a separate Session Host Farm (along with its own DNS RR config)?  We may create a separate Session Host Farm in the future for other requirements \ reasons, and as I understand it currently, a Connection Broker HA can service multiple Session Host Farms?

2. Secondly the Web Access role will be installed on both Connection Brokers.  Is it necessary to also create distinct DNS RR entry's for these also (to allow for load balancing of the IE web site traffic)?

Any thoughts \ assistance much appreciated.

Kind Regards

Andrew

I keep getting Event ID 20499 "Remote Desktop Services has taken too long to load the user configuration from server \\SERVERNAME for user USERNAME" in our event logs for multiple servers that are running 2012 R2

I noticed that when this happens the user often is missing items that get applied via group policies such as desktop wallpapers and mapped drives.  

I am also using the Microsoft Remote Desktop for Mac that was release yesterday on another Mac computer and for certain users it won't launch the redirected folder that I specified when I get this Event ID 20499

I needed a couple of servers to act as 'jump boxes' to networks with special hosts. So we needed the capability for 5 or 6 people at a time to RDP to a jump box and from there they can connect to the special hosts. As such, it appears that the only role needed is RDS Session Host (2012 R2). I have a license server setup on another server. The perplexing part is the licensing configuration. I don't know what went wrong in development, but wow, what a mess - badly documented situation and no wizard to handle something that should be so simple. So after searching and trolling forums I found a blog post that mentions manual configuration of the RDS licensing mode and server list via Powershell.

I created this small script to help anyone else that runs into this situation, but I'm not entirely sure that this is all that is needed. Can anyone confirm that it is or do I need to do more than this?

<#
Note The following commands must be ran from an Administrative
PowerShell prompt on the RDS Host to be configured.

To configure the license server on RDSH/RDVH:
#>

$Mode = 4 #Value can be 2 - per Device, 4 - Per user
$LicensingServer = "licenseserver.contoso.com" #Name of the license server

$obj = gwmi -namespace "Root/CIMV2/TerminalServices" Win32_TerminalServiceSetting

$obj.SetSpecifiedLicenseServerList($LicensingServer)
$obj.ChangeMode($Mode)

$obj.GetSpecifiedLicenseServerList() #displays the $LicensingServer?
$obj.LicensingType #displays $Mode + 1?

I am trying to disable the easy print driver without using group policy. We are using this computer as a terminal server between two offices with three users. The problem is that we are using Medisoft for patient billing and there are forms that have to be printed on. When we use easy print none of the fields line up. something is getting lost in translation. We have no need for active directory due to the low number of users. (PS this worked fine on a 2003 server) Is there an easy way to disable easy print????

Thanks!

hi,

I need to see computer names connected to the farm. I guess there is no way to see it RDSM. So I connected to RDSH1 and in Task Manager under Users tab there is Client Name column. Currently RDSH1 is on the same machine where RDCB resides.

But when connect to RDSH2 (RDSH role only) there is no Client Name column.

There is a second broker on dedicated machine.

In RDSM there are connections to both RDSH1 and RDSH2 equally divided.

Why there is no CLIENT NAME column on RDSH2? I can see user names but no machines.

How to find machine names using other methods?

See the pic... there is a Client Name column on RDSH1 and it is not appear on RDSH2

Thanks.

--- When you hit a wrong note its the next note that makes it good or bad. --- Miles Davis

Hello Experts,

    I recently stood up a new RDS farm on 2012. I am amazed how different it is from 2008 and have been having some issues / questions about how to configure everything. My environment consists of

RDGW - Gateway

RDBR - Broker and Web access

RD1, RD2, RD3 - Session hosts

DC - Licensing server

I have configured all roles and certificates through sever manager. The RD Gateway name (configured from Server Manager -> Remote Desktop Services -> Edit Deployment Properties -> RD Gateway servername) I configured is rds.domainname.com. I have an SSL cert purchased for this domain name, and it has been imported to all of the roles in server manager. 

I have configured DNS round robin, with 3 A records, labeled "RDS" to point to the individual session hosts. So internally, RDS.domainname,com resolves to the 3 session host IPs. 

Question 1.) From what I read on technet article, the RDP client connects to one of the session host servers, who will contact the session broker before completing the client connection. The broker will then tell the rdp client whether to connect to the session host DNS had resolved it to, or direct the client to a different session host based on number of sessions (it will direct client to the host with the least amount of sessions). Is this correct? 

Question 2.) Internally, when I RDP to rds.domainname.com I am directed to one of the 3 session hosts. Internal RDP is working. However, when I try to use the web portal, RDGW.domainname.com/rdweb I can authenticate and am presented with the published apps, but when I click on one and launch the RDP icon that is downloaded, I get an error that "Your computer can't connect to the remote computer because an error occurred on the remote computer that you want to connect to". I am not sure what is causing this issue. 

Question 3.) Secondly, I am trying to configure external remote access. I have an A record on web hosting provider configured to point rds.domainname.com to a public IP. This public IP is NAT'd to the internal gateway server (RDGW) IP and port 443 and 3389 are open. On the external RDP client, I know I will configure the gateway in advanced RDP settings to point to rds.domainname.com. I am assume that for the computer name I will also configure rds.domainname.com, since once it hits the gateway server DNS will resolve internally rds to one of the session hosts. Is this correct? 

Question 4.) I also noticed when I publish remote apps through the collections, I no longer have the remote desktop in rd web access. Is there a way to have both? I have read that 2012 RDS does not support both published apps and remote desktop. I also found some articles on ways around it, such as changing a registry value on the gateway server, but this did not work for me. Is this possible or can I only choose one of the other? 

Thanks in advance for the help! 

I am looking for a way to change the server name you connect to (on the Session Host), like you could in 2008 R2. Pictures a worth a thousand words, so I've attached a picture of exactly what I am looking for:

The servers are setup so their names are servername.domain.local, but since they will be facing outwards (with a RD Gateway between them, of course) and non-domain members will be accessing them, we need a way to change the "server name" to servername.domain.com (.dk actually, but you get the point), so the certificate applies to it.

Currently, connecting looks like this:

We don't want our customers getting this dialog box. Any help is appreciated.

Is there a way, that  when you have install RD WB and RD GW on same server, that user is not  ask for additional credentials, when accessing published application.

I have successfully to installed the RDS 2012 Server R2 per user CAL (5pcs) Open License after is found not allow over two users to remote desktop connection on this Server problem, I try to uninstall the license and then (internet on-line & telephone call Microsoft Activate Center get the activate key) to reinstall is still same of the result on below problem.

Select a user disconnect so that you can sign in.

There are too many users signed in

User1 Active

User2 Active

() Force disconnect of the user