After deploying a new desktop collection (Win7) if I log into any one of the virtual desktops at the Hyper-V Console (2012 R2) I am seeing a "You must restart your computer to Apply these changes" prompt.  When I click restart and log back in I see this prompt.  When I log out of the console the virtual desktop reverts back to the snapshot and the process starts all over.   Any ideas?

(setting the stage)
Workstation:  Windows 7 Enterprise SP1, member of Domain A, up to date on security patches
Server:  Windows Server 2008 R2 Standard, Domain Controller of Domain B, up to date on security patches
Middleware:  ActivIdentity ActivClient (v7.0.2.408) - installed on workstation and server

Hi Everyone,

I've got an interesting question/problem, I'm hoping someone else out there has run up against.  We've been tasked with trying to enable PIV authentication via RDP so our domain admins can use their PIV card to log into remote boxes, and not a username/password.  There is currently no trust relationship between domain A and domain B in my set up.  The server is not running Remote Desktop Gateway.  It is configured to use TLS 1.0 security layer and FIPS compliant encryption level.  It is also configured to require NLA and is using a domain controller certificate issued by a 3rd party CA.

I have taken my PIV authentication certificate and have mapped it to my account in domain B (so the altSecurityIdentities attribute is now populated).  After a lot of Googling, I found that I had to set the registry key "UseSubjectAltName" (located under HKLM\SYSTEM\CurrentControlSet\services\kdc) to 0.  I also needed to set two Group Policy settings "Allow certificates with no extended key usage certificate attribute" and "Allow user name hint".  After I set these settings, and imported the necessary certificates to the NTAuth Store and Trusted Root Certification Authorities, I still couldn't RDP from my workstation to the server using my PIV card with the name hint ofuserid@domain.name.gov.  I would get an error message saying "The specified user name does not exist.  Verify the user name and try logging in again.  If the problem continues, contact your system administrator or technical support.".  After a lot of troubleshooting, I discovered that if I turn off NLA on the server, I can type in my PIN anduserid@domain.name.gov into the RDP window on my workstation, it would then launch an RDP session where it would make me type in my PIN and name hint once again.  After I type everything in a second time, the server will load my desktop and I can proceed as normal.

My question is, is there a way to accomplish the end result of using a smart card to RDP to a server in a different domain (no trust relationship), and have NLA enabled.  Disabling NLA "works", but I don't think my I.T. Security folks are going to go for that as an option.

Thanks in advance for any suggestions!

-Matt

As the title states when trying to connect to one of my VMs all of a sudden I get a generic Can't connect, Contact your system administrator error.

If I look in the event logs I see...

Event 36871, SCHANNEL

 - A fatal error has occurred while creating an SSL server credential. The internal error state is 10011.

Googling for info I found this post. 

https://social.technet.microsoft.com/Forums/en-US/7a10b7bb-92fb-4a20-bfc6-eee3a6ee6752/windows-2008-r2-rdp-issue-this-computer-cant-connect-to-the-remote-computer-help?forum=winserverTS

This seems to be the exact issue I'm having. Enabling the client authentication to "RDP Security Layer" will bypass this error. But my only question is... Would this setting be enabled on the client or the host? I'm just confused because everywhere I read says "on the client side" but the setting is nested within "Remote Desktop Session Host Configuration". Makes me think it would be on the VM I'm connecting to and not the client? Just asking in advance before making the situation worse(Though I'm pretty sure lowering the encryption method won't lock me out.)

EDIT: Just FYI. I am going to be setting these through GPO. So would I set Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security\Require use of specific security layer for remote (RDP) connections SET to RDP Layer on the Client or the Host?

Dear,

In a previous thread I asked about thin clients which our organisation was given some years back. I have now set them up and running. Though, I encountered a problem. I set up five units. After working with them for a while black boxes began to appear over the screen. So far this have happened on four of the five units. All of them have been working with Chrome web browser for the mail and Microsoft Access 2003 for the database. I managed to get rid off the problem for a while when setting the screen settings on less screen resources like no shadows behind windows and not show content while dragging the windows. But after a while working with it these black boxes started to come up again.

It starts with one or two but as you continue working they come more and more until it fills the screen and you need to reboot the computer and hope you can work for a while again. 

I don't know what the problem is really from. I know this forum is especially about Microsoft products and this problem might not be from Microsoft. But if any one of you have any experience or thought of where it could come from the help is much appreciated.

Sincerely,

Nitman

Dear reader,

I have 5 rds 2012r2 in a session collection. I have upd pointed to a single file server. This all wordks fine.

Now i'm migrating upd to another file server.

When changing the path to the new file server, two servers are missing in the share and ntfs rights that the session collection sets at the new file server. I added them manually. Now it seems that users get event 1511 after logging in on one of these rds servers. Does anyone have a clue why these two rds servers are beahving different than the others? And why the session collection cannot add the rights correctly?

Beste regards,

Ruud Boersma

MCITP Enterprise administrator

Hi,

So we run a Windows 2008 RDS environment.  It was created before I worked here and has 50 user CALs total.  20 are Win 2008 RDS CALs; 30 are Win2012 RDS CALs.  I will presume my predecessors had to buy 2012 licenses and had the Clearinghouse provide the licensing keys for 2008.

We are migrating to a new 2012 RDS environment.  We have the servers built and have created a new 2012 RDS Licensing service. 

My question is, if I call the Clearinghouse and ask for a key for my 30 2012 RDS CALs to install in my pre-production 2013 RDS environment, will this have an adverse effect on my 2008 production environment?  Will the Clearinghouse do this at all? Will the 2 RDS Licensing servers know that these CALs are in use in 2 places? I do not want my Prod environment effected negatively while I test the new environment.

I called the Clearinghouse and they could not answer this question.  Any guidance appreciated.   

Hi,

Is it somehow possible to configure so that the clients local printers ONLY is connected in the RDS session when accesing the RD server through the RD Gateway?

When connection directly (over S2S VPN) i do NOT want the clients local printers to be accessible in the RD session. I know a can accomplish this by letting the user use two different .rdp files one their desktops but i want this to seamlessly work when using the RD Web interface.

//Andreas

Hi Guys,

I just have a question on something I would like to implement in my environment.

I have about 200 users and 1x RDWEB server publishing numerous RemoteApps being used by the users in the company currently. I done some research on a broker server and load balancing but don't think this is the whole solution i will need.

What I need is one gateway server https://start@mydomain.com/Rdweb the users will access and 2x RDWEB hosts "Farm1 and Farm2". I would like to group the users between Farm1 and Farm2 for example "Domainuser1 is in Domaingroup Farm1 and Domainuser2 is in Domiangroup Farm2, if Domainuser1 logon and access a RemoteApp he will automatically be redirected to the Farm1 Host and if Domainuser2 login and access a RemoteApp he will then be redirected to Farm2 Host" Instead of the system to load balance the connections I want the system to redirect the connection to where it is configured to go.

Then I can group my high resource applications on one host and the other host the low resource applications and one gatewayhttps://start.mydomain.com/Rdweb for ease of access for the users.

Will really appreciate it if there is someone that can assist me on this.

Thank you

Hi All,

I will say sorry for the amount of information in this post, I wanted to make sure you all had everything you needed available!

We have a TS running Win 2008 r2 x64 Enterprise SP1 with all the latest Windows Updates with about 70ish users on it. The machine it self is a Dell PowerEdge R620 with 2x Intel Xeon E5-2640 @ 2.50ghz and 64gb Ram, more than powerful enough.

Recently we have been forced 3 times in the last week due to the audio device not responding on the server when a user tries to play a video with audio for example, it is completely random and it doesn't happen every time. However, once it does happen it breaks audio redirection for every user which as it stands requires a server restart. So to give you all an example of what happened this morning at 9:20am from event viewer (3 events, shown in order of occurrence):

Error 1002 Application Hang:

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System><Provider Name="Application Hang" /><EventID Qualifiers="0">1002</EventID><Level>2</Level><Task>101</Task><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime="2013-07-29T08:20:07.000000000Z" /><EventRecordID>221612</EventRecordID><Channel>Application</Channel><Computer>[NAME OF SERVER]</Computer><Security /></System>
- <EventData><Data>Explorer.EXE</Data><Data>6.1.7601.17567</Data><Data>1b258</Data><Data>01ce8c2fc98e320f</Data><Data>17</Data><Data>C:\Windows\Explorer.EXE</Data><Data>a1fb34a0-f827-11e2-9e36-90b11c25489b</Data><Binary>430072006F00730073002D00700072006F00630065007300730000000000</Binary></EventData></Event>

Information 1002 Winlogon

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System><Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Winlogon" /><EventID Qualifiers="16384">1002</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime="2013-07-29T08:20:07.000000000Z" /><EventRecordID>221611</EventRecordID><Correlation /><Execution ProcessID="0" ThreadID="0" /><Channel>Application</Channel><Computer>[NAME OF SERVER]</Computer><Security /></System>
- <EventData><Data>explorer.exe</Data></EventData></Event>

Information 1001 Windows Error Reporting:

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System><Provider Name="Windows Error Reporting" /><EventID Qualifiers="0">1001</EventID><Level>4</Level><Task>0</Task><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime="2013-07-29T08:20:07.000000000Z" /><EventRecordID>221610</EventRecordID><Channel>Application</Channel><Computer>[NAME OF SERVER]</Computer><Security /></System>
- <EventData><Data /><Data>0</Data><Data>AppHangXProcB1</Data><Data>Not available</Data><Data>0</Data><Data>explorer.exe</Data><Data>6.1.7601.17567</Data><Data>4d672ee4</Data><Data>71a3</Data><Data>128</Data><Data>svchost.exe:AudioClientRpc</Data><Data>0.0.0.0</Data><Data /><Data /><Data /><Data /><Data>C:\Users\[USERS NAME]\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppHang_explorer.exe_29814d3caeb12f52c5af4c8e2bac26d36095c1_a820238f</Data><Data /><Data>0</Data><Data>a1fb34a0-f827-11e2-9e36-90b11c25489b</Data><Data>0</Data></EventData></Event>

Here is the information from the User's local reporting file:

Version=1
EventType=AppHangXProcB1
EventTime=130190549589834730
ReportType=3
Consent=1
ReportIdentifier=b2ed9d96-f390-11e2-b70b-90b11c25489b
IntegratorReportIdentifier=b2ed9d97-f390-11e2-b70b-90b11c25489b
Response.type=4
Sig[0].Name=Application Name
Sig[0].Value=explorer.exe
Sig[1].Name=Application Version
Sig[1].Value=6.1.7601.17567
Sig[2].Name=Application Timestamp
Sig[2].Value=4d672ee4
Sig[3].Name=Hang Signature
Sig[3].Value=71a3
Sig[4].Name=Hang Type
Sig[4].Value=128
Sig[5].Name=Waiting on Application Name
Sig[5].Value=svchost.exe:AudioClientRpc
Sig[6].Name=Waiting on Application Version
Sig[6].Value=0.0.0.0
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=6.1.7601.2.1.0.18.10
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=2057
DynamicSig[22].Name=Additional Hang Signature 1
DynamicSig[22].Value=71a3df43c74e7f92153048ef8882ac21
DynamicSig[23].Name=Additional Hang Signature 2
DynamicSig[23].Value=09d1
DynamicSig[24].Name=Additional Hang Signature 3
DynamicSig[24].Value=09d152b8d03b8846cbedaf85904c4bc1
DynamicSig[25].Name=Additional Hang Signature 4
DynamicSig[25].Value=71a3
DynamicSig[26].Name=Additional Hang Signature 5
DynamicSig[26].Value=71a3df43c74e7f92153048ef8882ac21
DynamicSig[27].Name=Additional Hang Signature 6
DynamicSig[27].Value=09d1
DynamicSig[28].Name=Additional Hang Signature 7
DynamicSig[28].Value=09d152b8d03b8846cbedaf85904c4bc1
UI[3]=Windows Explorer is not responding
UI[4]=Windows can check online for a solution. If you restart or close the program, you might lose information.
UI[5]=Check for a solution and restart the program
UI[6]=Check for a solution and restart the program
UI[7]=Close the program
LoadedModule[0]=C:\Windows\Explorer.EXE
LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
LoadedModule[2]=C:\Windows\system32\kernel32.dll
LoadedModule[3]=C:\Windows\system32\KERNELBASE.dll
LoadedModule[4]=C:\Windows\system32\ADVAPI32.dll
LoadedModule[5]=C:\Windows\system32\msvcrt.dll
LoadedModule[6]=C:\Windows\SYSTEM32\sechost.dll
LoadedModule[7]=C:\Windows\system32\RPCRT4.dll
LoadedModule[8]=C:\Windows\system32\GDI32.dll
LoadedModule[9]=C:\Windows\system32\USER32.dll
LoadedModule[10]=C:\Windows\system32\LPK.dll
LoadedModule[11]=C:\Windows\system32\USP10.dll
LoadedModule[12]=C:\Windows\system32\SHLWAPI.dll
LoadedModule[13]=C:\Windows\system32\SHELL32.dll
LoadedModule[14]=C:\Windows\system32\ole32.dll
LoadedModule[15]=C:\Windows\system32\OLEAUT32.dll
LoadedModule[16]=C:\Windows\system32\EXPLORERFRAME.dll
LoadedModule[17]=C:\Windows\system32\DUser.dll
LoadedModule[18]=C:\Windows\system32\DUI70.dll
LoadedModule[19]=C:\Windows\system32\IMM32.dll
LoadedModule[20]=C:\Windows\system32\MSCTF.dll
LoadedModule[21]=C:\Windows\system32\UxTheme.dll
LoadedModule[22]=C:\Windows\system32\POWRPROF.dll
LoadedModule[23]=C:\Windows\system32\SETUPAPI.dll
LoadedModule[24]=C:\Windows\system32\CFGMGR32.dll
LoadedModule[25]=C:\Windows\system32\DEVOBJ.dll
LoadedModule[26]=C:\Windows\system32\dwmapi.dll
LoadedModule[27]=C:\Windows\system32\slc.dll
LoadedModule[28]=C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18120_none_2b25b14c71ebf230\gdiplus.dll
LoadedModule[29]=C:\Windows\system32\Secur32.dll
LoadedModule[30]=C:\Windows\system32\SSPICLI.DLL
LoadedModule[31]=C:\Windows\system32\PROPSYS.dll
LoadedModule[32]=C:\Windows\system32\CRYPTBASE.dll
LoadedModule[33]=C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.dll
LoadedModule[34]=C:\Windows\system32\WindowsCodecs.dll
LoadedModule[35]=C:\Windows\system32\profapi.dll
LoadedModule[36]=C:\Windows\system32\apphelp.dll
LoadedModule[37]=C:\Windows\system32\CLBCatQ.DLL
LoadedModule[38]=C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL
LoadedModule[39]=C:\Windows\system32\MSVCR100.dll
LoadedModule[40]=C:\Windows\system32\MSVCP100.dll
LoadedModule[41]=C:\Windows\system32\ATL100.DLL
LoadedModule[42]=C:\Windows\system32\msi.dll
LoadedModule[43]=C:\PROGRA~1\MICROS~1\Office15\1033\GrooveIntlResource.dll
LoadedModule[44]=C:\Windows\system32\EhStorShell.dll
LoadedModule[45]=C:\Windows\System32\cscui.dll
LoadedModule[46]=C:\Windows\System32\CSCDLL.dll
LoadedModule[47]=C:\Windows\system32\CSCAPI.dll
LoadedModule[48]=C:\Windows\system32\ntshrui.dll
LoadedModule[49]=C:\Windows\system32\srvcli.dll
LoadedModule[50]=C:\Windows\system32\IconCodecService.dll
LoadedModule[51]=C:\Windows\system32\CRYPTSP.dll
LoadedModule[52]=C:\Windows\system32\rsaenh.dll
LoadedModule[53]=C:\Windows\system32\RpcRtRemote.dll
LoadedModule[54]=C:\Windows\system32\SndVolSSO.DLL
LoadedModule[55]=C:\Windows\system32\HID.DLL
LoadedModule[56]=C:\Windows\System32\MMDevApi.dll
LoadedModule[57]=C:\Windows\system32\WINSTA.dll
LoadedModule[58]=C:\Windows\system32\rdpendp.dll
LoadedModule[59]=C:\Windows\system32\WINMM.dll
LoadedModule[60]=C:\Windows\system32\MSACM32.dll
LoadedModule[61]=C:\Windows\system32\WTSAPI32.dll
LoadedModule[62]=C:\Windows\system32\timedate.cpl
LoadedModule[63]=C:\Windows\system32\ATL.DLL
LoadedModule[64]=C:\Windows\system32\NetworkExplorer.dll
LoadedModule[65]=C:\Windows\system32\MPR.dll
LoadedModule[66]=C:\Windows\System32\drprov.dll
LoadedModule[67]=C:\Windows\System32\ntlanman.dll
LoadedModule[68]=C:\Windows\System32\davclnt.dll
LoadedModule[69]=C:\Windows\System32\DAVHLPR.dll
LoadedModule[70]=C:\Windows\system32\netutils.dll
LoadedModule[71]=C:\Windows\System32\shdocvw.dll
LoadedModule[72]=C:\Windows\system32\LINKINFO.dll
LoadedModule[73]=C:\Windows\system32\msls31.dll
LoadedModule[74]=C:\Windows\system32\authui.dll
LoadedModule[75]=C:\Windows\system32\CRYPTUI.dll
LoadedModule[76]=C:\Windows\system32\CRYPT32.dll
LoadedModule[77]=C:\Windows\system32\MSASN1.dll
LoadedModule[78]=C:\Windows\system32\urlmon.dll
LoadedModule[79]=C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
LoadedModule[80]=C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
LoadedModule[81]=C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
LoadedModule[82]=C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
LoadedModule[83]=C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
LoadedModule[84]=C:\Windows\system32\version.DLL
LoadedModule[85]=C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
LoadedModule[86]=C:\Windows\system32\normaliz.DLL
LoadedModule[87]=C:\Windows\system32\iertutil.dll
LoadedModule[88]=C:\Windows\system32\WININET.dll
LoadedModule[89]=C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
LoadedModule[90]=C:\Windows\system32\XmlLite.dll
LoadedModule[91]=C:\Windows\system32\ntmarta.dll
LoadedModule[92]=C:\Windows\system32\WLDAP32.dll
LoadedModule[93]=C:\Windows\System32\ieframe.dll
LoadedModule[94]=C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
LoadedModule[95]=C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
LoadedModule[96]=C:\Windows\system32\wdmaud.drv
LoadedModule[97]=C:\Windows\system32\ksuser.dll
LoadedModule[98]=C:\Windows\system32\AVRT.dll
LoadedModule[99]=C:\Windows\system32\AUDIOSES.DLL
LoadedModule[100]=C:\Windows\system32\msacm32.drv
LoadedModule[101]=C:\Windows\system32\msiltcfg.dll
LoadedModule[102]=C:\Windows\system32\MLANG.dll
LoadedModule[103]=C:\Windows\system32\DEVRTL.dll
LoadedModule[104]=C:\Windows\system32\stobject.dll
LoadedModule[105]=C:\Windows\system32\BatMeter.dll
LoadedModule[106]=C:\Windows\system32\prnfldr.dll
LoadedModule[107]=C:\Windows\system32\WINSPOOL.DRV
LoadedModule[108]=C:\Windows\system32\dxp.dll
LoadedModule[109]=C:\Windows\system32\Syncreg.dll
LoadedModule[110]=C:\Windows\System32\netshell.dll
LoadedModule[111]=C:\Windows\System32\IPHLPAPI.DLL
LoadedModule[112]=C:\Windows\system32\NSI.dll
LoadedModule[113]=C:\Windows\System32\WINNSI.DLL
LoadedModule[114]=C:\Windows\System32\nlaapi.dll
LoadedModule[115]=C:\Windows\System32\AltTab.dll
LoadedModule[116]=C:\Windows\system32\wpdshserviceobj.dll
LoadedModule[117]=C:\Windows\system32\PortableDeviceTypes.dll
LoadedModule[118]=C:\Windows\system32\PortableDeviceApi.dll
LoadedModule[119]=C:\Windows\system32\WINTRUST.dll
LoadedModule[120]=C:\Windows\System32\pnidui.dll
LoadedModule[121]=C:\Windows\System32\QUtil.dll
LoadedModule[122]=C:\Windows\System32\wevtapi.dll
LoadedModule[123]=C:\Windows\system32\imagehlp.dll
LoadedModule[124]=C:\Windows\system32\dhcpcsvc6.DLL
LoadedModule[125]=C:\Windows\system32\WS2_32.dll
LoadedModule[126]=C:\Windows\system32\dhcpcsvc.DLL
LoadedModule[127]=C:\Windows\system32\credssp.dll
LoadedModule[128]=C:\Windows\System32\npmproxy.dll
LoadedModule[129]=C:\Windows\System32\QAgent.dll
LoadedModule[130]=C:\Windows\System32\SyncCenter.dll
LoadedModule[131]=C:\Windows\System32\Actioncenter.dll
LoadedModule[132]=C:\Windows\system32\imapi2.dll
LoadedModule[133]=C:\Windows\System32\hgcpl.dll
LoadedModule[134]=C:\Windows\System32\werconcpl.dll
LoadedModule[135]=C:\Windows\System32\wer.dll
LoadedModule[136]=C:\Windows\System32\framedynos.dll
LoadedModule[137]=C:\Windows\System32\wercplsupport.dll
LoadedModule[138]=C:\Windows\System32\msxml6.dll
LoadedModule[139]=C:\Windows\System32\hcproviders.dll
LoadedModule[140]=C:\Program Files\Internet Explorer\ieproxy.dll
LoadedModule[141]=C:\Windows\system32\wkscli.dll
LoadedModule[142]=C:\Windows\system32\actxprxy.dll
LoadedModule[143]=C:\Windows\system32\SXS.DLL
LoadedModule[144]=C:\Windows\System32\StructuredQuery.dll
LoadedModule[145]=C:\Windows\system32\SearchFolder.dll
LoadedModule[146]=C:\Windows\System32\USERENV.dll
LoadedModule[147]=C:\Windows\system32\oleacc.dll
LoadedModule[148]=C:\Windows\system32\SFC.DLL
LoadedModule[149]=C:\Windows\system32\sfc_os.DLL
LoadedModule[150]=C:\Windows\system32\prnntfy.dll
LoadedModule[151]=C:\Windows\system32\puiapi.dll
LoadedModule[152]=C:\Windows\system32\printui.dll
LoadedModule[153]=C:\Windows\system32\puiobj.dll
LoadedModule[154]=C:\Windows\system32\mswsock.dll
LoadedModule[155]=C:\Windows\System32\wshtcpip.dll
LoadedModule[156]=C:\Windows\System32\wship6.dll
LoadedModule[157]=C:\Windows\system32\DNSAPI.dll
LoadedModule[158]=C:\Windows\system32\rasadhlp.dll
LoadedModule[159]=C:\Windows\System32\fwpuclnt.dll
LoadedModule[160]=C:\Windows\system32\kerberos.DLL
LoadedModule[161]=C:\Windows\system32\cryptdll.dll
LoadedModule[162]=C:\Windows\system32\bcrypt.dll
LoadedModule[163]=C:\Windows\system32\bcryptprimitives.dll
LoadedModule[164]=C:\Windows\system32\MsftEdit.dll
LoadedModule[165]=C:\Windows\system32\thumbcache.dll
LoadedModule[166]=C:\Windows\system32\PSAPI.DLL
FriendlyEventName=Stopped responding and was closed
ConsentKey=AppHangXProcB1
AppName=Windows Explorer
AppPath=C:\Windows\explorer.exe
ReportDescription=A problem caused this program to stop interacting with Windows.

In terms of programs, it is pretty light with Firefox, Chrome and Office 2013 Pro Plus. We also have Flash for ActiveX and Firefox Plugin.

This error is making Firefox/Internet Explorer completely unusable on any page that wants to use a plug in (in most cases, Flash) so we assumed this was a Flash error at first, we have all browsers fully up to date including their Flash counter parts.

After researching, we found this to be the reason:

AppHangXProcB1

This also makes anything that uses the audio redirection useless with restarting the server as manual stop/starts of the Audio Service do not work (takes ages to try and stop and just times out).

The only workaround we have found is for the users to use Chrome (but of course sound doesn't work but at least it doesn't crash) or completely restarting the server which is not ideal at all.

We did try applying the following hotfix: http://support.microsoft.com/kb/2769791 , restarted it but sadly that did not help.

If you require any more information please let me know, any help would be gratefully appreciated. 

Thanks,

Rob

Hello,

I work for a nonprofit, we use a chunk of software which runs terrible when mapped drives are used.

The previous admin had piggybacked the clocking in system off the inventory and accounting software machines,,which is now that we are aware removed (it is scary how this was spagetti'd.

I would like to add remote desktop for 20 users to the server (windows 2008) which is now only dedicated to clock and payroll. (we purchase from  techsoup), and a shoe string budget, any advice is welcome and appreciated!

We have a Remote Desktop Gateway server running in our DMZ with 3 published apps.  From within our network as well as most external networks, users can successfully connect to the gateway and then access the published apps.  However, we have one user in a remote network which has an issue.  They can successfully connect to the gateway, login and view available apps.  When they click on an app, it launches the Remote Desktop Client(8.1) which then tries to connect.  If I do a NETSTAT I notice the client is attempting to connect to the app with the internal address which is 192.168.1.5 instead of going through the SSL tunnel.  It of course cannot reach that address and simply locks up.

The odd thing is that another computer on the same client network can successfully connect.  The different is they are using Remote Desktop Client(7.1).

Does anyone have any ideas?

Hello,

It seems like we have a memory leak in the termsvcs process of our RDS farm which occasionally occurs on a random machine in our farm. We have 10 session hosts on Windows Server 2012 R2 with current patch level who all serve around 20 to 30 users.

In this screenshot you can see the CPU and RAM load. Notice the steady drop in memory within the last 24 hours http://i.imgur.com/dz11fPz.png

Here you can see the process in question with a very high value in Private Bytes:http://i.imgur.com/Rh9SfzI.png - and in comparison the same process on a healthy session host with the same configuration and roughly the same amount of users connected:http://i.imgur.com/FCMVclD.png

Notice the difference the Private Bytes.

Does anyone else experience something similar? It seemingly started a week ago. So maybe related to a patch day.

Hello,

i have new 2012 R2 RDS RemoteApp farm with Web Access (latest updates). 

I published there several application, but currently i have problem with mmc consoles(F-O console and hyper-v manager,DNS) and i don't know where is the catch.

I publishing the application classical way: tasks->publish RemoteApp programs -> choose Failover cluster manager (Hyper-V manager,DNS) -> next -> publish

The app is visible on the Web access with correct icon.

I can start it, but instead of hyper-v,F-O or DNS console starts only empty MMC console.

And on the task-bar has standard RDP icon.

Funny thing is, that the Server Manager, Active Directory Administrative console, and other apps behavior correctly. The starting correctly, and have their app specific icons in the task-bar. 

Do you have any idea what to do with that? 

Hello,

I have created a pooled read only desktop collection of Win7 desktops.   After creation they work fine launching from RDWeb.   The next day I try to launch them and I get the error "the computer cannot connect to the remote computer" from RDWeb.   I test directly RDPing to them and the same thing.  I am able to ping them by name.    If I go to the event log on these desktops this error seems to correlate to my attempt to login:

The RDP protocol component x.224 detected an error 0 in the protocol stream and the client was disconnected

ScRegSetValueExW call failed for Start:  Access is denied

If I go to HyperV mgr and revert to the snapshot for each pooled read only desktop once they boot I can again log in via RDWeb or straight RDP.

Any ideas why this would be happening?  Appreciate the input.

Cathy

I am having the below problem with RDP connection in my Windows 10. Please help.

error as

VBScript: Remote Desktop Connection

this wizard cannot configure Remote Desktop Connections Settings. Make sure that the client version of Remote Desktop Protocol (RDP) 6.0 or later is installed on this computer.

I have already updated the compatibility settings. but there is no changes..

I have just added a computer to my WS2012R2 system.  I gave it an IPv4 address in DNS Manager.  In RD Gateway, RD Web Access and RD Virtualization Host all have Server Pools.  How do I create a entry in the Server Pool and add my computer to this Pool?

Hi, 

I have problem with one Windows Server 2008. RDP connections stops working. When connecting via RDP it gives error The remote computer "xx.xx.xx.xx." returned an rdp protocol error (Return code: 2308). 

Server is vmware virtual server. This problem occurs randomly every week, random days. RDP starts working again when I logon via console connection from vmware. Then RDP connections works fine. Sometimes this error occurs many times a day. 

Has anyone else had similar problem?

I have set up a VDI solution for testing, but I am having an issue getting a connection using the new features added in 2012-r2 and 8.1

When connecting from a Windows computer using the RDP client, I am getting a message logged on the server that session is using 2008-r2 compatible mode. My whole reason for setting this up was to test the improvements in 2012-r2, then make a decision about what to put into testing and then production.


The relevant log entries:

RemoteDesktopServices-RdpCoreTS - EventID 165
RemoteFX Encoding for RemoteFX Clients designed for Windows Server 2008 R2 SP1 is enabled and a compatible session was created.

RemoteDesktopServices-RdpCoreTS - EventID 162
The client supports version 0x80105 of the RDP graphics protocol, client mode: 0, H264 enabled: 0


The logs above show a compatibility mode session is being made and the new H264 encoding is not being used.
I have spent some time going through all the RDS group policy settings, but nothing seems to have any effect.
How can I get the RDP client to connect using the RDP 8.1 features?

Note. I have tried the ServerTechnical Preview/Windows 10 Enterprise Preview, and The new features all worked straight away with no extra configuration, on the same hardware.


System Setup is:
Server 2012 r2 standard (this is running all the RDS roles on one server, its just for testing)
8.1 Enterprise Pooled VMs
8.1 Enterprise RDP Client

Hardware setup for the server is:
Intel i7-5820k
X99 chipset board
32GB DDR4
2x Geforce GT730 (I have also tried a Gefore GTX670 and a Radeon 6870)

Richard