Accessing 2012 R2 RDWeb using Windows 7 as my client I have no audio redirection when I use the Connect to a Remote PC to access a virtual Win 7 workstation.

However if I directly use RDP from this same Windows 7 client to the same virtual Win 7 workstation audio redirection works.

Any ideas why it is not being passed through via RDWeb?

 Hi,

We have this OO flow for C: clean-up. However for ESX servers, the OO flow always fails. Just checked the log & found this. Could see few access not granted

______

WriteData (or AddFile): Not granted
AppendData (or AddSubdirectory or CreatePipeInstance): Not granted
WriteEA: Not granted
ReadAttributes: Granted by ACE on parent folder D:(A;;0x1301bf;;;BA)
WriteAttributes: Not granted

______

Kindly suggest what to do ?

Well, this is the event from the log::

Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 8/26/2015 10:49:01 PM
Event ID: 4656
Task Category: File System
Level: Information
Keywords: Audit Failure
User: N/A
Computer: inkerperum01
Description:
A handle to an object was requested.

Subject:
Security ID: ****\a16992167-3
Account Name: a16992167-3
Account Domain: ****
Logon ID: 0x36c0a555

Object:
Object Server: Security
Object Type: File
Object Name: C:\Windows\System32\ServerManager.msc
Handle ID: 0x0

Process Information:
Process ID: 0x2c50
Process Name: C:\Windows\System32\mmc.exe

Access Request Information:
Transaction ID: {00000000-0000-0000-0000-000000000000}
Accesses: READ_CONTROL
SYNCHRONIZE
WriteData (or AddFile)
AppendData (or AddSubdirectory or CreatePipeInstance)
WriteEA
ReadAttributes
WriteAttributes

Access Reasons: READ_CONTROL: Granted by D:(A;;0x1200a9;;;BA)
SYNCHRONIZE: Granted by D:(A;;0x1200a9;;;BA)
WriteData (or AddFile): Not granted
AppendData (or AddSubdirectory or CreatePipeInstance): Not granted
WriteEA: Not granted
ReadAttributes: Granted by ACE on parent folder D:(A;;0x1301bf;;;BA)
WriteAttributes: Not granted

Access Mask: 0x120196
Privileges Used for Access Check: -
Restricted SID Count: 0

We are running windows 2008R2 with with TSG running. Everything has been running fine since it was set up a few years ago, however out of the blue we are receiving the following error:

We have tried removing and re-adding the TS Web Access component, however it simply returns the same error. As you can see it's falling over on a closing brace, however it seems from the file (Default.aspx) that the closing brace is required.

I have checked all the correct pages are in IIS as well. I'm a bit stumped and would like to see if anyone has come across this before.

Here is my scenerio.

2008R2 as RDS Host

GPO-A: used to start an application.  Created GPO-B to add registry key Hkey_Current_user\Software\Microsoft\Windows\CurrentVersion\Runonce to run RunDll32.exe InetCpl.cpl,ResetIEtoDefaults with Common set to Apply once and do not reapply.  Needed to reset IE back to factory settings.

My problem is the start program starts but the Runonce doesn't apply until I present the user with a desktop at which point I get the IE Rest dialog.

Any way to get the Runonce GPO to run within the session without a desktop?

hi,

I have asystemwithWindows2012 r2andwe are installingone of ourcustomerinstallationofDVI
in thephysical serverisa graphics cardcompatiblewithRemoteFX (nvidia quadro k2200)
thatversionsofthe host operating systemare supportedto runtheRemoteFX?windows 7which version? windows10inwhich version?
I tried to installwindows 7ultimate sp1andIseethe cardRemoteFX; if I installa professionalI do notsee
I installeda newvmwith windows10proand gives methe Yellow error in management device

what do you do ?

I just upgraded to Windows 10 from Windows 8.1 using the upgrade in place provided by Microsoft.  Overall the experience has been fantastic, but the Remote Desktop "Full Screen" mode appears to have a bug in it, unless someone can help me fix it.  In essence, when "Full Screen" AND you use all of your monitors is used, when the cursor is moved to the very bottom of your smaller resolution monitor the whole session "scrolls" upwards showing the taskbar for the underlying OS (Win 10.)   My laptop monitor is 1600x900 and my regular monitor is 2560x1080 or 1680x1050 (one at work, other at home.)

EDIT: It's not destination OS depending.  Does the same whether I'm connecting to Windows 7, 8 or 10.

Attached is an example of what it looks like.  Any ideas?

We have an RDS cluster into which we expect a large influx of additional users.

Is it possible and acceptable to simply clone one of the existing RDS hsst servers with a different name and SID, then add it to the RDS farm??

Are there any special considerations, pitfalls, or 'gotchas' involved that we should plan for??

All the servers in the RDS farm are running Win2k12 R2, fully patched, on vSphere 5.5.

Thank you, Tom

Hi Team, 

I am getting a error while taking RDC to windows server 2008 r2. 

Error -

The connection cannot proceed because authentication isnot enabled and the remote computer requires than authentication be enabled to connect.

Some time the error is - 

Login Attempt failed .

Please suggest ...... 

I have a 2008 R2 server as a stand alone remote services server. It hosts applications on a website accessible inside our local networkand published on the Internet. Windows 7 computers accessing the webpage remotely on the Internet can run the published apps. Windows 8 and 10 cannot, a pop up error comes up during the connection after the ignition of the app, after the "connecting to %servername% window opens. Windows 7 works, Win 8 and 10 do not work on a PUBLIC networkBUT if I connect the Windows 8 computers to the WORK network (it is a domain computer) it can access the website and run the published app without error.

Apps work on Windows 8/10 computers on the "Domain networks" zone but not on the "Guest or public networks zone". I need to fix that.

Remote Desktop Connection works in the Public network zone regardless of Windows version. the remote connection problem is limited to RemoteApp connections via the web page.

if the remote computer connects to the domain's Cisco VPN before going to the website, the app will function. No error.

It looks to me the computers firewall or browser settings are blocking the app from running on win 8/10 in the PUBLIC connection zone, but the firewall allows something specific to run on the WORK connection zone. there must be a difference in the firewall setting for the PUBLIC zone or possibly the browser settings on the clients (Internet Explorer 11).

please help me pinpoint that setting. THANKS in advance.

I'm trying to setup a Remote Desktop server to get licensing information from another server in another forest. Both are Windows 2012R2 servers

1- Full tow way transitive trust is present and working between the forests/domains.

2- Licensing server is part of Terminal Server License Servers group in all domains.

3- RDS Host Servers is part of the Terminal Server Computers group on the RDS Licensing servers.

4- Domain admins or the Host servers are admins of the RDS Licensing server.

5- The following ports are open between both servers: UDP 137 UDP 138 TCP/135 TCP/139 TCP/445 TCP/49152-65535

I still have a “licence server …… Unavailable” error.

What I’m a missing?

Thanks.

I am running a Remote Desktop Services deployment with HA on Windows Server 2012 (not R2).  This occurs weekly for me, a user will be logged into server running a remote application, the user will report that they were disconnected during their session and when they try to reconnect they are unable to do so.  On the server side the user will either have a disconnected OR a couple days old active session (which should not be possible as I have GPO session time limits configured to kill the session in 12 hours).  I have tried to kill the session may different ways:
1) Task Manager > Users Tab > Right click logoff

2) Server Manager > RDS > Collection > Right click user and select logoff

3) Open CMD run - rwinsta ##  (## being the user session ID)

4) Open CMD run - logoff ## (## being the user session ID)

5) Open CMD run - reset session rdp-tcp#XX  (XX being the user rdp-tcp# session ID)

All of this yields no result, i have also opened task manager and killed all running applications however this leaves a few running applications: rdpclip.exe, taskhostex.exe, rdpinit.exe, rdpshell.exe, mstsc.exe

when i try to kill these, I get a warning that this may cause the server to shutdown OR access denied.

Has anyone found a solution to this problem?

We have migrated from Device CALs to User CALs (with MS assistance, will DM case number on request) - now several users are getting the following error: "the session was disconnected because license store creation failed with error access denied"

I've seen several answers to this for different versions of 8/8.1, all of which are similar to

https://social.technet.microsoft.com/Forums/windows/en-US/598acb64-644d-426f-b129-10e3061db786/the-remote-session-was-disconnected-because-license-store-creation-failedwindows-81?forum=winserverTS.

The summary is to back up and delete HKLM/SW/MS/MSLicensing

The problem we run into is that that key does not exist in the first place. Any help is appreciated!

Thanks,

JD 

Hi....

On one of our Windows 2012 Remote Desktop Host servers we have the following problem.

--Not working example:

-- Working example:

---

So black boxes all over the place. When I troubleshooted this as admin I found that switching the theme to "Windows" under Windows standard theme  made the black boxes go away. But switching to the "Windows Basic" them makes them appear again.

So:

-- How do I fix the basic theme? As this is the theme regular users uses and they have no option of changing theme. RemoteApp technology is used.

-- Or possibly, as I think it works fine with the "Windows" theme, how do I apply this to all users logging in to the server?

Also, I have tried to find a solution on this on the forum, the internet and be general troubleshooting. No errors in the event log in Windows......

Looking forward to hear from you. Thank you in advance.

Red Baron

Problem

I have setup an RDS environment with a connection broker and RDGateway on one server, and then two RDSH servers. When configuring a domain crossover issue (our external URL is a different domain than our internal) I kept getting the following error-

"The identity of the remote computer cannot be verified. Do you want to connect anyways?

This Problem can occur if the remote computer is running a version of Windows that is earlier than windows Vista, or if the remote computer is not configured to support server authentication

For assistance, contact your network administrator or the owner of the remote computer"

Now PLEASE, PLEASE, PLEASE READ THAT WHOLE ERROR and checkout the attached image

I know the first line is the same that you see with cert/domain mismatches, or with untrusted certificates, but this is not the generic certificate error. This error persists if I just remote directly to one of the RDSH, though not the other, it is a settings issue on the RDSH server.

After I isolated it to the RDSH I reverted it to an earlier snapshot and not only did this error no longer appear, but connection times through the RD Web Access portal were maybe 15 seconds quicker. Everything ran beautifully, certs configured so that there wasn't a single error internally or externally for multiple devices and different users... and then I restart the RDSH server and BAM its back again, both the error and the long login times.

Background Details

At first I thought this was caused by a Group Policy object that I deployed when I shouldn't have-

Computer>Policies>Administrative Templates>Windows Components > Remote Desktop Services > Remote Desktop Session Host > Security > Server Authentication  Certificate Template

I deleted the GPO link and reverted to my snapshot as stated above. Since this seemed to resolve the issue I thought it was solved but as I stated the issue crops back up after a restart. The GPO is definitely gone though so it must be an issue somewhere else.

An oddity is that even though the issue is definitely just with just one of the session hosts the error and delayed connection time occurs whenever I connect through the connection broker until I revert the problem server. After reverting just that single server the problem goes away for all of the servers.

Cert Setup Details

This is not directly the cause of the problem, as I stated there are no certificate errors after I finished configuring our cert setup, but our setup is a bit non-standard so I'll describe it below.

RD Connection Broker/RDGateway/RD Webaccess server is signed with a wildcard cert . This does not match our internal domain, so I made a DNS entry that does which the connection broker bounces to and then to the internal IP address of the connection broker server.

Website - remote.domain.com signed with *.domain.com -

internal dns record pointing connectionbroker.domain.com to ip address of connection broker server.

The RDS environment is signed with *.domain.com certificates

The published FQDN is changed with the PS script found here to match the external domain - https://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80

to the "connectionbroker.domain.com" address.

Hi,

We have an existing RDS 2008 farm which is configured with 1 Connection Broker and two Session Host servers. There is a single name record (rdfarm) that RR to Session Host 1 and Session Host 2. The users open a mstsc and type "rdfarm" and they are connecting to session host 1 or session host 2.

I have been told that the broker server is managing the connections but I don't know how? Like I said they mstsc to "rdfarm" directly and no Connection Broker is specified anywhere.

Are they really using the Connection Broker server?

My understanding in Windows 2012 RDS is that in a scenario where you have 1 Connection Broker and 2 RDSH that if a broker wants to be used to establish the connections then the RDP settings have to be modified (Explained in this blog). Otherwise the only way to avoid changing the settings will be using the RDP through the Web Access.

Is this different in RDS 2008? I am totally confused can someone please help me understand.

Thank you!

Hello,

My name is pankaj, we have facing one critical issue.

I have multiple Terminal Servers and all are the member of our Domain, but one Terminal server there have created problem.when users are deleted the files and folder it not going recycle bin its deleted permanently.

But when we have created new users or login with administrator account then all is working fine.

  This is server 2008r2 Standard 64 bit version.

Please some one help me.

Pankaj Kumar

Hello, 

We have Windows 2008 R2 servers with SP1 fully patched and Windows 7 SP1 desktops also fully patched. We enabled NLA (Network Level Authentication) via group policy recently after we decommissioned our last 2003 R2 server. We can connect to all of our 2008 R2 servers via remote desktop except for one. We get the error: 

“The remote computer requires Network Level Authentication, which your computer does not support.”

We are using other 2008 R2 servers and Windows 7 desktops to try to connect to the server. They all support NLA. But we still get the message. We rebooted the server from the console. That still did not resolve it. We could turn NLA off in the group policy at least for this server but we need it turned on for compliance reasons. 

Any suggestions on what the issue is? 

Thanks. 

We plan to implement the profile path in group policy for all users who log into our RDS hosts.

It will be done by enabling and configuring the group policy setting in the evening after people have logged off for the night, then there will be more than 4 hours for the policy to properly propagate to all the servers in the cluster.

Will the policy work on already existing users when they log in for the first time in the morning?? -- or would I be better off manually configuring everyone's profile path??

Also, if I've configured the profile path already, can I remove the setting after I've configured group policy?? -- this would have the effect of creating a new username.v2 folder, or the server would see the already existing username.v2 folder?? (This only applies to two users at the moment.)

Thank you, Tom

Seems that this interface in not exposed in Mstscax.dll. How can I make use of it ?

There is also no method to get the collection in IMsRdpClientNonScriptable.

How can I make use of the RemoteFX USB redirectable devices ?

best

Paul

I want to create a template/clone from a RDSH server which is already part of a farm.  However I find that the cloned server's rename/sysprep causes temporary profiles to be created for each and every subsequent logon.  I suspect this is caused by using UserProfileDisks and ACL/SID permissions issues on the UPD share?

So I need to introduce a step which removes the RDS UPD settings for the new cloned server, however at this stage it's NOT strictly part of an RDS deployment, and has no network connectivity and so it's orphaned.  

How can UPDs be disabled without RDS Server Management functionality?  Powershell?

Set-RDSessionCollectionConfiguration -DisableUserProfileDisk

??

Update - this fails with: A remote desktop services deployment doesn't exist on <new server name>...

Is there must be a way to revert UPDs back to traditional logon profiles?

Thanks

Lea