Hello,

I have installed windows server 2008 R2 and added the remote desktop features. I also configured the rules "per user". So, I expect that when a user connects to the server, he/she sees a login page to access its own desktop.

However, what I see is completely different. All users see a single shared desktop. In other word, if administrator logs in and user uses RD to connect to the server, he will see the admin's desktop!!

I tried to specify the username in the RD application. But, it quickly enters the shared desktop.

How can I troubleshoot that?

I've been receiving User Profile Service event id 1530 with nearly every logout from an rdp session.  Our environment is Windows 2008 R2 64 bit running on Citrix XenServer 5.5.  RDP is in remote administration mode.  Tested with and without Windows updates applied.  No additional printers added, no connection to a domain.

Because the environment is virtual, I've been able to try many combinations and have narrowed it down to this: When Windows 2008 R2 has a single processor, the event does not occur.  When I give the virtual server two processors, the event occurs with nearly every RDP logout.  Same results with or without XenTools installed.  I do not have the resources to test the single/multi processor difference on physical hardware.

Any insights would be appreciated. I've posted the full event as well as information about the process that is mentioned in the event.

AB.

Log Name:      Application
Source:        Microsoft-Windows-User Profiles Service
Date:          7/23/2010 8:38:51 PM
Event ID:      1530
Task Category: None
Level:         Warning
Keywords:     
User:          SYSTEM
Computer:      WIN-36DPBES2P14
Description:
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. 

 DETAIL -
 1 user registry handles leaked from \Registry\User\S-1-5-21-2545583-721118796-2022419212-1000:
Process 888 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2545583-721118796-2022419212-1000\Printers\DevModePerUser

----------

Process 888 is svchost.exe running UxSMS (Desktop Window Manager Session Manager), UmRdpService (Remote Desktop Services UserMode Port Redirector, TrkWKS (Desktop Distributed Link Tracking Client), and Netman (Network Connection)

We have a client with a server running RDS as a session host. It also has the other necessary roles, RD Web Access, RD Licensing, and RD Session Broker. They also installed XAMP on this server which they use to host an internal company web portal. Apache binds all interfaces on port 80, which causes IIS to throw an error that it can't bind the port.

Unfortunately we can't talk this client into moving the XAMP server, but we'd like to make this error go away. So what are the repurcussions of us disabling the site in IIS or removing the Web Access role altogether? Will the broker and session host continue to operate without the web access role?

I have inherited a RDS estate (Windows Server 2008 R2/Citrix XenApp 6.5) that uses Roaming Profiles.

User experience is awful with 5 minute plus logon times.

I would like to start using local profiles to help improve this but migrate my users in a managed way rather than all at once.

Is it possible to have a single RDS host configured to continue to serve Roaming Profiles to some users and local profiles to others?

The GPO "Set roaming profile path for all users logging onto this computer" is a machine policy so will apply to ALL users.  Does anyone know if it is possible to apply via a user policy instead?

Thanks

Hi all,

I have come across an error while using RemoteFX for Remote Desktop Session Host and would like some help in understanding it better.  As far as I can tell the error occurs when Remote Desktop Connection receives an RDP surface command while running within a locked session. This causes RDC to crash with the message "An internal error has occurred". I have only seen this error since upgrading Remote Desktop Connection to version 6.3.9600.  I don't believe this is a server issue as I can recreate the same problem connecting to an open source FreeRDP server using the same client.

To reproduce this issue I have the following setup:

Windows Server 2008 R2 Standard SP1 configured with Remote Desktop Session Host and RemoteFX enabled via group policy
Windows 7 Professional SP1 running Remote Desktop Connection 6.3.9600

I open a connection from the Windows 7 machine to the server using Remote Desktop Connection.  I confirm RemoteFX is enabled for the session by viewing the RemoteDesktopServices-RemoteDesktopSessionManager logs using Event Viewer. At this point the session appears to be operating normally.
I then lock the Windows 7 session with Remote Desktop Connection still running and visible on the desktop.  After a couple of minutes, I unlock the session and Remote Desktop Connection shows a dialog with "An internal error has occurred".  I believe that the error appears when the clock in the remote session changes, causing a surface update to occur.

Is this a known issue with the Remote Desktop Connection application?  It did not appears to be a problem with previous versions.  Are there any workarounds or will a new version of the client be made available in the future?

Thanks,

Duncan Williams

Recently, I switched from AT&T to TWC Road Runner for my ISP. When I had AT&T my remote desktop worked fine and I was able to remote into work. since I got Road Runner, I can VPN into the network,but when I get to Remote Desktop it gives me "This computer can't connect to the remote computer. Try connecting again If this promblem continues please contact....... The IP Addresss that the router is "getting assigned" is the same as a computer on my network. This that the problem? Since I have tried disconnecting the router, release and renewing....I don't know what else to do. Can any one offer any experience on this matter. Thank You

Dear All,

I couln't find anything regarding this bsod. Sometimes an rds server crashes with a blue screen ( always Driver_Power_State_Failure 9F ). My engineers told me this happens when they connect with rdp but not always.The server has the poweroption high perfomance.

This server has last been patched on 10 march 2016.

When I analyze the minidmp it's always the same faulting module: usbccgp

Minidmp !analyze -v

==========================begin minidmp===========================================

DRIVER_POWER_STATE_FAILURE (9f)
A driver has failed to complete a power IRP within a specific time.
Arguments:
Arg1: 0000000000000003, A device object has been blocking an Irp for too long a time
Arg2: ffffe00076e2b300, Physical Device Object of the stack
Arg3: ffffd000e7f9b960, nt!TRIAGE_9F_POWER on Win7 and higher, otherwise the Functional Device Object of the stack
Arg4: ffffe8005912c490, The blocked IRP

Debugging Details:
------------------


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING:  9600.17936.amd64fre.winblue_ltsb.150715-0840

SYSTEM_MANUFACTURER:  Microsoft Corporation

VIRTUAL_MACHINE:  HyperV

SYSTEM_PRODUCT_NAME:  Virtual Machine

SYSTEM_VERSION:  7.0

BIOS_VENDOR:  American Megatrends Inc.

BIOS_VERSION:  090006 

BIOS_DATE:  05/23/2012

BASEBOARD_MANUFACTURER:  Microsoft Corporation

BASEBOARD_PRODUCT:  Virtual Machine

BASEBOARD_VERSION:  7.0

DUMP_TYPE:  2

BUGCHECK_P1: 3

BUGCHECK_P2: ffffe00076e2b300

BUGCHECK_P3: ffffd000e7f9b960

BUGCHECK_P4: ffffe8005912c490

DRVPOWERSTATE_SUBCODE:  3

IMAGE_NAME:  usbccgp.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  53d0f1b3

MODULE_NAME: usbccgp

FAULTING_MODULE: fffff801f651f000 usbccgp

CPU_COUNT: 8

CPU_MHZ: 898

CPU_VENDOR:  GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 2d

CPU_STEPPING: 7

CPU_MICROCODE: 6,2d,7,0 (F,M,S,R)  SIG: FFFFFFFF'00000000 (cache) FFFFFFFF'00000000 (init)

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT_SERVER

BUGCHECK_STR:  0x9F

PROCESS_NAME:  System

CURRENT_IRQL:  2

ANALYSIS_SESSION_HOST:  PC8MIL

ANALYSIS_SESSION_TIME:  03-25-2016 09:39:48.0962

ANALYSIS_VERSION: 10.0.10586.567 amd64fre

STACK_TEXT:  
ffffd000`e7f9b928 fffff802`ae2801ce : 00000000`0000009f 00000000`00000003 ffffe000`76e2b300 ffffd000`e7f9b960 : nt!KeBugCheckEx
ffffd000`e7f9b930 fffff802`ae2800ee : ffffe000`71729c90 fffff802`ae027fae ffffe800`580e02a0 ffffd000`e7f4e180 : nt!PopIrpWatchdogBugcheck+0xde
ffffd000`e7f9b990 fffff802`ae0fc948 : 00000000`00000014 00000000`00989680 ffffd000`e7f9bae0 ffffd000`e7f4e180 : nt!PopIrpWatchdog+0x32
ffffd000`e7f9b9e0 fffff802`ae1ce4ea : ffffd000`e7f4e180 ffffd000`e7f4e180 ffffd000`e7f5a3c0 ffffe000`7b48b2c0 : nt!KiRetireDpcList+0x4f8
ffffd000`e7f9bc60 00000000`00000000 : ffffd000`e7f9c000 ffffd000`e7f96000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x5a


STACK_COMMAND:  kb

THREAD_SHA1_HASH_MOD_FUNC:  81a7ba75a791115b4f55c8910c64a260d525502e

THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  b4ad1c5ace16e5a03331b4856dbd5b1986faa70f

THREAD_SHA1_HASH_MOD:  f08ac56120cad14894587db086f77ce277bfae84

FOLLOWUP_NAME:  MachineOwner

IMAGE_VERSION:  6.3.9600.17238

FAILURE_BUCKET_ID:  0x9F_3_usbvideo_IMAGE_usbccgp.sys

BUCKET_ID:  0x9F_3_usbvideo_IMAGE_usbccgp.sys

PRIMARY_PROBLEM_CLASS:  0x9F_3_usbvideo_IMAGE_usbccgp.sys

TARGET_TIME:  2015-09-03T14:40:56.000Z

OSBUILD:  9600

OSSERVICEPACK:  0

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK:  16

PRODUCT_TYPE:  3

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 8.1

OSEDITION:  Windows 8.1 Server TerminalServer

OS_LOCALE:  

USER_LCID:  0

OSBUILD_TIMESTAMP:  2015-07-15 18:37:58

BUILDDATESTAMP_STR:  150715-0840

BUILDLAB_STR:  winblue_ltsb

BUILDOSVER_STR:  6.3.9600.17936.amd64fre.winblue_ltsb.150715-0840

ANALYSIS_SESSION_ELAPSED_TIME: 4bd

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:0x9f_3_usbvideo_image_usbccgp.sys

FAILURE_ID_HASH:  {5a143f89-5f5a-24ab-53c4-ca74dfa032ac}

Followup:     MachineOwner
---------

======================== end minidmp ===============================================

You see the blocked irp 

Arg4: ffffe8005912c490, The blocked IRP

if I do !irp ffffe8005912c490

I also get this:

=============================Blocked IRP begin======================================

1: kd> !irp ffffe8005912c490
Irp is active with 8 stacks 6 is current (= 0xffffe8005912c6c8)
 No Mdl: No System Buffer: Thread 00000000:  Irp stack trace.  
     cmd  flg cl Device   File     Completion-Context
 [N/A(0), N/A(0)]
            0  0 00000000 00000000 00000000-00000000    

Args: 00000000 00000000 00000000 00000000
 [N/A(0), N/A(0)]
            0  0 00000000 00000000 00000000-00000000    

Args: 00000000 00000000 00000000 00000000
 [N/A(0), N/A(0)]
            0  0 00000000 00000000 00000000-00000000    

Args: 00000000 00000000 00000000 00000000
 [N/A(0), N/A(0)]
            0  0 00000000 00000000 00000000-00000000    

Args: 00000000 00000000 00000000 00000000
 [N/A(0), N/A(0)]
            0  0 00000000 00000000 00000000-00000000    

Args: 00000000 00000000 00000000 00000000
>[IRP_MJ_POWER(16), IRP_MN_SET_POWER(2)]
            0  0 ffffe8005c097540 00000000 00000000-00000000    
      \Driver\usbvideo
Args: 00000000 00000001 00000004 00000000
 [IRP_MJ_POWER(16), IRP_MN_SET_POWER(2)]
            0 e1 ffffe0007aba6b60 00000000 fffff802ae19980c-ffffe00071729c90 Success Error Cancel pending
      \Driver\ksthunknt!PopRequestCompletion
Args: 00000000 00000001 00000004 00000000
 [N/A(0), N/A(0)]
            0  0 00000000 00000000 00000000-ffffe00071729c90    

Args: 00000000 00000000 00000000 00000000

===========================end blocked irp =========================================

usbvideo and ksthunk are at fault here.

Does someone has a clue what the failure might be I'm a bit stumped. Can it be a physical problem? The hyper-v host has 4 vms
and this vm is the only one with this problem although it uses the most ram of all.

Thanks in advance.

Hello, I am new system administrator in my company and supporting an infra of RDS and Citrix XenApp 7.1 servers. We have got all scripts and user profiling set up by old administrators so i don't have much clue how things are working in my environment. I see that whenever a new user logs in to our Citrix/RD session host Servers, They get 5-8 icons automatically populated to his desktop. I tried investigating alot on this matter and found that there there is a folder named as "Sources" under C: drive on each server and we have a script which checks user membership in AD and then copies icon from same sources folder to user desktop. I searched almost at all level like GPOs, local policies and task scheduler but couldn't find any setting where this script was exclusively called but still every time this script is getting run. Its a small script and look like this.

=======================================

@echo off

:: Copies developer icons to the user desktop, if they are members of the developers group

net user %username% /DOMAIN | find "TELCO_ XenApp Dev users"

if %errorlevel% == 0 (
::Got a developer, lets copy icons to the desktop
xcopy "C:\Sources\Developer Icons\*" "%userprofile%\Desktop\" /q/y

)

==========================================

I have come to conclusion that when i remove my test user from this AD group, I don't get any icons populated but when i add it to this group, All icons listed at location "C:\Sources\Developer Icons" get copied to my desktop. I know it could be a very small thing which i couldn't make it on my own. I request you to please get me some idea as to where this script can be called or if there is any explicit setting or GPO. Thanks in advance for your help.

We have a Citrix xendesktop using 2012 R2 shared desktops.   I was able to use the GPO setting to specify a start screen layout file.   However, once that was done, it is not letting me update the start screen.   I created a new xml file and pointed the GPO to the new file, but when the users log in, their start screen does not change.

I am not sure what I am missing.  

Thanks

Ramon Rivera

Hi there,

we set up a terminal server farm featuring Windows Server 2012 r2.

However, after publishing several apps we noticed the taskbar icon is often not displayed correctly.

I.e. for Explorer.exe  the remote desktop icon will be used, as well as different, native msc consoles.

For calc.exe the icon is displayed correctly, therefore its not a general problem, it only affects selected executables.

Every hint on google did not lead to an solution. Since we published many applications users complain they cant differentiate anymore.

I'm thankful for any advice!

Have to build an easy RDS 2012 R2 Farm: 

- 1 Session Host

- 1 Connection Broker, combined with the RDS Web Site Role

- 1 RDS GW in the DMZ

The Setup was easy, and it works very fast, but with a lot of annoying prompts for the user (certificate mismatch, two logon prompts...).

But what a pain it is to make the farm work right! The best artcle we found is http://www.rdsgurus.com/ssl-certificates/windows-2012-r2-how-to-create-a-mostly-seamless-logon-experience-for-your-remote-desktop-services-environment/. Microft obviousely forgot to write any documentation about 2012 RDS. There is nearly nothing in Technet and MS Library. The only thing available from Microsoft are some Wiki articles.

From what I have read, public certificates have to be used on all systems except on the session hosts, and the "internal names" have to changed to external names.

We tryed to change the published FQDN Name with the powershell command Set-RDClientAccessName, but this command does not work when there is only one Session Broker server installed. For this purpose, we found another PS Script from Microsoft on https://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80. This script worked and the FQDN name is changed, but the connection from the client to the RDS farm doesn't work at all anymore: We are getting an error message that access is denied due to "authorization policies". We have never modified the default client and ressource access policies on the RD Gateway.

Thank you in advance for any advice regarding these problems.

Franz

Hello all,

My organization was able to implement RemoteApp with what we thought was no issues. One issue has popped-up with our mac/apple product users using the Microsoft Remote Desktop app. The issue being that the local drive does is not mapping in their sessions as a network drive as it normally should. Is this currently working for any of you?? Any advice?

Hello,

We are thinking about implementing a rdp gateway using Windows Server 2012.  As I understand it, we need the appropriate amount of CALs for each user or user device.  However, I am wondering how this works in terms of the counts being applied to each user.  Does each user that accesses the gateway get tied to the license, so that once the 11th user hits (with a 10-user CAL) that user gets rejected?  If so, how do you "unassociate" the user from the CAL in event that user leaves the organization?  Ditto for the device I guess, if that user's device gets refreshed or lost/stolen, do you have to disassociate it in some manner?

I need solution for small remote group of  users that was on the same Lan( Windows 2008 r2 DC) and they accessed SQL database via lunching sql client app installed on local Windows 7/8 pro PC., but they been moved to other building and they lost (do have access to local lan any more) only via Wan.

TS server is available based on Windows 2008 with old Windows 2003 TS licenses)

How i can allow then to access ?

I know about "citrix publish app" access what is perfect, but Citrix option is too old and not updated.

Is Windows 2008 RDP is a option , but not to the SQL 2008 server desktop, only as "like publish app"

Regards

SIG

Hello World!

Here's the brief scenario:

1) ServerA - 2008R2 with Remote Desktop Services serving RemoteApps of Visio/Project 2010, deployed via .msi and GPO.
2) The GPO is specifically a USER security group. You log into a domain PC and POOF, there's your shortcuts to Visio and Project, everything is happy.

Now we are adding in ServerB, 2008R2 with Remote Desktop Services to host RD Sessions. We want users in the same security group to have access to the remote Visio/Project residing on ServerA.  Unfortunately, so far it appears that ServerB will ignore per-user assigned Software Installations, at least ones that are called via. an .msi (I believe as the server will never be in 'install' mode during logon).

We are NOT using any of the Web functionality for RD Sessions at all (nor do we want to).
We do NOT wish to install Visio/Project on ServerB (which would incur the need to play with permissions on ServerB to restrict access to the applications, etc. etc.).

So far I BELIEVE everything else to be in place (these remote apps are and have been working for YEARS already, this is just an evolution of its use, and yes, the GPO lists as Applying ingpresult, but does not show up in RSOP, an exact problem I've seen elsewhere on the web with no further resolution), but can provide any other necessary details I can dig out!

I've set up a HA Connection Broker cluster, and in order to get the web gateway working again, I need to set up a new RAP policy that specifies the RD Broker RR Address, but every time I try, when I click 'Add' in 'User Groups' (And anywhere else in the MMC, it seems), the MMC crashes with the following output:

Problem signature:
  Problem Event Name:    BEX64
  Application Name:    mmc.exe
  Application Version:    6.3.9600.17415
  Application Timestamp:    54504e26
  Fault Module Name:    clr.dll
  Fault Module Version:    4.6.1055.0
  Fault Module Timestamp:    563c12de
  Exception Offset:    00000000002fdbd8
  Exception Code:    c0000409
  Exception Data:    0000000000000002
  OS Version:    6.3.9600.2.0.0.400.8
  Locale ID:    1033
  Additional Information 1:    96f9
  Additional Information 2:    96f9c5010a52aa0dfa6dd4f9281ffe93
  Additional Information 3:    7b9b
  Additional Information 4:    7b9b3ea08d2dac897bb696ccf51055a9

As far as I can tell from searching, it seems to be .NET that's crashing, but I haven't found any solutions.All three servers (Web Gateway and both Connection Brokers) are fully patched.

has anyone else sen this and/or have any ideas how to either fix it or maybe some kind of workaround?

Folks,

i tried to mount my scanner over RDP (Windows 2012 R2) but I am not able to scan papers using Fujitsu F7160 Scanner, i have configured the USB redirection, the scanner appears at the device manager, as well as printers and devices, but i got the following error "Unable to retrieve picture from device, verify the device is properly connected and try again"

how to solve this issue?

Samer F. Mustafa Microsoft Technical Team Leader. sf_mustafa@hotmail.com

Hello,

In our RDS farm there are 3 Servers.

We are use roaming profiles .

How can i roam the windows credentials  store in the Credential manager ?

Thanks,

Eyal.

Just a quick question about VDI collections on Windows 2012 R2 RDS. Are they still restricted to Windows 7 and Windows 8 or is it possible to run a Windows 10 collection now?

Obviously Windows 10 can run on Server 2016 but until this is fully released I have a few customers that have enquired about deploying Windows 10 from their current 2012 R2 environments.  

Thanks in advance.

Kind Regards

Michael Coutanche

Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.