Hello, I am trying to deploy my set domain server remotely through RDS. but not able to do so. I have tries it through GUI also from powershell script. It doesn't start Remote Desktop management service. And gives following error

 The Remote Desktop Management service is not running on the RD Connection Broker server.

All RDS services are running except RDMS and RD Web access role is not being assigned. 

Please help.

Hi,

I've had some certificate warnings in the past and thought it was a good idea to fix it by assigning my public wildcard certificate to my internal RDSH servers.
as it turned out in this topic https://social.technet.microsoft.com/Forums/en-US/6a70ed2e-46af-4891-92ff-c8bab6ec94a3/customrdpproperty-use-redirection-server-name?forum=winserverTS it wasn't that good idea.

So that was rolled back.

But now the certificate warnings are back.
'This certificate is not from a trusted authority'

When I take a look at the certificate that is linked to the RDP-TCP listener it was issued to server1.domain.local and issued by server1.domain.local.
We have an internal CA, but that is currently not set up to provide certificates automatically.

To get rid of these warnings I need to request a certificate from the CA and again change the certificate linked to the RDP-TCP listener. (http://www.vkernel.ro/blog/replace-the-default-self-signed-certificate-on-a-rd-session-host-server)

Or is there a better way?

In the past we had a Server 2003 R2 Terminalserver Farm. We were using Roaming Profiles and Folder Redirection for several things, including the Desktop Folder.

Also we had a few Shortcuts that everyone needed, so we placed them in the All Users - Desktop Folder on every Server and all was fine.

Now we are on a 2012 R2 Farm and are using User Profile Disk and again Folder Redirection for the Desktop.

But now, in 2012 it seems the contents of c:\users\public\Desktop are ignored? None of the Items there are present on the user desktop.

Did this change? How can i achieve that functionality again?

Hello everybody

I have a wierd ”error” I need some help with and hoping maybe someone can point me in the right direction or if i am lucky, has seen this before.

I have 2 servers running server 2012 R2 and they are setup as web access / connection brokers using a round robin DNS setup. Basiclly we have followed this excellent blogpost:

 http://thewolfblog.com/2014/02/02/configuring-ha-for-the-remote-desktop-connection-broker/

We also have 2 servers acting as sessions hosts, they are also clustered. Everything works great except when using the web access portal. Whenever we use internet explorer to try and login towards the Round robin DNS name it seems to ”loop” and sends me stright back to the login page without logging me in. It works if if i specifiy one of the the servers instead of the round-robin DNS name.

The issue however does not appear in Chrome or Firefox, only in IE. I have tried multiple things like running a non-domain computer without any GPO, IE 9,10,11 but its the same as long as IE is used.

This is a bit of a mystery and seems to cause issues with the remoteapp desktop connection as this will also only work if pointed against a session host not the round robin dns name,

So has anyone seen anything like this and know where i should start looking?

Hi all,

Some time ago I opened this thread:
https://social.technet.microsoft.com/Forums/en-US/08f91854-27c2-4bc8-8845-d2435db51c1f/hanging-upd-profiles-in-2012-r2-rds-environment?forum=winserverTS

Since then I've made some changes in the GPO's, but this seemed to have the affect that a lot of users now get TEMP profiles in de RDS environment regularly.

The Event Viewer System logs show these messages:
Event ID 16: The access history in hive \??\C:\Users\USERNAME\ntuser.dat was cleared updating 2157 keys and creating 297 modified pages.
Event ID 16: The access history in hive \??\C:\Users\USERNAME\AppData\Local\Microsoft\Windows\UsrClass.dat was cleared updating 367 keys and creating 47 modified pages.

Also there are a lot of these events logged:
Event ID 20499: Remote Desktop Services has taken too long to load the user configuration from serverboth DC's for user USERNAME

This leaves the User Profile Disk corrupt and the only way to resolve this is to restore the UPD from an earlier moment.

Any thoughts?
I see a lot of RDS logs and searching online give a lot of results (non-related) back.

Kind regards,

Matthijs

I need guidelines on how to go about achieving something.

I need to create a gpo that allows a group of domain users to be able to remote into computers within a particular organizational unit. ie. I want members of the group sales_remote_users to be able to connect to only the computers in the sales OU using remote desktop connection.

Hi All,

RDS farm 2012 R2 setup

I am getting the following error " The following requirements should be met for the RD Session Host Servers in the collection:

-1 You must be an administrator on The  RD Session Host

-2 The session host must be running

I am able to un-publish Remote Apps but when I try to publish new ones the error message pops up.

The setup is a  1 Gateway, 2 Brokers, 1 Remote web access and 2 RD session hosts.  RDweb is working from  the internet and from the Intranet.Thanks for the help

Just a noob question. We have Server 2012 that is also doubling as a workstation to save space. Every user logs onto the console and none of them are using Remote Desktop Services or RDP. None of the RDS roles or features are installed on the machine. So why are they all seeming to log into RDS?

I have a domain-joined Windows 2012 R2 server with Remote Desktop services installed. It's the only RD session host in a collection. I'm using sessions on servers, not VDI, not RemoteApp.

Domain users placed in the groups given access to the Session Collection can log into the server and use it fine, but shortcuts/documents at C:\Users\Public\Public Desktop\ do NOT show on the desktop of some of these users.

I'm looking for reasons why this might be the case. I've tried changing permissions on the folder chain without success.

Hi Experts,

I was hoping someone would be able to provide me with some guidance.

We have recently purchased Windows Server 2012 Essentials as well as 5 RDP user CALS.

We do not have a domain or any other servers. We only require 5 people from various locations to be able to remotely log into the server and work on a program that is installed on it.

However, the setup and configuration of the Remote Desktop Services did not go as planned. After many attempts and various configuration settings, it still doesn't work.

What I am lead to believe is that the Essentials version of Server 2012 doesn't support being the RDP Gateway and License Server and Host. However, nowhere can I confirm this, I have searched many forums where people are experiencing the same problems, but nowhere can I find answers.

If there is anyone out there that might be able to shed some light and maybe point me in the right direction, it would be greatly appreciated.

Thanks and Regards,

Wynand.

Hello,

TP4 peaked my interest by allowing me to test a Server OS inside a virtual desktop with RemoteFX.  All that excitement came to a crashing halt when I decided to deploy a RDSH on my Virtual host.

When will we see proper RDSH RemoteFX?

Hi.

I´m working on a project where I need to allow multiple sessions ( already done ), but limit the number of concurrent sessions on a RDS farm...

At the moment, we're using only one RDS server ( R&D stage ), but in the future, there'll be a farm with RDS Connection Broker and many RDS Session Hosts.

I've come to the conclusion that the best approach is to create a custom GPO, apply to the RDS Session Hosts, and use a vbscript or powershell to block the logon when the number of sessions reaches the defined limit.

I'd like to achieve a group based ( Groups: 1RDSsession, 2RDSsession and so on ... ) user logon limit. I have some ideas in mind for a single server, and a possible solution for a farm.

But before spending time on this "adventure" ( I really like this kind of challenge :) ), I'd like to know if Windows2012 provides any means for doing this kind of control.

I know there's a per server sessions limit, but that doesn't solve my problem.

Thanks in advance!

i got a 2008 environment, users connect from an internal network to an internal rdp server(2008). i am encountering a problem with freezing connections when the users are working in the environment.

anyone who can advice me in how to troubleshoot this?

i also noticed that outlook is causing problemes in the rdp session;

This is probably not a RDS specific question, but the problem presented itself on a RDS server and I don't know where else to post it.

I'm troubleshooting a RDS server where there are some problems with Dropbox. While doing this I tested Jumpshare, and got the following message(html site) in the browser when clicking the Jumpshare link:

"Web access is restricted. Please contact the administrator. (Download Sites.)

"(If you feel this site has been improperly categorized, please visit here to submit a review.)

The page is butt ugly and feels amateurish. The link goes to a butt ugly site form. No company is listed as creator of the site, but the URL of the seemingly old web form is iframe.commtouch.com/urlf-miscat. (There is actually a Commtough company.)

I've googled this but doesn't get a singel hit regarding this message.

So there seems to be some shite installed on this RDS server, no? You get to the message independently of browser, and it doesn't matter if the browser is recently installed or not.

I've checked rsop.msc but can't find any Group Policy settings that would make this happen (there are very few Group Policy settings at all). I can't find any application on the server that would interfere with browsing as far as I can see. I do not get this message when accessing Jumpshare on other servers on the same site, in the same AD. I've seen this message before, but didn't think much of it then, because I had other things on my mind, but anyways it is not only Jumpshare that is restricted.

One thing, however, that catches my attention, is that in the list of installed programs on the server, there's one called simply "WebClient", and it has no Publisher. May that be the culprit? Since I don't know what it is I don't want to just uninstall it on a live RDS server.

Anybody seen the message before, or the WebClient? Any input appreciated!

PS. This is a new customer of ours, there's no documentation etcetera.

Hi 

I have a customer that has a small RDS 2012 R2 environment with 2 sessionhosts and one connection broker.
They report back to me that sometimes they experience bottlenecks where som applications are running slowly.

I have tried to find some kind of tool that could help me to figure out what are causing it  (user, application, harddrive IO, network, etc.)

I have found a product named LoginVSI which can be used to find the maximum number of user your RDS environment can handle before users are affected. But I can't see that I able to find the root cause as to which user, application, disk system, network, that's causing the issue.

I found the following from Microsoft
Monitoring Performance --> https://technet.microsoft.com/en-us/library/cc960963.aspx

Do some of you have some software or other guides to how you find the root cause of these bottlenecks?

Kind regards

Hans Christian Andersen
Cloud Solution Architect – EG a/s
Linkedin
Twitter

We will be using a new application that is hosted externally to our organization.  The we will be using a dedicated network connection to the hosting site. The hosting site has it's own Application Servers, terminal servers, and Ad Domain controllers.   We will be connecting to the the hosted application using the Remote Desk Top Client on Desktop Computers that are on our own internal AD Domain.  

I would like to understand high level Process Flow for Remote Desk Client Authentication Against Active Directory.   Are there any resources available that could assist assist me to understand the process.  

We have some concerns.

Thanks

Hi All

Background: I run an environment of around 8 RDS 2012R2 Session hosts on 3 physical ESXI hosts. I have around 120 users logged onto RDS using Office on the session hosts as well as a 3rd party broker software. The physical hosts and vms easily have enough resource (CPU/Memory/IOPS etc) to handle the load. I run Office 2013 on majority of session hosts but a couple now have Office 2016 (session hosts are split between collections and security groups). The RDS environment/DCs/Exchange servers and all other vm servers run on the same physical ESXI hosts/same local network connection.

Exchange VM has 20GB Mem/2 CPUs and plenty of disk space. RDS Session Hosts have 20GB Mem and 4 vCPUs. During peak hours RDS severs and Exchange peak at around 60-70% of resources max!

Applications are deployed via remoteapp via RDWeb but i have tested the issue below by rdp direct to a session host.

Exchange version is 2013 CU 11

So now to the problem. Ongoing, we have been experiencing slow RDS Outlook performance. Outlook runs in on-line mode and intermittently navigating between emails/clicking emails, displaying a preview of that email can sometimes have a delay of 5-10 seconds. 10 minutes later and the performance has gone back to normal. It appears to only affect clicking between emails because if i then compose an email or click into menus, performance is normal.

I found this article and tried the reg key (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces) but this hasn't fixed the issue. If I check connection status in Outlook when performance is slow, Avg Resp times are well below 100 ms.

I am really at a loss to what is causing the issue as everything else performs fine. I have tested local Outlook on my PC and performance is good. I am starting to look into changing to cached mode in RDS which I have tested and "resolves the issue" but then I have to think about local large .ost's and roaming profiles and backups and multiple session hosts etc which will be a nightmare.

We have multiple RDSH server in workgroup. These servers are in different vlan. We need to allow more then 2 RDS sessions on these servers. For some reason we do not have the option to add the servers in domain.

My question is if I install a new RDS license server in one vlan. Will the other RDSH servers in other vlan will be able to take license from the license server and grant it to the users or device connecting to those RDS servers. Firewall ports can be opened between these vlans for license server communication.

or

Do I need to have separate license server for every vlan?

Could someone from Chris Huybregts' team please look at this.

Please see my original posting here:https://social.technet.microsoft.com/Forums/windowsserver/en-US/6e3eadbd-d52e-47df-87cd-63fd364b177d/server-2016-tpv4-wheauncorrectableerror-when-testing-remotefxvdinvidia-grid?forum=WinServerPreview

I'm posting in this forum because this is where the Experience guide for Remote FX in server 2016 advised to post. Also my previous posting resulted in just asking me to wait until server 2016 is actually released. That answer is not acceptable.

I have a Dell T620 with dual 1100W power supplies, 64GB RAM, Nvidia GRID K2 installed. I have installed Server 2016 TP4 on the server and have been testing it by running Autodesk AutoCAD, Autodesk Infraworks, Microstation and other programs that use OpenGL. My VDI images are based on Windows 10 1511 with the latest updates. I have a memory dump file that I would like to upload. I want to get this working because If it works out when 2016 is RTM this will be a great solution for my customers. Also I would like to note that I am using Windows 10 64 bit NVidia GRID driver from NVidia's website.

Here is the scenario where the crash occurs. I log into a windows 10 desktop via TS Gateway. I run a "graphics intense" program. I start kind of loading the system by panning in a drawing or just loading the graphics card. The system will bluescreen at the "WHEA_UNCORRECTABLE_ERROR" and the system reboots. I have the memory dump from this latest crash. I thought it was happening because I didn't have the correct power supplies, so I removed the 750 watt power supplies, and installed 1100 watt power supplies and I have the same problem.

Here is the memory.dmp link for you to townload

https://drive.google.com/file/d/0B43h08nmm9FWV0l2QzBHZ05lVDA/view?usp=sharing

When I open the dump file in the debugger, here is an excerpt:

WHEA_UNCORRECTABLE_ERROR (124)
A fatal hardware error has occurred. Parameter 1 identifies the type of error
source that reported the error. Parameter 2 holds the address of the
WHEA_ERROR_RECORD structure that describes the error conditon.
Arguments:
Arg1: 0000000000000005, Generic Error
Arg2: ffffe00173e3f028, Address of the WHEA_ERROR_RECORD structure.
Arg3: 0000000000000000
Arg4: 0000000000000000

Debugging Details:
------------------

Page 1100 not present in the dump file. Type ".hh dbgerr004" for details
Page 1100 not present in the dump file. Type ".hh dbgerr004" for details
Page 1100 not present in the dump file. Type ".hh dbgerr004" for details
Page 1100 not present in the dump file. Type ".hh dbgerr004" for details
Page 1100 not present in the dump file. Type ".hh dbgerr004" for details
Page 1100 not present in the dump file. Type ".hh dbgerr004" for details

BUGCHECK_STR:  0x124_GenuineIntel

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  f

ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre

STACK_TEXT: 
ffffd001`77a96a98 fffff803`2f40ef1f : 00000000`00000124 00000000`00000005 ffffe001`73e3f028 00000000`00000000 : nt!KeBugCheckEx
ffffd001`77a96aa0 fffff803`2ee1d73c : ffffe001`73e3f028 ffffe001`74de4010 ffffe001`74de4010 ffffe801`5d021420 : hal!HalBugCheckSystem+0xcf
ffffd001`77a96ae0 fffff803`2f41051f : 00000000`00002ba0 00000000`00000000 fffff803`2f423600 00000000`00000000 : nt!WheaReportHwError+0x258
ffffd001`77a96b40 fffff803`2f40fdc3 : 00000000`00000000 ffffd001`77a96bf0 00000000`00000000 fffff803`2edd46e0 : hal!HalpNmiGenericErrorHandler+0x5f
ffffd001`77a96b70 fffff803`2edd34b3 : 00000000`00000001 00000000`00000046 ffffd001`77a8a180 fffff803`2edd475c : hal!HalHandleNMI+0x23
ffffd001`77a96ba0 fffff803`2ed57ac2 : 00000000`00000001 ffffd001`77a96db0 00000000`00000000 00000000`00000000 : nt!KiProcessNMI+0xf7
ffffd001`77a96bf0 fffff803`2ed57936 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxNmiInterrupt+0x82
ffffd001`77a96d30 fffff803`2edfb189 : 00000000`00000000 fffff803`2efa1f00 00000000`395f2f40 ffffd001`77a8a180 : nt!KiNmiInterrupt+0x176
ffffd001`77ab46e0 fffff803`2ec2d0e5 : 00000000`00000000 00000000`00000000 00000000`00000000 ffffe001`74df1010 : nt!PpmIdleGuestExecute+0x61
ffffd001`77ab48b0 fffff803`2ec2c92b : 00000000`00000000 00000000`00000002 ffffe001`00000001 01d18a24`d36ee02e : nt!PpmIdleExecuteTransition+0x605
ffffd001`77ab4b00 fffff803`2ed524ec : ffffffff`00000000 ffffd001`77a8a180 ffffd001`77a96ec0 ffffe801`5f7e9840 : nt!PoIdle+0x33b
ffffd001`77ab4c60 00000000`00000000 : ffffd001`77ab5000 ffffd001`77aaf000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x2c

STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: GenuineIntel

IMAGE_NAME:  GenuineIntel

DEBUG_FLR_IMAGE_TIMESTAMP:  0

IMAGE_VERSION: 

FAILURE_BUCKET_ID:  0x124_GenuineIntel_PCIEXPRESS

BUCKET_ID:  0x124_GenuineIntel_PCIEXPRESS

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:0x124_genuineintel_pciexpress

FAILURE_ID_HASH:  {0aebd40d-d4c8-456d-b299-4fede7e8bf0c}

Followup: MachineOwner

Hello,

I am having problems with "strong private key protection" in combination with Windows 2012 R2 RDP sessions.

For 3 TS users I have installed 3 different personal SSL certificates in the personal store in Explorer (for the same website). All three certificates have differtent passwords etc and are all installed in the user personal store.

When I try to login to the website with the first user, the password prompt for the certificate is showing as expected.
But when I login with user 2 or 3 the password prompt for the certificate is showing in an other RDP session!

Completely random in my opinion.

User 1 and 2 logged on. Password prompt for Users 2 is showing in session Users 1.

User 1, 2 and 3 are logged on. All prompts in User 1 session.

User 1 logs off. All prompts showing in User 3 session.

When I fill in the passwords in an other session for the other user, the website is working fine :)

I am migrating from TS 2003 to TS2012, on the Win2003 server this setup works as expected.

Thank you for your help.