We have experienced this in the past on 2008R2 servers and have resolved it by installing: kb2661332
This is occurring on Server 2012 and I do not see any hot fixes specific to this issue.
I believe we have exclusively seen this occur to users reconnecting to disconnected sessions. New users can login fine. The disconnected users cant until the server is rebooted. It appears to be erratic as to when it occurs.
Any help would be appreciated.
Can't find any info about this that relates to Server 2012.
I have three Server 2012 VMs: Connection Broker, Web Access and Session Host. Client PC is Windows 7. All joined to same Active Directory.
I've used my Enterprise CA to generate a certificate for the web server and installed that and have configured the PC to get its RemoteApp programs from the web server - they're showing on the Start Menu.
When I click on a RemoteApp on the Start Menu I get a warning box appear:
RemoteApp
The publisher of this RemoteApp program can't be identified. Do you want to connect to run the program anyway?
This remoteApp program could harm your local or remote computer. Do not connect to run this program unless you know where this program came from or have used it before.
Publisher: Unknown publisher
Type: RemoteApp program
Path: calc
Name: Calculator
Remote computer: rdsconnection-broker.fully.qualified.name
[ ] Don't ask me again for connections to this computer
I don't know how to get rid of this. None of the options mentioned for resolving this for Server 2008 work as the things they talk about changing/configuring don't exist on Server 2012. As you can see, I'm publishing a very basic built in application at the moment.
It seems as though the connection broker server needs configuring with a certificate or something, but I can't see anything in the RDS section of the Server Manager GUI to do this.
NLA works fine from the Windows 7 PC to all three servers via a normal remote desktop connection, but clearly RemoteApp is not happy. I don't even know if this is an NLA issue or something else.
Please help/advise.
I have installed all the required components for RDS, and have purchased a 5-user RDS CAL. However, when I try to configure the services, and run the wizard, I get a WinRM error involving the use of HTTPS for transport if the client computers are not a part of a domain.
We have three laptops and a couple of desktops that users want to remote in to the server from, and none of these individual computers are joined to a domain yet, because we don't have a local server. We are installing a peer-to-peer network right now, and using RDS to remote into a VPS with the software we want to run. I am NOT a Windows Server expert, by any stretch of the imagination.
Can someone walk me through setting up RDS on the server when the client computers do not belong to a domain?
Kevin Stephenson
Glenwood Springs, Colorado
Hi,
I have one RDP server ( Workgroup server)
I need to allow RDP access for few users.
I need the users to use username/password & certificate for authentication.
for the account : I will create accounts for them locally
for the certificate : I need to install one certificate on the server , if the user have the certificate installed on his local PC , so he can login to the RDP server , if he not have the certificate installed on his local PC , so he will not be able to login.
Is this away for that ?
FYI : I have internal CA server ( for our Domain )
Hello.
My Windows Server is so slow and when I open it then it show me that "RPCSS" service use more than %80 of my Physical memory :
How can I solve it? I used Windows Server 2008 R2 and I can't change it.
Thank you.
Hello,
I'm looking for some hardware requirements to run Remote Desktop Services for about 20 users who generally run simple applications like Microsoft Office (Word and Excel), Internet Explorer and Google Earth. Anyone who can help me estimate the necessary hardware requirements for this setup? Or anyone who can refer me to something where I can calculated my hardware needs?
Much appreciated!
Nicolai
We encounter a reconnection problem to disconnected RDP sessions.
We have 9 users connecting to a RemoteApp this works.
All the 9 users close the app and leave a disconnected session, disconnected sessions are not logged off and is set to 'Never'.
When all the 9 users reconnect to the RemoteApp approx 6 to 8 users reconnect to their disconnected, we see on the broker it redirects them to their disconnected session on the terminal server.
But approx 1 to 3 users are redirected to their session by the broker to their session on the terminal server but they get almsot disconnected instant , the remoteapp does not start/open.
When we click for a second time on the remoteapp in the RDWeb it opens instant.
In eventvwr on the TS we see "The Desktop Window Manager has exited with code 0xd00002fe"
Problem: broker redirects user to their session on the TS but user gets disconnected.
What we tried:
- Use TCP only for RDP
- NTLM v2
- installed all updates on all TS servers
- installed all applicable recommended hotfixes on all TS and broker and RDweb server
- disabled NLA
- disable Receive Side Scaling
- disable chimney
- http://support.citrix.com/article/CTX117374
My scenario:
Only one poole virtual desktop collection created with 3 windows 8.1 VMs (VDI-0, VDI-1 and VDI-2)
I have 5 users (test1 to test5 )to use this VDI pool 1, and using automatic VM assignment.
test1 login to VDI-0
test2 login to VDI-1
test3 login to VDI-2
test 4 &5 are rejected (so far test was going well by this point)
----------
I logged off test1 from VDI-0
I logged off test2 from VDI-1
I assume that VDI-0 and VDI-1 VMs were released and back to the VDI pool 1
When I tried to use test4 and test5 user account to login, I got no VM is available in the pool error message
I tried to use test1 and test2 account to login, it was working.
Look at the Collection management console, I found VDI-0 was assigned to user test1, VDI-1 was assigned to user test2 and VDI-2 was assigned to user test3.
My question:
Is there any way to create a collection without remembering User Assignment. each time when a user log off, VDI release the VM back to the pool and allow other user to use the VMs. Does anybody know MS VDI solution support this function or feature?
Any good ideas?
Note: I have 150 application users and only have 25 VMs (due to application licenses). I need a shared VDI VM pools
Thanks,
Robert
I've set up a HA Connection Broker cluster, and in order to get the web gateway working again, I need to set up a new RAP policy that specifies the RD Broker RR Address, but every time I try, when I click 'Add' in 'User Groups' (And anywhere else in the MMC, it seems), the MMC crashes with the following output:
Problem signature:
Problem Event Name: BEX64
Application Name: mmc.exe
Application Version: 6.3.9600.17415
Application Timestamp: 54504e26
Fault Module Name: clr.dll
Fault Module Version: 4.6.1055.0
Fault Module Timestamp: 563c12de
Exception Offset: 00000000002fdbd8
Exception Code: c0000409
Exception Data: 0000000000000002
OS Version: 6.3.9600.2.0.0.400.8
Locale ID: 1033
Additional Information 1: 96f9
Additional Information 2: 96f9c5010a52aa0dfa6dd4f9281ffe93
Additional Information 3: 7b9b
Additional Information 4: 7b9b3ea08d2dac897bb696ccf51055a9
As far as I can tell from searching, it seems to be .NET that's crashing, but I haven't found any solutions.All three servers (Web Gateway and both Connection Brokers) are fully patched.
has anyone else sen this and/or have any ideas how to either fix it or maybe some kind of workaround?
Hello,
I have a 2 node Hyper-V Failover Cluster with RDS deployed. The Virtual Desktop Template Export location is a single point of failure if left to the default location of the C: drive of your connection broker. My thought is to create a clustered file server node and set the export location to that share.
Question 1: Has anyone used a clustered file server for the export location?
Question 2: How do you move the Export location of already deployed Desktop Collections when it is greyed out as shown below?
Question 3: I understand that when you create a desktop collection the Master Template is copied to the Export location but then how is this different than the Parent location? Is that just another copy of the Export?
We have several terminal server farms and in each farm we have the need for 1 user to always log into a specific server in the farm. This is due to a little piece of sortware that is required for a device that only this one user has and the fact the it is licensed to only one server. The user must use that server for it to work. I want to include this server in the farm because it seems silly to have a server for only one user. How can I point one PC/user to the same server in the farm all the time? We are using the Connection Broker and NLB which seems to work just fine for all other users.
Thanks
We currently have 3 RDS servers in production and all servers have Office 2013 installed. What we have found is that this software also has Lync (Skype for Business) and One Drive installed. We need to remove these applications from Office 2013.
My question is "Do we have to put the RDS servers in install mode before proceeding" or could we just make the change in the software w/o doing this first. We need to select "change" for Office 2013 and then select these 2 applications and mark as "not installed".
I know there are many documents about putting these servers into install mode when installing software, but there really isnt anything for uninstalling software on a RDS server
Thank you in advance for your help with this.
Our applications need to know the name (or any unique identity value) of the PC that they are running RDP from. Before 2012 server we used ClientIfo.DLL to return this information to the application that is hosted on the remote server. That no longer works, and no information is returned by that DLL. Can you please advise how we can determine a unique identity for the client PC?
Thanks, a bit desperate!
Hi Everybody
I have a problem that I have been working on for a little while.
The problem is that User Profiles aren't removed completely at log off. This means that new .000 .001 etc. will be crated as users logs on again.
This gives various problems like for example Outlook 2010 where you are not able to share you calendar if this happens. It doesn't happen for all users.
The setup is as follows:
- 3 Windows Server 2008 R2 Terminal Servers.
- Roaming profiles are used.
What I found out is that the following directory and files are left behind at log off
C:\Users\<Username>\AppData\Local\Temp\3 containing the following files:
~FP29CF.TTF,~FP29F1.TTF,~FP39BB.TTF,~FP39CD.TTF,~FP740B.TTF,~FP741D.TTF,~FP892C.TTF,~FP893E.TTF,~FP9BE0.TTF,~FP9BE2.TTF,~FPA311.TTF,~FPA323.TTF,~FPE287.TTF,~FPE289.TTF,~FPEBCA.TTF,~FPEBDB.TTF
This if the files that doesn't get deleted at log off. If I try to delete them I get a message saying "The action can't be completed because the file is open in System".
If I use tools like Process Monitor or Process Explorer, I can see that when I try do delete one of the files, it's locked by System process PID 4.
If I restart the server I'm able to delete the files. But this doesn't delete automatically and the users gets, at new .00x profile when they login again.
I installed the hotfix KB2661663 which should help on doing a cleanup. But if hasn't solved the problem.
Does anybody has a suggestion to why these TTF files comes from in the first place (Outlook, Adobe Reader, Word, etc) ?
Any solution to how you can get these file deleted when then System account has a lock on it?
Looking forward to some feedback :-)
Kind Regards
Hans Chr. Andersen
I have a following setup (all machines run Windows Server 2012 with latest Windows Updates)
- 1x Remote Desktop Connection Broker, this machine runs the RDWeb application too (TSBroker)
- 1x Remote Desktop Gateway Server (TSGW)
- 3x Remote Desktop Session host machine (TSAPP01-TSAPP03
The network publication is the following:
- TCP 80 / TCP 443 -> TSBroker
- UDP 3391 -> TSGW
My actual problem is I cannot connect to the farm via RDG with mstsc client, nor with RemoteApp, nor with a well-configured manual mstsc connection. I can reach authentication stage, I can enter the username and the password, but the client says "remote desktop gateway server is temporary unavailable". Things I checked/tried:
- The connection between the farm and the client is good, client has no networking issue, DNS resolution is good
- There is a turned on Windows Firewall on machines, but the Domain profile set up to Allow/Allow, so there is no Windows Firewall restriction between machines.
- I tried to check all the logs on all machines during an unsuccessful login. Nothing written down, nor on broker, nor on gateway, nor on the session hosts. The only log i get about unsuccessful login is the following:
RDPClient_Gateway: An error was encountered when transitioning from AAStateInitializingTunnel to AAStateError in response to 6 (error code 0x800706BA).
I found near absolute nothing about this error.
There was a state when this system worked, but as it is a work-in-progress infrastructure, we had a temporary certificate on the servers. We reached that stage where we were able to replace these certificates with working ones. After it, we started experience that issues I describet above.
I do not know what is broken in this system. I have very light knowledges in Windows Server 2012, and nothing in Windows Server 2012 RDS. I would be happy for any real help what points where can I find a problem or a solution. As I am not too comfortable
in this system, please be very specific, describe me required steps one-by-one, to make sure I doing things right.
I would be very thankful for your help.
George Hron
Hi All,
We have the following problem, we are running a Windows Server 2012 (non R2) Session Host server using User Profile Disks. A user creates a new folder within their "Documents" folder, this new folder contains different file
types eg, PDF, ZIP, DOC.
When the user tries to delete a file of the entire folder they are prompted by UAC. The user is not able to delete without an Administrator account confirming the UAC prompt.
We have checked the users security rights, the user has full access to the new folder and all files within.
Any suggestions would be appreciated.
Thanks,
hi all,
is there a way to prevent users from being able to use Ctrl+Alt+End at all?
right now I have everything that you can see when you press Ctrl+Alt+End disabled, but I think it's better to disable the access to the security window all together with some GPO settings.
also while we are talking GPO, is there a way to hide the user profile when accessing windows explorer? normally it shows the user ID where you can access all user folder through this folder.
any help with this is much appreciated.
Mohsen Almassud
Hi Forum,
I have this issue for a while ( since windows 2012 / windows 2012 R2 remote desktop days).
(Edit: I suddenly realized 2012 RDS does not allow shadowing, its 2012 R2 RDS I am talking about)
When I shadow a session the user client having multiple monitors, on my screen, the user's desktops were squeezed like 1/2 or 1/4 (if he has 4 monitors) to show on my screen.
(This question may have been asked many times, I didn't seem to see an answer)
that makes it really hard to work.
any tips to work around this issue? make it like 2003 TS days?
Many thanks in advance.
Cheers
Michael
I'm seeing this message now that I've disabled ShowDesktops. And have implemented this MS article. https://support.microsoft.com/en-us/kb/2743682
How can I remove the Message entirely. I would prefer not to start again with Server 2012R2.
Thanks