Environment facts:
 1. Windows 2012 R2 RDS server.
 2. 5-20 concurrent users.
 3. Users run several applications, including MS Office 2013, that are installed directly on the RDS server. In addition, they have a set of several front-end Delphi-based applications managing data on a back-end DB2 server (separate from the RDS server). The EXEs for these are housed on a separate server and so are accessed via a drive letter mapped via Windows 2012 AD login script. This is the behaviour intended for them by the third-party developers, not a workaround. (My role is that, although I did not write the Delphi apps or design the DB2 back-end, nor am I employed by the company that did, I provide targeted support for the business components dealing with the DB2 environment, including these applications and, where required, advise the IT department on issues related to the DB2 server and the related applications).
 4. All applications run on the RDS server are the same ones run on about 50 PCs by users physically located on the LAN at the corporate site that hosts the RDS server. The local users access the DB2-related EXEs the same way as the RDS-based users: via the same drive ltter mapped to their network location.

Herein is the problem: some RDS users frequently, although not predictably enough to duplicate the problem at will, receive External Exception C0000006 errors, but only for the DB2-related applications. Two things helped me target my research:

 1. These errors do not occur for the local users running the applications on their PCs,
 2. Nor do they occur when testing with a copy of the DB2-related EXEs copied onto the RDS server.

My research thus far reveals that this error is apparently related to (or at least, displaying the same symptom as) a long-standing issue going back to Windows 2000, where there was a hotfix for the issue, wherein one or both of two things happens:

 1. The single IP connection between the terminal server and the server hosting the EXEs gets confused about which RDS session requested the EXE/DLL, so the client session does not get the entire file loaded into memory.
 2. Due to host server or network latency, the EXE or related DLL is not fully loaded into memory.

Whichever it is, it results in a page fault, ending with the C0000006 External Exception error. Per several online posts, it seems that it may be Delphi-related, although the suggestions there did nothing to diagnose the underlying cause and simply directed developers to provide RDS-local implementations. I am not the Delphi developer, so I have no control over the applications themselves, and my interest here is not in trying to debug the applications but to pinpoint what, exactly is happening on the terminal server when this happens. And I am already using a very limited local deployment to keep users running temporarily, but for a number of reasons, that is not a good option. So my focus here is attempting to understand in more depth the underlying issue with the goal of solving it at it source, not by workarounds that will cause other problems in our environment.

There are four more factors, although I cannot tell for certain the relative importance of each:

 1. It was all working on our old Windows 2003 terminal server before we moved everyone over to Windows 2012 R2 RDS server.
 2. The RDS server is running as a Hyper-V VM on a Windows 2012 R2 server with the bandwidth management disable for the VM.
 3. The physical network adapter is a Broadcom BCM5709C card with VMQ (Virtual Machine Queues) enabled. Although there have been known poor-network-performance issues with some Broadcom cards when VMQ is enabled, this particular card is not on the list of problematic cards. See this link:http://support.microsoft.com/kb/2902166
 4. This is the one currently very much in focus for me: after extensive testing with a couple of the users that revealed everything above, the IT department revealed to me in passing that that this is happening only for the five or six users in the one remote office where they have Apple workstations--and therefore the Mac version of the RDP client. That has to be very significant (and would have been nice to know at the outset), but I cannot figure out how it is related.

Hey Microsoft Technet,

I'm working to set up a handheld scanner (Windows CE 6.0) with a remote app server.  The app server in question has a mode called 'rfmode' that can be called and set in Windows RDP.  The 'rfmode' is an interface that can supposedly be used with Windows Scanners.  I am currently in the middle of customizing a Windows RDP connection for the server.  However I am unable to trick the scanner into using 'rfmode'.

From what I've gathered, there are a few settings that seem like they should be able to help:

- remoteapplicationmode

- remoteapplicationprogram

- remoteapplicationcmddline

- remoteapplicationexpandcmdline

and possibly - 'shell working directory'.

The cmdline options seem to be what is working in Windows 7.  When I launch the app, I can call the rfmode no problem (again, on Windows 7).  But on the scanner, no such luck.  It loads the regular interface.  If you know of any tips, tricks, or techniques that could help please let me know.  I would greatly appreciate it.

Jeff F.

Hi all,

I wonder if someone will be able to help with a query that we have regarding RDS on 2012 R2 and management while using HA.

In our farm we have 2 RDweb servers, 2 SQL servers using always on, 2 Connection Brokers, 2 Gateways and 2 License servers. 

When these are all active with have no issues at all with managing the farm we are able to add and remove applications, however if one of our connection brokers goes down we completely lose the ability to manage our farm via the server management console. This means we are unable to add new applications or even disconnect sessions should we find ourselves on the 1 connection broker. We also get the same behaviour if we shut down one of the license servers.

We found this out while we had been carrying out our functional testing, currently this farm is not live but when it does the above may cause us some issues as our business is constantly evolving and new applications are added regularly so not being able to manage correctly if one of the pair is down will impact the business.

Is there a way to get around this? Or would we have to make sure that we have restored one of the downed servers quickly to be able to manage the farm?

Any help will be greatly appreciated.

When trying to shadow a virtual machine, we get the following error:

"This Computer Name is invalid"

I have seen a number of fixes for this, including enabling the file and print share services, etc

Theses fixes don't seem to work, is there anything else that could be preventing this from working?

Best Regards

Hi,

We run an AD environment but only the admins ever remote desktop into any servers so the servers are configured in Administration mode. I am trying to configure timeouts for idle connections and also a maximum RD session length and all of the documentation I can find is related to "Remote Desktop Services Mode"

How can I configure timeouts for Remote Desktop Administration mode?

Hi,

At a customer of ours we run a single 2012 R2 Remote Desktop Server on a Hyper-V environment.

The fysical server is a HP Proliant DL380 Gen8 with two processors and 64 GB memory.

The VM for the RDS had 40 GB memory and 12 vCPU's.

Since May 19th, this server, which always has run good, suddenly gives BSOD's.

It has done this 5 times now. But it seems like is always has something to do with a graphic driver because is crashes on win32k.sys or cdd.dll.

Prior to the crash some customers report that their screen partially turning into black or white windows.
The start-button is not available anymore so they cannot logout.

When this happens, later that day the server crashes. Then it runs for one or two days and then start over again.

I've updated all the firmware on the host.
Updated all the drivers on the host.
Ran Windows update until there are no more updates on the host and guest.

Today it happend again......:-(

Below an output of the first BSOD (I have more if you need more, I can post them):

Hello guys. Need ur help

Why this happens? Need fix this issue at a client side. users get this error randomly, mostly @ logon screen, when they try to type their password!

Servers are all Win2012R2. They use RDS Servers

Vusal M. Dadashzadeh

One of my customers has two W7 Pro computers he remote logs into with RDP (remote desktop protocol).  Both computers got tagged by his credit card provider with the following external scan of his WAN address:

      SSL/TLS server supports RC4 ciphers

      CVE-2004-0230 CVE-2015-2808 CVE-2013-2566

      Details:

      TCP, when using a large Window Size, makes it easier for
      remote attackers to guess sequence numbers and cause a
      denial of service (connection loss) to persistent TCP
      connections by repeatedly injecting a TCP RST packet,
      especially in protocols that use long-lived connections,
      such as BGP. The RC4 algorithm, as used in the TLS
      protocol and SSL protocol, does not properly combine
      state data with key data during the initialization
      phase, which makes it easier for remote attackers
      to conduct plaintext-recovery attacks against the
      initial bytes of a stream by sniffing network traffic
      that occasionally relies on keys affected by the
      Invariance Weakness, and then using a brute-force
      approach involving LSB values, aka the "Bar Mitzvah"
      issue. The RC4 algorithm, as used in the TLS protocol
      and SSL protocol, has many single-byte biases, which
      makes it easier for remote attackers to conduct
      plaintext-recovery attacks via statistical analysis
      of ciphertext in a large number of sessions that
      use the same plaintext.

Which KB's  do I install to correct this?

Many thanks,
-T

Cannot restart user profile due to AppInfo.  Cannot restart AppInfo, it's current state does not accept commands.

Cannot run ANY administrative commands due to APPINFO.

Only solution thus far is a full restart, which is not acceptable.  JUST started this behavior 2 days ago.  Cannot find a reference to APPINFO issue.  PSTOOLS ineffective.

We encounter a reconnection problem to disconnected RDP sessions.
We have 9 users connecting to a RemoteApp this works.
All the 9 users close the app and leave a disconnected session, disconnected sessions are not logged off and is set to 'Never'.
When all the 9 users reconnect to the RemoteApp approx 6 to 8 users reconnect to their disconnected, we see on the broker it redirects them to their disconnected session on the terminal server.
But approx 1 to 3 users are redirected to their session by the broker to their session on the terminal server but they get almsot disconnected instant , the remoteapp does not start/open.
When we click for a second time on the remoteapp in the RDWeb it opens instant.

In eventvwr on the TS we see "The Desktop Window Manager has exited with code 0xd00002fe"

Problem: broker redirects user to their session on the TS but user gets disconnected.

What we tried:
- Use TCP only for RDP
- NTLM v2
- installed all updates on all TS servers
- installed all applicable recommended hotfixes on all TS and broker and RDweb server
- disabled NLA
- disable Receive Side Scaling 
- disable chimney
- http://support.citrix.com/article/CTX117374

We have this issue on many 2012 RDS session hosts. The issue has been seen at different clients with different set ups, some have a simple 1 session host RDS server, some have 4 or 5 session hosts in a load balanced farm with RD gateway, connection brokers, RDWeb, ect. The problem in simplest explanation:

A user will call the help desk saying they cannot access the server. They will get an error when RDP is trying to connect. 

We check the session hosts, and will find many errors:

"Event ID 4005 - The Windows logon process has unexpectedly terminated"

At that point in time, users who are currently logged in may be able to still work, or their session may lock up (it is not consistent). 

Regardless of the current users logged; after the logon process crashes, it continues to crash upon every user attempt to log on. It will happen indefinitely until the server is rebooted. We can not log in, not even via console until the server is rebooted.

Then, everything works fine for some amount of time (not consistent) it may be a couple of days, or it may be weeks, or a month even. 

We have had the case open with Microsoft for about two months and they cannot determine what is wrong. 

I believe I may have found a possible cause; Webroot Secure Anywhere antivirus. Since we have tried everything from moving from roaming profiles to local profiles, removing all printers, blocking inheritance of GP, fresh server builds with minimal software, ect - it has to be something that is consistent across the board on all servers. 

The only thing I can find consistent across the board is the Antivirus; Webroot. 

I am curious if anyone else is having this issue? I would like to pin point this to something but it is so intermittent and we cannot force replicate the problem. 

Hello,

I've been wondering why Internet Explorer won't remember any password in a Server 2012 Session Host.  Here's our situation: all Windows Servers 2012, all servers joined to a AD domain;  the servers are RD Session Host, RD Connection Broker and RD Web Access.   We have User Profile Disk enabled. 

The first time a user logs on to a remote session and access our internal Sharepoint portal, IE will always ask for a username and password. The user enters the domain credentials, checks the option "remember my credentials" and everything goes fine for a while.   When he closes IE and re-opens it,  it will ask for the password again.    It's like the option "remember my credentials" wouldn't be working.  This problem doesn't happen with a regular physical PC.  Whatsmore, if the user logs out of the remote session, and logs in again, IE will ask again for BOTH username and password.   This is not a single Sharepoint problem, it happens with all Web applications that use AD authentication.

Could this problem be related with the use of User Profile Disk?  Since this is enabled, maybe IE doesn't know where to store the saved credentials.

Please, any help will be greatly appreciatted.

Mc

2012 R2 RDS farm

2 brokers configured in HA

RDWeb and RD Gateway on one server

Multiple collections and session hosts

All RDS updates have been applied to all servers.

We have users from some sites that launch a remoteapp and it gets stuck "connecting". If you click "Details" you just see a black screen. For other sites it works fine.

I have tried the following:

-Have the user click "Ctrl + Alt + End" hoping to be able to manually start Explorer

-Checked the user's RDP version and updated if necessary

-Made sure user's PC was completely updated

-Tried disabling desktop optimization and bitmap caching

-tried manually setting connection speed of RDP client to different settings

-verified ports 443 and 3389 are open on the remote host's firewall to our public IP

- tried using a different browser

- Followed the connection from RdWeb to RDBroker to Session host. Isee the connection being redirected to the session host in the logs on the broker, but I never see anything in the session host logs. It is not getting to the point of establishing a connection.

To resolve the issue, we have had users connect back to our network via VPN and they are able to launch the remote app with no issue.

What else can I try?

I am managing a small network and wanted to test the recovery of the servers from backup in case that is needed at some point. The original server is running windows 2012, and has hyperv vms for dc and app server. The app server has the rdp role.

I have restored the backup images to a test server off site an on a different, isolated subnet. It has been mostly a success with the exception of the rdp role. I think the first time I connected to the rdp server it allowed me to have a session for a short time. But since then whenever I try to connect it give me this dialog:

This computer can't connect to the remote computer.

Try connecting again. If the problem continues, contact the owner of the remote computer or your network administrator

I am trying to connect using the ip address of the server. I can connect to both the host and the dc via rdp. I can ping the servers by name from the workstation.

I have a feeling that if I unistalled the rds role, I'd be able to connect to the app server using the two administrative connections that are permitted, but I'm not going to test that. Is there something about the rdp server or rdp license server (same hyperv vm is used for both) that needs to be reinitialized before the rdp role will work on a machine that is basically a restoration of a production server?

Hi,

I have one Windows 2012 R2 server that has two roles:

- Remote desktop licensing, it activated and it has 50 CAL being delivered

- Remote Desktop Session host.

Problem is that the server itself tells me after a logon  that the RDP grace period has expired and I should configure the Remote Desktop licensing. But where?  the Tool "Remote Desktop Session Host Configuration" is missing and it cannot be found in the MMC snapins... and the instlalation of the RDP license server didn't configure the host to find itself.

So how can I configure the RDP licensing for that server so it uses the license server that runs on the same system? And I don't want to deploy a GPO for this... 

Do I have to install one more role service? So far I know the others are only for setting up a bigger infrastructure, but they aren't necessarly required for "just" accessing this system via remote desktop for administation. Actually I do this through VMware console, but this is somehow inconvenient because that is a fat client software I need to install first after I was cut off from the remote desktop - with the reason "no RDP license server available".

The background behind this is the fact that on the system is already a Citrix Xendesktop demo installed, so I absolutely don't want to have there a complete RDP infrastructure too. Basically the Xendesktop installation activated the RD session host role, and later we needed for OTHER servers a license server that can distribute 2012R2 CAL beucause our productive LS is on Windows 2008R2 level.

IT architect - Terminal servers, virtualizations, SQL servers, file servers, WAN networks and closely related to software devleopment (8 years + experience in VB, C++ and script langugaes), MCP for SQL server and CCAA for Xenapp 6.5

Is there a way to connect to my server without being seen on the local users group?

or in the whole domain?

how can i do it?

Hello, we have a ws2012 failover cluster with a lot of VM, some of them make an RDS environment that we use to publish remoteapps to our company, clients are Win7. Since some of these remoteapps have heavy graphic effects (or imagine you want to publish Photoshop) the user experience is not very nice (lag, poor details, etc.) so I was wondering if it is possible to boost remoteapps in any way using gpu acceleration or other new technologies that perhaps I don't know. Please note that we're going to migrate to ws2016+win10, so consider any new functionality provided by the newest operating systems.

Thank you

Hi All,

Firstly let me apologise if this is in the wrong section.

I have recently installed a new application to a terminal server farm.

This is now the desired default application to handle the SIP protocol.

Despite the fact I have gone in to each member server and assigned the correct application to the protocol, both as a user and as an Admin, the behaviour is still thus:

User clicks the SIP link

Internet explorer opens

gives security warning and attempts to load Lync/Skype for business.

Can anyone tell me what I'm missing? Could this be a user profile issue? Is there something I can tweak in the registry?

Many Thanks in advance.