Server 2012 RDS - User Profile Disks - Errors during Logoff

December 19, 2012, 8:01 am

≫ Next: Windows 10 and SBS 2008

≪ Previous: Remote App Programs not displaying in RDWEB Remote Desktop Services

$

0

0

I have set up a test Server 2012 RDS collection (Single Server for now) and implemented User Profile disks.

I have two problems.

First: My generic test user can connect and does successfully use the user profile disk as expected. However, atlogoff, the system event log contains these errors:

The error (NTFS 137) is: The default transaction resource manager on volume C:\Users\ts3.test encountered a non-retryable error and could not start.  The data contains the error code.

The warning (NTFS 50) that concerns me is:

It appears that the user profile disk is being "disabled" or "disconnected" before the profile data is completely written at logoff. What can I do to troubleshoot this?

Second:

Update: A post from Mike Connor on the following page: -LINK- solved the problem described below. 

My administrative user always logs on now with a temporary profile. At the beginning, the UPD was working and mounting. That stopped working. In attempting to troubleshoot, I logged the admin user off and deleted the UPD disk file from the share. I remember it working again after generating a new UPD disk file in the share. Soon, it quit working again. I deleted the UPD disk file again from the share and ever since, it has never regenerated a new UPD andalways logs on with a temporary profile.

---

---

Windows 10 and SBS 2008

August 1, 2016, 3:21 pm

≫ Next: RDS- Temporary Profile is loaded

≪ Previous: Server 2012 RDS - User Profile Disks - Errors during Logoff

$

0

0

Is Windows 10 compatible with SBS 2008? I'd like to upgrade a couple machines on my network, but want to be sure they will work with SBS 2008.

RDS- Temporary Profile is loaded

August 2, 2016, 3:07 am

≫ Next: Windows Remote Desktop Protocol Weak Encryption Method Allowed - Vulnerability Scan

≪ Previous: Windows 10 and SBS 2008

$

0

0

Hi,

We've recently installed two new RDS hosts with a RDS Broker. But we're finding that some of our users are being logged on with temporary profiles.

We get two events logged each time:

Event 1515

Windows has backed up this user profile. Windows will automatically try to use the backup profile the next time this user logs on.

Event 1511

Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off.

So far we've just been deleting the registry key which ends in .BAK at

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

But this is only a temporary fix, it happens again a few days later.  I wonder if it's caused by users not logging off correctly.

All the RDS severs are running 2008R2.

Thanks,

Dave

Windows Remote Desktop Protocol Weak Encryption Method Allowed - Vulnerability Scan

August 4, 2015, 2:49 pm

≫ Next: RDS shared printer best practice

≪ Previous: RDS- Temporary Profile is loaded

$

0

0

Hello,

We ran a vulnerability scan on one of our server recently from a third party. It showed up few vulnerabilities, I am able to fix most of them but I got stopped at vulnerability -- Windows Remote Desktop Protocol Weak Encryption Method Allowed

Ours is Windows server 2012 R2, I have found fixes for Windows Server 2008 but not for Server 2012 R2.

Solution Provided by our vendor is : RDP needs to be configured to use strong encryption methods or use SSL as the privacy and integrity provider. To configure RDP encryption methods 'Terminal Services Configuration' snap-in can be launched in mmc.exe. In 'Terminal Services Configuration' properties dialog box General tab for the Encryption Level 'High' should be selected.

Anybody has any idea how to fix this in Windows Server 2012 R2.

---

Mallikarjuna YH, Windows / Exchange

RDS shared printer best practice

August 2, 2016, 9:54 am

≫ Next: Roaming profile are not synchronised when logging off - event 1509 - NTUSER.POL - "DETAIL - Cannot create a file when that file already exists"

≪ Previous: Windows Remote Desktop Protocol Weak Encryption Method Allowed - Vulnerability Scan

$

0

0

Hi all,

We are experiencing printer spooler crashes, printers randomly disappearing and not working.

We have a 2012 R2 TS for approximately 30 users on an internal domain network.

Printers are deployed via print management which pushes out shared printers that are installed on our DC.

Is this the correct way to install printers on the terminal server or is there a better way?

Roaming profile are not synchronised when logging off - event 1509 - NTUSER.POL - "DETAIL - Cannot create a file when that file already exists"

July 27, 2016, 8:08 am

≫ Next: Server 2008 R2 Remote App Web Access suddenly apps are gone

≪ Previous: RDS shared printer best practice

$

0

0

Ich have the problem since 2 Month.

I suppose that is wasa caused by a recent Windows update. But i don't know witch one.

What i tried until now:

- Last MS Patch. Server got the lattest patch.
- move Profil on other server share.
- Try to log on virtual server (because we use physical terminal server).
- "All users" - all ntfs and share Rights.
- Install Last Antivirus version.
- Stop Antivirus .
- Do not erase local profil (GPO) when logoff.
- New profil (only working one time after the first logoff).

I don't know what i still can try...

Server 2008 R2 Remote App Web Access suddenly apps are gone

March 16, 2010, 9:27 pm

≫ Next: Server 2012 RDS: The publisher of this RemoteApp program can't be identified.

≪ Previous: Roaming profile are not synchronised when logging off - event 1509 - NTUSER.POL - "DETAIL - Cannot create a file when that file already exists"

$

0

0

I was using Remote apps just fine through RD Web Access and suddenly when i log on to the RD Web Access site there are no longer any apps listed.
When i go into the Remote apps management, all the apps are still there and available for Web Access.
If i use a remote app rdp file, it still works as well. So basically everything is still working except the population of the remote app we part.

this is a standalone TS server, gateway, session host, remote app server all in one install

When i go in the configuration site, i make sure its the correct fqdn or shortname tried both of this standalone server and it gives me the error, place the server in TS Computers.

The server is in that group and i made sure all the correct Com+ and wmi permissons are set as per the technet article...still gives me event id 8 and still apps arent showing.

im out of ideas

---

Benjamin Niaulin

Server 2012 RDS: The publisher of this RemoteApp program can't be identified.

December 13, 2012, 1:13 am

≫ Next: RDP to W12r2 results in black screen and then disconnect - Windows Internal Database?

≪ Previous: Server 2008 R2 Remote App Web Access suddenly apps are gone

$

0

0

Can't find any info about this that relates to Server 2012.

I have three Server 2012 VMs: Connection Broker, Web Access and Session Host. Client PC is Windows 7. All joined to same Active Directory.

I've used my Enterprise CA to generate a certificate for the web server and installed that and have configured the PC to get its RemoteApp programs from the web server - they're showing on the Start Menu.

When I click on a RemoteApp on the Start Menu I get a warning box appear:

RemoteApp
The publisher of this RemoteApp program can't be identified. Do you want to connect to run the program anyway?
This remoteApp program could harm your local or remote computer. Do not connect to run this program unless you know where this program came from or have used it before.
Publisher: Unknown publisher
Type: RemoteApp program
Path: calc
Name: Calculator
Remote computer: rdsconnection-broker.fully.qualified.name
[ ] Don't ask me again for connections to this computer

I don't know how to get rid of this. None of the options mentioned for resolving this for Server 2008 work as the things they talk about changing/configuring don't exist on Server 2012. As you can see, I'm publishing a very basic built in application at the moment.

It seems as though the connection broker server needs configuring with a certificate or something, but I can't see anything in the RDS section of the Server Manager GUI to do this.

NLA works fine from the Windows 7 PC to all three servers via a normal remote desktop connection, but clearly RemoteApp is not happy. I don't even know if this is an NLA issue or something else.

Please help/advise.

---

RDP to W12r2 results in black screen and then disconnect - Windows Internal Database?

August 1, 2016, 11:30 am

≫ Next: Windows 2012 R2 cant add remote desktop services role

≪ Previous: Server 2012 RDS: The publisher of this RemoteApp program can't be identified.

$

0

0

Trying to make a Remote Desktop Connection from a W7 pc to a W12r2 Server on the LAN and same domain. Using the administrator credentials for the W12r2 Server , connection is made but I get a black screen for about 5 seconds and then the connection goes away.

I see in the Event Viewer on the W12r2 Server an error message Event ID 4005 , Login process has unexpectedly terminated. I also see an error from Service Control Manager but it is quite confusing:

The Remote Desktop Connection Broker Service depends on the Windows Internal Database service which failed to start because of the following error:  The Operation completed successfully.

Umm, what?  Any help greatly appreciated.

Windows 2012 R2 cant add remote desktop services role

July 21, 2016, 2:57 am

≫ Next: Remote Desktop not working after switching router (but maintaing PC's IP Address)

≪ Previous: RDP to W12r2 results in black screen and then disconnect - Windows Internal Database?

$

0

0

Hi,

I try to add remote desktop service role on newly installed W2012R2

and get error: Unable to install RD Connection Broker role service on server

My AD servers and AD level was upgraded from 2008 R2 to 2012 R2. In forums I found that I have to add server to Windows Authorization Access Group, but it didn't helps.

Remote Desktop not working after switching router (but maintaing PC's IP Address)

August 2, 2016, 2:52 pm

≫ Next: Cannot connect to Remote apps over VPN from windows 8.1 or higher

≪ Previous: Windows 2012 R2 cant add remote desktop services role

$

0

0

We recently upgraded one of our customer's network (WAN) to Fiber and installed new routers in several sites. The customer is migrating from an iVPN scenario where multiple sites establish IPSec tunnels to a central router (in the company's HQ) to a scenario where the Central router is nor required for all sites to communicate with each other. All IP addressing was maintained. What the client is noticing is that in some sites the computers cannot initiate the remote desktop session when using the new fiber line and router (the login process happens, it tries to connect then returns an error) yet we can Telnet to the remote TS server over port 3389 without any problems...  when we switch back to the old ADSL line and router (computer maintains the IP Address) the computer can establish the Remote Desktop session without any problems.

Our Client's IT support is struggling with this problem and hasn't found a solution yet. It doesn't seem to be a connectivity issue as there are 3 sites that are working perfectly with the new fiber line and router. Could it be a licensing problem? Cloud there be some kind of binding that isn't released when the computer switches to the new fiber line and router (yet maintaining the same IP address)? I've read about NAP in TS Server, could it be something along those lines? The IT tech mentioned an Error 21 in the Server's Event Log...

The Licencing type is "Device", and according to the IT Tech there are licenses available.

Any ideas as to what might be behind this strange behaviour? I apologize if there are some important details or information that might be missing, but this isn't a product that I'm totally familiar with :-( I'm trying to help are customer in getting things up and running.

I thank you in advance for your attention into this matter.

José Carlos

Cannot connect to Remote apps over VPN from windows 8.1 or higher

August 1, 2016, 8:42 am

≫ Next: Certificate and Remote Desktop Deployment.

≪ Previous: Remote Desktop not working after switching router (but maintaing PC's IP Address)

$

0

0

I am having trouble with any clients who have their RDP upgrade above version 7.1 connect to our remote apps.  

I can see event on the event viewer from the connection broker that the client has been allowed to connect to one of the host but the connection cannot be established.  

Anyone running RDP v 7.1 can connect without a problem.

This seems to only effect anyone who is not within our office. 

They would be on a different subnet

Ex:

Office               10.0.40.*

Remote Office  10.0.129.*

We do not have this issue with regular remote desktop connection only connections to our remote apps.

The servers running the Hosts and the connection broker are all server 2012 r2

Client computers range from windows 7 to windows 10

Certificate and Remote Desktop Deployment.

July 31, 2016, 5:05 am

≫ Next: Rename RDWeb or Session Collection Folder

≪ Previous: Cannot connect to Remote apps over VPN from windows 8.1 or higher

$

0

0

I am setting up a Windows 2012 RDS "Farm" to present the published app from multiple RDS hosts for a group of users. 

Question, do I need to configure certificates  on "RD Connection Broker - Enable SSO" and "RD Connection Broker - Publishing" for my deployment?  If yes, may someone suggest a good article of explaining why and the step by step of setting that up?  

Do I just go to any web server and create some sort of wild card cert, put it to a network share and configure "RD Connection Broker - Enable SSO" and "RD Connection Broker - Publishing"?

Please advise.  

Rename RDWeb or Session Collection Folder

December 14, 2014, 5:15 pm

≫ Next: 2012 R2 RDS Temporary Profile issue

≪ Previous: Certificate and Remote Desktop Deployment.

$

0

0

Good Day Everyone,

There has got to be an easier way to rename a folder in your session collection rather than unpublishing all the applications and removing the folder and re-publishing the applications to the newly named folder.

Anyone know how to change a published folder name in a session collection for rdweb?

2012 R2 RDS Temporary Profile issue

December 30, 2013, 12:40 pm

≫ Next: Windows 2012 RDS Collection published app configuration

≪ Previous: Rename RDWeb or Session Collection Folder

$

0

0

I have set up a standard 3 node 2012 R2 RDS for testing. All virtualized on VMware ESXi 5.0. I have a connection Broker, session host, and web access server. I have published several applications and I can access them without a problem. Here is my issue:

When I try to log on to my session host server either locally or thru RDP, I am always logged in with a Temporary profile. It does not mater what user account I use. Even logging on locally as the administrator I get a temporary profile.

All windows updates are installed and current.

I have removed the server from the domain, deleted the account, and rejoined it to the domain.

I have deleted all .bak registry entries from here:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

There is a hotfix here for a similar issue on 2012 but it does not apply to 2012 R2

The only event viewer errors are:

1515 (Windows has backed up this user profile. Windows will automatically try to use the backup profile the next time this user logs on.)

1511 (Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off.)

Any suggestions to resolve would be greatly appreciated.

---

Russ

---

Windows 2012 RDS Collection published app configuration

August 3, 2016, 8:46 am

≫ Next: Administrator not able to access redirection-created subfolders

≪ Previous: 2012 R2 RDS Temporary Profile issue

$

0

0

We have a Windows 2012 RDS collection - 1 connection broker, 2 session hosts.

I have published an application and able to access it from RD WEB without a problem. 

There are two issues:

1. When I click on the app from the RE WEB page, I see a RDP file being downloaded and I need to open it to access the app.  How do I make it so that user can just click on the app and open?

2. After the app is opened, I check the drives that the app can access by clicking FILE>OPEN.  I see the C drive of the web server is available to the users.  How do I hide it?

Thanks,

Administrator not able to access redirection-created subfolders

August 3, 2016, 9:11 am

≫ Next: Exchange 2013 authentication issues for users of RDS server

≪ Previous: Windows 2012 RDS Collection published app configuration

$

0

0

We have a Windows 2012 RDS collection with 1 connection broker, 2 hosts, 1 file server that holds the roaming profiles. 

We have a group policy that redirect users' DESKTOP, DOCUMENTS, FAVORITES, DOWNLOADS to a network share (\\fileserver\userdata). 

The redirections work.  I see the \\fileserver\usersdata contains the user profiles and within each profiles, the DESKTOP, DOCUMENTS, FAV, DOWNLOADS folders are created.  

The issue comes when I login as an administrator to the file server, when I try to access for example the DESKTOP folder within a user folder, I am getting access is denied.  After checking, I have realize only SYSTEM and the users themself have access. 

I as an admin can probably take ownership of all the user profiles but I am wondering if this a normal file access security behavior for the subfolders being created by redirection?  

Please advise if there is a configuration I have missed.  

Thanks,

Exchange 2013 authentication issues for users of RDS server

July 21, 2016, 8:28 am

≫ Next: Remote outlook theme

≪ Previous: Administrator not able to access redirection-created subfolders

$

0

0

We have a customer that uses thin clients and multiple RDS servers for the majority of their users. They use a software application that contains a feature which will open a new email message window from within Outlook to simplify the process of sending an email when needed in their workflow.  When the customer was running Exchange 2010, this feature worked correctly, but after upgrading to Exchange 2013, the new email message window does not open in Outlook when prompted from the other application. Instead, the user is prompted by Outlook to enter their credentials.  Whether the user cancels the prompt or enters their credentials correctly, authentication fails and they are immediately prompted for credentials again, over and over.

We have ruled out anything specific with the third-party application.  We know it works fine with other customers on Exchange 2013 (and other customers using RDS servers) and for the users at our customer site that have full PCs that are not using the RDS servers. Only the RDS users at this customer site face this issue.  We also known the same issue occurs if the RDS users click any "MAILTO" hyperlinks or shortcuts, thus eliminating the third-party application from the equation.

The customer is running 4 RDS servers (WS 2008 R2) and a separate Exchange 2013 mail server within their network.  The users have Personal Desktop VDIs running Windows 7 with Outlook 2010 in "online" mode (it is worth mentioning that the same credential prompt behavior occurs in "cached" mode as well, but the email message windowwill open after credentials are successfully entered). When running a network trace, we see that there are a number of HTTP 401 errors with authentication going to the Exchange server (this occurs if authentication is set to "Basic", "NTLM" or "negotiate").  Again, this was not an issue while on Exchange 2010 and non-RDS users do not have this issue while now on Exchange 2013.

Perhaps the issue is with the user profiles in the RDS environment (registry values for Exchange/Outlook need to be updated somehow)?  Perhaps the RDS sessions cannot communicate properly with Exchange since 2013 switched to using RPC over HTTPS?  Perhaps the RDS user logins are not set properly for the correct mail profile to be identified/assigned/authorized? We are trying to advise the customer where the issue lies, and could use some advice.

Remote outlook theme

August 3, 2016, 3:28 pm

≫ Next: Can't connect to my remote apps

≪ Previous: Exchange 2013 authentication issues for users of RDS server

$

0

0

Hi Guys

I am using windows server 2008 R2 for terminal service and also its configured remote apps ,sometimes when i access remote outlook its display theme is changing to the basic one but i do have enough network bandwidth and server resources . Could some one suggest me any solution for this 

Thanks

Renjeesh

Can't connect to my remote apps

August 3, 2016, 12:12 pm

≫ Next: Access 2010 (32-bit) run with slow performance on WS2012 R2 RDSH

≪ Previous: Remote outlook theme

$

0

0

I have a RDS environment setup on Azure with an AD server and a RDS host. I have published a session based collection with several apps. I have installed a real SSL cert. I can connect fine to RDWeb and run the applications but when I try to setup any system to use the webfeed, I just get errors. What am I missing?