Hello together,

Recently we start experiencing a strange problem with one of our Terminal servers. Shortly i will describe you, what exactly happen and how exactly the problem occur.

1. Our server is Terminal server Windows 2012 R2.
2. From location (not constant one) user bring up a VPN tunnels over SSL through NetExtender SonicWall app.
3. After short period of time, without any reason VPN terminate the session and the RDP session goes down likewise.
4. Immediately, the user restore the VPN session without any problems, but here the problems starts.
5. After login issues.
5.1 If the user use normal mstsc (RDP), logon screen appear, with domain\username field, etc,. but the password field is inactive, username field, language change button, everything else on the screen is also inactive.
5.2 If the user change his session to use Microsoft Remote Desktop Connection Manager instead of normal RDP (mstsc), the session start, normal desktop and all icons on it appear, but again without any options they to be selected, or chosen or do anything instead watching the frozen screen.
5.3 If the user use, another user (username) which was not previously used (there is no active session in disconnected or other state for the new user), RDP start but everything goes black (black frozen screen).
The only one option, someone to be able to use the server, is to open VMWARE, and from there to start the console. The only think what solved the issue, when it is occur, is to restart the server.

All investigation shows that error as EVENT ID (Event ID 9009 - The Desktop Window Manager has exited with code (0xd00002fe)).

Please for your help. Thanks in advance.

Best Regards.
With Respects:

Trying to enable user profile disks to "\\localhost\d$\UserProfileDisk" returns the below error:

RDSH Collection Property User Profile Disk update on collection %collection name% failed on server Could not create the template VHD. Error Message: Error while getting the related objects for "Win32_LogicalShareSecuritySetting" from "\\%hostname%\root\cimv2:Win32_Share.Name="D$""

Trying to enable user profile disks to "\\localhost\UserProfileDisk" or "\\%hostname%\UserProfileDisk" or \\%FQDN%\UserProfileDisk" returns the below error, same if try to set UPD disk to use another server:

RDSH Collection Property User Profile Disk update on collection Oldfield RemoteApps failed on server Could not create the template VHD. Error Message: -2147024809.

Hello together.

We are running Windows 2012R2 RDS server. Server is cloud based and perform AD Domain Controller role. For past few days we received a lot of messages at EventViewer (.... RemoteDesktopService-RdpCoreTS section). By everything seems, that this are unauthorized attempts someone to access the server.

Log Name:      Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational
Source:        Microsoft-Windows-RemoteDesktopServices-RdpCoreTS
Event ID:      140
Task Category: RemoteFX module
Level:         Warnning
Keywords:      
User:          NETWORK SERVICE
Computer:      XXXSERVERXXX
Description:
A connection from the client computer with an IP address of xxx.xxx.xxx.xxx failed because the user name or password is not correct.

There is several IP addresses (5-6), for which we received this message in Event Viewer.

What we can do, to prevent this to continue to happen? We are with limited options as this is cloud based server in External Data Center, with allconsequentialbenefits and drawbacks.

Best Regards.
With Respects:

Hi,

I am trying to access my work's Windows server 2008 TS Web Access Remote App program but am receiving the following error message:

Has anyone used DDA to assign a GPU (nvidia M60 or M10) to a RDSH server? How well does it scale? How does that solution compare with RFX?

Hi everyone,

I hope there is an answer to this one.  I have a 2016 RDSH setup - Broker, Web Access, RDSH.  Everything works fine.  I want to assign a vGPU to the RDSH server for video performance.  We have a lot of streaming here, and need to accommodate the use case.  This also works fine.  However, it will then only allow a single connection, just like a desktop OS.  You get the pop up window saying someone else is trying to connect, click OK or Cancel.  If this by design, I don't understand the point of giving vGPU support to RDSH, so hopefully there is just a GPO setting or something I need to enable.  Removing the vGPU allows multiple connections.

Thanks for the help,

Kevin

[edit]
Oops...wait...the URL ISN'T right. "/aspx" should be ".aspx". You know how you look at something 1000 times and it looks right, and then on the 1001st time after posting to Technet, you see it?

After changing it, it worked perfectly.

Never mind!

We have Office 2007 modi installed on our servers along with office 2010.

We have on ocassion users connecting and they have a shortcut for office 2007 outlook for example on their own desktop.

The problem we have is they are clicking this link on their own profile on th term server this is forcing then an install of 2007 then this breaks 2010 installed  for all other users. We then have to log all users off and run a repair for 2010.

How can we stop this happening

Remove the registry entry for the install path - for the source for the 2007 package -

gpo to stop users installing?

Any ideas please?

thanks

John

JA

Hello...

I have virtualized terminal server on HyperV. All my remote clients use USB SC reader for certificate use.

Now pay attention... the Server 2012 has new feature regarding Smart Card use:

"Smart card reader detection logic has been added so that the Smart Card Service runs only when appropriate. On Windows Server 2012 and Windows 8, the Smart Card Service (scardsvr) automatically starts when the user connects a smart card reader and automatically stops when a user removes a smart card reader and no other smart card reader is connected to the computer. On startup, the Smart Card Service automatically starts if a reader was previously connected to the computer but a reader is not currently connected to the system. If no smart card readers are connected to the computer, the service will automatically shut down one minute after the last API call into the Smart Card Service. If a reader was never previously connected to the computer, the service will not start automatically."

And here is the main part... HyperV running OS doesn't support USB SC reader detection on remote client. When I insert the card nothing happens. The SmartCard service doesn't start (Automatic setting). RDP SmartCart share is enable on client.

If I start service manualy then the SmartCard is accessible. But only for the time of my login. if I logout then the service is stopped.
I also test it with logon to non HyperV server... the service starts with no problem.

For now I solved the issue with task net start SCardSvr on 1 minute.

Please can anybody help me with this...

I've been googling around and can't find an answer to this. Hopefully someone else has tried to do this. 

I have a RDS Farm that has published apps balanced between two load balanced servers. The primary application will only run one instance under a single logon. I have several users the require a couple open sessions of the application. I used to handle this on my old stand alone 2008 R2 TS of allowing simultaneous sessions and they would RDP into the desktop 2 or 3 times.

On the new setup I've allowed multiple sessions in Group Policy and the registry of session hosts and the broker server. It will allow 2 sessions to open inconsistently and you have to initiate the 2nd before the 1st is connected. 

Has anyone been able to configure this to open multiple sessions under the same user account through remoteapp? 

     I have a server 2012 R2 set up with RDS.  With most of my Win 10 clients, I can remote into the server via RDP/RDC or RDWeb.  However, I have one Win 10 machine that logs in with RDWeb, shows the app icons, but when I try to run one of the apps by clicking the icon, I get an error message that the Remote Desktop Gateway server is temporarily unavailable.  It is not since other Win 10 machines can connect to it.  In fact there are a number of Win 7 machines that can also connect to apps successfully.

     The Gatway server is the same as the RDS host.  I do have the FQDN set in the gateway setup.  I have looked at dozens of posts and articles but so far cant seem to find a solution.  I thought it might be a bad RDP version so I updated the problem Win 10 machine.  Still, I get this message.  Any thoughts?

Thanks,

Jeff King

Hi,

We introduced a 4th terminal server into our environment recently, however redirected printers are not working, they dont even show up, even the usual "fax" one doesnt show up. They have the exact same policy as the other 3 terminal servers, the exact same printer drivers installed. The server is in the same groups and has the same permissions as the other 3 in AD. I simply cannot find out what the problem is.

I have since tried removing it from the domain and uninstalling RDS to see if I can get it running that way, but without any luck.

I created a new local 2012 server and did the same steps which resulted in the printers showing up as expected. I just cant figure out why this one we have created "in the cloud" will not show up any printers. 

Is there something I can do to reinstall the printer subsystem or can anyone suggest anything else I can do to reset any settings?

My only other choice is to ask our provider to scrap the server and create a fresh one, which i dont want to do because it took ages to install all the software for the RDS environment.

Thanks

Current setup:
1x Server 2012 R2 RDS (with activated UserProfileDisks )
1x MSI Office Professional 2016 Plus

Issue:
Can't open MS attachments in Outlook.
Word documents give me the error message saying: "Can't preview this file because it's password protected"


Excel documents give me the error message saying: "Can't preview this file because it's damaged"

Workaround:
f you have "Store all user settings and data on the user profile disk" activated then the preview pane in outlook 2013/2016 doesn't work.

If we change to the later one " Store only the following folders on the user profile disk" then the issue goes away.
But this "workaround" creates other issues, as AppData isn't saved with this setup

We can't be the only ones having this issue.
I've even tried to reinstall the Server 2012R2 with RDS without any success.

Hi,

I have remote app published using WS2012R2, Copy to clipboard (print shares and standard redirection functionality) works for Domain Joined Computers (from app to their PC), for non-domain computers it does not work (within subnet or external). You can copy from remote app to remote app but not to your PC. If you log in to RDS you can copy from RDS to your pc but not from RemoteApp. What do you think might be the issue? Cant figure out, all i know it should work by default...

Please advise.

Thanks,

Hello

We recently did a migration of our RDS Server to a brand new Windows 2012 R2 server.

All was working fine but we started to have this messages in the RemoteConnectionManager event log:

Log Name:      Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin
Source:        Microsoft-Windows-TerminalServices-RemoteConnectionManager
Date:          9/14/2016 8:42:53 AM
Event ID:      20499
Task Category: None
Level:         Warning
Keywords:     
User:          NETWORK SERVICE
Computer:      XXXXX.com
Description:
Remote Desktop Services has taken too long to load the user configuration from server\\xxxxx for user xxxx
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-TerminalServices-RemoteConnectionManager" Guid="{C76BAA63-AE81-421C-B425-340B4B24157F}" />
    <EventID>20499</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2016-09-14T15:42:53.300353800Z" />
    <EventRecordID>388</EventRecordID>
    <Correlation />
    <Execution ProcessID="28452" ThreadID="50892" />
    <Channel>Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin</Channel>
    <Computer>XXXX.com</Computer>
    <Security UserID="S-1-5-20" />
  </System>
  <UserData>
    <EventXML xmlns="Event_NS">
      <ServerName>\\XXXXX</ServerName>
      <UserName>agranados</UserName>
    </EventXML>
  </UserData>
</Event>

Everytime this error message is logged the user gets disconnected from their RDS session.

So far we tried the following:

- Validate AD health (sites,subnet,replication, sysvol)

- We changed the DisableTaskOffload option as suggested in other posts

- We verified the group policy settings applied

Unfortunately we still haven't found what the root cause of this issue is.

Any suggestion of similar previous experience is welcome.

Thanks in advance!

Cristian

Regards. Cristian V.

Hello everyone!

Today, a customer asked me to fix a problem that they consider a high security risk, and I cannot seem to find a solution for them.

They have a Windows 2012 (first release) RDS farm (but have already confirmed same problem exists with Windows 2012 R2 RDS farm). Security is important to them, so they have disallowed saving passwords for their RDS sessions. When a user connects, he is asked for credentials. If they reconnect to a disconnected session, they also have to give their credentials. So far, so good.

However, recently users have discovered (you would think they have better things to do…), that you can reconnect to a connected session without credentials if reconnecting from the same client. The first RDP window will disconnect from the session as the second window connects.

So now consider this scenario:

•  A user has logged in to RDS (using his credentials)
•  The user goes to lunch and locks his screen with Ctrl - Alt – End. He does this because IT department has repeatedly asked him to do this. His session is locked but not disconnected.
•  As soon as he is gone, his colleague walks over to his desk, and minimizes his locked session using the connection bar or Ctrl - Alt - Break. The session is minimized, but not disconnected.
•  The user uses the same RDP file again to connect to RDS a second time. He is not asked for credentials.
• The first RDP window disconnects as a second RDP window comes up.
• The user finds the RDS sessionunlocked In the second RDP window, so he can use this method to unlock someone else's RDS session without credentials.
  

 I have confirmed this problem exists with both type of clients they have: Windows 7 PC’s and Windows 10 PC’s.

 The IT department has identified this as a major security problem in their company. I cannot find a way to force the Windows clients to ask for credentials in this situation. Also, I cannot find a way to prevent people from minimizing an RDS session. Ctrl - Alt - Break always works.

 Do you have any suggestions?

Anyone managing RDS without Citrix, RES or Appsense? 

How do you manage file type associations? When using roaming profiles or UPD? (Userchoice hash values)

(Windows Server 2012/2016)

Thanks in advance

Michael

We have a client that is using server2012r2 in a domain environment. The server is connected to the domain but is not a domain controller. The server has about 16 GB of memory and 8 Cores. It is running on vmware vcloud director. Sometimes when they try to rdp to server they get a black screen or a black screen with a green box. Restarting the server usually fixes this. Is this related to server resources. In the even viewer I can see 10/06/2016 1:56 pm Unable to update the IP address on Isatap interface
isatap.{120C3BA1-D58E-450A-B481-B48FF650B509}. Update Type: 1. Error Code:
0x490. event id 4202

10/06/2016 01:56 PM The SNMP Service encountered an error while accessing the
registry key
SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration. event id
1500

10/16/2016 05:55 pm The WinRM service is not listening for WS-Management
requests. 

User Action 
 If you did not intentionally stop the service, use the following command to see
the WinRM configuration: 

winrm enumerate winrm/config/listener    event id 10149

10/16/2016 01:35 pm A fatal alert was generated and sent to the remote endpoint.
This may result in termination of the connection. The TLS protocol defined fatal
error code is 10. The Windows SChannel error state is 1203. event id 36888

I can possibly do control+alt+end but thats just a temporary solution. I would like to fix this so it never happens again. Where do I start looking?

Hi

I have such RDS farm configuration

• sev1 - RD Session Host
• sev2 - RD Connection Broker, RD License server
• sev3 - RD WEB Access server

I want to move all roles from sev2 and sev3 to sev1

To move WEB Access role I want to add Web Access role to sev1 and then remove sev3 from RDS farm (I have tested this and its worked)

For License server there is migration wizard so it should not be problem.

But how to move RD Connection Broker to serv1 server and remove old? I can not find any solution to do this ?

Any tips would be very helpfully ?

Thanks in advance