Quantcast
Channel: Remote Desktop Services (Terminal Services) forum
Viewing all 25525 articles
Browse latest View live

RDS access right / authorization anomaly

$
0
0

We came across this RDS access right / authorization anomaly two days ago.

A user in the AD wanted to open an RDS session in a server (let's call it serverA) which is Windows Server 2012 R2.  He got the following message:
"The connection was denied because the user account is not authorized for remote login."

This is normal because his AD account was not a member of "Remote Desktop Users" group in serverA.

I then added his AD account into the group. *Four hours later*, when he tried to open an RDS session again, he still got the same error message!

I have gone through everything, every group, etc but I could not find the reason.  Then I took another computer, told him to log in and then told him to open an RDS session from there to the same serverA.  This time it worked!  And almost immediately when he tried to open the RDS session again from his own computer, that worked too!

What the hack is this anomaly?  Was there a workaround without having to have another computer to open RDS session first?

I think if he had closed and re-opened Windows session in his own computer, that would have worked too.  But of course, he had too many programs running at that time that it was impossible for him to logout & login again.

And I also think this issue is similar to "network shared folder still rejects access" issue:

simply put, it's like this: a user was rejected when he tried to access some network folder without authorization.  Then the access was later on granted by domain admin but all his attempts to access the same folder are rejected.  He has to reopen his Windows session to get around this.

Are these two issues all related to problem in Kerberos?


Error during driver installation - Server 2016 RDS

$
0
0

Hi, I am getting this message when one of our users connect to the RDS Host server:

Error during driver installation. Result = 0x80070422 for devnode"TERMINPUT_BUS\UMB\2&2C22BCC9&0&SESSION137MOUSE0"

Event ID 121:

System
-Provider
[ Name]Microsoft-Windows-DeviceSetupManager
[ Guid]{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2}
EventID121
Version0
Level2
Task0
Opcode0
Keywords0x4000000000000000
-TimeCreated
[ SystemTime]2018-08-02T07:16:07.167352000Z
EventRecordID42618
Correlation
-Execution
[ ProcessID]1284
[ ThreadID]13992
ChannelMicrosoft-Windows-DeviceSetupManager/Admin
ComputerRDSH1.system.net
-Security
[ UserID]S-1-5-18
-EventData
Prop_DevnodeIdTERMINPUT_BUS\UMB\2&2C22BCC9&0&SESSION137MOUSE0
HRESULT2147943458

The user is using Windows 10 as the client computer with the latest RDP client.  I can't find any reference to this error.

Any ideas?


Sizing guidance for RDCB, RDWeb and RDGateway

$
0
0

Hi all,

             putting together a HA RDS farm design - and im having trouble finding guidance on sizing for RD Connection brokers, RD Web and RD Gateway servers.

I get the for the session hosts, it is very dependant on what is running within the sessions and hence, the lack of hardware sizing guidance.

For the other roles it would be nice to have some sort of general advice - i.e. 1 connection broker per 1000 users, 1 RDGateway per 200 users etc....

Does anyone know if sizing guidance such as this exists? (and I just haven't been able to find it)

save any file on local computer

$
0
0

Hi

i like when user use rds service and will export any file from program remote only can save on local computer they remote to server.in save as show the local computer folder 

RDS 2016 HA and SQL

$
0
0

Looking to add HA to an existing RDS 2016 environment for about 50 users. Obviously, for RDS HA, the SQL database becomes a point of failure.

My question has to do with setting up SQL as a cluster as simply as possible, as this is a fairly small RDS environment.  Creating a SQL cluster requires shared storage, so I would like to use SQL 2016 Standard and the SMB shared storage option (avoiding SANs, iSCSI volumes, or even Windows Shared Storage Spaces).  To keep the network as simple as possible, I'd like to have the cluster nodes for SQL also be the SMB file share for the data.

I haven't specifically read that you cannot have a 2 node windows cluster with SQL Standard and an SMB file share installed simultaneously, and the SQL use that SMB share for the databases.  However, I would like confirmation on such a configuration before I spend time on it.

It just seems nutty and a resource overkill, not to mention only adds to the network complexity, to need to create yet another 2 node cluster just for the SMB file share for SQL to use.

Please advise, and thank you in advance.




NPS server and the names of non-domain computers.

$
0
0

Hi!

Quite a strange question ...

It is necessary on RD Gateway to check the computer name for correspondence in advance known.(Or any other marker, the easiest to install on third-party PCs and tablets)

If there are no problems with domain machines (On the NPS simply specify the rule in the CAP with the domain group of the PC), then with non-domain machines the problem.

Ships on logs, they send the following information about themselves:

Client Machine:
	Security ID:			NULL SID
	Account Name:			Notebook
	Fully Qualified Account Name:	-
	Called Station Identifier:		UserAuthType:PW
	Calling Station Identifier:		-

As an example of logs with the connection of a domain machine:

Client Machine:
	Security ID:			Domain\pc1$
	Account Name:		pc1.Domain
	Fully Qualified Account Name:	Domain\pc1$
	Called Station Identifier:		UserAuthType:PW
	Calling Station Identifier:	
Actually check on Account name somehow it is possible?

If not, what criteria can I filter out non-domain PCs without smart cards? (For example, an installed certificate, some other identifier?)



RDS azure

$
0
0
   how many AD forest and RDS deployment are recommended when deploying for multiple customers ? 

Removing Remote Desktop Services Role

$
0
0
I have redesigned my Office-based application to run on the local client, and not in an RDC Application Mode session.   The local application still needs to connect to the same server to interact with SQL server.  When I remove the Remote Desktop Services Role will I then revert to Administrative Mode for RDC connections?   Is there any risk of losing Administrative Remote Access during this change?  It's a virtual server so I can't reach it except by RDC.  Thanks.   (I saw discussion that was affirmative to this question on Server 2008R2, but I need to confirm for Server 2016).

CredSSP Encryption Orcacle Remediation Error

$
0
0

Hello,

A couple of my users want to use RDP to do their work, but recently they have been getting this error. 

This is simply trying to get onto a workstation. So in my use case the user is just trying to RDP onto a Windows 10 Enterprise Edition (they are trying to log onto their computer from home), not a Windows Server or anything like that.

https://support.microsoft.com/en-us/help/4295591/credssp-encryption-oracle-remediation-error-when-to-rdp-to-azure-vm

In my research I've found that I can get around this by going into the the group policy editor and going toComputer Configuration > Administrative Templates > System > Credentials Delegation,and then trying to change the Encryption Oracle Remediation policyto Enabled and then change the Protection level to Vulnerable. 

But when I go into the group policy editor the Encryption Oracle Remediation policyis not there. 

So I am not sure what I can do to fix this, all I want is the ability to remote into a Windows 10 machine, I have tried from multiple computers that reside on my network (and on a VPN as well) can RDP into other computers, except for my user's one workstation. Is there something I can reinstall on my user's workstation or repair to let computers RDP connect to it? 

-Thanks

RemoteAPP after windows 10 update 1803 are slow and right mouse button is not responding (it reacts only sometimes)

$
0
0

Hi,

our workstations with Windows 10 pro are in this weekend updated to version 1803. For main system we use RemoteAPP aplications on Windows server 2012R2 (Windows server 2012R2 is full updated). After update on client station are RemoteAPP slower, and  right mouse button is unresponsive, or react verly long time... 

It is a big problem for us.

PS: after replace mstsc.exe and mstscax.dll from older version Windows 10 is all OK. but this is not a solution.

Thanks.


Windows 10 - Remote Web App Display - Windows Distorted after Dragging and/or Maximizing

$
0
0

Last week, we retired our Remote Desktop 2012R2 system and launched Remote Desktop 2016 hosting Office 2016 on RDSH 2016 servers.  We have several hundred clients running a variety of systems including IOS, Windows 7, Windows 8.1 and Windows 10 Professional.

A few days after launch, some of our Windows 10 users issued complaints that maximizing, resizing and moving around Remote Web App windows causes all types of distortion including a disappearing window that cannot be maximized again and issues where only a small portion of the full window is displayed.    

A sample is shown below where portions of Excel 2016 are cut off in a remote web app session on Windows 10 Pro, version 1803.

We have combed the internet for a fix.  We've tried updating display drivers, Docking Port drivers, updating Windows 10 Pro from version 1709 to 1803.  We've tried unchecking 'use Bitmap cache' in the RD Client.  We've adjusted display resolution, all without any luck.  None of these users have a dual monitor setup.

The issue has cropped up on docked/undocked Dell Latitude laptops.

 


Error adding trusted group to a RemoteApp Program in User Assignment properties

$
0
0

I have my remoteApp running in 4 Windows Servers 2012 R2, all of them in Domain "C":

1 one of them as Gateway, Web Access and connection broken
3 The others as Session Host

The published Apps are defined by domain groups permissions.

I can add groups and users from Domain "C" without any problem, but if I try to do the same with any other group from a trusted domain "B" I am getting this error:

I have a two-way trust between Domain "C" and "B"

How can I fix it?

Best Regards.

Others screen shots:

Security Alert message after logging into windows 7 pc thru RDP

$
0
0

Hello All,

I am suddenly having this issue occur. To preface the pc's are fully updated and this problem did not occur after the last applied updates.

I am on a win 10 pro desktop I use Netgear vpn client to create a vpn tunnel to my office network.

From there I open a rdp connectio to a pc at the office once I log in a security alert message displays on the remote pc desktop. I click OK and continue working but I want to know why this is occurring on every remote pc I log into I am assuming something on my pc has changed because this behavior occurs on all the networks I connect to.

Any thoughts are greatly appreciated.



Office 365 in other account how do i put in this one

$
0
0
hi I just bought myself my first laptop but the main problem is that I have account with a new bought office 365 but the thing that I didn't know was that If I just took out this account and place it with a different one it wouldn't change a thing but it did, my office 365 was not on the laptop anymore but on the other account. how can I retake everything and bring bajck the other account before the one that I just put in that has not the office 365. email me in at Bladimirelias4@gmail.com or here for the how I can solve this issue. 

Windows Server 2012 R2 - lost RD "Installed RDS Per Device CAL" licenses.

$
0
0

Greetings.

I work in an industrial facility, where we have several devices connected via RDS to a VM running Server 2012 R2. 

This Monday (7/30/2018) a technician had to cycle power on one of the devices (a thin client) and when it rebooted it would not reconnect as normal.  This failure stopped production for nearly three shifts - which is pretty significant.

The Event Log entry said "RDP: No valid license available".  I logged on to the server and found that ALL of the licenses in the "Installed RDS Per Device CAL" group were gone - the group was empty - and that all the devices were now showing up in the "Temporary RDS Per Device CAL" group.  All the devices licensing in the temporary group were also expired.

After working with MS clearinghouse folks, I was able to figure out how to deactivate and reactivate the license server - and install new licensing - but I am now obligated to tell my management how we can prevent this from happening again.

So, my problem statement is something like: "At some point in early April (or late March", we 'lost' the retail purchase "Installed RDS Per Device CAL" licenses - and so, all the devices switch to temporary licenses.  When those temporary licenses expired, we were vulnerable to losing connection - should power be cycled on one of the devices.  We did, eventually cycle power on one of the devices - which shut the system down.

So, I am reaching out to Microsoft to help determine why the licenses just "disappeared".

Thank you!!!!



Windows 2012 RDS Server tells that grace period for 2008 licences is expired (!?!?)

$
0
0

Hi, I've a 2012 R2 server in cloud, due to costs fees the server is a DC and have a RDS role on it. About 20 RDS licenses installed. The server is working fine since about 1 year. Simple rdp sessions not Remoteapps.

Yesterday i find a message "grace period of rds ts 2008 licenses is expired"...there aren't 2008 licenses...it is a 2012...all is working actually but this message make me a bit in alarm...

have you had that problem before? have i to check something??

thank you.

Gian

RD License Server Not Issuing Licenses

$
0
0

Hi there,

I'm using Server 2016 and have built two Remote Desktop Services Servers.  I just was using the temporary grace period license and I was able to see my users through the RD License Manager.

I then added User CAL's to the RD License Server.  I made a mistake and returned these CALs and reborrowed them again from Clearinghouse.  Now the license server shows 60 CALs available and none issued.  It seems that all the users can log in and there are no issues from that end, but I want to be able to keep track of the CALs.  

When I do an export of the report it says no CALs issued.  I tried to:

- Return the licenses
- Disable the RD License Server
- Remove the RD License Role
- Reboot
- Add Role
- Enable RD License Server
- Get license

and I run into the same issue.  I was hoping that I did not have to rebuilt the RDS role but I also don't want to run into the issue where somehow after a period of time (coinciding with the grace period) that this system stops working.

I also tried Local Group Policy to specify the RD LIcense Server and the Per User CAL setting and that still doesn't show the issued CALs changing....

Any ideas??


Licence server not working anymore after updating windows

$
0
0

Hi,

We have a server 2016 With remote Desktop services. The server is live and everybody can login.

After installing the roles for terminal server everything was great till i update the server.

We get a message that the licence server is given and we have a grace period of 118 days left.

The licence server is activated with client cals.

When we add a collection and add the hostserver we get the error:

Property page: Update RD licensing failed: due to exception The licensing settings can not be set: "Invalid operation"


Has anyone a idea how to solve this ?

Thanks in advanced,

John

2012 R2 Remote Apps & DIsabling SSL V3 TLS 1

$
0
0

Hello everyone,

I'm looking for some guidance on how to disable SSL 3 and TLS 1.0 on a 2012 R2 box acting as a RD Gateway, Connection Broker & Licensing Server.  I have disabled SSL V2 successfully via IIS Crypto. When I disable SSL V3 though my Remote Apps stop working - specifically the connection to the remote desktop host server fails. I didn't try disabling TLS 1.0 yet, as I haven't conquered SSL3. We are using a 3rd party signed SSL cert.

Any have specific experience doing this? 

unable to open attachments in outlook and other office issues on remote desktop

$
0
0

Hello,

We are currently using office 2010 on server 2012 r2 demote desktop

Any time someone tries to open an attachment from inside outlook they get a file corrupted error, but if they are in the office, using outlook and try to open the same attachment it works. This includes administrators on remote desktop

On top of this users are unable to open some files in remote desktop, either excel or word, but when in the office and using their own computer all files open correctly.

We recently moved our remote desktop to a different, more powerful/better server and everything was set up the same in terms of the remote services, but this server does have a couple of additional services running that weren't on the old one.

Any ideas, everything I have found here before has had no affect on this problem.

Thanks

Viewing all 25525 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>