I have an application published on a Windows 2012 RDS server. Running the application from within a remote desktop session works fine, but when accessing via RemoteApp (tried on XP SP3, and 7 SP1), the application window flickers when moving the mouse,
or clicking on buttons or dropdowns within the application, etc. Has anyone seen this before?
↧
RDS 2012 - RemoteApp is flickering
↧
Where in Windows 2012 R2 do I find RDS client session information?
The Server Manager\Remote Desktop Services\Collections view gives me some information, but in Windows 2008 R2 and earlier I could also see the following per client:
1) IP Address
2) Host name
3) Screen resolution and depth
4) Client name (PC name)
5) Client build number
when right clicking on a name and selecting Status in Remote Desktop Services Manager. Where do I find similar information in Windows Server 2012 R2?
↧
↧
Windows 2012 R2 RDS display DFS network drives with a red cross
Problem: The first User wich connect to the 2012 R2 Remote Desktop Server map drives to a DFS root share (with "net use"). Every other User which login thereafter to this Remote Desktop Server will see this drive and is able to work on this NTFS-Drive with Admin Rights. The issue is that mappings from the first user on the system to a DFS root share are "inherited" by all future users that log onto the same system.
We use this command:
net use [drive letter:] [\\Domain\Namespace\dfs-folder] /PERSISTENT:NO
For Example:
net use h: \\microsoft.com\South\Data /persistent:no
The very big surprise was that the future Users on these 2012R2 RDS Servers are working within the inherited drive (DFS-R share on a Windows 2008R2 Server) with admin rights!
Please help, it seems to be a very big security hole in 2012R2! (Our similar 2008R2 RDS Servers and our similar 2003R2 TS Servers don't have this Problem.
Thank you in advance for every hint!
Patrick R.
↧
RDS 2012: allow RemoteApp ONLY
Hi,
How can I allow remoteapp only for a usergroup on RDS 2012 (with broker).
If I add users to remote desktop users they also can logon to the server which I don't want them to.
J.
Jan Hoedt
↧
RDS licensing for VDA
Hi,
I need to deploy a terminal server and then 10 'windows 7' VMs to it. I dont need to use any remote apps?
I am very confused about the licensing part.
From what I understand I need to buy a license for the licensing server and 10 "Windows 7 VDA" licenses.
Do I need to buy and RDS-CAL or any other licenses as well?
Thanks.
Bhavya
↧
↧
How to change password in RDP session
In my situation all RDP clients are remote over the internet. their passwords expire every 60 days. How can the user change their password before it expires? CTRL ALT DEL will not work because it takes you to a password change on your local machine. Note
the users have no access to a desktop only a single application is forced to run through the user profile.
Lee
↧
Recommendation for RDS aware Print-to-PDF driver, simple and inexpensive
As the title suggests, I'm looking for a Printer drive that will generate a PDF from any print output that works under RDS and doesn't cost and arm and a leg. I've seen some solutions over $1200! Just need the basics, that have worked for you.
Thanks!
↧
Timezone Redirection Bug? TIME_ZONE_ID_UNKNOWN
Hello All,
I've been scouring the internet looking for the cause of this issue that has popped up since daylight savings went live 3 days ago. This server was configured this year and was not in production last year. This issue is intermittent, currently affecting ~50 of the users connecting. Whilst the environment is running Citrix XenApp 7.6, I believe that it might be underlying with the Windows Time Configuration. A user can log in and out on the same computer into the same or different farm members and see either the current time or pre-daylight savings time (-1 hour).
I've run a few commands where I think the issue may exist:
Incorrect Time:
Correct Time:
When the user has the incorrect time they can see the following:
If they remove the adjustment (They are still 1 hour behind)
When they re-check the box:
Accepting the settings and the time is correct, however this only sticks for the current session, next time they log back in they may face the same issue.
The registry shows the following:
Other background information:
- Allow TimeZone Redirection is enabled and applied in group policy applied to the accounts (verified registry flags are set), also applied and checked in Citrix Policy
- The August 2015 Daylight Savings Patch (KB3077715) is installed on the servers and clients have this patch as well (can't reapply to the server)
- The Timezone is correct
- Clicking on the clock provides the daylight savings message indicating that the server is applying daylight savings settings
- All other servers in the environment are reporting the correct time and configuration
- Administrator RDP into these servers shows the correct date and time
Looking forward to finding out if others have faced similar issues.
Regards,
Michael
↧
Hyper V VDI
I have somewhat of a problem with my published apps. My environment is two servers, Server one RD Connection Broker, RD Virtualization Host, RD Gateway, RD License, and RD Web Access. Server 2 is RD Session Host. I can access my Virtual machines
with no problems but when I try to access my published apps on Server 2 the RD Session Host I get errors. 802, 1296, and 1306. I have looked up all these errors but don't believe any of them are the reasons mentioned in the help files. When
I launch the Workspace app, I see all the published apps and the VDI but only the VDI works the other published apps have an error (This Computer cant connect to the remote computer. Remote app disconnect. I checked permissions and I applied domain
users to the access group of the published apps. All servers are server 2012 r2 VDI is win10.
Nino Renzi IT Analyst
↧
↧
User Cals not showing up as being used
I have setup a new 2012 R2 RDS server and inserted a 10 user CAL.
We have 4 Non-admin users that log in daily. When I look in the RD licensing Manager I am not seeing any Cals as being used up. These users are not administrators. In other words I am seeing 10 total, 10 available and 0 issued.
When I look at Windows Server 2012 - Installed RDS Per User Cal the right hand side is empty.
Why are User Cals not being issued?
Please consult
Thanks in advance
Van R. Johnson
↧
The connection was denied because the user account is not authorized for remote login
Hi,
I have an RDS 2012 R2 farm that has all the roles on 1 server (gateway, web access, connection broker, licensing) and 3 x session host servers. I have a .local domain so I've used a public cert and followed the work around found herehttp://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80 that changes the client access name on the connection broker to one that matches the public FQDN found on the cert.
If I connect through a web browser then I have no problems so I know the fundamental properties around permissions to RDP into the farm are correct.
However, if I try to connect using a standard RDP client I get the error "The connection was denied because the user account is not authorized for remote login". I think the problem is around the fact that it is trying to connect to the broker server itself rather than the farm. If I put my test user in the Remote Desktop Users group on the connection broker then it connects but to the connection broker itself rather than one of the session hosts.
I've used chrome to download the RDP file that works that I get through the web GUI to have a look at the settings and I've mimicked all the settings (including the "Connect from anywhere" settings relating to the RD Gateway" yet I still get the problem. If I use the actual RDP file (downloaded via chrome) then it works no problem.
I know I can just publish the RDP file to my users and problem solved but I have a load of thin clients that are unmanaged (and not on domain) so I want avoid a visit to each one if possible.
Does anyone know why it is trying to connect to the server with all the roles directly rather than being passed on to a session host?
If anyone can help I'd be most grateful.
Cheers,
Tristan
↧
Desktop Icons flicker / flash with Folder Redirection
Hello experts. We have this same problem across many different clients with 2012 R2 RDS server farms.
Users report that their desktop flashes continuously through out the day. We witness this many times as well. Users are working on a 2012 R2 RDS session host. They are utilizing folder redirection, so their desktop icons reside on a file share. I can simulate the same effect if I hit F5 to refresh the desktop. All icons flash. This is happening on many rds server at many different clients.
I found this post here with an identical issue:
http://discussions.citrix.com/topic/305854-desktop-icons-flickering/
The recommendation is to "creating on the registry the REG_DWORD key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRemoteChangeNotify with value 1. "
I know others have this problem as well, I'm curious as to how to resolve the issue, and if the change mentioned above will have any negative affects for users. Thanks in advance.
↧
File changes when someone connects and checks out a CAL?
Gents -
I'm trying to setup a file based trigger for healthy monitoring for a 2012 terminal license server. Should be easy right? It would be if I can sort out what file or registry key changes when someone successfully connects?
I tried to see if when a user connects and checks out a device cal if any of the files change in the C:\Windows\System32\lserver\ folder, but they don't upon successful client connection.
Does anyone know what file or reg key on the server has a time stamp update or changes when a device successfully connects and checks out a cal?
Thank you.
↧
↧
RDS 2012 R2 - NLB RDCBs and HA
Current setup:
RDCB, RDWB and RDLC roles on same server. x 2 servers. These are load balanced using MS NLB. Lets call these CF01 and CF02. External cert deployed to all servers, DNS Round robin name: remoteapp.mydomain.com which points to the NLB of both these servers.
1. Are Active Remote Desktop management server and Active Collection Broker the same? Or are these different entities? I think the same? https://technet.microsoft.com/en-us/library/jj215479.aspx
I note in RDS Server Manager > Overview > Deployment Overview the drop down to change the active Connection Broker. However this displays the machine names either CF01 or CF02.
During HA testing (set Active Broker to CF01) disable NIC on CF01, new and previous clients can still access apps via RDWB fine with no interruption :-) So CF02 must be being accesed via the NLB at remoteapp.mydomain.com
The RDS Server Manager can't find the alternative Collection Broker for around 3 minutes, Get-RDLicenseConfiguration will also show a change in ActiveManagementServer and returns the second broker after this approx 3 minutes. Update - not true, after checking fail-over from CF01 to CF02 this appeared true but CF02 to CF01 not - weird! Get-RDConnectionBrokerHighAvailability : The active Remote Desktop management server is not reachable.
Clients appear completely unaffected by this outage and RDS Server Manager facilities are available too (after 3 minutes), on the surface all good.
Get-RDConnectionBrokerHighAvailability returns:
ActiveManagementServer : CF02.mydomain.com
ConnectionBroker : {CF01, CF02}
ClientAccessName : REMOTEAPP.mydomain.com
DatabaseConnectionString : DRIVER=SQL Server Native Client
11.0;SERVER=DB01;Trusted_Connection=Yes;APP=Remote Desktop Services Connection
Broker;Database=RemoteApp
DatabaseFilePath : E:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\DATA\RAPP\RemoteApp.mdf
2. But for this HA environment, should the Broker HA settings be set as follows?
Set-RDConnectionBrokerHighAvailability -ConnectionBroker "remoteapp.mydomain.com"
Confused as to why HA works without 2. being set above!
Any pointers welcomed
Lea
↧
Time Zone Redirect Doesn't work on Windows 2008 R2 Terminal Server
Hello All,
A client has two Windows 2003 and two Win 2008 R2 Terminal servers.
When users from a different time zone login to the Win 2003 server, the time zone of the server changes to reflect their own time zone. However when they login to the Win 2008 R2 servers, the time zone on the server doesn’t change.
I already enabled the "Allow time zone redirection" on both Win 2008 R2 Terminal Servers in :
Computer Configuration\Policies\Administrative Templates\Windows Components\Terminal Services\Terminal Server\Device and Resource RedirectionYet when the clients login to the 2008 server and checks the time on the server, it still shows local/server time and not their own time zone.
Any input will be appreciated.
↧
RDS Connection Broker HA Setup Cannot Connect to AlwaysOn Listener
I'm trying to get the RDS Connection Broker HA DB into my AlwaysOn Group. I already have an AAG set up between two SQL servers, and it is working just fine for the other DBs that I have in there. I can also set up the RDS CB HA Database successfully by using a specific SQL Server in my connection string, but when I try to use the AAG Listener in the connection string, it tells me "the database specified in the connection string is not available". That is very strange considering it works just fine when I point the connection string to a specific SQL server rather than the AAG Listener.
My connection string when pointing to a specific SQL Server is:
DRIVER=SQL Server Native Client 11.0;SERVER=CED-DAX-SQL1.xxxxx.xxxx;APP=Remote Desktop Services Connection Broker;Database=RDP_ConnBroker
My connection string when pointing to the AAG is:
DRIVER=SQL Server Native Client 11.0;SERVER=DAX-SQLCLUSTER1.xxxxx.xxxx;MultiSubnetFailover=Yes;APP=Remote Desktop Services Connection Broker;Database=RDP_ConnBroker
I have also tried it without the MultiSubnetFailover setting, without the domain name on the SQL server name, and with the AAG Listener port included at the end of the server name (":1533"). The CB computer account has sysadmin permissions on both of the SQL servers, and is also a local admin of the SQL servers.
I'm at my wit's end. HELP!
Thanks,
-Evan
↧
Access is denied for User
Hello,
I am trying to setup a windows RDS environment. (WS2012r2 based)
I am using a domain controller and a RDS server. On the RDS server is the Session Host role installed. When logged is as domain admin, i am able to browse the RDweb and use Paint. The Paint comes up and there is no problem.
When i am using a domain user, i am able to browse the RDweb, but when i click on paint, it's logging into the RDS server, but at a certain time i get the error:"Access is denied".
I have added the user to the Remote Desktop Users group
I have added the Remote Desktop Users group to the local machine.
I have enabled the GPO "Allow users to connect remotely by using RDS"
What am i missing, and why isnt there an easy way to setup an RDS environment?!
↧
↧
2012r2 RD Per User Licensing - no license server available
Hi,
The question I have is based on a scenario for DR I am looking at. I'll describe the scenario first then ask a very specific question.
I have 2 sites, with a RD Session Host on each. The primary site's RDS Host has Licensing installed with some Per User CALs.
The secondary site's RD Host is using the licensing on the primary site.
In my testing of the DR scenario I can turn off the primary site (so no licenses are available) and can still log on to the secondary site server.
Both servers are still in the grace period.
Question------- After the grace period is over, and during a DR event where the primary site's licensing server is not available, what happens when a user tries to connect to the secondary RD Session Host?
I've looked all over and can't find a straight answer to this. My apologies if my searches weren't vigilant enough.
Thanks,
Tim.
↧
Server 2008R2 RDG Intermittant Connectivity Issues
Problem:
I can sometimes connect using my 2008R2 RDG (Remote Desktop Gateway), and sometimes not. When I can connect, the connection is typically stable and performs as expected and will be so for hours at a time given that the connection is used (avoiding inactivity
timeouts, etc.) When I cannot connect, my only recourse is to keep trying, wait a few hours maybe, try again, try the other gateway, and eventually it'll work again. Both gateways were setup the same, and they both behave the same.
When I look on the logs of the RDG servers (Event Logs > App/Svc Logs > Microsoft > Windows > Terminal Services-xxx) I see many "Info" logs that only indicate clients connecting and disconnecting.... in many cases the clients disconnect after 0 seconds; no errors/warnings.
When I look at the client logs (I've tried RD Conn Mgr v2.7 and mstsc.exe v6.3.9600) I see several entries similar to:
RDPClient_TCP: An error was encountered when transitioning from TcpStateConnectingTransport to TcpStateDisconnected in response to 2 (error code 0x80004004). I'm identifying the RDG by IP address from the clients (certs are issued to the IP address).
I can ping RDGs no problem, and accessing https://<rdg_IPaddress>/ works just fine with no security warnings at all times.
When already connected to a client, a new connection attempt will sometimes trigger the functioning sessions to freeze, and I can no longer connect/re-connect to any internal clients.
Setup:
I have 2 2008R2 RDGs (Remote Desktop Session Host, License Server, Gateway roles/features installed) that are NOT farmed together (unique IPs/hostnames), but are part of a small local DMZ domain. These are using self-signed certs that have been installed
on the relevant remote clients. They are used to connect to many different 2008R2 nodes on an 'internal' network.
Firewall is forwarding TCP 80, 443 for remote RDG sessions, and 3389 for the internal RDP nodes.
Some clients experience this more than others. It's not consistent between clients... one client may be functioning properly, and another may be unable to connect. Typically one RDG will be working, and the other not, however sometimes they both work.
Help!!! Any other logs to look at?
↧
RDP screen goes black after successful remote login
I have a Windows 2008 Server that I have been connecting to once a month remotely to apply OS updates. Often, I reboot that server and it uses auto-logon to login and run an application.
Today, I rebooted the server and when I try to connect with RDP, I get the login prompt and enter my credentials, I see a few expected messages fly by on the host OS (the last one I see is the word Welcome), but then the screen goes black.
The apps on the server are running successfully because our applications can connect to them, we just can't logon to the desktop of the Windows Server 2008.
I made no configuration changes (I NEVER do) other than to apply the latest Windows Server updates.
I would prefer not to drive to the computers location, or try to coordinate a time to have the server hosting company assist me with troubleshooting; but is there anything else I can do? Any ideas about what might cause this?
↧