hi all,
we have two RD Server 2016 with 50 User.
from time to time User can't work and logon.
The Windows logon process has unexpectedly terminated.
Server 2016 is not a good Terminal Server. Under 2008 we have 1 Server (4CPUs) with 100 User.
Now we need 2 Server with 6 CPUs for same Applications and same Users
I think 2016 RD is a step backwards
Firewall with to many entrys, Services etc etc. Too many backgroundprocesses make a system slow. See Screenshot.
Chris
I'm having an odd issue when setting up my Session Collection. Everything is functioning properly during the config, but when it gets to setting up the User Profile Disks, I am getting the following error: "Could not create the template VHD. Error Message: -800389783".
Everything is configured properly - the share and the NTFS permissions are set so that all of the RDSH servers have full control.
Thanks for the help!
Hi All,
I have recently setup and installed the HTML RDS client. It works wonderfully.
Is it possible to customise the log on screen? I would like to add a logo and some text to it.
Is this possible? I can go into the index.html but nothing relevant seems to be there.
It is the latest version along with a Server 2016 OS
Any help is appreciated
Conor
The same problem has already been reported with Windows Server 2012 without solution from Microsoft:
Windows Server 2019 LTSC is up-to-date with the latest updates.
Clean installation with logoff & disconnect policies.
Client OS: Windows 10 1903
Problem Description Windows 10 Client: mstsc.exe remains active after disconnecting Remote apps or disconnecting all resources with wksprt.exe. It is not possible to open new sessions after disconnecting. The only way is to kill mstsc.exe in taskmgr.
Hi,
I deployed a RDS 2012r2 with a self-singed certificate and everything worked until I changed the certificate with a third party cert.
I can still login using RDP from a client through RDS Gateway and broker .. is working, but when I try to log on through RDWeb I get the famous "authentication error 0x607" error.
Setting/changing the collection security to low ... is not working for me.I can't imaging that recreating the collection is the only solution to this.
Thank You,
Best Regards,
MrFormula
When we copyed from the local desktop to the remote app, the pasted content became duplicate.
By the way, when switching from a local app like Chrome to the Remote App, the first mouse click in remote app will be double click.
Hi,
Can I get a link or steps on how to configure RDS in the below scenario?
RD Session Host servers are in a workgroup and the RD Licensing server in an Active Directory Domain
Thanks,
Umesh.S.K
Hello Team,
We have terminal server 2012 standard with self owned licensing role as well.
With 50 per user based CAL.
RD licensing Diagnoser states problem as mentioned below.
The Remote Desktop Session Host server is in Per User licensing mode and No Redirector Mode, but license server does not have any installed licenses with the following attributes:
Product version: Windows Server 2012
Licensing mode: Per User
License type: RDS CALs
RD license manger shows everything very much fine all green.
just one thing observed is Total license and issued license is showing 50, However available license is showing 0.
Any help please?
Regards,
Azhar shaikh.
Hi,
i want to know meaning of "Maximum size" option.
is this option specify the max size for each user disk, or the max size for all users disks ??
i have 400 user, every user need between 5Gb and 10Gb.
Can't figure out why login through RDS Gateway is so slow...
I've setup a 2019 RDS environment.
It's all VM's
Server: Connection Broker and License Server
Server: Session Host (Server 2019)
Server: Gateway (in DMZ)
Using FSLogix.
MFA plugin through Azure.
When logging in from inside network it's fast. (Not asking for MFA)
When logging in from outside through gateway, it takes 1:40 minutes before desktop is ready. (Asking for MFA)
Using a RDP file.
MFA challenge comes ~11 seconds after password is entered.
After that: "Configuring remote session" in a long time.
Occasionally the login is way faster.
(after I wrote this, the MFA challenge took 4 seconds and was 100% logged in in about 10 seconds through gateway)
I can't see where to begin troubleshooting...
Sometimes the connection is lost, asking the MFA challenge again.
Tried using "Negotiate" and "RDP Security Layer"
Tried looking Event Viewer on several servers with no luck
Sorry for the jumping in text.
A couple months ago I deployed a Windows Server 2012 R2, with the intent of using RDS Gateway on it for a client. I got it working, but there is a 60 second delay during the login process to the RDS Gateway. Specifically, the RDP client hangs on "Configuring Remote Session." This happens 100% of the time from outside the network (but never when connecting to the same server on port 3389 from *inside* the same network that the server is on). It is also important to know that even though there is always a 60 second delay, it still connects successfully 100% of the time. The client is not happy with the 60 second delay though (understandably), and has asked me to to solve the problem. I have done a ton of research, but the few possible solutions I came up with ended up not solving the problem. Here is everything I have done so far:
-My problem is *most* similar to this other post: http://social.msdn.microsoft.com/Forums/en-US/20a68eec-d639-47f7-abd1-3ae10aaf4db8/remote-desktop-to-web-role-gets-stuck-on-configuring-remote-connection However, the problem in that case eventually resolved on its own, & I have already tried the only suggestion mentioned in that thread (disabling port re-direction).....either I did that improperly, or it did not help).
-100% of the time immediately after a 60 delay login, I get this warning in the server's event log:
| SERVERNAME | 20499 | Warning | Microsoft-Windows-TerminalServices-RemoteConnectionManager | Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin |
"Remote Desktop Services has taken too long to load the user configuration from server \\servername.domainname.local for user XXXXXX" (where XXXXXX is an actual username).
The only recommendation I can find after researching *that* warning message is a small registry edit, which I have tried, and it did not help.
-In my research, I came across someone's theory that the problem is related to the SSL certificate, & the fact that the internal domain has a .local extension (which mine does). According to this theory, Microsoft's RDS Gateway (unfortunately) exposes the RDS Session host's computer name (including its .local extension) to the remote/external RDP client, and therefore the 60 second delay is caused by the remote/external RDP client taking time to look for the SSL certificate for the session host, which doesn't exist. The only way to determine whether this theory is the actual cause of the 60 second delay, or not, is to actually purchase a UC Certificate, which supports multiple domain names. There is an additional problem with testing this theory however, in that ICANN has mandated that certificates will no longer support .local (and similar) domain extensions come November, 2015. Therefore, even if I go through all the work to purchase & install the UC Certificate, *and* it happens to solve this 60 second login delay problem (which is a big "if"), that solution would only work for 1.5 more years from now.
I hope you can see I have tried hard to solve this problem on my own, but I am unable to. I really need some outside perspective to cut through the troubleshooting fog in my head regarding this particular problem. It is for that reason that any assistance with this problem would be greatly appreciated! Thank you in advance!
Hi, I have a customized video software that needs the video card to display correctly. Without RDSH, the video card shows in DXDIAG, and I can manage the video settings. However, when I install RDSH, and I need more than two people at a time to use this software, the video card info disappears, and the video in the software does not display correctly.
We had this setup working in Windows Server 2008 R2, but I can't do the same things in Server 2016 and get the same result.
Is there some trick to getting it to use the video card when in RDSH mode? (Please let me know if you need more information.)
Thanks!
From a Windows XP workstation into a Windows 2000 Server with the following error on the Windows 2000 Server:
Event Type: Error
Event Source: TermDD
Event Category: None
Event ID: 50
Date: 2/15/2011
Time: 11:32:31 AM
User: N/A
Computer: RTA15
Description:
The RDP protocol component "DATA ENCRYPTION" detected an error in the protocol stream and has disconnected the client.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
I already removed the certificate from:
A potential race condition between the Icaapi.dll and Rdpwsx.dll dynamic-link libraries (DLLs) may cause the private certificate key on the Terminal Services server not to be synchronized.
Click start—>Run type regedit click ok
Locate and then click the following registry subkey
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TermService\Parameters
Under this registry
subkey, delete the following values
• Certificate
• X509 Certificate
• X509 Certificate ID
Hello,
I have questions about migrating RD license server from 2012 R2 to 2019, I have
1 x Server 2012 R2 RDS license server with Server 2012 CALs (Enterprise agreement)
2 x Server 2012 R2 that do RDCB, RD gateway and web access roles.
13 x Server 2012 R2 Session host servers.
I want to upgrade them to Server 2019s.
First I created a Server 2019 with RDS License server role, and tried to migrate CALs to it, it asked for Enterprise agreement numbers, so I added and selected "Server 2019" CAL type and the migrator complained that it could not delete the CALs from the source server.
So I removed it and Added again as Server 2012 Types and it removed the CALs from the source license server.
I added the RD License server to RD License server group and License server role from RDS Deployment over view.
I stopped RD license server service from the Server 2012 R2 RD license server, removed the 2012 R2 RD license server from the RD license server group, and RDS Deployment over view. When I connected to the RDS, License usage did not change but I was able to connect. As if RDS does not know about the new RD license server but still let me use it.
Questions:
1. As I have Enterprise agreement, I can use the CALs for 2019 type? What do I do to make sure I can add the CALs as server 2019 type.
2. Why the RDS license usage count did not change? I rebooted gateway/web/connection broker servers but the usage count did not change, what am I doing wrong?
Lee Davis
Hi,
I am trying to use Powershell to configure the Remote Desktop Connection Settings, and am stuck.
If I check the default values I get
Directory: RDS:\RDSConfiguration\Connections\RDP-Tcp\SessionTimeLimitSettings
Name Type CurrentValue
GP PermissibleValues PermissibleOperations
---- ---- ------------
-- ----------------- ---------------------
BrokenConnectionPolicy Integer 1 - 0, 1
Get-Item, Set-Item
BrokenConnectionAction Integer 0 No 0, 1
Get-Item, Set-Item
ActiveSessionLimit Integer 0 No
Get-Item, Set-Item
IdleSessionLimit Integer 0 No
Get-Item, Set-Item
DisconnectedSessionLimit Integer 0 No
Get-Item, Set-Item
TimeLimitPolicy Integer 1 -
0, 1 Get-Item, Set-Item
If set the following settings under the Sessions tab in the gui:
Overide User Settings - Checked
End a disconnected session: 15 mins
Active Session limit: Never:
Idle session limit: 1 day
Override user settings - Checked
End session
If I check the values afterwards, they are set to:
PS RDS:\RDSConfiguration\Connections\RDP-Tcp\SessionTimeLimitSettings> dir
Directory: RDS:\RDSConfiguration\Connections\RDP-Tcp\SessionTimeLimitSettings
Name Type CurrentValue
GP PermissibleValues PermissibleOperations
---- ---- ------------
-- ----------------- ---------------------
BrokenConnectionPolicy Integer 0 - 0, 1
Get-Item, Set-Item
BrokenConnectionAction Integer 1 No 0, 1
Get-Item, Set-Item
ActiveSessionLimit Integer 0 No
Get-Item, Set-Item
IdleSessionLimit Integer 86400000 No
Get-Item, Set-Item
DisconnectedSessionLimit Integer 900000 No
Get-Item, Set-Item
TimeLimitPolicy Integer 0 -
0, 1 Get-Item, Set-Item
If I take a clean server (Windows Server 2008 R2), and try and run the command to set the BrokenConnectionAction to 1 using
Set-Item -path RDS:\rdsconfiguration\connections\rdp-tcp\sessiontimelimitsettings\BrokenConnectionAction -value 0 it returns:
To set this item, BrokenConnectionPolicy must be set to a value of '0'
If I run the command:
Set-Item -path RDS:\rdsconfiguration\connections\rdp-tcp\sessiontimelimitsettings\BrokenConnectionPolicy -value 0 it prompts me for the value of "BrokenConnectionAction".
How can I either force BrokenConnectionAction to 1, or specify the value forBrokenConnectionAction at the same time when I change BrokenConnectionPolicy?
Muttley
Hi,
I think I know the answer to this as I cannot find any information about it.
Is it possible to manage a physical Windows 10 workstation in Microsoft VDI? I know the clue is in the word virtualization but you can do this with VMWare.
The reason for the question is to give the user the ability to RDP to their workstation using the security of RDS Gateway and associated servers.
Many thanks
Hi there,
I've setup 2008 R2 with Remote Desktop Services and want to enable Drive-Redirection so Users which use Remote-Apps can use their local drives. Unfortunately I cannot remove the mark at "RDP-Tcp Properties" > "Client Settings" and Drive, Printer etc is greyed out and clicking on the checkbox doesn't work. I found no Policy which may be responsible for this...
Where do I have to enable Drive-Redirection?!
Best Regards
Miranda
https://www.derekseaman.com/2018/12/trusted-remote-desktop-services-ssl-certs-for-win10-2019.html
based on this article the author creates a copy of the "computer" template from an internal PKI. He adds an additional key usage just for RDP authentication.
I am already issuing "computer" certificates to all domain joined machines (servers and workstations). They are already copies of the original "computer" certificate template. My question is, do I still need to even perform the steps of making an RDP specific certificate template?
If both client and server already have computer certificates and trust, why would I need a specific RDP certificate template?