Need Liscence Guide RDP Services with New Server.

March 18, 2020, 9:28 pm

≫ Next: Updating Expired Passwords on Wyse 3040 ThinOS 8.6_206

≪ Previous: RD Gateway Firewall Setup Question

$

0

0

Dear Team,

Currently I have configured One Server with All RDS Services roles on one Server.

Server-1

RD-WEBACCESS

RD-GATEWAY  (siterds1.sukkur.com)

RD-LISENCING

RD-CONNECTION BROKER

RD-SESSION HOST.

Note: I have RDP CALs Lisencne .

All are working fine with Internal & External users that they working perfectly fine..

Now I want to configure new Server with for publishing new RD-WebAccess for (siterds2.sukkur.com)

Please guide me which things should i need to consider regarding ...

Should I configured with existing RDS ?

Should I need Extra Liscen for RD-Gateway?

I have SSL Certificate installed @ (siterds1.sukkur.com) so should i used that on second server?

Please guide me about whole things.. so that manage it easily ..

Thanks in Advance 

---

Updating Expired Passwords on Wyse 3040 ThinOS 8.6_206

March 23, 2020, 4:43 pm

≫ Next: What Ports for RDS Gateway in DMZ?

≪ Previous: Need Liscence Guide RDP Services with New Server.

$

0

0

We have a number of Wyse 3040's running ThinOS 8.6_206.

The users of these devices are reporting that once their password has expired, they are then not able to update the password without resorting to calling the helpdesk for help.

Researching this I found a number of threads that suggested disabling NLA.
Is this my only option? If at all possible I would rather not disable security features to enable this.

I also noted some references to using RD WebAccess to redirect to the password reset website. Though my understanding of this is that it would only work whilst connecting from a full OS with a proper web browser. Am I understanding this correctly?

I will certainly be trying to manage this from the user side as well... But at the same time would like a technical fix if at all possible.

Any insight into this would be greatly appreciated.

What Ports for RDS Gateway in DMZ?

March 3, 2020, 7:14 am

≫ Next: Server standard 2019 RDS ACM / ACT issue

≪ Previous: Updating Expired Passwords on Wyse 3040 ThinOS 8.6_206

$

0

0

Hi Everyone,

I'm really struggling with this one.  I have moved my RDS gateway and Azure MFA/NPS servers from the LAN into the DMZ.  I now have firewall rules issues, as when the firewall is open everything works great, but I need to lock it down to only the required ports.  Does anyone know which ones to open.  I've tried 443/3389/RPC and a bunch of others but unless I open everything it fails.  In fact, I don't even get the MFA call from Microsoft so it's failing at the first step.

Servers in DMZ

GW1

GW2

NPS1 (Azure MFA plugin installed)

NPS2 (Azure MFA plugin installed)

RODC

Thanks!!!!

Server standard 2019 RDS ACM / ACT issue

March 3, 2020, 9:23 pm

≫ Next: Black Screen After Logout

≪ Previous: What Ports for RDS Gateway in DMZ?

$

0

0

I have an issue where I have software that i cannot get to stop requesting administrative UAC access to run for normal users connecting via RDS.

Microsoft official download locations for the ACT seem to have been taken down, however I have obtained a copy from CNET.

I cannot however create ACT database as I am not given the option of specifying credentials for the SQL connection.

I am also not even sure if I should be using it on server 2019. The software is Sage Wage easy. I have tried the standard route of giving relevant users / security groups full control access to said software executable locations / subfolders, no dice and I do not want to go down the road of giving normal users admin rights.

Can anyone advise?

Black Screen After Logout

March 19, 2020, 5:18 am

≫ Next: Remote desktop users groups members unable to authorized for domain users

≪ Previous: Server standard 2019 RDS ACM / ACT issue

$

0

0

Hi,

Is it a bug in Win 2019 RDP Services that shows black screen for a few seconds after users log out? Is there any solution?

Thanks.

Remote desktop users groups members unable to authorized for domain users

March 19, 2020, 5:08 am

≫ Next: Number of Connections and Users shown in RD Gateway Manager ?

≪ Previous: Black Screen After Logout

$

0

0

The connection was denied because the user account is not  authorized for remote login.  error when accessing the remote desktop form domain users.

Number of Connections and Users shown in RD Gateway Manager ?

March 23, 2020, 11:17 pm

≫ Next: RDP Authentication

≪ Previous: Remote desktop users groups members unable to authorized for domain users

$

0

0

Hi,

We make use of RD Gateway Server to allow end users (work from home) to access their own workstation at office.

From RD Gateway Manager, under monitoring, we get the message "50 connections from 27 users to 27 remote computers".

We observe that it shows that there are 5 sessions for a particular user connecting to the same workstation.

Since our workstation is running Windows 10 that should only allow 1 RDP session, just wonder why there are 5 sessions ?

Does it take up 5 CAL licenses ? 

Is there any way to minimize this from happening ?

Cheers

RDP Authentication

March 18, 2020, 11:20 pm

≫ Next: RD Connection Broker multiple Collections

≪ Previous: Number of Connections and Users shown in RD Gateway Manager ?

$

0

0

We have requirement for RDP user authentication, example if user accessing remote should ask permission with other active user for accessing remote like SCCM remote.

---

Regards, Hari Prasad.D

---

RD Connection Broker multiple Collections

March 18, 2020, 10:38 pm

≫ Next: Create Collection Stops after Nth desktop

≪ Previous: RDP Authentication

$

0

0

Hello,

I've got a question about multiple Collections with 1 RD Connection Broker. We've got in our environment 1x Connection Broker (which is also Licensing Server) with 1 collection (called Farm1). This collection has 10x RD Session Hosts and we use Round Robin with an DNS entry farm1 which points to the IP-Adress of the Connection Broker. On the Connection Broker we've set the Reg-Key "DefaultTsvUrl" in HKLM\System\CurrentControlSet\Control\TerminalServer\ClusterSettings for the Collection Farm1. This works very well with the load balancing. Without this Reg-Key we had the problem with themporary user profiles (we also use User Profile Discs).

Now we need a second Collection called Farm2 which has 6x RD Session Hosts. I want to provide this Collection via the same RD Connection Broker but because the Reg-Key points to the Collection Farm1 I always connect to the wrong RD Session Hosts. Is it possible to provide multiple Collections with 1 RD Connection Broker and also use Round Robin to avoid themporary profiles and have load balancing for each Collection? Or do I have to create a second RD Connection Broker (1 for each Collection)?

Create Collection Stops after Nth desktop

March 16, 2020, 3:59 am

≫ Next: How can I force a fixed group of Users to connect alwais to a certain Session Host and another group of Users alwais to another certain Session Host ?

≪ Previous: RD Connection Broker multiple Collections

$

0

0

I am testing the creation of a collection of Virtual Desktops using Server 2012 and Win 10. They create just fine until the 11th desktop and then I get an error:

RD Connection Broker could not create the computer account object in Active Directory Domain Services (AD DS). Ensure that the RD Connection Broker computer account has permissions to create computer accounts in the organizational unit (OU), the RD Connection Broker can contact AD DS, and a duplicate computer account object does not exist in a different OU

I am only trying to prove the functionality but it looks like I am hitting some sort of limit of ten Virtual Desktops?

How can I force a fixed group of Users to connect alwais to a certain Session Host and another group of Users alwais to another certain Session Host ?

March 21, 2020, 2:18 am

≫ Next: RDS - I need to change displays to a bigger monitor.

≪ Previous: Create Collection Stops after Nth desktop

$

0

0

In a Windows Server 2016 RDS Session-based desktop deployment, until now I have one only RD Session Host named RD01.

All RDS roles are managed by this server:
- RD Connection Broker
- RD Session Host
- RD Licensing
- RD Web Access

All User's data are stored in the C:\Users folder located in the RD01 (RD Session Host). It is not a share folder.

Now I need to move some Users on a new RD Session Host named RD02.

My goal is to have some Users that still connect with RDS client to RD01 and some Users that connect to the new RD02.
I can manually move the Users's data from RD01 to RD02 for the migrating Users.

My problem is that I can't understand how can I force a fixed group of Users to connect always to RD01 Session Host only and the rest of Users alwais to RD02 Session Host only.

The old RD01 and the new RD02 Session Hosts have their C:\Users folder, not a share.

Please can someone help me?

Thank you in advance,
Ivano C.

---

Ivano Carrara

RDS - I need to change displays to a bigger monitor.

March 18, 2020, 1:18 pm

≫ Next: failed to install RD virtualization host role service

≪ Previous: How can I force a fixed group of Users to connect alwais to a certain Session Host and another group of Users alwais to another certain Session Host ?

$

0

0

My father is working at home due to the current situation with the Global Pandemic.

I am attempting to help him change displays during a RDS while using the VPN Citrix.

He is having eye strain issues with the company funded laptop; thus I had attempted changing displays when I got the error: 

The display settings can't be changed from a remote session.

If someone has a work around for this; that would be greatly appreciated! Thank you.

Details:

1. VPN: Citrix

2. Windows version: Windows 10 Pro

3. RDS: (EDIT: I believe Citrix is a gateway that acts as his VPN and RDS.)

failed to install RD virtualization host role service

March 19, 2020, 7:29 pm

≫ Next: RDP save connection settings

≪ Previous: RDS - I need to change displays to a bigger monitor.

$

0

0

I have a Dell r740 server w/ a tesla card in it.  i'm trying to setup a "standard" remote app environment.  I currently have the physical box running hyper-v and running 2 VMs.  ( Everything is server 2019, latest windows updates)  One of the VMs i'm figuring on being my gateway/broker server, the other my session host server and i've direct attached the tesla card to it.  I've also got the grid drivers installed on the VM.

Now here is where my trouble comes in, when i use "add roles and features wizard" from server manger to install the Gateway, broker, and session host, it errors out on the session host.   (gateway, and broker are both installing on the same server, and succeed)  The error i'm seeing from serer manger on the installing broker/gateway server is "Failed: Unable to install RD virtualization host role service on server ........"

This is the second set of VM's that i'm getting this error for.

---

IT guy

RDP save connection settings

March 24, 2020, 2:52 am

≫ Next: How to allow Terminal Server logon scripts to use PowerShell full language mode?

≪ Previous: failed to install RD virtualization host role service

$

0

0

Hello,

We had 2 servers at our offices which we connect to using RDP for years. So, i had 2 separate RDP files with saved credentials, computer name, username etc.

We added a third server recently and that is when the issues started.

When i configured the RDP file for the third server it overwrote the credentials from the other two.

Now it seems that i can't save multiple RDP files with different credentials as every time it overwrites and uses the last one saved for some reason. I have tried changing the group editor policies and credential manager as well.

Weird thing is that whichever file i run now it connects to the last saved server even if the computer name is wrong.

Please help, as this is really frustrating.

Thanks in advance

How to allow Terminal Server logon scripts to use PowerShell full language mode?

February 25, 2020, 8:50 am

≫ Next: Need Liscence Guide RDP Services with New Server.

≪ Previous: RDP save connection settings

$

0

0

Hello everybody,

At a customer's site there is a PowerShell logon script set for users via GPO. The users log on to Terminal (RDP) Servers. PowerShell seems to be in restricted language mode at least for normal users. However, the logon script must use features not available in PowerShell restricted language mode.

How can we have the logon scripts in full language mode please?

---

Best Regards, Stefan Falk

---

Need Liscence Guide RDP Services with New Server.

March 18, 2020, 9:28 pm

≫ Next: RDP with SSL Certificate Issues

≪ Previous: How to allow Terminal Server logon scripts to use PowerShell full language mode?

$

0

0

Dear Team,

Currently I have configured One Server with All RDS Services roles on one Server.

Server-1

RD-WEBACCESS

RD-GATEWAY  (siterds1.sukkur.com)

RD-LISENCING

RD-CONNECTION BROKER

RD-SESSION HOST.

Note: I have RDP CALs Lisencne .

All are working fine with Internal & External users that they working perfectly fine..

Now I want to configure new Server with for publishing new RD-WebAccess for (siterds2.sukkur.com)

Please guide me which things should i need to consider regarding ...

Should I configured with existing RDS ?

Should I need Extra Liscen for RD-Gateway?

I have SSL Certificate installed @ (siterds1.sukkur.com) so should i used that on second server?

Please guide me about whole things.. so that manage it easily ..

Thanks in Advance 

RDP with SSL Certificate Issues

March 2, 2020, 7:05 am

≫ Next: Is there a Roadmap posted for Remote Desktop Services product features?

≪ Previous: Need Liscence Guide RDP Services with New Server.

$

0

0

Our server is configured with Secure RDP certificate from an Internal CA.

When we connect to the servers it works flawlessly from the old Remote Desktop application (mstc.exe), but when trying with the New Remote Desktop App (Windows Store) and iOS devices (even though the CA and Subordinate CA were successfully imported as a Profile and granted full trust on the devices, it reports certificate issues before connecting!

from the computers it says: "It might not be safe to connect to this PC: certificate revocation unknown"

from the iOS devices it says: Not Verified"

Both shows the proper certificate (with the correct thumbprint)

Any help would be greatly appreciated!

Is there a Roadmap posted for Remote Desktop Services product features?

March 24, 2020, 12:15 pm

≫ Next: Application crashes within 2016 RDS Server

≪ Previous: RDP with SSL Certificate Issues

$

0

0

I am supporting a Microsoft field request in the Enterprise space for an RDS roadmap and just wanted to see if anything already exists on this. Thanks!

Application crashes within 2016 RDS Server

October 8, 2019, 3:16 pm

≫ Next: Difference between Connections and Users shown in RD Gateway Manager ?

≪ Previous: Is there a Roadmap posted for Remote Desktop Services product features?

$

0

0

I'm running TenMast, a public housing management tool, on 2 remote desktop servers.  The total number of users accessing each server is under 50.  MRI owns the software.  We've been having issues with the application crashing within the remote desktop servers.  The app will not crash when running the application directly on the TenMast server and from a client PC.  The application requires a mapped "T" drive.  I've been in contact with the manufacture and they haven't been able to troubleshoot the issue.  Is there anyone that has experience this issue?  Let me know then.  Thanks.

Difference between Connections and Users shown in RD Gateway Manager ?

March 23, 2020, 11:17 pm

≫ Next: Server 2019 WAP / RDWEB Websockets

≪ Previous: Application crashes within 2016 RDS Server

$

0

0

Hi,

We make use of RD Gateway Server to allow end users (work from home) to access their own workstation at office.

From RD Gateway Manager, under monitoring, we get the message "50 connections from 27 users to 27 remote computers".

We observe that it shows that there are 5 sessions for a particular user connecting to the same workstation.

Since our workstation is running Windows 10 that should only allow 1 RDP session, just wonder why there are 5 sessions for that user to the same workstation?

Does it take up 5 CAL licenses ? 

Is there any way to minimize this from happening ?

Cheers