Hi all,

I cannot establish a RDP connection from two of my devices and I manage with other two.

1. From this device I cannot connect internally, when trying to connect to: 

a. servername - stuck at configuring remote session
b. ipv4 - stuck at configuring remote session
c. ipv6 - it does connect!

This device is running Windows 10 1904

2. From another device I manage to connect in all 3 ways INTERNALLY, but does not connect externally.

This device is running Windows 10 Enterprise

When I ping from this device it replies only with ipv6.

3. Another device is trying to connect externally and it doesn't connect at all, because my port forwarding is configured based on ipv4. So I cannot connect externally at all from any PC.

4. From my mobile phone it does connect from external, which makes me very confused all together..

It seems like when trying to connect via ipv4 it get stuck and some devices choose to connect via ipv4 and some via ipv6....

Just looking for some confirmation as I can find no evidence online (which leads me to beleive that I'm misunderstadning what I should expect.

Running a small PoC for RDS. Currently, I have 1 Session server, 1 Broker, 1 web access server and a RD Gateway in my DMZ (joined to the domain but only has enough ports open to the DCs to get its job done). Everything works, landing page for the web access server customised, etc and I can log in and access my published apps. SSO also working.

I was expecting, when I started setting up the gateway, that what I would see when I punched in the external URL was what I see when I land on the web access server internally (essentially a login page). Having configured the external access on the FW and opened the required ports as well as setting up a valid external cert on the gateway (Lets Encrypt - all other RDS servers in chain have certs issued by my internal CA), I can get to my Gateway server from outside but I just land on the default IIS page. The /rdweb throws a 404 as expected because there is no site named /rdweb on the Gateway server.

The only sites that seem to be published under the Default website on the RDS Gateway are Rpc and RpcwithCert. Internally, I can hit my web access server directly and get all my apps as expected both through the browser and RemoteApps tool. The internal rules in my FW allow the RDS Gateway Server in the DMZ to the LAN only to the DCs  for LDAP, etc and 3389 to only the Broker server because that’s all it should need.

From outside my LAN, I can use the RDP client in Windows to add my publically accessible RD Gateway and connect to my servers in the LAN over RDP to the desktop by adding the RD Gateway address into the Gateway section of the RDP client. What I am really looking to do however, is to get the published apps made available through Windows RemoteApp externally. This isn't working as when I enter https://rds.mydomain.com:4443 in RemoteApp, I get nothing back unlike what I get if I pointed it at: https://rds_web_access_server/rdweb/feed/webfeed.aspx when on my internal LAN.

I thought this was the point of the RD Gateway, to allow exactly this? So am I'm missing some part of the puzzle? I just can't find any solutions online.

Hi all,

Im trying to setup RD Broker HA but still not success.

Windows Server 2016 1607

SQL Standard 2016.

Telnet 1433 okie.

Already create security group for RD Broker and grant dbcreator (even sysadmin) on SQL server.

No errorlog on SQL server.

Here is event log on RD Broker Server:

RDMS-UI Log:

The Remote Desktop Connection Broker server could not install the database named RDS by using the connection string:
DRIVER=SQL Server Native Client 11.0;SERVER=******;Trusted_Connection=YES;APP=Remote Desktop Services Broker Connection;DATABASE=master;.
The database name in the connection string is shown as [master] because in order to create a new database with admin specified name, a connection must be made to master database.
Please check that the broker server has access to the SQL server, the path for -DatabaseFilePath parameter exists and contains the SQL Server database file, the connection to SQL databse is correct and SQL database is online. See the SQL Server and broker eventlog for more details.

Error: The object is already in the list. 

Terminal-Session Log:

Database Creation - Failed: Could not create the database 'RDS'. Please check that the broker server has access to the SQL server, the path for -DatabaseFilePath parameter exists and contains the SQL Server database file, the connection to SQL databse is correct and SQL database is online. See the SQL Server and broker eventlog for more details.



Thank you.

hi,

i have some problems with a remoteapp deployment.
on the perimetral network accessible from the internet from public ip there is a reverse proxy that serve some sites with publicdomain.it . All is working fine.
Behind this object, in the internal network, with a private ip address i'm deploing a remoteapp architecture.
2 virtual machine with MS server 2019 joined in a local domain like "domain.local".

vm1.domain.local: iis rdweb + rd gateway + connection broker

vm2.domain.local: rd session host

I have
- installed in the rd gateway a ssl certificate from public CA

- changed external fqdn of rdgateway and connection broker (the last one with the powershell script Set-RDPublishedName.ps1

 From internet I can connect to the iis default web site page (microsoft blue page) without errors BUT

when i add    /rdweb to the url ... the browser try to contact the private ip ...

What i'm missing ?

Regards

curl -iv https://   xxx .it/rdweb
*   Trying xxx.xxx.222.83...
* TCP_NODELAY set
* Connected to     xxx .it (xxx.xxx.222.83) port 443 (#0)
* TLS 1.2 connection using TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
* Server certificate: xxxx .it
* Server certificate: TERENA SSL CA 3
* Server certificate: DigiCert Assured ID Root CA> GET /rdweb HTTP/1.1> Host: xxx .it> User-Agent: curl/7.54.0> Accept: */*> < HTTP/1.1 301 Moved Permanently
HTTP/1.1 301 Moved Permanently< Date: Wed, 06 May 2020 16:42:52 GMT
Date: Wed, 06 May 2020 16:42:52 GMT< Server: Microsoft-IIS/10.0
Server: Microsoft-IIS/10.0< Content-Type: text/html; charset=UTF-8
Content-Type: text/html; charset=UTF-8< Location: https://10.186.144.35/RDWeb/Pages
Location: https://10.186.144.35/RDWeb/Pages< Content-Length: 156
Content-Length: 156< X-Content-Type-Options: nosniff
X-Content-Type-Options: nosniff< X-Frame-Options: sameorigin
X-Frame-Options: sameorigin< Vary: Accept-Encoding
Vary: Accept-Encoding< <head><title>Document Moved</title></head>
* Connection #0 to host xxx  .it left intact<body><h1>Object Moved</h1>This document may be found <a HREF="https://10.186.144.35/RDWeb/Pages">here</a></body>

Hello there,

Here is the setup. I have a user who is working remotely. She uses remote desktop for one of her database-heavy applications. Unfortunately this application has trouble printing to redirected printers, and can only print to shared or local printers. This is per the company that provides our tech support for the application (NCR CounterPoint), so we have a local USB printer installed on her local computer. It is shared from the local computer and then installed on her profile on the remote desktop server.

She connects back to the office over a VPN. The remote desktop server is located back at the office. Her internet connection is fairly fast and reliable. Average ping time from my PC at the office to her PC at home is about 53ms. I originally suspected the internet connection, but I'm not totally convinced that's that problem. We have plenty of other users set up the same way on the same server, and they don't have this problem.

Through troubleshooting, it's seems that the shared printer can take a few minutes to show up in the Devices and Printers of her profile on the remote desktop server. Other times, it never shows up at all. No matter how long she leaves the session open. I have tried reinstalling the shared printer on her profile on the remote desktop server and sometimes will receive an error message that says something like, "Unable to connect to printer". I will restart the print spooler on both her computer and the remote desktop server, but this doesn't seem to make a difference.

I've even tried making her a local admin on the RDS server and sometimes this will allow me to reinstall the printer. Sometimes I will still get the same error message. I have dug through the event logs of both the server and her computer, but can't find anything that indicates what might be causing this to happen.

I've had her gracefully sign out of the RDS session by going to "Start -> Sign Out", as opposed to just disconnecting it. It doesn't seem to make a difference. She also uses a Remote App for one of her other applications, so I'm not sure if this is conflicting with her RDS session in some way. Again, we have other users set up this way and they seem to be fine.

The main issue is that the shared printer from her local computer installed on the RDS server just doesn't show up sometimes, and then she can't print. When it does show up, it stays there the whole time until she closes the RDS session. The next time she opens it, the printer may or may not appear.

She is using Windows 10 Pro 64-bit. The server is Windows Server Standard 2016 64-bit.

Any ideas?

Thank you!

I have a 2012 RDS setup working nicely.

i have 50 per user CALS in the licence server, i have separate servers for all the functions of the RDS, the License server is in the correct domain groups, (terminal server licensing group etc)

it was issuing licences perfectly fine up to 27th of April, the count was up to 38, so 12 spare.

but RDS is working fine and i have added more users to the system since, I can see in the log that its issuing cals fine up to yesterday, 12th of may. yet nothing has changed in the licensing manager !!??? it still shows 27th april as the last issued CAL with no new ones since then.

rebooted the server, and even run a report. so i am confused as to whats going on.

Does anyone have any clues whats going on.

Cheers

Mark

Hello

I am very used to managing Server 2008R2 RDS where we have a 5-server load-balanced farm using the Connection Broker.

I am setting up another 5 server farm (Collection?) using Server 2012R2 and the new management tools, underlying changes to the technology and terminology is making my head hurt a little.

I have set up the farm/collection the way I want it - using Load Balanced (via DNS Round Robin) Connection Broker and that seems to be working fine in testing.

However I cannot work out how to remove a server from the load balanced group.  In 2008 I would log onto the server and uncheck the "Participate in Connection Broker Load-Balancing" box in Session Host Configuration.

Can anyone advise how to remove a server from load balancing in Server 2012R2?

Many thanks
Paul

Hi,

Everyday I have to reboot our RDS on Server 2016 because of failed login attempts for all users. Getting these errors:

An error occurred when transitioning from CsrConnected in response to EvCsrInitialized. (ErrorCode 0x80070057) 

The Windows logon process has unexpectedly terminated. Event 4005, Winlogon

There was an expired certificate error which is resolved. There was also a licensing issue, which is also resolved.

hi, i have DC server 2016, and RDS server 2019.

i have a policy for the users to change password every 2 months.

after they or me change the password RDS doe's not get this change only after restart.

i turned off firewall for test and this is not it.

what should i check?

10x

liran

I have a Server 2012R2 VM hosted on hyper-v.

I can manage the VM, but not the hyper-v.

I want to connect to the VM with RDP (from a windows 10 computer), and redirect a local USB (some license dongle). And I hoped remoteFX could do that.

HOW do I get remoteFX to work? I have trawled througt a lot of guides and blogs, without luck.

It seems that the VM, being 2012R2, does not require vGPU, and hence the hyper-v host does not need to be able to provide that. I cannot determine if the hyper-v host MUST have the RD Virtualization Server role installed or not (I hope not)

It seems that all it takes on server VM is to enable remoteFX/USB direction, and to install Desktop Experience.

And to disable "do not allow supported plug and play device redirection" on on the server" and enable "Allow RDP redirection of other supported RemoteFX USB devices from this computer.”  on the client.

Yet, it seems not to work. Any help is appreciated.

/nikolaj

Hi everyone!

We are struggling with our new Terminal Server setup and I am kindly asking for your help.

- 2 Remote Desktop Session Hosts (load balanced, 20 cores and 64 GB memory each) + 1 Broker/Licensing. No gateway, only local network access. SSO with AD credentials enabled and working. Currently working with local profiles (no roaming, UPD recently disabled) for troubleshooting reasons. No MS Office installed. Mainly used software is a Terminal Server supported typical software for our business area.
- 1 Print Server (2 cores, 8 GB memory) with several new and old printers, latest drivers from the manufacturers.
All of them are Server 2019 DC 1809, patched up to January 2020 level.

Hardware base is vSphere 6.7 on a fresh HPE ProLiant set, shared SSD storage and lots of memory. There are no performance issues on a hardware base, also not on other VMs.

Printers get mapped into the Termial sessions via GPO ("Create" command as user policy with loopback mode, \\printserver\printername).

So far - so good. Most of the time all is working fine, users can print from the sessions and the sessions are performing quite well.

Since this setup has gone live a few days ago, we are experiencing intermittent issues in the sessions that have not been recognized during an extended testing phase. It seems that the Print Server's spoolsv.exe is hanging or sometimes crashing and during this period all Terminal sessions on both hosts are freezing or hanging their applications ("Not responding"). Every session does have mapped the same printers, about 12 in total. Usually programs are freezing during work without opening a printing dialog, but at the latest if a user tries to print something, the session is gone. It happens 1-5 times a day.

During that phase the RDSH are nominally not hugely loaded (10-20% CPU, 30% memory with ~30 users on each, so they are clearly overpowered), users are no longer able to log on or off ("Remote Desktop Service is busy"). After a couple of minutes or if we restart the printer spoolers on both RDSH and Print Server, the system is running again and users, that have not tried to log off, can continue their session at normal speed. After another 5 minutes new sessions can being opened again, so the RD service is no longer busy with itself.
The load on the Print Server is usually ~2-5% CPU, during a freeze it may go up to 20%. The Print Management console may be crashing also, or at least it is very slow.

We've tried to identify a faulty driver on the Print Server and have found one using the eventvwr that caused the spoolsv to crash, however the issue is still there. We've also removed all unused drivers from both RDSH and the Print Server.

We have enabled 2 new GPO settings for the hosts: "Always render print jobs on the server" and "Execute print drivers in isolated processes" without a noticeable change. On the Print Server all possible drivers are also running in Isolation (Mode 2), however not all of them are supporting this. The physical printers themselves are working fine, PC clients do have some of them installed locally on their machine without known issues.

What's unclear for me: It seems that the RD sessions are constantly communicating with the print server (according to the Resource Monitor), even when nothing is being printed. Therefore they immediately are slowing down once the Print Server is having an issue. Is this an usual behavior? Does it depend on which Default Printer the users are setting?

So the idea is now either to find the faulty driver/setting and/or to reduce the dependency on the print server, so even when it hangs or may be offline, the sessions should not hang up.

I appreciate every single hint that might help to identify the issue or to find a workaround.
Let me know if I missed any important information.

Many thanks and regards!

Hi,

Servers: Windows 2016 Standard

I have 3 x Remote Desktop Session Host servers, a Remote Desktop Connection Broker, an SQL Server and a shared Drive where the UPD's (User Profiles Disk) hold the User's Profiles in a .vhdx format.

We need to backup the users profiles (which is in .vhdx format) but rather than backing up the whole users profile .vhdx, I would like to backup selected Files/Folder within the .vhdx format. 

Is there any backup software out there that will allow me to select specific files and folders within the users .vhdx disk as oppose to backing up the whole .vhdx disk in its entirety?

Kind Regards

GMSS   

Hi!

I am testing RDS 2019 with RemoteApp, and I have problems with startup splash screens. Each splash screen creates a button on the client’s taskbar and does not disappear from desktop and taskbar after the appearance of the main window. For example, I run three RemoteApp and I have three splash screens and three program windows on my desktop. And even if I close these windows, the splash screens will still remain on desktop and cannot be closed. This happens only in RemoteApp and does not occur with a remote desktop mode. I tried to recreate an RDS farm again, but it does not help.

This does not happen with all programs (having splash screen), but with many. At the same time, there were no such problems at RDS 2012R2/2016. 

As RDCB and RDSH used Windows Server 2019 with latest cumulative update (2019-01). As clients used Windows 10 1709/1809 with same update.

Hi,

So I have a working setup consisting of:

1 RD Gateway & Web Access combo server sitting in my DMZ talking back to the following on my LAN:
1 Session server
1 Broker Server

Everything works internally. I'm using split DNS to address the Gateway/Web server combo at: https://rds.mydomain.com, resolving it internally for my users and also publishing it in my external DNS for the users that will work remotely.

Accessing the https://rds.mydomain.com/rdweb remotely works fine and the test users can log in and see their collection. When they open up on of the web apps from non domain bound machines, they are greeted with the expected "do you trust this publisher" warning which they can click through. They are then prompted to re-authenticate (I've not set it up for SSO yet), and then the actual fail:

"Your computer can't connect to the remote computer because the remote desktop gateway server address requested and the certificate subject name do not match..."

As far as certs go, I have my wildcard cert from LetsEncrypt on the gateway and in IIS for the RD Gateway/Web Access combo server. The Broker server is signing the apps with an internally issued cert via my CA. I have tried every combination of certificate deployment and noe work.
Looking at the error, I can examine my cert from LetsEncrypt and although the Subject of it correct, when it is issued by https://rds.mydomain.com/rdweb, the subject line only shows my domain which I guess is where the error is coming from.
This error is causing the RemoteApps via the Windows RD client to also fail as you would expect.

I'm out of ideas of how to get this working externally so if anyone can point out what I'm missing, I'd appreciate it.

Thanks.

Hi,

Hi have 7 users who want to connect to my 2016 server with TSE simultaneously.

I have just configured Remote Desktop Session Host & Remote Desktop Licensingin workgroup.

I followed this link : https://www.aventistech.com/deploy-windows-2019-rds-in-workgroup-without-ad/

There is trial licences :

But when I launch the RD Licensing Diagnoser, it doesn't works :

Thank you.

Hi,

We have RDS License server configured with 2012 cals, RDSH Session servers in 2008 R2, and VM Ware Horizon VDI solution,. now we are in progress of upgrading to 2012 at that time we have seen multiple request coming to license server and RDS License server not able to respond. we have only one license server.

Below are the query.

    1. How to stop this multiple request coming to RDS License server.

    2. If we add multiple license server will the problem will get solved.

    3. Is there any way to stop client machine to requesting for upgrade license. 

Regards,

Mani