Quantcast
Channel: Remote Desktop Services (Terminal Services) forum
Viewing all 21489 articles
Browse latest View live

RemoteApp customization

$
0
0

I am using an application that requires the mapping of COM ports from the local machine to the RDS host server. The RemoteApps have the "redirectcomports:i:0" configured which disables the redirection of the COM ports, I found this by editing the .RDP file with notepad. When I change the setting to enabled the file becomes corrupt, which I guess is a good security feature.

My question then is how can I make the server apply this change to the RemoteApp so that it is generated and secure?  I must be missing something because this is already defined in the generated file so there must be some way to do this.  I have not found that any is doing anything like this.

Any help is appreciated.

Thanks,

Eric


Migrate Terminal server from one domain to another with new users loading old user's profiles (settings)

$
0
0

Dear fellow forum users,

I have a question regarding the approach for the following scenario.

Company x has bought company y, that has 3 virtual servers in their environment.

Company x wants to take over company y's infrastructure and migrate a terminal server in a domain, but not the ad users.

This terminal server will be migrated from domain a to domain b, but the users will get entirely new profiles in the new domain (b).

The requirement is that the new users created in domain b can log on to the terminal server (moved from domain a to b) and log in having the same settings that they had in their old profiles.

How is this done the best way?

Is it simply renaming the old profile folders and then logging in with the new users and then copying everything from the old profil in to the newly created one or how?

I guess using USMT is not an option here, since the ad users are not migrated (hence how do i map a new AD user to an old profile, belonging to a non existing user)?

Hope to have some input on this. Thank you.

RDL license usage

$
0
0

Hi

I've installed and configured a RDS environment with 2 Server 2012 datacenter VM.

VM01 is hosting RDSH

VM02 is hosting RDL (this is a server core)

I've 30 User CAL installed in VM02 and they're being issued correctly as licmgr.exe shows licenses assigned to users.

Today, a co-worker has informed me that he has setup another RDSH and pointed it to my RDL as license server. This has arisen a couple questions:

  • How can I prevent unwanted RDSH to use my licenses? First idea is to block all traffic on firewall except to my trusted RDSH, but guess there are better options. (there are few departments in my company, each one with their budget for buying software, and anyone can reach server vlan)
  • Can I know which User CALs have been isued from what RDSH? Can I know if this and that user CAL has been issued from my VM01 and a third one from my colleague's RDSH?

Thanks in advance

SYSTEM_SERVICE_EXCEPTION (3b) BSOD

$
0
0

I got multiple blue-screens on 2 different servers. 

Server is 2012R2 RDS

Is running on VMware.

I have seached al lot, but I cannot found a solution. Can someone help me?

Executable search path is: 
Windows 8 Kernel Version 9600 MP (2 procs) Free x64
Product: Server, suite: TerminalServer
Built by: 9600.18090.amd64fre.winblue_ltsb.151014-0600
Machine Name:
Kernel base = 0xfffff802`a008f000 PsLoadedModuleList = 0xfffff802`a0363630
Debug session time: Fri Nov 27 12:34:51.493 2015 (UTC + 1:00)
System Uptime: 0 days 9:48:24.292
Loading Kernel Symbols
...............................................................
...............................................Page 118d3f not present in the dump file. Type ".hh dbgerr004" for details
.................
......Page 14dd1e not present in the dump file. Type ".hh dbgerr004" for details
....
Loading User Symbols
PEB is paged out (Peb.Ldr = 00007ff6`245ed018). Type ".hh dbgerr001" for details
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, 0, ffffd0002177a090, 0}

Page 11697f not present in the dump file. Type ".hh dbgerr004" for details
Page 111696 not present in the dump file. Type ".hh dbgerr004" for details
Probably caused by : cdd.dll ( cdd!RmtAssociateSharedSurface+5f )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: 0000000000000000, Address of the instruction which caused the bugcheck
Arg3: ffffd0002177a090, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - De instructie op 0x%p verwijst naar geheugen op 0x%p. Het geheugen kan niet worden %s.

FAULTING_IP: 
+2440105d970
00000000`00000000 ?? ???

CONTEXT: ffffd0002177a090 -- (.cxr 0xffffd0002177a090;r)
rax=0000000000000000 rbx=fffffffff3123762 rcx=fffff90145abf7a8
rdx=000000004000aa82 rsi=fffff90145abf7a8 rdi=000000004000aa82
rip=0000000000000000 rsp=ffffd0002177aac8 rbp=000000004000aa82
r8=fffffffff3123762 r9=0000000100000001 r10=fffff96000899aa0
r11=ffffd0002177aa40 r12=fffff960001b1630 r13=000000c4d2ad4d00
r14=fffff90140160010 r15=0000000000000001
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246
00000000`00000000 ?? ???
Last set context:
rax=0000000000000000 rbx=fffffffff3123762 rcx=fffff90145abf7a8
rdx=000000004000aa82 rsi=fffff90145abf7a8 rdi=000000004000aa82
rip=0000000000000000 rsp=ffffd0002177aac8 rbp=000000004000aa82
r8=fffffffff3123762 r9=0000000100000001 r10=fffff96000899aa0
r11=ffffd0002177aa40 r12=fffff960001b1630 r13=000000c4d2ad4d00
r14=fffff90140160010 r15=0000000000000001
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246
00000000`00000000 ?? ???
Resetting default scope

DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT

BUGCHECK_STR: 0x3B

PROCESS_NAME: dwm.exe

CURRENT_IRQL: 0

ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre

LAST_CONTROL_TRANSFER: from fffff9600088fda3 to 0000000000000000

STACK_TEXT: 
ffffd000`2177aac8 fffff960`0088fda3 : ffffffff`f3123762 00000000`4000aa82 fffff901`45a4fec0 fffff960`001b7b54 : 0x0
ffffd000`2177aad0 fffff960`00463814 : fffff901`45a4fec0 ffffffff`f3123762 00003762`f3123762 00000001`00000001 : cdd!RmtAssociateSharedSurface+0x5f
ffffd000`2177ab20 fffff960`00276014 : ffffffff`f3123762 fffff901`45a4fec0 00000000`4000aa82 ffffe000`f7d15880 : win32k!MulAssociateSharedSurface+0x24
ffffd000`2177ab50 fffff960`002cc6e3 : 00000000`c000000d ffffd000`2177acc0 000000c4`c62bf4f0 00000000`000072f2 : win32k!GreSetRedirectionSurfaceSignaling+0x110
ffffd000`2177abc0 fffff802`a01e90b3 : ffffe000`f7d15880 00000000`00000007 00000000`00000001 000000c4`00000000 : win32k!NtGdiHLSurfSetInformation+0x243
ffffd000`2177ac40 00007fff`594527ca : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
000000c4`c62bf428 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007fff`594527ca


FOLLOWUP_IP: 
cdd!RmtAssociateSharedSurface+5f
fffff960`0088fda3 488d4c2420 lea rcx,[rsp+20h]

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: cdd!RmtAssociateSharedSurface+5f

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: cdd

IMAGE_NAME: cdd.dll

DEBUG_FLR_IMAGE_TIMESTAMP: 54506444

STACK_COMMAND: .cxr 0xffffd0002177a090 ; kb

BUCKET_ID_FUNC_OFFSET: 5f

FAILURE_BUCKET_ID: 0x3B_cdd!RmtAssociateSharedSurface

BUCKET_ID: 0x3B_cdd!RmtAssociateSharedSurface

ANALYSIS_SOURCE: KM

FAILURE_ID_HASH_STRING: km:0x3b_cdd!rmtassociatesharedsurface

FAILURE_ID_HASH: {40106ce9-8147-7985-9ee9-c812f65600b2}

Followup: MachineOwner
---------



Erik Zwep

Unable to connect to the server by using Windows Powershell Remoting

$
0
0

 Hi.

I had been reading about the tips of how to fix the error message:

Unable to connect to the server by using Windows Powershell Remoting

Went we want to setup this services in windows 2012 r2.

I had follow the thread:

https://social.technet.microsoft.com/Forums/windowsserver/en-US/bbb7427b-f839-48c4-b49c-467138f94b16/compatibility-problem-when-installing-remote-desktop-services-role-on-2012-unable-to-connect-to-the?forum=winserver8setup

Not all the tips apply to my network, the installation is base on the server-manager.

a) My server is not under a DC environment, it runs under a Linux Samba3 NT4 type.

Inside my domain, I don't have any issue, what I mean is that  WS2012 can access the network resources, share resources like folder and printers, is part of the domain and users can access his resources without issues.

b) I don't have any other services on the WS2012 machine, but we need to setup RDS.

c) The time is sync with our internal ntp.

d) Is not running inside a virtual environment.

e) The WS2012 is not running any virtual stuff.

f) The firewall is disabled.

What I had done:

disable ipv6 in the nic.

winrm is running.

The WS2012 is update.

I can test with the command:

Open PS admin mode.

Enter-PSSession -ComputerName my-ws2012-hostname

I can access the server, done is working.

I have run server-manager admin mode, the same issue.

-PerShellMB 1000 nothing change.

The command Test-WSMan ComputerName inside the remote session and outside works.

But' don't know what else to do?

Thanks.

Remote Desktop Server 2012 R2 Labs

$
0
0

Hello All,

Does anyone know if there are actual labs that accompany the Lab Guides for "Remote Desktop Server 2012 R2" ?

I have the Lab Guides, that's no problem but if you read the Lab guides it talks about setting up the "Base Configuration, etc." but I didn't see the actual Lab environment that I can use in conjunction with the Lab Guides.

I did find a Lab environment but it definetly wasn't for the Lab Guides that I found on TechNet.

Does anyone know of any Labs ??

Thanks

Change Terminal Server to Per Client License from Per Device

$
0
0

I try to change the per device license to per client but its greyed out.

how do i change it ?

thank you.

david

2012 RDS Gateway \ 2012 RDS WebAccess

$
0
0

Hi All,

I have a newbie question as I am from a citrix background.

I have the following setup which are all 2012R2 :

2 RDS Gateway in the DMZ
4 Session Hosts on the LAN
2 WebAccess on the LAN
2 Brokers on the LAN

Internally this is working really well and I can access the webaccess server with no issue by typing inhttps://mysite.domain.internal/rdweb

But I am not sure how to login from the internet ?

I was expecting to use a webrowser from an external PC on the intenet that hit the RDS Gateway website but this is not the case as there is no rdweb site on the Gateway server. I know the internal website ishttps://mysite.domain.internal/rdweb but how do I get to the internal Remote Apps \ Published desktops on the session hosts from external internet connection ?

Hope you can hep as racking my brain and tried Googling the answer but nothing has come up.

Regards Ivan


Stop pooled VMs from automatically starting

$
0
0

Hi!

We need to stop pooled VMs from starting automatically. We have already changed the automatic startup action to none but still they are starting up.

Thanks.

RDS Licenses Activation

$
0
0

Hi!

We need to activate our win 2012 RDS Licenses (User Cals) but there is no key on Microsoft Licensing Portal. What is the procedure to activate it?

Thanks.

Increase Size Of UPD For Single User

$
0
0

Hi All,

I am trying to increase the user profile disk using the following command.

Resize-VHD -Path C:\s-xxxxxxx.vhdx -SizeBytes 10GB

Getting the following the following Error.

" the requested operation could not be completed because it might truncate user data residing on the virtual disk "

any one suggest me how can we extend the UPD profile.

Thanks,

Kumar

Trying to print

$
0
0

Hi!

Whenever a user logs in to our Terminal Server, it tries to print something on user's printer.

2012 R2 RDS Temporary Profile issue

$
0
0

I have set up a standard 3 node 2012 R2 RDS for testing. All virtualized on VMware ESXi 5.0. I have a connection Broker, session host, and web access server. I have published several applications and I can access them without a problem. Here is my issue:

When I try to log on to my session host server either locally or thru RDP, I am always logged in with a Temporary profile. It does not mater what user account I use. Even logging on locally as the administrator I get a temporary profile.

All windows updates are installed and current.

I have removed the server from the domain, deleted the account, and rejoined it to the domain.

I have deleted all .bak registry entries from here:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

There is a hotfix here for a similar issue on 2012 but it does not apply to 2012 R2

The only event viewer errors are:

1515 (Windows has backed up this user profile. Windows will automatically try to use the backup profile the next time this user logs on.)

1511 (Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off.)

Any suggestions to resolve would be greatly appreciated.


Russ

Staff Logout from desktops and Event Viewer shows they are still logged on

$
0
0

Hello, It was suggested I run an issue by this forum

I have a small network, Server 2008 R2 (64) SP-1 for DC, DHCP, DNS, File / Print, and 3 windows 7 desktops, all connected with a NetGear hub.  Checking the server Event Viewer Log 'Security' showed staff logged overnight, which we do allow.  And the desktops have "Someone is logged on" even when no one is.

It was suggested to enable Session to disconnect after an amount of time.  Will this do it?

If staff logoff of the desktops, and at server the session is still showing as active, and I want to ensure that the session is disconnected 3 hours later, set "Set time limit for disconnected sessions" for Enabled 3 hours.

  1. Server
  2. Group Policy Management
  3. Default Domain Policy
  4. (Enforce, Link Enabled)
  5. Edit
  6. Computer Configuration
  7. Policies
  8. Administrative Templates
  9. Windows Components
  10. Remote Desktop Services
  11. Remote Desktop Session Host
  12. Session Time Limits

       * Set time limit for disconnected sessions

       Enable for 3 hours

        Set time limit for active but idle Remote Desktop Services sessions

        Set time limit for active Remote Desktop Services sessions

        Terminate session when time limits are reached

        Set time limit for logoff of RemoteApp sessions

Is there any other settings I need to set for this?

What else would cause sessions to not disconnect

Thank you

B.


Not able to install RDS

$
0
0

Hello IT professionals,

I have been trying to install RDS in one of my 2012R2 box.  Here is the scenario, Windows 2008R2 is our Domain controller.  We have two 2012 servers as a member servers with NO Roles in them.  I would like to install RDS all the roles including licensing server on the same 2012 servers.  Goal is very simple, we want to have more than 2 concurrent remote sessions.  We bought a 5 CALs already for this purpose.  Whenever I run the RDS quick deployment or the standard deployment, "Service Collection" and "RemoteApp programs" fails to complete.  Connection broker goes thru, but the RDMS service never starts.  I changed the login credentials to Network Service on RDMS and WID services.  I have rebuilt one of the server hoping it would resolve the issue, no luck there either :(  Is there any GPO blocking this?

Need major help.

I can provide more details if required.

Thanks a bunch.


Question about remoteapp and it crashing randomly

$
0
0

Hi all,

I have a question about some odd behavior we are seeing using RemoteApp and our application.  Basically we have around 100 - 130 users at one time using our custom application and through out the day the application will just crash for no reason and leave an error in the event viewer 1000 followed by 1005 (added the details below). We have 2 RD session host and its the same error on either one what usually fixes the problem is disconnecting the users that are using their file server share to the application (we use multiple shares with the customers name to the application on a single file server so \\fileserver\customer1\files\app.exe \\fileserver\customer2\files\app.exe)  So the question I have seems more like an issue with multiple users accessing the same files eventually crashes the application and I read on this one site something about Opportunistic locking Opportunistic Locking and Read Caching Can someone recommend how I could troubleshoot an issue like this to see why we are having these crashes?  Any help is greatly appreciated!

1000 Error 

Faulting application name: myapp.exe, version: 1.9.1.1043, time stamp: 0x5046f3d2
Faulting module name: ntdll.dll, version: 6.3.9600.18007, time stamp: 0x55c4bc8e
Exception code: 0xc0000006
Fault offset: 0x0006d2d7
Faulting process id: 0x2e0c
Faulting application start time: 0x01d1278ebe2d0953
Faulting application path: \\fileserver\path\myapp.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: 0257147e-93b2-11e5-943e-0050569e0b27
Faulting package full name: 
Faulting package-relative application ID: 

1005 Error

Windows cannot access the file  for one of the following reasons: there is a problem with the network connection, the disk that the file is stored on, or the storage drivers installed on this computer; or the disk is missing. Windows closed the program uniPaaS runtime because of this error.

Program: uniPaaS runtime
File: 

The error value is listed in the Additional Data section.
User Action
1. Open the file again. This situation might be a temporary problem that corrects itself when the program runs again.
2. If the file still cannot be accessed and
- It is on the network, your network administrator should verify that there is not a problem with the network and that the server can be contacted.
- It is on a removable disk, for example, a floppy disk or CD-ROM, verify that the disk is fully inserted into the computer.
3. Check and repair the file system by running CHKDSK. To run CHKDSK, click Start, click Run, type CMD, and then click OK. At the command prompt, type CHKDSK /F, and then press ENTER.
4. If the problem persists, restore the file from a backup copy.
5. Determine whether other files on the same disk can be opened. If not, the disk might be damaged. If it is a hard disk, contact your administrator or computer hardware vendor for further assistance.

Additional Data
Error value: C00000C4
Disk type: 0

UDP profiles cant be detach from RDS Farm session hosts after disconnect or logoff

$
0
0

Hi,

We have a 2012R2 RDS Farm deployment consisting of the following:

1x AD ,1x RD Broker / RD Web Access,1x RDGW,3x RDSH,1x File Server for UPD.

All of the servers are running on 2012R2. We're having an issue with UPD's not dismounting when a user is logging off.

So when this happens the load balancing wont take effect. The user can only login to the same server as before and if it login to another server it will get a temp profile because the VHDx is still attached to the the former server. There is not much on the internet and we have tried deleting the VHDx and also cleaning the registry of all the temp SID values in the ProfileList section. And also We have checked network settings and there is no loss of network connectivity between any of servers.

The UPDs are stored on a 2012R2 SMB File Server and the notable  error we can see is the one below:

Log Name:      Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin
Source:        Microsoft-Windows-TerminalServices-RemoteConnectionManager

Event ID:      20491
Task Category: None
Level:         Error
Keywords:     
User:          SYSTEM
Computer:  <Computer>   
Description:
Remote Desktop Services could not disconnect a user disk for the user account with a SID of <SID>. The error code is 0xAA.93


Any help on this one would be highly appreciated.


nimz

Default Save as option

$
0
0

hi,

We need to change the default save as option for all MS Office & PDF files for terminal server users to C drive of the local client machines instead of the terminal server profiles.

TLS 1.2 and ECDSA with RD Gateway

$
0
0

Hi all,

I managed to enable and use TLS 1.2 and ECDSA certs for normal, direct RDP connections. My question now is: Can this be done with RD Gateway, too? I can import an ECDSA cert into IIS, but I can't choose it for RD Gateway. It says "cert not supported" on 2012R2. Apparently, only RSA certs can be chosen for RD Gateway. So, how can I use an ECDSA cert for RD Gateway?

Thanks

Martin

RDGateway/MFA/NPS timeouts when accessing from computer joined to other domain

$
0
0

We are having problems using the Azure MFA server for securing Radius authentication with RDGateway. Things work as expected for some users but others are having massive problems and we think we have narrowed it down to being related to where the user is trying to connect from. If you connect from a computer joined to the same domain as the RDS farm or from a workgroup/Azure AD joined computer things works great. If you however try to connect from a computer joined to another domain (any other domain) you will receive a timeout most of the time.

We have increased the timeouts on the Load Balancing tab of the radius server pointing to the MFA server in the NPS on the RD Gateway so that’s not the problem. When I look through the log files the Radius request is sent to the MFA server which in turn pass it on to the target Radius server for authentication.

This is what I have in the MFA server log MultiFactorAuthRadiusSvc:
2015-11-26T17:25:36.427939Z|0|3860|4088|prfad|Event 3.
2015-11-26T17:25:36.427939Z|0|3860|4088|prfad|Sock 0x0000000000000110
2015-11-26T17:25:36.427939Z|0|3860|4088|pfrad|Code 1 - ACCESS_REQUEST.
2015-11-26T17:25:36.427939Z|i|3860|4088|pfrad|old id: 8, new id: 123
2015-11-26T17:25:36.427939Z|i|3860|4088|pfrad|Creating a new request_state for client x.x.243.196, port 62151, ID 8
2015-11-26T17:25:41.459265Z|w|3860|4088|pfrad|Timeout expired waiting for response from radius servers for client x.x.243.196, id 123

And then a little later
2015-11-26T17:25:51.428086Z|0|3860|4088|prfad|Event 3.
2015-11-26T17:25:51.428086Z|0|3860|4088|prfad|Sock 0x0000000000000110
2015-11-26T17:25:51.428086Z|0|3860|4088|pfrad|Code 2 - ACCESS_ACCEPT.
2015-11-26T17:25:51.428086Z|w|3860|4088|pfrad|Got response without a pending request.  Dropping packet.
2015-11-26T17:25:51.428086Z|e|3860|4088|pfrad|processIncomingPacket failed.

So the request is actually granted it just took some time and the MFA gave up. The timeout is 5 seconds according to the log. According to the Security log on the NPS server it granted the request and the timeline is spot on.

The interesting thing is that looking through the security log at the RD Gateway, where the actual authentication will take place all of the requests that end up with I find 6278 Network Policy Server events where the Client Machine/Account Name is a FQDN. Connecting with an Azure AD joined computer I get just the machine name.

I ran Wire Shark and it seems that the Radius server is trying to resolve the FQDN name of the computer or connect to an authority and of course it will not be able to do so and after some 10-20 seconds it times out and grants the request. The problem with this is that the MFA server times out after 5 seconds and this doesn’t seem to be configurable.

The strange thing is that for the FQDN name it works sometimes but fails like 80% of the times. The workgroup computer always succeeds.

We had a ticket with MS in early 2012 about computers from another domain beeing slow connecting to RDS in another domain and they said this is “by design” and that the timeoutvalue in NPS is 20 seconds. Ideealy it would be nice to be able to turn this sort of nonsense off but I would settle for being able to increase the timeout value on the MFA server. 

The setup is all 2012R2

Here's what's going on towards ADDS:

02/24 15:52:37 [MISC] DsGetDcName function called: Dom:ANYDOMAIN Acct:(null) Flags: IP KDC 
02/24 15:52:37 [MISC] DsIGetDcName: Ignore single label DNS domain name ANYDOMAIN
02/24 15:52:37 [MISC] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c01ffff1
02/24 15:52:37 [MAILSLOT] Sent 'Sam Logon' message to ANYDOMAIN[1C] on all transports.
02/24 15:52:37 [MISC] NetpDcGetName: NetpDcGetNameNetbios returned 121
02/24 15:52:44 [MAILSLOT] Sent 'Sam Logon' message to ANYDOMAIN[1C] on all transports.
02/24 15:52:44 [MISC] NetpDcGetName: NetpDcGetNameNetbios returned 121
02/24 15:52:52 [MISC] DsGetDcName function returns 1355: Dom:ANYDOMAIN Acct:(null) Flags: IP KDC

Viewing all 21489 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>