I use Windows Server 2012 R2 and try to block the access to local drives.

Accessing the local drives is blocked through policy and works fine. However, people are able to access to the local drives when using the URL tab in IE11. By starting IE11 they are able to type d:\ for example and browse to files where I don't want them to go.

The point is, it is a RDP server and users must access it. However, the following policies have been applied already: "Prohibit access to Control Panel and PC settings", "Hide these specified drives: A, B, C and D", "No entire network in Network Locations"and "Prevent access to drives from My Computer".  This means they can't see the drives, but user specific settings are written to C and D, which is fine. So far so good.

So the only thing left is to browse the filesystem through IE. And I haven't been able to find a policy setting for this. I don't want to use the registry for this (preferrably). 

Hopefully anyone knows if there is a group policy setting to disable this?

Adding NoFileRun to the registry doesn't seem to work by the way.

Any suggestions are welcome.

Hello I'm not being able to install RD Connection Broker with High Availability.

The RDS deployment consists on two servers running win2012

server1 - RDWA and RDG

server2 - RDSH and RDCB

The SQL server 2012 that I'm using is installed on server2 itself and had to be installed after the RDS otherwise the SQL installation failed and had to be done using the RD-install. It's working fine , I've applications that run on it.

As when configuring RDCB HA "both" RDCB hosts access directly to the SQL DB to create a new database, their accounts need to be authenticated as a SQL login with dbcreator role.

1 step: I checked a straight forward installation_

Installing and Configuring RD Connection Broker High Availability in Windows Server 2012

Failed

2 step: I checked an installation where my problem happened.

I checked RD Connection Broker HA – SQL Permissions
Added the host to a domain group and added the group as an SQL login, SQL authentication failed.

4 step: Google for how to create SQL login for a computer account and  I added it by executing:

“CREATE LOGIN [MyDomain\MyComputer$]FROM WINDOWS”

Also tried to use Add-ADcomputerServiceAccount without success.

3 step: I ended here

Taking a closer look at RD Connection Broker High Availability in Windows Server 2012

Where I verified that none of the following explanations were correct:

• The SQL Server Native client is not installed
• A firewall is blocking SQL Access from the RD Connection Broker (port 1433)
• The incorrect SQL Server Native Client version is specified
• An incorrect SQL Server name is specified

I tried several variations of the string to use but this is the one I think it's correct:

DRIVER=SQL Server Native Client 11.0;SERVER=WIN2012-1;Trusted_Connection=Yes;APP=Remote Desktop Services Connection Broker;Database=RDCB

The error registered on SQL is:

"Message
Login failed for user 'RDS\WIN2012-1$'. Reason: Could not find a login matching the name provided. [CLIENT: <local machine>]"

I tried to connect via ODBC with an existing username an it succeeded.

The problem seems to be with the computer account not existing as an SQL login...the thing is that it exists.

I need to set this up in order to be able to change the RDCB FQDN to a public FQDN.

How were you guys able to overcome this? Did you faced this at all?

Thanks,

David

We have a collection of Session Hosts that use UPDs stored on a file share at a primary datacentre and wanted to find out if it's possible to restore these UPDs to a different location and use them from a DR Session Host at another datacentre as part of a different RDS Collection?

Cheers for now

Russell

Hi, 
I am trying to execute "net use " command remotely to map a network share directory by using administrator credentials, to one of my windows server 2012, command executes successfully.

However, the mapped drive shows "unavailable" status. what could be the cause, and how to workaround this ?

Following is the command I am using,
net use * \\xx.xxx.xx.x\share\Software password /USER:Administrator

Thanks in Advance,
 Krishna

Hi,

When we need to do maintenance on a Server 2012R2 RDS server we change the Allow New Connections to "False" in Server Manager.
After the server reboots new connections are allowed on the server before the Allow New Connections is set to "True".
Is this reset after a reboot, because it looks like it?

Is this a known issue?

Kind regards,

Matthijs

I am struggling to get my Windows Server 2012 R2 standalone system to successfully deploy VDI quick start deployment for Virtual Machine - Based Desktop Deployment.

Hardware:

• Supermicro X10SRA-F Motherboard (two NICs)
• Intel Xeon E5-2687W v3
• 64GB Kingston DDR4 ECC 2133MHz Memory
• 800GB Intel Fultondale 3 DC P3600 NVMe PCIe SSD

I was able to successfully install Microsoft Windows Server 2012 R2 Standard on the PCIe SSD along with drivers and windows updates.  Set static ips for both adapters and installed ADDS and DNS roles to create domain controller successfully. 

Next I try to deploy VDI Quick Start for Virtual Machine-Based Desktop Deployment using a sysprep Win10 VHD (mode:vm).

1. The server restart and begins role installation.
2. It gets to 99% then begins undoing changes saying "could not complete" or something like that.
3. Once logged back into admin, server manager says RDS role installed successfully but virtual template failed (invalid namespace), but:
   • Event ID 4119 shows that RD Virtualization Host Configuration Failed (5 errors):
     1. Could not add server to the rds management servers group (but when I check, it has been added).
     2. Could not add the rd connection broker server to the ts virtual desktop server settings
     3. VmHostAgent on server could not sync the vm objects to CB (invalid namespace).
     4. Could not configure the migration settings on the rd virtualization host server
     5. Could not create virtual switch on the server.
   • RDS role shows RD Virtualization Host role installed.
   • When I go to add or remove roles, it shows RD Virtualization Host NOT installed.

I am really struggling to get this system up and running with personal virtual machines that clients can connect to. I have tried installing VDI with standard deployment as well as individual roles even trying to MS checklist one role at a time. When I get to installing RD Virtualization Host role it fails.

Can someone please help me?  I don’t know what I am missing.

Thank you for your feedback.

-- Michael Lowe Computer Engineering

Hi....

On one of our Windows 2012 Remote Desktop Host servers we have the following problem.

--Not working example:

-- Working example:

---

So black boxes all over the place. When I troubleshooted this as admin I found that switching the theme to "Windows" under Windows standard theme  made the black boxes go away. But switching to the "Windows Basic" them makes them appear again.

So:

-- How do I fix the basic theme? As this is the theme regular users uses and they have no option of changing theme. RemoteApp technology is used.

-- Or possibly, as I think it works fine with the "Windows" theme, how do I apply this to all users logging in to the server?

Also, I have tried to find a solution on this on the forum, the internet and be general troubleshooting. No errors in the event log in Windows......

Looking forward to hear from you. Thank you in advance.

Red Baron

Hi

We're testing Remote Desktop for Mac Version 8.0.26 (Build 26951) and Windows 2012 R2 RemoteApp as a possible replacement for Citrix XenApp, launching published apps via the web page and also using Remote Resources within the app and both work pretty well but do need many of the features requested within the feature request web page, particularly proper Mac keyboard mapping.

However, one of the biggest annoyances is that having double clicked the Remote Resource it appears to commence logging in, then disappears requiring another double click.

It is more annoying using the rdweb page. Having double clicked the published app the user is then prompted for the domain and credentials, then the process begins and then stops. This has to be repeated including entering the login credentials again, usually only once, until eventually the app is launched.

Often this happens after the blue log in screen is displayed having gone through the black RDP Connecting screens.

Would appreciate a fix as this will annoy our customers.

Many thanks

Andy

Hi,

We have a RDS 2012 R2 Session Deployment at one of our customer site installed. The deployment contains:

- 2 Connection Broker in HA
- 1 SQL Server
- 2 Webinterface Server
- Several Session Hosts
- 1 Licensing Server
- 1 Gateway with RD Web
- User Profile Disks on Collections is enabled

Since a while we have an issue that users are no longer able to start RemoteAppss. We recieve the message:

"The task you are trying to do can't be completed because Remote Desktop Services is currently busy. Please try again in a few minutes. Other users should still be able to log on"

In the application log of the specific SH we see the Eventid Warning 6005 and 6006:

6005:
The winlogon notification subscriber <Profiles> is taking long time to handle the notification event (Logon).

6006:
The winlogon notification subscriber <Profiles> took 83 second(s) to handle the notification event (Logon).

If the server is rebooted users can logon back to the RemoteApps. This happens sometimes two or three times a day.

There was a Hotfix available for Windows Server 2008 R2 but not for 2012 R2.

Can anyone help with this?

Cheers,
Al

Hello guys,

Wouldn't write this if there was an answer or a solution on the internet. I'm having troubles with the latest Remote Desktop Connection app for the iOS. I have been using version 8.0.3 for different projects for ages, and now after upgrading it to the latest 8.0.26 i started having lag issues. The problem is I haven't backed up the older version, and now i can't seem to find a way to download the older version. Is there ways to download older version files? Any archive page or something similar? 

Hi everybody

I have a simple RDS farm with 2 hosts servers which also have the Connection broker roles installed 

actual DB is on a 2008R2 SQL server and i'm trying to move the DB to a new SQL2014 server (I know it's not officially supported)

PS C:\Users\Administrator> Get-RDConnectionBrokerHighAvailability
ActiveManagementServer   : rds01.ppva.be
ConnectionBroker         : {RDS01.PPVA.BE, RDS02.PPVA.BE}
ClientAccessName         : RDSFARM.PPVA.BE
DatabaseConnectionString : DRIVER=SQL Server Native Client
                           11.0;UID=RD_Brokers;PWD=password;SERVER=sis-sql2008.ppva.be;APP=Remote Desktop Services
                           Connection Broker;Database=RDSFarm
DatabaseFilePath         : F:\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Data\RDSFarm.mdf

I tried the following command :

Set-RDConnectionBrokerHighAvailability -ConnectionBroker "rds01.ppva.be" -DatabaseConnectionString "DRIVER=SQL Server Native Client 11.0;UID=RD_Brokers;PWD=password;SERVER=sis-sql2014.ppva.be;APP=Remote Desktop Services Connection Broker;Database=RDSFarm" -DatabaseFilePath "F:\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\DATA\RDSFarm.mdf" -ClientAccessName "RDSFARM.PPVA.BE"

but get an error 

Set-RDConnectionBrokerHighAvailability : The RD Connection Broker server is configured for high availability.
At line:1 char:1
+ Set-RDConnectionBrokerHighAvailability -ConnectionBroker "rds01.ppva.be" -Databa ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Write-Error], WriteErrorException
    + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Set-RDConnectionBrokerHighAvailability

Any idea/suggestion ?

Thanks in advance for your help !

Hello All,

I am using RDP8.1 [from Windows 8.1 - Dell Thin client - Z90Q8] to connect to Windows 8.1 VM hosted in hyper-V (Windows server 2012) with  NVIDIA Quadro 4000 GPU. Remotefx is enabled on the host VM. UDP and auto network detect is enabled on the client. Followed recommendations in below articles

https://blogs.msdn.microsoft.com/rds/2012/08/23/remotefx-for-wan-overview-of-intelligent-and-adaptive-transports-in-windows-8-and-windows-server-2012/

https://blogs.msdn.microsoft.com/rds/2013/10/31/remotefx-h-264-codec-improvements-in-windows-8-1-and-windows-server-2012-r2/

http://microsoftplatform.blogspot.in/2011/03/how-to-enable-and-test-remotefx-on-rdsh.html

The thin client has AMD Radeon 8400 Integrated Graphics card, which is capable of H264 hardware decoding.

While running 3d benchmark tests (https://unigine.com/products/benchmarks/heaven/) and viewing H264 videos through VLC player on the host, in high speed LAN network, I am able to see host side rendering.

The article, https://blogs.msdn.microsoft.com/rds/2012/08/06/remotefx-adaptive-graphics-in-windows-server-2012-and-windows-8/talks about RemoteFX offloading all image decoding to an AVC/H.264 hardware module on the client side based on network conditions.

When I switch to 1Mbps, 250ms latency, 5% latency network, I don't observe client side decoding. Modifying group policy  to server scalability or network bandwidth didn't have any impact. Event-viewer logs show remotefx is enabled, the RDP connection bar also shows low bandwidth.

Is there any specific criteria for remotefx to switch to client hardware H264 decoding?

Thanks,

Dears,

I'm working on a legacy application using winform (.net 4.0 & c#).

The client application is installed on a machine accessible only via RDC or VDI. The OS is Windows 7 or higher.

The client application must be able to print PDF files from that machine to the local printer (local or network) installed on the client machine. This means that the printer selected via RDC is a redirected printer using the TS easy print drivers. Those drivers don't allow the usage of RAW printing.

The printing method used before were:

- Copy of the files directly on the UNC of the printer (\\printername\dc)

- Usage of ImportDll and calls to OpenPrinter, StartDocPrinter, WritePrinter, ....

Both of those solutions don't work anymore because:

- The network printers are not on the same domain anymore and therefore not accessible directly from the RDC.

- The WritePrinter method don't work anymore since the easy print drivers don't understand RAW printing.

So, here comes my question. How can I print on those printer? Do I have to create an EMF file for the printing? If yes, how can I use my PDF file and create an EMF file containing the information? Is there other solutions (modifying the group policy is not an option since we don't want to install the drivers of the different clients that will connect)?

In last resort, the usage of a library could be foreseen but a long discussion with the management will be necessary (so I hope other solutions exists). Is there some third party library that you could advice?

Also, I tried printing in that environment using PrintDocument.Print(). That is working as expected but with that solution the problem is to convert the pdf to a drawable format (one image per page or other ...).

Thanks in advance,

Benoit Delfosse
Senior .Net Developer/Architect

Is it possible to Control Client Printer mapping per user (on Server side)?

I know it's possible to set Client Printer redirection (on/off) for rds Connection on host. Is it possible to add another rds Connection to a rds host on Windows Server 2012 r2? With Windows Server 2008 R2 it could be done via terminal Service configuration mmc, but I cannot find this Feature in Windows Server 2012 r2 Server Manager.

Thank you.

Hi,

A customer I am working with has a VDI envrionment.  All users open up an rdp session to servername, and that is a brokerserver to hand out the virtual session.  However we have a new user that for some reason can only connect properly if they use the IP of the broker server.  If they try to connect with the name, we get a long error message basically saying:

Remote Desktop Connection cannot connect to the remote computer.

The remote computer servername that you are trying to connect to is redirection you to another computername vmname.FQDM.  Remote Desktop Connection cannot verify that the computers belong to the same RD Session Host server farm, etc etc.

The quick fix would be to change the script to to the IP address, but we aren't looking for a quick fix, we are looking for the right fix.  One thing I did notice is that when we rdp from out test account with the IP address, it shows the cached the user name in the login screen.  It does NOT when going in via name.

I cannot find a way to save login credentials in Remote Desktop Connection Manager v.2.7 installed on Windows 10.

It works fine in W8.1.

I created a new profile that works after saving. But when click another server it asks for the password because always starts with

custom profile.

Is it a glitch in W10 or I am missing something.

--- When you hit a wrong note its the next note that makes it good or bad. --- Miles Davis

Note: I think this is a duplicate of Remote Desktop Connection - PC will restart in one minute . As that topic was started as a RDP client issue, I would like to report it as a server issue.

Since recently (last 2/3 weeks) I'm having spontaneous reboots on my Windows 10 Pro PC when RDP-ing into the machine. My PC is usually 24x7 turned on and I connect several times a day to it. After a reboot, it's stable again for a few days. It appears to happen more often when I use the Microsoft RDP app for Windows 10 Mobile.

I deployed a RDS Farm that includes 2 Session Host Servers (SS01 and SS02) and a Connection Broker (CB01). I also have a Domain Controller DC01 with Certificate Services installed. For balancing purposes I created two A records in the zone with the RDSFarm and the same fixed IPs that the SS01 and SS02 have. The problem I have is that when I RDP to “RDSFarm” I get a certificate mismatch. I have read abundantly and done many things with the certificates (always using the internal CA and Active Directory Certificate Services) but have been unable to tackle this. Help needed.

Thanks !!

Hello,

We have a new RDS 2012 R2 deployment that we're working on and are having some issues. We've got the environment setup for HA and that part seems to be working. We can connect in but when the connection broker hands the connection over to the session host, we get a certificate mismatch error.   

All access will be externally through the Web/Gateway and will be accessing remote apps.  We have a wildcard cert loaded for *.mydomain.com on all the servers. (Including the session hosts.)

Domains
Internal: int.mydomain.com
External: mydomain.com

Servers
Web / Gateway: rdg01.int.mydomain.com & rdg02.int.mydomain.com (behind load balancer as remote.mydomain.com)
Connection Brokers: rdcb01.int.mydomain.com & rdcb02.int.mydomain.com  - accessed via remote-cb.mydomain.com)
Session hosts: rdsh01.int.mydomain.com & rdsh02.int.mydomain.com

The web login to "remote.mydomain.com" works with no errors.  In the .rdp file, I see "remote-cb.mydomain.com" in the correct locations.  When I connect, shortly after getting prompted for credentials I get the follow error message:

1. Identity of the remote computer could not be verified. Name in the certificate from the remote computer RDSH02.int.mydomain.com (If I use the selfsigned) -or-
2. Identity of the remote computer could not be verified. Name in the certificate from the remote computer RDSH02.int.mydomain.com but the certificate is for *.mydomain.com (If i have the wild card associated to rds.)

Everything else works fine up till that point.

I've tried changing it so the servers were added using "rdsh01.mycompany.com" but server manager didn't like that. I allow followed the directions in Appendix A Non-RDP 8 Clients. (http://www.rdsgurus.com/ssl-certificates/windows-2012-r2-how-to-create-a-mostly-seamless-logon-experience-for-your-remote-desktop-services-environment/)   It seems to have left something out.  I have the DNS entries created but the connection broker still uses the wrong name.  Is there any way to tell the connection broker to use a different FQDN when it connects?

I've seen quite a few posts on this but it looks like most people stopped answering back without a resolution.

Thanks!