Hello everyone,

We are in the middle of an Office 365 migration from Lotus Domino. As with most Lotus Domino customers, we also have some own developed applications (databases) running off the Domino server as well as the mail part. We have to keep these applications running at least til the end of the year. These applications are not web enabled so we need to use a native Lotus Notes client to access them.

So .. we did a Windows 2012 R2 installation and added the Remoteapp role and installed a basic Lotus Notes client. We enabled the Lotus Notes application as a remote app for our users and this is working fine. We have Windows 7 (x64) clients, so we had to do some regkey tricks to get the file association to work (.nsf, .ntf, ...).

Now here is the problem. One of our own developed application is sending a notification mail when you change document owner. In this notification email the application sends a link to the specified document to the new owner. The link is presented as notes://servername/<generatedUID>. This email is now delivered to the users inbox in Outlook and we want to directly open the document in the Lotus Notes remoteapp. We have done all the regkey tricks and the URL is sent to the remoteapp server, but it's refusing it. If the user logs into to the remoteapp by RDP and run "notes://servername/<generatedUID>" the Lotus Notes client is associated and works perfectly.

Does anyone have any idea how to make the remoteapp server approve the notes:// handling?

Thanks guys!

Hi all - I'm setting up a new RDS 2012 R2 RemoteApp farm and running into the following issue when launching an application:

My domain is actually a .local domain but I have ran the Set-RDPublishName script (https://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80) to change the published FQDN to match the wildcard certificate I have from GoDaddy and created an A record to match the published FQDN to the IP address of the connection broker. Farm consists of

RDS01 - Gateway
RDS02 - Connection Broker/Web Access
RDS03 - Session Host
RSD04 - Session Host

I also added the thumbprint to the group policy "Specify SHA1 thumbprints of certificates representing trusted .rdp publishers" yet I am still getting this error. Can anyone tell me what piece of the puzzle I have missed?

Thanks,
Gary

Hello,

Virtual Server - Windows server 2012 R2 latest updates w/ Exchange 2013 Update 11.

If I add an RD Gateway Certificate, it relates itself to the IIS Exchange Back End 443 certificate. Exchange Back End doesn't have a 443 port, only a 444 port so RD Gateway automatically creates a 443 port in the Exchange Back End site. There is already a 443 in the Default Web Site so the Exchange Back End won't start. I can get the Exchange Back End to start by removing the 443 binding but next time I open RD Gateway, it gives me the error below.

So the question is, is there a way to get RD Gateway to look at the Default Web Site for its associated 443 port and certificate instead of looking at, and automatically creating the port and certificate in the Exchange Back End site?

Thank for all your help,

Robert

I've been experiencing issues connecting to a remote system with RDP.  The server has been operational for several years and is one of 4 servers identical servers located at the same site.  Recently, one of the other servers crashed that I had been remoting into for a long time so I had to start using this server to RDP into.  Once our on-site IT personnel redirected port forwarding to this NAT'd server I was able to log in remotely to make some changes, including adding a role as a Remote Access VPN server using the Routing and Remote Access Server Setup Wizard and removing the Network Threat Protection component of Symantec Endpoint Protection so that I can use and configure the Windows Firewall.

While working through the Routing and Remote Access Server Setup Wizard, my RDP session locked up and disconnected.  I was able to reconnect after on-site personnel completed the wizard and restarted the computer, but once I reconnected, after a minute or 2, I was again disconnected and could not reconnect until the server was restarted.  I presumed adding the VPN role affected my RDP access, and decided to remove the VPN server role. 

Now, I cannot RDP into the server unless it is freshly rebooted, and even then it only allows me to stay connected for a couple of minutes before the connection is lost and I'm unable to reconnect again until the server is restarted.  One vicious cycle; able to login after reboot only to have the connection dropped and require a restart to reconnect again.  

This server also hosts a database that client systems are only able to access for a short period of time after reboot before their connection drops. 

I've quadruple checked the Windows Firewall inbound rules, uninstalled the anti-virus application completely, even going so far as having to obtain their removal application to ensure every piece of it was removed, and I'm still having the same issue. 

The entire issue started when I tried to add the VPN role.  I'm sure uninstalling and reinstalling the anti-virus several times hasn't helped either, but as it stands right now, I have a server that shortly after restarting is unable to communicate; not with the internet, not on the local area network, not remotely.   On-site personnel are trying their best to follow my troubleshooting telephonically but it's getting to the point where I'll have to find out what's wrong and provide an easy fix remotely, or, make a trip half-way around the world to try to figure it out myself (which would be EXTREMELY difficult/close to impossible right now). 

Quesitons: 

1) Why would I be able to connect remotely after reboot and then get disconnected shortly thereafter? (Service/application causing the issue hasn't started until shortly after a reboot??)

2) Why does it not only kill remote access, but LAN and internet access on the server?

3) What else can be checked to help diagnose and troubleshoot the issue?

I have done a lot of searching on the web but haven't found issues identical to my own. I've seen information on uninstalling a patch and a seen a hotfix for RDP issues, but that still wouldn't help LAN and internet access on the server.  This server ran local RDP access, local client access to the database, and could access the internet for years prior to the recent changes and issues. 

Edit:  The system I'm remoting into the server with is a Win 7 Pro system, and the database clients are also Win 7 Pro.

Edit 2:  I've found information on the VPN "binding" to the port that may have been improperly configured which could be causing the issue.

HI there. First of all, English is not my motherlanguage. plz understand about it.

I am trying to redirect my Android Device (Nexus 5) via RDP, but cant find enough infos.

I can see my device in RDP client - option - local resource - Plug and Play device, but its still not working.

Can u guys give me some tips and solutions? I am waiting for your help.

Thanks.

I used to have two collections in my RD Web Services.  One was for a certain group of people (called collection A).  Another collection (called collection B), each virtual machine was assigned to a specific person.

Somehow, collection B doesn't show up when anyone logs into the rd web access.  It used to be there, now it's missing.  I don't' recall what changed on the server to cause this, nor do I recall how I even set all this up (it was almost a year ago), or how to get collection B back to show up.  Collection B has about 4 virtual machines in it.

I even have a collection C, which is just one computer assigned to one user.  No problem there.  I can log in as that user and see his own collection.

So, how can I add a collection to the RD web access?  I should have documented how I added the collection, but for the life of me, I just can't recall how I did it in the past.

Any help is greatly appreciated.

Thank you

Hello,

I'm looking to deliver a virtualized desktop solution for around 300 users. The solution must have an in-built functionality for audited and secure import/export of data from the client machine to the Guest virtual desktop instance. 

For example, a user may choose to export a MS Excel file from the virtual desktop to their own desktop, or import a PDF from their own desktop to the virtual desktop. In either the import or the export process, there needs to be a secure audit of what happened, when, and how. Is there an in-built solution within VDI which does this?

The solution may be as simple as: each time data is transferred across that barrier, a copy of the data is stored in a location that isn't accessible or modifiable by the end-user, and this repository can be then inspected by authorised individuals if needed (to check the audit trail). The solution however needs to be inherent to the VDI product, and not a "hack", as the data that's transferred is extremely sensitive. 

Thank you,

Iron8844

Hi,

what are the maximum resolution of the different rdp versions?

Right now I am connecting to windows server 2008. Meaning rdp version 6.1. If I am correct 16 screens with a maxiumum of 4096x2048 pixels are available? 

Is there anyway to get higher than 2048? My screens are at 3840x2160 pixels. This hotfix: https://support.microsoft.com/en-us/kb/2989007 is only available for version 8.1 i guess.

What are the maximum screens and resolution for versions higher than 6.1?

best regards!

Hi all,

I'm running into a problem with idle timeout not being displayed correctly in the Connections-overview.

As soon as the connection is disconnected, the idle-counter starts running.

When I reconnect, however, the idle-counter keeps running, instead of being reset to 0.

Reconnect is done from the same machine, same Client IP-address.

Connection is made through an RD Gateway-server.

Hi All

I've a simple RDS deployment of one server with all the rolls on it, I've also an Exchange server.

Because Exchange needs port 443, I configured the RDS server to use port 8443 in the RD Gateway Manager.

On the router I configured the port forwarding as Incoming port 443 forward to the Exchange  server and incoming port 8443 to the RDS server.

Internally everything is working fine, but when I try to connect externally through the webfeed or the rdweb web page I get the error "Remote Desktop gateway not available" after I put my username and password (which I can use internally fine)

I can see the published applications but when I try to run any of them I get these error.

When I check on the router logs and on the client computer event viewer (under audit success) I see that when I lunch a remote application and it asks for my username and password it pass on my credentials over port 443 which goes the exchange server and that is why I get the error that the gateway server is not available.

I don't know why it uses port 443 not 8443 for this part of the connection.

I tried just for testing to change the forwarding rule on the router for port 443 to point to the RDS server then I get a different error "Your computer can't connect to the remote computer because an error occurred on the remote computer that you want to connect to".

This issue is killing me, I even reinstalled the whole RDS server with no luck.

Any ideas will be much appreciated.

Regards

Mo 

When users in a customer's environment download folders (ziped) the download usually hangs before the download is finished, and then nothing happens. This almost always happens with Dropbox, never with OneDrive according to my tests. Unfortunately, the same happens with some other web based downloading solutions to ("cloud") too, from other providers.

There are no error messages in browser or Event Viewer. (It doesn't matter which browser one uses.) To see if the firewall was the culprit, I temporarily disabled all policies regarding content filtering and site blocking, but that did not make any difference. The firewall log does not indicate that that is the culprit, either. The Windows firewall is disabled.

It cannot be a size restriction, since I can download the same data from OneDrive that I cannot download from Dropbox; also it cannot be a browser problem. It isn't an exclusive Dropbox problem either, since other providers' solutions doesn't work either (at least not all of the times, the problem seems to be a little on and off.)

I'm stumped. Where to look? - It is a Windows Server 2012 R2, RDS server, with some 20 users. The internet connection is fine.

Any tips?

Hi,

I have an employee who has a laptop (running Windows 10) with a secondary display. He commonly uses this computer to Remote Desktop into our server to run our CRM program. The last time he disconnected the display something happened, and now when he prints from the remote desktop, it is massively zoomed in. Everything looks normal in print preview. We also noticed that some of his apps on his desktop appear to be zoomed in but his menu bar at the bottom are not.

We assumed this was because of the disconnecting the monitor, so we have had him try reconnecting it and disconnecting it and restarting the system in almost every sequence order we can think of and nothing fixes it. Because it is a remote client that is where the issue is we can not change the screen resolution, and the server is off site so we can not manually do it, however the screen resolution appears to be correct in the settings that we can see (although I could be wrong).

We've run out of places to look, any thoughts?

Thanks!

We have Windows 2012 R2 servers setup for Remote Desktop Services.  The odd issue that has recently occurred is that remote users redirected printers are not showing under Devices and Printers, but they show in Device Manager under Print Queue.

Microsoft Office applications (which we are using Office 2013) are able to see the redirected printers as well and able to print from them.  This would be a non issue, but we have a custom application that does not see the printers

We have setup for both RDS servers, we have Allow client printer redirection, use the client default printing device, and use the remote desktop easy print driver first all enabled.

Trying to find out if this is a known issue or if a patch was applied that affected this. 

If you need more information please let me know.

Hi,

I have a RDP environnement (1 broker and 2 TS) all 2012 R2 where ~40 users connects each day. I have a print server that manages ~20printers. The users uses terminal clients to connect to the Terminal Servers and the printers are added by TCP/IP.

Everything works perfectly exept that once in a while, when a user tries to print something (Ex: Pdf or doc) there is no printers in the list. If we go in Control Panel, all the printers are there. If I completly log off and come back, the problem is still present. The only way to get the printers back is to delete them and add them back. They will now show in the applications but only for a few days/weeks. The problem occurs randomly to all users but not a the same time. Today, I had 4 users and yesterday it was 7 but not the same ones.

Additional info:

I have ~20 users on Windows 7 that uses the same printers and the same server and they never had a problem.

When I want to delete the printers, sometimes I can wait 2-5 mins until the printer disappear from the control panel.

It didn't happen often but I aleardy saw a user that had multiple instance of the same printer. For exemple, when I right click on it, I get a menu that ask me to choose between 3 printers of the same name.

Thank you

Hi

I am trying to install a server farm for users at our site. I have followed the documentation, but I am getting errors, and am confusing myself now with what I am trying to achieve.

I have installed/configured the following:-

RDS-CB.somedomain.local - Connection Broker, Web Access and Licensing

RDS-GW.somedomain.local - RD Gateway

RDS-SH-01.somedomain.local/RDS-SH-02.somedomain.local - Session host 1 and 2

Configured an external URL as remote.somedomain.com and forwarded port 443 to the RDS-GW server.

Installed a trusted wildcard certificate for *.somedomain.com on all the servers.

Configured a remote desktop collection and published it on the session hosts.

Created internal DNS for remote.somedomain.com to point to RDS-GW

Created internal DLS for broker.somedomain.com to point to RDS-CB

When I try and connect externally, I do the following:-

Open MSTC

In Computer, I don't know what to put. Do I put in one of the session hosts, the connection broker, or something else?

I chose show options, Advanced, settings and then put remote.somedomain.com in the server name.

If I put in one of the session hosts, for the computer, then after putting in my credentials, I eventually get a certificate warning that says RDS-SH-01.somedomain.local is not from a trusted authority.

Can anyone help me to complete the configuration. Do I need round robin DNS and use that alias for the connection host? Whats the connection broker for if I have to use round robin DNS? Doesn’t it allocate the sessions to the hosts?

How do I stop the somedomain.local being used from the session hosts?

Is there an easier way to give users access to the terminal servers from outside? What I was imagining was that they would log on to the RDWeb site and somehow they would automatically be proxied through the gateway. Is that possible? I only have one external IP address available to me.

Sorry about my confusion/misunderstanding and thanks in advance

Was working until recently.

When viewing the RDP session through a web browser it works both internally and externally h_t_t_p_s_://remote.company.co.uk/rdweb (links not allowed in post) and all the applications are shown.

When connecting to the URL: h_t_t_p_s_:_//remote.company.co.uk/rdweb/feed/webfeed.aspx (links not allowed in post) through the control panel applet remote app and desktop connections it works internally but not externally.

External clients get the error "an error occurred" and the event log shows error 1000 and 1007 and the event log says "following resource could not be downloaded, Error code: 0x8007007B, 0x0

Looked on TechNet and error doesn't match article, other articles suggest access denied.

If it were permissinons how is it available through other means or internally using the same credentials?

All services are checked and running, I have domain admin rights and assigned to all applications both on the gateway and the application.

Have been staring at this for days and so its probably something obvious I have missed.

thanks in advance.

Hi All,

Can someone please tell me what tool to use for Monitoring in RDS environment (including freeware)

I can connect  my windows server 2012 from other windows server 2012,android tab or windows 7 but failed to connect when i use android phone(5.1.1) or vps desktop 2012 .please give me soultion

Hello,

I have a printer redirection problem on a windows 7 professional 32bit box.

The user can RDP into any win2k8R2 machine and redirection works just fine plus actual printing. However, if this user RDP into a Windows 2k12 r2 box, printer redirection will not work most of the time. When it does work on windows 2012r2, it won't print. I'll provide as much details as I can.  I'm not sure what the model of the printer is, but I can find that out if need be. The user is on RDC 8.1 with RDP 8.1 supported with all available patches through windows updates. Since it works with other 2k8r2 machines just fine, there are no GPOs that are blocking this user. 'Printers' is always selected in the RDC client. Im not sure where else to look. We tried from another windows 7 Professional machine in their office and it worked just fine with that same printer.

Also, unfortunately, we did not find any errors/warning in the logs. I will continue to look.

Is there something corrupted/missing in their profile that could cause this?

Bad RDP 8.1 patch maybe? Or patch needed?

Is there a hotfix out there possibly? Or something installed on his machine might have caused this? I'm at a loss at this point.

Has anybody seen this before from windows 7 to windows 2012R2?

If you need to provide more details, let me know.

We have RDS setup in a way that:

A) 2FA must be used to sign into RDWeb

B) A user, as non-admin, cannot add a feed to Windows

C) Via GPO, we deny the local-login ability to the terminal servers

In this way, the only way to connect to remote desktop apps is through two-factor RDWeb; perfect.

However, I'm finding the RD Client on Android/iOS is able to still connect and get through. Any way to block this?

Ultimately what I'm looking for in the end, is to allow RD Client but only for certain delivered apps. For example, we actually only 2FA users that have access to the financial system, which is delivered as an app over RDWeb. I do not ever want them to be able to access the financial system via their mobile devices. However, I have other apps that I do want users to access via RD Client, and it just so happens that these users are users that do not access the financial application, so I could potentially see using something to the effect of two RDWeb servers. Still need to work that all out, but any solution is dependent on blocking RD Client, as I want to close the hole where an enterprising financial user could figure out how to add the feed to RD Client and get the financial applications. Until I figure this out, I don't want to advertise the service to non-financial users.