Apologies in advance if this has been asked, but I've been spending the best part of 2 weeks trying to find an answer to this issue online.

I have a Windows Server 2012 R2 server running Remote Desktop Services in a Quick Start deployment for Session-based (as opposed to Virtual machine-based). This has been running perfectly fine for over a year without issues, but since a couple of weeks ago 1 user can't launch applications properly. When trying to log in it just sits loading the app. If I click Details, it displays the Windows Server 2012 R2 login process with the username and underneath it says "Preparing Windows" and the dotted circle has stopped moving.

When this first happened I restarted the server and removed the local profile but they were still unable to load the application. In the end I created them a new account and transferred their files across to their new profile. That was on 19/06/18 and today they have the exact same problem which I have resolved for them in the same way - creating yet another account for them and transferring their files.

I can't keep creating a new account for this user every 6-10 days or so. This issue has happened on 18/06, 29/06, 03/07 and today (09/07).

So far I have managed to rule out our AV products as tried to log on with them disabled which experienced the same issue.

I have also managed to rule out GPO settings on the user account (even though the same settings are applied to 200+ accounts which are working fine) by moving the user account in AD to a new OU and disabling inheritance before logging back on and getting the same issue.

I can't find anything in the Windows Event Logs and the server processes hundreds of connections without issues, nor can I find anything concrete online aside from issues when renaming admin accounts or removing temporary profiles (these are not even being created but are not forbidden from doing so) or dead forum posts where no-one has answered in over 3 years or try adding the site to Trusted Sites Zone. I even ran sfc /scannow on my server and it found nothing to fix.

I know the issue must be with the profile as I can load applications perfectly fine as my account from my PC but when I try as the user having issues I see the same as they do. Nothing changes on my PC between it loading fine for me and not for them so please don't say there is something on my PC or in my IE/computer policy setup.

The user is getting more and more frustrated about the issue and I am getting to my wits end trying to solve it. Any assistance would be heartily received.

We have a Windows 2008 R2 environment mostly. Our current DC's are Windows 2008 R2, yesterday we introduced 2 new Windows 2016 DC's and this morning we found that once some of our RDS servers started to query the new DC's users would get an "Access Denied" error trying to establish a connection. We found a reg setting to to have the RDS server ignore the error so users could log in, but then once a connection was established it was with a local profile, not a roaming profile.

In order to resolve the issue we powered off the 2016 DC's.

Anyone know what happened here and what we need to do to power on the 2016 Domain Controllers again.

Thanks.

Hi,

our workstations with Windows 10 pro are in this weekend updated to version 1803. For main system we use RemoteAPP aplications on Windows server 2012R2 (Windows server 2012R2 is full updated). After update on client station are RemoteAPP slower, and  right mouse button is unresponsive, or react verly long time... 

It is a big problem for us.

PS: after replace mstsc.exe and mstscax.dll from older version Windows 10 is all OK. but this is not a solution.

Thanks.

When connecting to Remote Desktop Connection, and trying to print from an office document, the printer reverts to default settings, which for the Canon Imageclass D1520 is 2 sided print. In the settings of the remote, the printer is set for 1 sided printing by default, which is not factory default settings. Is there a way to force the printer on the host via remote desktop to keep the settings on the remote local instead of the mfg default? This is trying to print from Excel or Word 2016.

Canon said that "We do not support the use of Terminal Services/Remote Desktop Connection with the imageCLASS D1520".

We are disabling TLS 1.0 per the standard recommendation via keys:

HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client

HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server

Hi everybody,

I use a program calleed Acombat in remoteapp and it's use mapi to send email.

I get the popup of outlook 2013 open for send email without program and got no error while sending email.

I discovered that email did't reach destination and then I opened outlook 2013 in remoteapp and I seen all unsend email there.

Immediatly when I opened it they starting sending automaticly.

Each time it do the same thing, they stay theyre until I open outlook in remote app and opening send folder.

Not it's not a send folder like a folder for email already send, it's a folder that seem for email about to be send...

It's in french so I can't translate name of the folder but it's maybe you will understand where they was.

When I open this send folder I did't see email content but a list of them.

Thanks for your help.

I have an external user who connects to a remote app via RdWeb. They had no issue until last week and no changes were made on the terminal servers.

THE ISSUE:

When they launch the remote app, the user gets a black screen if you click details. They can RDP to the server fine (using the Connect to another PC tab in IE).

The mstsc.exe process has to be killed via Task Manager. 

Another user in their office is having no issues.

Things I have tried:

1. Had the user with issues try from the PC of the user without issues. Same problem.

2. Had the user connect to 3 instances of this remote app in 3 different collections. 1 uses User Profile disks. 1 does not and sits on the same network as the previous. 1 does not use profile disks and sits in our DMZ. The user can get a successful connection from the server in the DMZ but the speed is an issue. 

3. Looked for a profile disk for the user on the network share and there was none (the user is in our Guest child domain which is not a 2 way trust), there was no profile disk, but there WAS a profile with the username and .backup on the actual terminal server.

4. Deleted the local user profile on the both internal servers and had the user try again. Same result.

5. Had the user RDP to the server and launch the app and it worked without issue. 

I am thinking it is related to the user's terminal server profile because the issue is repeatable from another user's workstation. However, the user is able to RDP to any of the terminal servers and work fine. 

The difference in the server in the DMZ and the internal servers is that the server in the DMZ uses a different encryption/compression policy. The internal policy forces the encryption level to "low", does not use an encryption algorithm and is set to not require NLA. The server in the DMZ was specifically created with a different encryption policy to resolve a previous issue with external users getting a black screen to the internal servers. The internal servers go through a Cisco WAAS in some cases and the internal policy was set to the recommendations for this setup. 

Keep in mind though, that everything worked fine last week and everything still works fine for everyone except this single user.

Any insight or steps for further troubleshooting would be appreciated.

We were running a Windows 2008 RDS server which had licenses just as old.

The licensing server crashed and we had to reinstall onto another server.

Before this, with 50 licenses, any random 50 devices could remote in.

There was no revoking necessary, and it never permanently assigned a license to someone's machine.

It would stop that 51st person from logging in simultaneously, but it didn't permanently assign a license to a machine where someone else couldn't log in for lack of licensing when less than the max were concurrently running.

Now, the first 50 people that have logged in are the only devices that can, and some of those devices are home machines, or personal mobile devices (like android and iPad tablets).

Did we install the licensing server incorrectly to make such a thing occur, or is this the way it is?

We need to be able to allow the number of users that we have licenses for to use remote access, and not simply the first 50 that got the 50 licenses.

Is there a way or type of license that allows this?

Is there a way to shorten the expiration time so that devices we can't control do not get licensing.

It is not possible to control what device a user uses to access remote services without adding other layers to the network that defeat our business requirements.

Any help would be appreciated.

Alert from Microsoft Forum

Hi Tech Support,

i cant able to connect to remote for other systems, im using windows 10 OS but we are facing this issue hence after windows updated, im sure this issue is because of windows update,  Please find below error & please support me on this, 



An authentication error has occured

the function requested is not supported

Remote computer 192.168.0.44

this would be due to credSSp encryption oracle remidiation.

for more information, see https://go.microsoft.com/fwlink/?linkid=866660

i hope i will get the exact solution, waiting for the reply

Thanks in Advance

Regards

ILIYAZ

Hi,

We've recently moved a client's cloud server to a new data center. The process involved making a backup of the VM in the old environment, and restoring the VM in the new data center environment. This server runs the Remote Desktop Services role on Windows Server 2012 R2.

The migration seemed to go smooth, and the end-users can access their applications using RemoteApp, from any remote location. This particular client has a technical contact, who uses Server Manager on her Windows 10 PC to disconnect users from RDS as and when she needs to.

For some reason, since the migration, if we open Server Manager on the server itself, or on the technical contacts PC, we receive the infamous message:

The following servers in this deployment are not part of the server pool: 
1. [server_name] 
The servers must be added to the server pool.

The thing is, the server IS in fact visible in the list of Servers in Server Manager. I've tried re-adding it using the AD search, using the IP address in the DNS search, and even using the FQDN in the DNS search. All it seems to do is add another instance of the same server to the list of servers, but the above message is persistent and RDS can't be managed from Server Manager.

Has anyone seen this type of odd behavior before?

Dear All,

We are planning to deploy Windows 2016 RDS infrastructure. does Windows 2016 RDS support windows 2008 RD sessions?

Hi Everyone. We have a published app problem that occurs only under Windows 10. The app has been published from a Server 2012 R2 terminal services environment. The issue presents itself as a failure for the published app to redraw its screen after the user shifts focus to another application and then swaps back again.

Initially the fault presented itself as a Z order display issue, i.e. any dialogue boxes would display behind the published apps foreground / main interface. Clicking on the applications icon in the system tray would cause the dialogue box to come to the foreground. After hours of fault finding, I managed to fix that issue by disabling "Use advanced RemoteFx graphics for RemoteApp" on the Server 2012 R2 Terminal Server using gpedit.msc (in Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host -> Remote Session Environment). I was happy and all seemed fine, but...

Now the fault presents itself as a complete failure to redraw the foreground. This happens after the user has swapped focus from the published app to another app and back again a few times. It does not happen immediately. The app focus is there, as you can still click menu items etc (fun when their location is not drawn) and they will behave normally (i.e. redraw occurs over the display area of the drop-down menu for example). The only way to fix this is to exit the published app and relaunch. It will then work for a while and then the fault repeats.

This issue does not happen in a full terminal services session, only if the app is run as a published app.

If anyone has any ideas to resolve this it would be much appreciated.

Hi,

Our production environment is RDSH windows server 2016. I just want to know how RDSH server worked with RDS broken server. does they communicate with any service? How I can troubleshooting it if one of them broken.

By the way, if one of the server broken. does the RDS console still can be used? from my testing if one of them broken is impossible to lauch the RDS console.

Best Regards,

Apollo Ye

Hi

I am currently setting up a 2016 RDS server deployment using version 1607. The problem we are having is the trying to hide individual settings pages in the immersive control panel when using gpedit.msc Computer Configuration > Administrative Templates> Control Panel > Settings Page Visibility. However it doesn't work with version 1607. Is there anyway to get this to work as we need to open up display and screen saver settings as would like our users to access this. Currently we are having to lock down both the control panel and the immersive control panel using User Configuration > Administrative Templates > Control Panel > Prohibit access to control panel and PC settings as we dont want them to access other stuff in PC settings such as windows update  

Can anyone provide any suggestions\workarounds  

So we have a few 2012 R2 Terminal Servers at my company that were working fine until we started the process of replacing our Domain Controllers with new Windows 2016 Servers.

Since then our users are getting intermittent "Access Denied" errors when they try to RDP to these terminal servers.

Generally the "Access Denied" error occurs when a terminal servers starts to use one of the newly added 2016 domain controllers. We can workaround the problem by sending an command telling the terminal server to use one of the older 2012 R2 domain controllers instead. Then things work again.

So the question:

Is there a misconfiguration with the new 2016 domain controllers or can an adjustment be made with the 2012 Terminal Servers?

Is the problem that Windows 2016 Domain Controllers are not compatible with 2012 R2 Remote Desktop Services servers?

We are having problems finding documentation on this.

What we do know is that if we decide to start upgrading to new 2016 Terminal Servers we will have to purchase new 2016 RDS Cals (not sure if we are budgeted for that...)

For those interested, you can find out the domain controller you are using by running the following elevated PowerShell command (this assumes the command is run remotely as you might be locked out due to the RDP access denied error):

nltest /Server:<your-terminal-server> /DSGETDC:<ad domain>

to specify the domain controller you want to be on (in our case we want to switch to back to a 2012 R2 domain controller), the command is:

nltest /Server:<your-terminal-server> /SC_RESET:<ad domain>\<specific domain controller>

Hi,

Trying to set up a new manamgemnt server. Activated RDS on it, and it gets the connections to the servers as it should. Changed the gpedit (Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections) for limit number of connections.

But still just two can connect at the same time. Is there anything else that should be checked off somewhere?

Hello,

i have a problem with my RDS.

I have installed my environmnet and i it works ok. 

When i want to provide a second collection and want that only users from group A see the Apps from Collection1 and Users from group B the Apps from Collection2 it doesn't work. 

Everybody can see every APP over both collections. 

What i am doing wrong?

I have 2 Brokers in HA

one RDWEB Server

20 RD Session Hosts (18 for collection1 and 2 for collection2)

2 Collections

Regards

Sven

Can you tell us when we can join the Public Preview for RDMi please?

All we can find is availability Q1 2018 - do you have any more detail than this ?

Thanks

I have a fail-over cluster with two host servers and one connection broker. Each server is running Server 2016. Within the RDS deployment, there are multiple pools for individual workstation pools. The virtual machines in the pools are running Windows 10. We have a similar deployment for many sites across our company. They work pretty flawlessly most of the time. However, occasionally an issue arises where all users will receive the "requested session access is denied". Upon investigating, the services seem to be running, as expected. The virtual machines in the pools are running, and I can connect to them via Hyper-V Manager. There is just some disconnect that arises between the Connection Broker, the RDS Deployment, and the vms. The quick fix I've found is to restart the Connection Broker, which resolves the issues. I've tried restarting only the Remote Desktop Connection Broker service, but that didn't correct the problem.

In the event logs, at the time of the problem, I'm seeing:

RD Connection Broker could not find an assigned Personal Virtual Desktop for user XXXXX. HRESULT = 0x80070005

and

RD Connection Broker failed to process the connection request for user XXXXX. Load Balancing failed or Specified endpoint could not be found. Error: Access is denied.

Again, this is for ALL users across the deployment, and the issue is corrected when restarted the connection broker. I'm stumped. Has anyone seen this before or have any insight?