Server 2012 R2 manageability online cannot get role and feature data

September 10, 2018, 8:36 am

≪ Previous: An Authentication Error has occurred (Code: 0x800004005)

Everything was fine until recently that error showed up.
my role and features was set to Active Directory and RDS, and it worked good for about a year.
Now, when I restart the server, the Server Manager shows me no errors and everything is loaded, but in about 30 minutes (sometimes the next day) the error shows up again and the role and features mentioned above disappear.

↧

RDS Session State

September 10, 2018, 6:29 am

≫ Next: Establish Outlook Profile When Using Published Remote App

≪ Previous: Server 2012 R2 manageability online cannot get role and feature data

Hi Guys,

I am wondering if someone can explain this to me. I am trying to find all idle or disconnected users on session host servers and with powershell that is easy but there are options like state active and state connected. Does this state connected mean that the user is idle, connected to rds session host but either has minimized rdp session or just not working on the computer.

What other states can I expect except these

↧

Establish Outlook Profile When Using Published Remote App

September 13, 2018, 8:36 am

≫ Next: IE and Chrome eat processor

≪ Previous: RDS Session State

We have a RDP server where we publish Microsoft Dynamics AX 2012 R3 via remote app. When a user uses the remote app Dyanamics AX it will spawn a PDF file which will open with Adobe Acrobat reader that is installed on the RDP server with the DAX client. Microsoft Office 2016 is also isntalled on the RDP server. When the PDF file is open the user will click the Mail icon in Adobe Reader that looks for the users Outlook Profile and will tell the user they need to configure their Outlook profile in order to send the PDF via e-mail. We have configured Group Policy to auto configure each users outlook profile on the RDP server. The problem is that the Outlook profile isn't actually created until Outlook is opened under the user profile. Remember this is a published app they are using not a full RDP session so they do not have access to launch the Outlook Client. We don't need them to have access to Outlook, we just need the Outlook profile created so that the Adobe reader app will detect it and use that profile to send e-mail.

Is there any way we can establish the Outlook profile, transparently to the user? Logon script, or any other technology?

I know that once the profile is established by opening Outlook then the mailing function of Adobe Reader works. I tested this out by trying to mail from adobe only using the Published App, DAX. Adobe wouldn't detect the Outlook profile. I then logged onto the RDP server using a full RDP session as the same user, opened Outlook, the profile autoconfigured as expected, then closed Outlook. Kicked my remote app session, and logged off. I relaunched the Published app DAX and when the PDF spawned Adobe was able to detect the Outlook profile.

RDP Server is WS2012 Datacenter

↧

IE and Chrome eat processor

September 17, 2018, 1:23 am

≫ Next: Mandatory vs Local Profiles For Best Login Performance

≪ Previous: Establish Outlook Profile When Using Published Remote App

Hello,

We have a RDS-Farm with 3 RDS-servers.

When users start Internet Explorer or Chrome, they start using a huge amount of processor percentage. Opening more tabs makes the servers go crazy.

We tried several things, but no results yet.

Some extra information: Running on ESXi 6.0, 48Gb per server, 2 processors per server. And: Running ESET File Security (Latest version)

Any clues?

↧

Mandatory vs Local Profiles For Best Login Performance

September 17, 2018, 6:58 am

≫ Next: RDS 2012 R2: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the (name-of-service) service

≪ Previous: IE and Chrome eat processor

I'm building out a new RDS Server 2016 environment to replace our aging RDS 2008 environment. One emphasis we're trying to place on the new system is faster logins. After doing some testing on both our prod 2008 and dev 2016 RDS environments, it's clear that a lot of the login time is attributed to new profile creation. It easily doubles our login time from about 40 seconds to over a minute. We do use folder redirection for favorites and documents. We currently do a weekly purge of the profiles on our 2008 environment just to keep things clean but this comes at the expense of longer login times due to new profile creation.

Two options I've been considering are:

1.) Continue using local profiles but have some sort of script that would clean them up periodically, but do not delete them entirely. The disadvantage is that while we have a relatively small number of hosts (12), it will take some time for every user to have a profile generated on each server. Also there is chance of profile corruption if we don't eventually purge the profiles. The benefit is that there should not be any issues with app compatibility.

2.) Implement local mandatory profiles but this may cause issues with certain applications such as Skype for Business that requires a certificate store. I did see an article mention that the state key can be changed in the SID so that the Skype app thinks its a local profile. We also have a few other old oddball apps that I would be concerned will not play nice with mandatory profiles. The benefit with mandatory profiles is smaller profile size and less chance of corruption.

Since we have folder redirection to cover favorites and documents, and we're also going to redirect the Outlook OST, we really just need a way that will get the user logged in quickly that will support the apps. Any insights would be greatly appreciated.

Thanks

Josh

↧

RDS 2012 R2: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the (name-of-service) service

December 24, 2014, 3:29 am

≫ Next: Numerous Microsoft Word processes slow down RDS server

≪ Previous: Mandatory vs Local Profiles For Best Login Performance

Hi guys,

On a random base (daily, weekly) we're experiencing major log-in problems on our Windows Server 2012 R2 Remote Desktop Services farm. The VM's are hosted on Hyper-V 2008 hosts and we're not using Citrix techniques etc.

Users are reporting that they cannot log-in, the log-in sessions hangs with a blank screen when loading their user profile (e.g. Please Wait For The User Profile Service).

In the System event log of the server on which the user is logging on the following errors are shown:

Source:        Service Control Manager 
Date:          23-12-2014 7:28:01
Event ID:      7011 
Task Category: None 
Level:         Error
Keywords:      Classic
User:          N/A 
Description:

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UmRdpService service.

…and after 30 (or sometimes 60) seconds, the same error only another service (in random order):

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UmRdpService service.

…and after exactly 30 seconds, the same error only another service:

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UxmSms service.

etcetera, with the following errors:

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Netman service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the AudioEndPointBuilder service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WPDBusEnum service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the NlaSvc service.

The Portable Device Enumerator Service service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the TrkWks service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UmRdpService service.

These errors are logged continuously.

An administrator cannot solve this since he isn't able to login in as well (console or remotely), only a hard reset of the VM is possible to use the affected server again.

I took different steps to solve this problem without any success, like:

- Installing the latest Windows updates
- Removed unnecessary printer drivers, print monitors and print processors (no local printers/drivers are installed, only Remote Desktop Easy Printer driver is used)
- Searched different forum posts, but found only hotfixes for Windows Server 2008 R2.

Can someone please help me with this annoying problem?

Many thanks!!

EDIT:
Of course is increasing the time-out not really an option here... http://social.technet.microsoft.com/wiki/contents/articles/13765.event-id-7011-service-timeout.aspx

↧

Numerous Microsoft Word processes slow down RDS server

September 17, 2018, 5:51 pm

≫ Next: Domain Trust - The Local Security Authority cannot be contacted"

≪ Previous: RDS 2012 R2: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the (name-of-service) service

Hi guys,

RDS server is based on Windows Server 2012 R2 Standard. Not on all virtual machines with the same role but just on some of them I can see sporadically this issue.

User closes all apps and disconnects from the server but numerous Microsoft Word still run on the background which slows down the server performance.

Is there any solution to resolve this issue?

Regards

↧

Domain Trust - The Local Security Authority cannot be contacted"

September 13, 2018, 1:12 pm

≫ Next: Terminal Server Event ID 56 and 36888 from separate Domain Controller

≪ Previous: Numerous Microsoft Word processes slow down RDS server

Getting Local Security Authority cannot be contacted when trying to RDP to server part of domain trust.

I have two separate domains (domain A and domain B)

I went through Microsoft best practices for setting up one way domain trust. When I open active directory in domain B I can add users/groups from domain A with no issue. I created a security group in domain B that contains users from domain A. I then added that security group to the local administrators group of a server in domain B, so those users could RDP to the server from domain A.

When I try to RDP to the server in domain I receive error “The Local Security Authority cannot be contacted"

Its not a permissions issue that I am sure of. I did follow best practices for seeing up domain trust, and on the surface the trust looks to be configured successfully as I can add users / groups from domain A in active directory of domain B. I am just not sure what is being missed.

Any thoughts or suggestion would be appreciated.

↧

Terminal Server Event ID 56 and 36888 from separate Domain Controller

September 13, 2018, 11:44 am

≫ Next: inactive TS ports

≪ Previous: Domain Trust - The Local Security Authority cannot be contacted"

Odd issue here that I don't think is really causing any issues, but would like to figure out what's going on. I've got a DC and a TS that are on separate domains, no trust between the two, not a child/parent domain.

Domain controller - Win2k8R2, company.com domain, IP address 192.168.105.10

Terminal Server - Win2k8R2, production.com domain, IP addresses 192.168.0.8 (production network 1), 10.5.0.8 (production network 2), 192.168.105.142 (office/company.com domain network). Three separate NICs.

Every night at about 2:00 AM, the TS generates 6 errors:

1:58:26 AM - Event ID 56, TermDD, The Terminal Server security layer detected an error in the protocol stream and has disconnected the client: Client IP: 192.168.105.10

1:58:26 AM - Event ID 56 again, same as previous message

1:59:35 AM - Event ID 36888, Schannel, The following fatal alert was generated: 10. The internal error state is 1203.

1:59:42 AM - Event ID 36888 again, same as previous message

1:59:57 AM - Event ID 36888 again, same as previous message

1:59:57 AM - Event ID 56 again, same as first two messages

I'm less concerned with the errors themselves vs. how they're being generated. Nobody is using the DC to connect to the TS. What is the DC doing? Why/how is it trying to connect to a machine that's not even on the same domain? I can't find any correlating Event Log entries on the DC to explain what it's doing. There are no scheduled tasks, backups, etc. running or scheduled to be run at that time.

Thanks in advance.

↧

inactive TS ports

September 13, 2018, 8:28 am

≫ Next: Web Cam Audio RDS Server

≪ Previous: Terminal Server Event ID 56 and 36888 from separate Domain Controller

We have over 300 inactive ts ports on our 2012R2 printserver. The performance of the terminalservers , also 2012R2servers, is terrible.

How can i delete the inactive TS ports, can i do that with a script ore something. Do i have to delete this bij hand in the register?

When i look on the internet, i cannot find anything for a 2012R2 server

↧

Web Cam Audio RDS Server

September 13, 2018, 8:26 am

≫ Next: The following fatal alert was received: 40

≪ Previous: inactive TS ports

OK this one is driving me crazy

We have a number of RDS 2012R2 Session hosts. and a few clients with webcams . When the webcam is not connected through the over supported RFX usb deviceson the client. the mics on the web cams work perfectly

When the webcam is connected through the over supported RFX usb devices . the mics on the web cams don't work but the video works perfectly

How do I get the mic to work on the web cams , tried it with both Microsoft LifeCam and Logitech C930's

Clients are window 10 pro (Build 1803)

Tried all of the usual GPO and reg setting as suggested in other post

TIA

↧

The following fatal alert was received: 40

September 13, 2018, 4:45 am

≫ Next: RDS RDWeb/RDP Multi Factor Authentication only for certain users?

≪ Previous: Web Cam Audio RDS Server

I have a server running Windows Server 2008 R2 which I use as a Remote Desktop Server. Following a reboot yesterday morning the System event logs are full of the following entries "The following fatal alert was received: 40" and "The following fatal alert was received: 70".

I have rebooted again but this hasn't cleared the issue. The server is fully patched. Can anybody suggest what is causing this?

Kind regards

David

↧

RDS RDWeb/RDP Multi Factor Authentication only for certain users?

September 13, 2018, 2:39 am

≫ Next: All apps and dialogs have the size option disabled.

≪ Previous: The following fatal alert was received: 40

Hi Everyone,

In an education setting where users are split 1,000 staff to 10,000 students can we enable azure MFA for staff only? Pricing becomes an issue as it's £4.18 per user for Premium P1 plan.

I assume it's simply a case of adding the P1 licence to staff users, and in the radius policy only have it apply to the staff user group? Unless I am mistaken

Just don't want to install the plugins only to find students are unable to login

Thanks

↧

All apps and dialogs have the size option disabled.

September 12, 2018, 7:11 am

≫ Next: RDP won't connect to IP or DNS name unless .local is added but ping resolves the name

≪ Previous: RDS RDWeb/RDP Multi Factor Authentication only for certain users?

I have been using remote desktop services for years. This is a new one for me. On a Windows 10 client connecting to a Windows 10 client through remote desktop all applications and the individual application dialog's cannot be resized. The dialogs can be minimized and maximized fine. This only appears under one profile of the PC that is being connected to in the RDP session. Other profiles connecting to work just fine.

Also with this profile the desktop is disabled. Only the start menu, and all Apps are available. This profile has been working fine for the past 2+ years so this is something recently changed. Again it is only with one Windows login other logins are fine.

Any help would be appreciated.

↧

RDP won't connect to IP or DNS name unless .local is added but ping resolves the name

September 16, 2018, 11:54 am

≫ Next: An Authentication Error has occurred (Code: 0x800004005)

≪ Previous: All apps and dialogs have the size option disabled.

I'm having an unusual issue and I'm not able to pinpoint where it is coming from.

We have a network with Hyper-V servers and VLAN tagged NIC cards on the servers and routing between them.

I am able to RDP directly to our second DC but not to our PDC.

If I ping DC1, I get a response.
If I ping DC1.domain, I get a response.
If I tracert DC1.domain, it follows the relevant route.
If I nslookup DC1.domain, it pulls the correct IP from the DC1 itself and DC2 if I specify it.

If I try RDP to DC1, connection times out.
If I try RDP to DC1.domain, connection times out.
If I try RDP to DC1.local, it connects fine.

Anyone know where to start my search for how to resolve this issue?

↧

An Authentication Error has occurred (Code: 0x800004005)

September 11, 2018, 12:09 am

≫ Next: Installing software on Remote Desktop Server Farm

≪ Previous: RDP won't connect to IP or DNS name unless .local is added but ping resolves the name

Hi Everyone,

When making NLA based RDP connection to Windows Server 2008 R2 member server ( RD Session Host without any license server etc), I am getting an error An Authentication Error has occurred (Code: 0x800004005). It happened for no reason, i.e. no configuration changes at all. It registers no event ID inside Application and System event log. RDP without NLA is fine.

Let me know if someone managed to resolve similar issue?

↧

Installing software on Remote Desktop Server Farm

September 16, 2018, 10:45 pm

≫ Next: RDP connections stop working

≪ Previous: An Authentication Error has occurred (Code: 0x800004005)

I need to install/update software on a farm of 10 Windows 2012 servers, do I need to install the software on each server or is there a way to install it on to the entire farm at once? The software is a simple utility.

↧

RDP connections stop working

September 7, 2018, 1:13 am

≫ Next: Black screen on Windows Server 2016

≪ Previous: Installing software on Remote Desktop Server Farm

Server 2008r2 with all the updates - or not (a number of them have this issue)

TS Server will stop accepting new RDP connections - existing ones are not affected.

The only meaningful log reported is this

- System

- Provider

[ Name] Microsoft-Windows-TerminalServices-ClientActiveXCore
[ Guid] {28AA95BB-D444-4719-A36F-40462168127E}

EventID 1026

Version 0

Level 4

Task 101

Opcode 11

Keywords 0x4000000000000000

- TimeCreated

[ SystemTime] 2018-09-07T08:02:14.573607700Z

EventRecordID 256

- Correlation

[ ActivityID] {5E44881B-3636-4BC8-AF03-E82F19780000}

- Execution

[ ProcessID] 15396
[ ThreadID] 17468

Channel Microsoft-Windows-TerminalServices-RDPClient/Operational

Computer computername

- Security

[ UserID] S-1-5-21-3986529525-1945561793-3969021824-1002

- EventData

Name Disconnect Reason
Value 1289
CustomLevel Info

RDP ClientActiveX has been disconnected (Reason= 1289)

Restart fixes it for a number of days and then again it start to happen - it happened 5 times on 5 separate servers today only - any ideas are welcomed

Regards

↧

Black screen on Windows Server 2016

September 18, 2018, 5:06 am

≫ Next: Can't connect to RDP on Windows Server 2016

≪ Previous: RDP connections stop working

Hello,

I'm facing a strange issue on my Windows Server 2016 : when I open a session, with a local user or from the AD, I get a black screen during a very long time.

I've try to install the KB3213986 from the Microsoft website but I have a message like it's not the good version for my server.

And I have this kind of error in my events logs. I don't know if it's linked with my error but start menu do not work and I see this :

The server CortanaUI did not register with DCOM within the required timeout.

I've try to make a windows update but I have an error to.

Thanks for your help

↧