RD session connections windows server 2016 - two computers couldn't connect in the amount of time allotted

August 13, 2018, 6:39 am

≫ Next: Server 2016 RDS Start Menu and Taskbar Issues

≪ Previous: "Disconnect" button in start - removed with GPO but still visible Windows Server 2019

$

0

0

we have RDS installed in Windows 2016 standard edition and use session-base desktop deployment.

It was working fine for about one year. About two weeks ago, we started to have the following issue:

This computer can't connect to the remote computer.
The two computers couldn't connect in the amount of time allotted. Try connecting again. If the problem continues, contact your network administrator or technical support. 

When this issue happens, we find some users are disconnected in the RDS-Collections-QuickSessionCollection. But we cannot log/sign off those users, they are always showing there.

BTW, we can sign of those users in the Task Manager-Users. 

We can solve this issue by restarting the server. How to fix it without restarting the server?

Thanks!

---

Server 2016 RDS Start Menu and Taskbar Issues

March 28, 2019, 6:41 pm

≫ Next: Adding RD services to existing environment

≪ Previous: RD session connections windows server 2016 - two computers couldn't connect in the amount of time allotted

$

0

0

We're running a single RDS setup with Windows Server 2016 Standard and about 2 weeks back we started to experience Windows Start Menu and Taskbar issues where these functions would suddenly stop working for all of the RDS users.  We are not using profile disks and each user connects to the RDS via our gateway server and their profile is stored locally on the RDS server.  No desktop or Start Menu redirection is setup.  We have 25 RDS CALs and there's normally about 20 users logged into the RDS server.  The server is a physical server running a 12core Intel CPU with 32Gb of RAM and an NVME SSD Intel disk.

The desktop apps like Microsoft Office will continue to function fine but if you minimize the running apps, the user can not click on the minimized apps as the Taskbar doesn't respond along with the Start Menu.  The only thing that currently works is to logout the user session using Task Manager or to reboot the server.  When the user reconnects and gets a new session, the Start Menu and Taskbar will work for several hours before it goes back to the locked state.

I have read quite a few posts and I have re-installed the Windows apps with the following PS script:

Get-AppXPackage -AllUsers | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\AppXManifest.xml”}

I have run a full sfc /scannow and checked the health of the windows image.  These all complete fine without issue.

Tonight I have found some older posts from 2017 about Server 2016 RDS black screens that are caused by duplicate Windows firewall rules getting created for each user every time they login.  While we don't have the black screen issue, I'm wondering if our issues with the Start Menu and Taskbar could be related to this same duplicate firewall rules for each user.  When I checkedHKLM\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Configurable\System on our RDS, I am seeing thousands of entries.

Does anyone know if these duplicate firewall rules can cause the Start Menu and Taskbar issues?  If so, what's the proper way to delete them?

Thanks for any input.

Ken 

Adding RD services to existing environment

April 26, 2019, 11:43 am

≫ Next: RDS - IE11 passwords not retained

≪ Previous: Server 2016 RDS Start Menu and Taskbar Issues

$

0

0

I'm looking an email hosting environment that wants to expand to also offer RDS to the existing email customers.  There is an existing AD environment already.  Each customer already has their own UPN domain that distinguishes them from each other customer. Theoretically, each customer would have their own segmented subnet that would contain an RD Session Host and file/application server that is managed by a central set of redundant RD Gateway and Connection Broker servers.  Group policies for things like folder redirection and computer lock down policies would have to work.  Of course no access from the individual customer subnets directly to the existing AD domain servers with all the user accounts would be wanted.  I can not decide if making a subdomain of the existing user accounts domain and joining customer servers to the subdomain or setting up a resource and authentication forest set up would be best.

Any input would be greatly appreciated.

RDS - IE11 passwords not retained

May 17, 2019, 8:47 am

≫ Next: Using Remote Desktopo Svcs internally

≪ Previous: Adding RD services to existing environment

$

0

0

We have an Windows 2016 RDS collection consisting of a 1 x RDCB, 1 x RD Web Access, 1 x RD Gateway and 7 x RDSH servers. User Profile Disks are enabled. We redirect the users Documets, Desktops & Appdata to a seperate file share.

Users are reporting IE11 does not retain their usernames & passwords, desipite selecting 'remember/save', when logging into websites etc. We have installed Chrome on the RDSH servers and this seems to correctly saves the users login details. How can we get IE to retain the users passwords etc.

Please note, we are using RDS rather than VDI.

Using Remote Desktopo Svcs internally

May 17, 2019, 12:27 pm

≫ Next: Flickering of Icons on the Desktop

≪ Previous: RDS - IE11 passwords not retained

$

0

0

I am a contractor at Microsoft and need to log onto a lab remote connection to be able to test and verify content I am creating. I have brought the RDS sign in up and entered what I believe is the "Computer" name. That is the information under External Hostname. Is that the correct information to provide for Computer? Because I just get a message saying:

Remote Desktop can't connect to the remote computer for one of these reasons:

1) Remote access to the server is not enabled

2) The remote computer is turned off

3) The remote computer is not available on the network

Make sure the remote computer is turned on and connected to the network, and that remote access is enabled.

Am I doing something incorrectly or does it just take 24 - 48 hrs. to enable the connection for my ID (which I did not enter).

Flickering of Icons on the Desktop

July 25, 2018, 6:39 am

≫ Next: RDS 2016 Collection - weird Home folder Issues.

≪ Previous: Using Remote Desktopo Svcs internally

$

0

0

Hi there,

I have asked this question many times before as we seem to be experiencing some problems with icons flickering on the desktop on our RDSH Servers.  It started way back in server 2012 and since upgrading to server 2016 we still have the same problem.  The flickering occurs on the local LAN and from remote locations.

What have I done so far and it doesn't resolve the situation:

1.  Ensured that bitmap caching is turned off.

2.  dword NoRemoteChangeNotify.

3. Always show icons, never thumbnails

4. Enabled Always show menus

5. Enabled Display file icon on thumbnails Enabled Display file size information in folder tips

6. Enabled Display simple folder view in Navigation pane

7. Enabled Display the full path in the titlebar (classic folders only)

8. Disabled Hidden files and folders Do not show hidden files and folders Hide extensions for known file types

9. Disabled Hide protected operating system files (Recommended) Enabled Launch folder windows in separate process

10. Disabled Remember each folder's view settings

11. Enabled Restore previous folder windows at logon

12. Disabled Show drive letters Enabled Show encrypted or compressed NTFS files in colour.

13. Enabled Show pop-up description for folder and desktop items.

14. Enabled Show preview handlers in preview pane Disabled Use check boxes to select items Disabled Use sharing wizard (Recommended) .

15. EnabledHKEY_CURRENT\USER\SOFTWARE\Classes\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5} on user logon.

16.   RDP client version is current and up to date on all client devices.

As I have stated none of these have worked.

Here is a video of the flickering:

https://photos.app.goo.gl/EvNp8jHLG2Z6Hsjh6

Quite frankly I am completely lost about this situation.  On normal services servers which maybe one or two people connect to the problem is not there.  With servers that have many connections it is there.  This also occurs regardless of the OS you are connecting from.

Many thanks in advance.

Chris

RDS 2016 Collection - weird Home folder Issues.

May 18, 2019, 12:32 am

≫ Next: Unable to login as admin tomy DC after enabling interactive login

≪ Previous: Flickering of Icons on the Desktop

$

0

0

Hi everyone,

didn't know where else to turn on this one as I've been building TS/RDS farms/clusters for over 15 years and I've never seen anything like this before:

here is the setup:

• RDSGW01 - RDS Gateway Server
• RDSCB01 - RDS Connection Broker
• RDSSH01 - RDS Session Host 1
• RDSSH02 - RDS Session Host 2
• RDSSH03 - RDS Session Host 3

i'm not using DNS round robin for the load balancing, the RDP file has the necessary settings for the load balancer. for the most part everything works absolutely perfectly and as expected. its the next part that has me stumped.

i also need to let you know that this set up is allowing multi user logins (i know, but it was a customer requirement)

here are the users:

• User 1 (has a home folder drive set via profile in AD)
• User 2 (has mapped drives via GPO's)
• User 3 (has a home folder drive set via profile in AD)

User 2 logs in, starts working no problem. When User 1 logs in they also have no problem however, a few minutes later User 2 gets the home folder drive from User 1 mapped in their session... it just appears. then later when User 3 logs in the same thing happens, their home folder drive appears as a drive in User 2's session.

at first i thought it was a rogue GPO or something but profile drives aren't mapped that way. User 2 has no access or policy or scripts that should let them have these drives....

help !

FYI. users are getting different RDS Hosts when they log on so its not as if its a server thing.

Unable to login as admin tomy DC after enabling interactive login

May 18, 2019, 9:27 pm

≫ Next: Windows 2008 R2 can not RDP to Windows 2016

≪ Previous: RDS 2016 Collection - weird Home folder Issues.

$

0

0

Windows Server 2008

As stated in the title, i enforced the interactive login: require a smart card to login. Logged off and it applied and now I am unable to login to the DC using my admin account because it is not associated with a smart card. I undid the gp back to original but am still unable to login to the DC. I assume its because i can't get the login script to run to fix the issue. How do i go about getting the login to update the GP without actually logging in?

---

Windows 2008 R2 can not RDP to Windows 2016

May 19, 2019, 4:41 am

≫ Next: RDS HTML5 client + RD Gateway + Cookie Authentication

≪ Previous: Unable to login as admin tomy DC after enabling interactive login

$

0

0

Hi,

I have windows 2016 server which i can RDP from Windows 7 and Windows 2012 server but from Windows 2008, i cant, i get error that this computer can not connect to remote computer, try again or contact your network administrator.

If i add TLS1.0 Enabled = 1 entry on target Windows 2016 server, i can then connect but i dont want to enable that registry key.

Any pointers, suggestion, fixes would be greatly appreciated.

Thanks,

---

Thanks and best regards Rockaposhi

RDS HTML5 client + RD Gateway + Cookie Authentication

May 19, 2019, 1:05 pm

≫ Next: USB visible to all

≪ Previous: Windows 2008 R2 can not RDP to Windows 2016

$

0

0

Hi,

We have custom cookie authentication on RD Gateway (as a plugin). Does the new HTML 5 client support this?

(rd gateway pluggable authentication)

I cannot make it to work...

Thank you,

Roman

USB visible to all

May 13, 2019, 8:07 am

≫ Next: Limit Redirect Printers

≪ Previous: RDS HTML5 client + RD Gateway + Cookie Authentication

$

0

0

We have a RDS user whose local USB drives are visible to all RDS users.  I am new to RDS and I would like to know where to change the USB settings?

Thank you,
Mike

Limit Redirect Printers

May 19, 2019, 2:15 pm

≫ Next: RDS design limitations ?

≪ Previous: USB visible to all

$

0

0

Hey everyone we have a very secure network designed off of NIST 800-171 requirements and we have an RDS environment from a less secure environment to a more secure environment. On the less secure environment we have printers pretty much everywhere around the world. In the secure environment we only want printing to be done to printers that we have vetted and approved for PIN to Print. The RDS environment is hosted inside the secure environment. We know we can allow passthrough for printers for RDS but we want to limit it to printers that we say are OK and have vetted. Is this possible with RDS that anyone might know? We are using RDS on 2016.

Thanks!

RDS design limitations ?

May 9, 2019, 5:53 am

≫ Next: your computer can't connect to the remote desktop gateway server

≪ Previous: Limit Redirect Printers

$

0

0

Hi

I am doing a POC on RDS and I am currently running into some limitations that I hope someone here on the forum can help answer if those are indeed limitations or if what I try to do can be achieved in another way.

Explanation of environment.

1 datacenter site (6 RDS hosts)
11 large branch sites (2-3 RDS hosts in each branch)

Datacenter is publishing applications from central systems running in the datacenter

Branches are publishing applications from system running locally on the branches. Most of these local systems for several reasons have to run locally in the branches and it is mission critical for thin clients and computers running at the same local branch to have access to those local published applications 24/7. That means also when the WAN link to the datacenter should go down.

Published applications must be able to be launched from computers and mobile devices, from the internet. This should be archived with gateways and web access servers placed only in the Datacenter. We don't want to have internet facing servers running on our branch sites. Of course those local published apps on branches can only be launched from internet when the WAN link to the datacenter is up, but this is ok. Critical part is for local clients on the same site as the RDS hosts to be able to launch them if WAN should be down.

Design considerations

Since we don't want an individual deployment for each branch, where we would need internet facing gateway and web access servers on each branch, those should be placed in the datacenter, so the best fitting design here would be the below.

Datacenter: 2 x RDS gateway/Web access servers, 2 x connection broker, license server and 6 RDS hosts.
Branches: 2-3 RDS hosts
Collections: 1 for datacenter and 1 for each of the 11 branches.

This setup however would not allow clients to start locally published applications if the WAN link is down to that branch, since users in that branch cannot reach the Web access and broker in the datacenter.

Questions:

Is there any way around this or any way it could be designed to allow users to start local published apps (not desktops) when users cannot reach the broker and web access servers.

Can you setup that if a broker is not available, the remote apps will still launch, just without load balancing and the feature to reconnect to disconnected sessions. So it should just launch directly against RDS host servers (You could probably use DNS RR to then still get some kind of client distribution across the hosts) ?

When setting up remote desktop clients on phones and computers, they require a URL feed. This is pointed to the Web access server "https://server.domain/rdweb/feed/webfeed/xxxxxx.aspx" does this mean that the web access server is mandatory to even be able to launch remote apps or is there another way to launch them that doesn't rely on the Web access server ?

Thanks

Martin

your computer can't connect to the remote desktop gateway server

February 20, 2017, 6:30 am

≫ Next: Windows 10 1703 Breaks RemoteApp - Remote Desktop Gateway

≪ Previous: RDS design limitations ?

$

0

0

Hi

Every so often some of my clients report that they get this message when trying to connect to a remote app:

your computer can't connect to the remote desktop gateway server. Contact your network administrator for assistance.

But the strange things is, if they try again it works straight away. There are no logs on the rdg server.

There is only one rdg server with no load balancing enabled. There are two remote app servers that are served by this rdg server and only one seems to be effected (i.e. no user ever reported issues when connecting to an app on the same server where the rdg is installed)

Another strange thing is that I cannot easily replicated the issue. It will work 9 times out of 10.

Does anyone has any idea ?

AJ

Windows 10 1703 Breaks RemoteApp - Remote Desktop Gateway

May 9, 2017, 10:25 am

≫ Next: Winodws server 2019 unexpected shutdown

≪ Previous: your computer can't connect to the remote desktop gateway server

$

0

0

Hello all,

We have a RemoteApp environment with a Remote Desktop Gateway running on Server 2008 R2. All of our Windows 10 clients running any version PRIOR to 1703 can connect just fine. However, after 1703 is applied, they can no longer connect. They get this error:

"Your Computer can't connect to the remote computer because a security package error occurred in the transport layer..."

I have found others having this same issue: https://remotedesktop.uservoice.com/forums/266795-remote-desktop-services/suggestions/18937990-windows-10-1703-unable-to-connect-via-remote-des

Is there any workaround with this? We have a large RemoteApp terminal services environment, and as our remote users get upgraded to 1703, they are one by one unable to connect.

Thank you for the help!

RTS

---

Winodws server 2019 unexpected shutdown

May 14, 2019, 4:20 pm

≫ Next: ROOT USER RDP: Server sends an email to specific email group

≪ Previous: Windows 10 1703 Breaks RemoteApp - Remote Desktop Gateway

$

0

0

Hello support,

I have a new Windows server 2019 standard installation.  It is a Hyper -V host and has a VM for RDS.  whenever I reboot the host server it comes up with the Unexpected shutdown Dialog box.  I do not see any errors in the event viewer like 6008 or 41.

I appreciate any help or input.

Thanks,

Jamshid

ROOT USER RDP: Server sends an email to specific email group

May 13, 2019, 9:41 pm

≫ Next: What RDS licenses do I need and WHERE do I need to put them?

≪ Previous: Winodws server 2019 unexpected shutdown

$

0

0

I need to configure a GPO, when a root user rdp in to any server, the server sends an email to specific email group.

What RDS licenses do I need and WHERE do I need to put them?

May 15, 2019, 6:46 am

≫ Next: Cannot RDP from domain-machine to Workgroup Win2K12

≪ Previous: ROOT USER RDP: Server sends an email to specific email group

$

0

0

I'm building a new server... [Host Server] (Windows Server 2019 Standard)

The new HOST Server will have 4 VM's

1) [PDC/DC1] - Domain Controller - Windows Server 2019 Standard

2) [Exchange] - MS Exchange Server - Windows Server 2019 Standard / Exchange 2019

3) [Apps] - Apps Server - Windows Server 2019 Standard

4) [Workstation] - Windows 10 Professional


As an Admin, I will be RDP'ing directly to: [Host Server] - [PDC/DC1] - [Exchange] - [Apps] servers for maintenance.

Connections:

1) As an admin, I will be RDP'ing directly to: [Host Server] - [PDC/DC1] - [Exchange] - [Apps] servers for maintenance.

2) A handfull of users (1 at a time) will RDP directly to [Workstation - Windows 10 Pro] for various tasks.


I believe that I need RDS licenses to accomplish this. What I don't know is where do I need to install them to? Do I: 

A) Install all of them to the host server?

B) Install 1 on each of the VM's [Host Server] - [PDC/DC1] - [Exchange] - [Apps] - [Workstation Windows 10 Pro]

Thanks!

Cannot RDP from domain-machine to Workgroup Win2K12

May 14, 2019, 8:30 am

≫ Next: i have one windows 2008 rd server but after 3 month can use only 2 user, how it enable multy user?

≪ Previous: What RDS licenses do I need and WHERE do I need to put them?

$

0

0

Hi,

as suggested on my previous topic (https://social.technet.microsoft.com/Forums/windowsserver/en-US/b1b0cc9e-461f-4bb3-b497-ef139093f195/cannot-rdp-from-domainmachine-to-workgroup-win2k12?forum=winserver8gen), I'm here to ask about my problem in a more dedicated forum.

My computer is part of a domain. I want to RDP on a server hosted in datacenter (Win2K12, part of workgroup, standalone server). When I try to connect, I enter the remote server administrator credentials and I have the error message (translated from french) :

"Your system administrator is refusing connection to this remote computer. Contact your system administrator or technical support for assistance".

- All domain joined computer can RDP on the domain but they can't RDP this remote server.

- A non-domain-joined computer in my LAN is able to connect to the remote server.

- My user is member of "Domain User" & "RemoteDesktop User".

What's wrong ? 

Thanks for help.

Vincent

i have one windows 2008 rd server but after 3 month can use only 2 user, how it enable multy user?

May 10, 2019, 12:19 am

≫ Next: 2016 RDS issue - Single user | Windows cannot find local profile.

≪ Previous: Cannot RDP from domain-machine to Workgroup Win2K12

$

0

0

i have one windows 2008 rd server for use my online accounting students for multy user tally software using my students. students are training own house different location , different time. i create one user for one student, i have 40 students at this time, so i have create 40 user for tally using via rdp login.

but after 3 month my server is block. it can display license problem. after i request my server team please reset my server, but after reset can use only 2 user 1 admin and another one, this two admin only use at a time one person only. 

MY QUESTION IS   how can create another user my server? which licence i can purchase? Device CAL ? or User CAL?  HOW MANY USER CAN CREATE AFTER PURCHASE 1 USER LICENSE ?

ONE USER CAN USE (USER ID AND ONE PASSWORD) DIFFERENT PLACE, DIFFERENT DEVICE AT A ONE TIME AFTER PURCHASE LICENSE ? PLEASE REPLAY ......