I am running a Server 2016 with RDS and it's mainly used for remote apps. Our users are getting the "The task you are trying to do can't be completed because RDS is currently busy" and looking at the task manager, there appears to be a stuck login which I cannot disconnect. When I attempt to end all processes for that stuck user, it still does not go away and I need to reboot the VM which kicks everyone off.

I am running the latest patches but I find that I have to restart the VM at least 3-4 times a week to allow our users to use their remote app when they work from home.

What could be causing this issue?

I type:

Set-RDConnectionBrokerHighAvailability -ConnectionBroker "rds-broker-test.domain" -DatabaseConnectionString "DRIVER={SQL Server Native Client 11.0};SERVER=sql2016svc.domain;Trusted_Connection=Yes;APP=Remote Desktop Services Connection Broker;DATABASE=rds-broker-test" -ClientAccessName app-broker-test.domain

I get the error:

Could not add the RD Connection Broker server RDS-BROKER-TEST.domain to the cluster and migrate the existing
Windows Internal Database to the SQL Server database.
    + CategoryInfo          : NotSpecified: (:) [Write-Error], RDManagementException
    + FullyQualifiedErrorId : SetRdmsHighAvailability,Microsoft.PowerShell.Commands.WriteErrorCommand
    + PSComputerName        : localhost

In the Broker event log I get:

Database migration - Failed: Could not add the RD Connection Broker server RDS-BROKER-TEST.domain to the cluster and migrate the existing Windows Internal Database to the SQL Server database - Event ID 32779

The Remote Desktop Connection Broker server could not be configured in high availability mode.

Error: The parameter is incorrect.  - Event ID 1739

SQL Server is 2016 - Always On Cluster - VM that lives in the same data center.

In SQL Profilter I can watch it creating the database, setting up tables, etc etc - when it errors out the last thing I see is:

ALTER DATABASE [rds-broker-test] SET MULTI_USER (just before this it updates the db version) - so the database server is up and working.

We've given the machine account full SA access to troubleshoot this issue - same problem.

the WID database that is setup on initial setup is fine - and the machine can connect to it internally.

I need to recover a file created by "USER1" on "PC-R" which was deleted by "USER2" on "Terminal Server"

"USER1" scans a file to a folder in her profile on "PC-R" (Windows 7)

"USER2" remotes into "PC-B" (Windows 7), connects to "Terminal Server" (Windows Server 2012), navigates to "USER1" folder on "PC-R", views the file, then deletes it.

Where did it go?

Have looked in:

"USER1" Recycle Bin on "PC-R"

"USER2" Recycle Bin on "PC-R"

"USER2" Recycle Bin on "PC-B"

"USER2" Recycle Bin on "Terminal Server"

"USER1" Recycle Bin on "Terminal Server"

Where else should I look?

Thanks for any help

I've been searching and searching but I'm not getting all the pieces together.  Here is what I need to accomplish:

1. A VM running a modern Windows OS to run a specific application suite.
2. That VM needs to be able to handle up to 5 concurrent Remote Desktop connection actively using the application mentioned above. (The application suite is designed to be able to handle this.)
3. Users will be connecting with tablets, laptops and desktops from the local network and from external connections as well.

The application suite runs a database and is normally installed on multiple desktops with one of them being the "master" running the DB.  Maintaining the multiple desktops is less practical compared to one VM that everyone connects to.  I've seen "hack" ways to run multiple remote connections to Windows 10 and such but I'm looking to do this right.  This application suite is going to be used for the foreseeable future and I don't want to hack it together waiting for an update to break the hack.

What I am asking for is help with what I need for this use case.  I'm ok with building multiple servers (in ESXi/VMware) if needed, though I would prefer only one.  I also would really rather use a per user license since the users are regularly changing out the devices they are connecting with.  

I have downloaded and build basic VMs with the eval versions of Server 2019 Essentials and Standard.

hello every one 

i have a issue with RDP redirection

the problem is i can't redirect just usb drives but not the local drives

i think of some script to run when the rdp session is created on the server and map the usb on the user's computers

but i don't know where to start

i also tried redirection policies in group policy but when you Disable drive redirection it's also assume the usb drive as a drive so i can't use the group policy or other things except some script that map detect the PnP devices on user's computers and map it and prohibit the local drives redirection.

thank you in advance

Hi,

I'm kicking off an extensive Excel macro on a network machine via Remote Desktop Connection that takes roughly 50 hours to complete. The macro VB calls a DLL file to execute a chunk of code in C++ (I did not build it and am not well versed).  Running the macro in an active session works fine, but if I disconnect and return a good time later, I can tell the macro has made zero progress since when I disconnected from the session--I can tell from status bar communication in Excel.  Once I reconnect my session, the macro continues running like I'd never left and no error messages or code execution breaks messages to be found.

It gets weirder--I have 4 options of VMs to choose from, all of which have identical specs (Windows 10, 64-bit Office, 64-bit OS).  The macro will continue to run when I'm disconnected on only ONE machine. The only difference I can see on the one machine that's successfully running the macro, is that it's the least recent to have been rebooted (and therefore updated) of the lot.

I do not have local admin rights on any of the machines. Any incite would be greatly appreciated. 

I'll caveat that I'm kind of a layman in tech speak; I apologize if I chose the wrong categories to post on.

Enhanced Video Renderer is used in my application.  It displays fine on Windows 7 thick client.  When this application runs on a Citrix server (Server 2016), EVR will not render at all, if the render window is on monitor 2 (right monitor).

Because Citrix runs on top of Terminal Services, we tried to check over RDP.  See the same symptom over an RDP connection.  Testing EVR capabilities using GraphEdit: EVR will render fine on Monitor 1 but not Monitor 2 (black window appears).  Without RDP, connecting over UltraVNC, there is no problem with EVR rendering on Monitor 2.  Another curious thing, is that if the graph is stopped, and the render window is dragged from one screen to the other, the window will render fine after the graph is restarted, so long as the window is at least 50% on the left monitor.  Seems like a rendering problem as the source filter is definitely not the issue.

Is there some reason for this to fail?  Is there any RDP configuration (or omission) that contributes to this problem.  Many thanks in advance for any knowledge on this.

hi,

we're suffering from session hosts that produce black screen errors in a RDS 2016 farm.

already connected users can mostly work, all new connections end up with a black screen.

to resolve the error the server has to be restarted.

i can say that

- this error appears after error 1534 (Fehler bei der Profilbenachrichtigung des Ereignisses Delete für Komponente {709E2729-F883-441e-A877-ED3CEFC975E6}. Fehlercode: Das System kann die angegebene Datei nicht finden.) starts appearing in the eventviewer.

- upon checking the registry for this SID i end up at "ProfileNotifyHandler Class app id {E10F6C3A-F1AE-4adc-AA9D-2FE65525666E} inprocserver32, C:\Windows\System32\gameux.dll".

- starting explorer.exe per taskmgr does not open an actual explorer window although the process appears in taskmgr

- tskmgr, eventvwr, cmd can be started without problems

- affected users appear as active in RDS management

- no third party security software is installed

- farm is fully patched

- HKLM\Software\Microsoft\WindowsNT\CurrentVersion\ProfileGUID and ProfileList are ok (no old or .bak entries)

looking forward on how to resolve this without  rebooting the server or a permanent fix

thank you

best regards

Hi everyone,

I have a Win Server 2016 with RD Services on it. Everything is running fine but Remotedesktopgateway cannot be configured by me. I installed the role without errors but configuration ends in the error:

RD Gateway Configuration Failed on [X] With Error: Unable to configure the RD Gateway server: [X] . The error is You cannot call a method on a null-valued expression.. (event-id 4119)

I found no solutions to resolve this issue on the web. I think the problem occurs already during the installation process because the RPC application is missing in the IIS. It's not the first installation of the RDG. Maybe there are some old entries in the registry what cause this failure but I do not know where to search ... Would be nice to get some help from the community ...

Thanks,
Chris

Hi all

I would like to setup RDS Session on new servers automatically.

The first step to join the server to the Active directory domain is ok

Now I would like to install RDS Roles Session automatically

When the server reboot, it runs a script using local admin account.

I know one need an Active directory account to deploy.

So I tried this :

    $user = "AD\User"    $pwd  = ConvertTo-SecureString "xxxxx" -AsPlainText -Force    $cred = New-Object System.Management.Automation.PSCredential($user,$pwd)    Add-LocalGroupMember    -Group "Administrators" -Member $user  | Out-File -Append $LogFile    Import-Module RemoteDesktop    #Enable-PSRemoting -Force    Invoke-Command -ComputerName $Env:Computername -ScriptBlock {                   $RDSSrvName = $Env:Computername + ".xxx.yyy.com"                   $LogFile = "$Env:ProgramFiles\Renault\RDS_Roles_setup.log"                   New-RDSessionDeployment -ConnectionBroker $RDSSrvName -WebAccessServer $RDSSrvName -SessionHost $RDSSrvName | Out-File -Append $LogFile    }     -Credential $cred # -Authentication CredSSP    $null = install-windowsfeature  -Credential $cred  RSAT-RDS-Licensing-Diagnosis-UI -LogPath $LogFile    Remove-LocalGroupMember -Group "Administrators" -Member $user  | Out-File -Append $LogFile

It returns

[

MYSERVER] Connecting to remote server MYSERVER failed with the following error message : Access is
denied. For more information, see the about_Remote_Troubleshooting Help topic.    + CategoryInfo          : OpenError: (MYSERVER:String) [], PSRemotingTransportException    + FullyQualifiedErrorId : AccessDenied,PSSessionStateBroken

If I add Enable-PSRemoting -Force before the command, I get

[

MYSERVER]Connecting to remote server [MYSERVER] failed with the following error message : Access is
denied. For more information, see the about_Remote_Troubleshooting Help topic.    + CategoryInfo          : OpenError: ([MYSERVER]:String) [], PSRemotingTransportException    + FullyQualifiedErrorId : AccessDenied,PSSessionStateBroken    + PSComputerName        : MYSERVER

Even if I try to run the command as the Active directory user being AD-User and Local admin , I get too :

PS C:\users\ad-admin\Desktop> $RDSSrvName = $Env:Computername + ".xxx.yyy.com"
PS C:\users\ad-admin\Desktop> New-RDSessionDeployment -ConnectionBroker $RDSSrvName -WebAccessServer $RDSSrvName -SessionHost $RDSSrvName

New-RDSessionDeployment : Validation failed for the "RD Connection Broker" parameter.
MYSERVER.xx.yy.fr Unable to connect to the server by using Windows PowerShell remoting.
Verify that you can connect to the server.
At line:1 char:1+ New-RDSessionDeployment -ConnectionBroker $RDSSrvName -WebAccessServe ...+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~    + CategoryInfo          : NotSpecified: (:) [Write-Error], WriteErrorException    + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,New-RDSessionDeployment

Could some tell me what I missing ?

The Active Directory user has no right on the active directory

Thanks

ML

Hello everyone,

We currently have an RDS collection set up with high availability connection brokers.

In our collection settings, we have redirection enabled for any type of drives and shown here:

As expected, when a user logs into their RDS Desktop, all of their local drives get redirected to their remote desktop (including any network drives they have mapped locally):

What we're looking to do is to only redirect the C: drive, the D: drive, and the E: drive. Our network drives begin on F: so that we have room for USB drives on D: and E:.

As a quick test, I've tried to redirect only the C: drive. So, I went on to our connection broker and typed in the following PowerShell command:

Set-RDSessionCollectionConfiguration -CollectionName "CollectionTest" -CustomRdpProperty "drivestoredirect:s:C:"

The command ran successfully and since we have two connection brokers, I went to make sure that the registry got updated on both connection brokers. And alas, it replicated on both connection brokers (as expected):

I logged into our desktop published by our RDS collection and found out that this didn't work.All of our drives are still being redirected. I went ahead and rebooted the remote desktop session host (RDSH) and all network drives are still being redirected.

I tried entering the command in again, however this time, I added the other two drives that I want to be redirected:

Set-RDSessionCollectionConfiguration -CollectionName "CollectionTest" -CustomRdpProperty "drivestoredirect:s:C:D:E:"

I followed the same process, making sure that the registry had updated on both connection brokers, etc. and still no results. All of the local drives are still being redirected.

Is there a part I'm missing here? Am I typing in the wrong command? Any insight would greatly be appreciated.

Thanks

Hello:

I recently Bitlocker encrypted the system drive of a remote computer and afterwards lost a few of the power button options I would expect to see during a remote session of a Windows 10 1903 computer.

Here are pictures of the options seen before the encryption (during a remote session):

And here are pictures of the options after the system drive was encrypted on the remote computer:

As you can see I have lost the options of sleep, shutdown, and restart after Bitlocker encryption.  Very strange.  If I turn off bitlocker on the remote machine the options are restored, back to normal.  Is this by design or a bug?  I can reproduce problem on two differenct computers.  Not a big deal as I know I have other options to sleep, shutdown or restart, but I would like to know what is going on here.

Thanks in advance,

ssorgem

I've read a lot of documentation regarding VDI and RDS, yet I am still a little confused on some aspects.

Consider my company's scenario:

- We have a Windows Server 2019 Datacenter Edition running on a physical machine with 2 8-core processors (total of 16 cores)

- All employees have Software Assurance included with their Windows OS license on their laptops

We want:

- To host Client-based VMs (Win10 mainly) on our physical WS2019 and allow employees to remotely access their dedicated personal virtual machines

- Very rarely, we would occasionally like to host Server-based VMs (WS2012RS and WS2016 mainly) on our physical WS2019 and allow employees to access their personal server virtual machines. Our employees will not need to use this scenario often, only in unique circumstances.

- None of these VMs would be in use long-term. At max, each VM would be used for a month or two. More often, VMs will probably be needed on a week-long basis, then destroyed.

To my understanding:

- We need to apply a core-based license to our physical WS2019 Datacenter, covering all 16 cores, for the hardware to be in compliance.

- We can deploy as many Windows Server-based VMs as we would like, and can properly handle licensing VM OS's using AVMA

- Employees can connect to Server-based VMs only if they have a CAL

- We can deploy Client-based VMs, and employees can concurrently access up to 4 client virtual machines at any given time because they have SA

My questions:

- Do I have any of the information above wrong? Please correct me if I do

- Do we need to worry about licensing each individual Client-based VM? It seems ridiculous to need to provide a separate product key/activation for each VM instance when they're only needed for a short time.

- Can we deploy both Server-based and Client-based VMs like this in the same VDI environment?

- Do we need to still have the core-based license for our physical WS2019 if we only deploy Client-based VMs? 

- How do we go about purchasing and applying a core-based license for our physical WS2019?

Please let me know if there is any other critical information I may need that I have missed.

Thank you in advanced for helpful insights.

Hi All,

I am trying to configure multifactor authentication with Azure MFA on my remote desktop gateway. I followed this article:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-nps-extension-rdg

All seems ok but it is not working as expected. When I try to access a remote desktop I get the notification on my phone. When I approve, the remote desktop keeps trying to connect and I get the notification on my phone 2 more times. Eventually the RDP just times out.

On my NPS server with the NPS extension I can see in the eventlog that access has been granted. On my remote desktop gateway in the NPS logs I can see this:

The RADIUS Proxy received a response from server X.X.X.X with an invalid authenticator.

Where X.X.X.X is my NPS server.

All servers are windows server 2019. My testuser has an Azure AD Premium P1 license (and an office365 business premium).

Any ideas on what could be wrong with my setup?

"Cannot verify that the two remote computers belong to the same farm"

Hello,

I can log into my RDS session on Windows 10 without issue, however using the exact credentials in the exact network on a Windows 8.1 PC, the RDS session will not connect. 

Are there any other configurations or patches required for 8.1 to work?

Thank You,

Franjisk 

Hi,

Just wondering if anyone could help me. I have a new Dell T440 in a school and RDC is disconnecting every 10 min or so. Please note this only happens when connecting to the server from an external site. If I am on a PC within school and create an RDC session its fine!

I have done the below and rebooted but it’s made no difference.

Computer Configuration\ Administrative Templates\ Windows Components\ Remote Desktop Services\ Remote Desktop Session Host\ Connections\

Configure keep-alive connection interval     Enabled

Keep-Alive interval:     1

Using Hyper-v the server hosts three Virtual servers, Sims, file & print and the DC. I can connect to any of these remotely via RDC and the connection is stable. The issue just seems to be with the Dells physical version of Server 2016. I have connected Dell and worked with them to upgrade to the latest firmwares and Drivers. Following this Dell has now advised me to log ticket with MS.

This one has stumped me tbh. I have event gone down the route of replacing the router and switches but that's also made no difference either. I am loathed to rebuild the server without exploring every other avenue first. 

Any help would be really appreciated.

Cheers

Mick

Mikehawo