Hi Experts,

This project just dropped on our face and we need to prepare things fast.  One thing we need to confirm is this.  Will 2012 CAL works on Windows 2016 RD Licensing Server?  Client's new environment has a Windows 2016 RD Licensing Server and their old RD Licensing Server is a Windows 2012 with 2012 CALs on it.  If it works, we can migrate it this way, correct?  Please advise.

Thank you so much in advanced!!

Logbi

We have installed Server 2016 and installed Remote desktop services and license activated on the server.

When we connect to the server 2016 from windows PC and its connecting without any issue.

But when when we connect through Ncomputing Vspace session thin client and we are getting the below error message.

Please help on this issue.

Thanks

Krishna

Hello,

I am currently evaluating RemoteApp to deliver applications to our roaming users. It is working well.

However, whenever user reconnects, it creates a new session rather than hooking up to a disconnected session. My requirement is that till the time a disconnected session does not end, user must reconnect to their corresponding disconnected sessions only.

I have tried configuring following Group Policy Settings on the Session Host Server, but could not achieve the objective:

• Automatic reconnection = Enabled
• Configure keep-alive connection interval = 30 mins
• Restrict Remote Desktop Services users to a single Remote Desktop Service session = Enabled

Request if someone can guide me about some missing configuration to achieve the objective.

Thanks,

Amit Jogi

Hello,

I have been testing the remote desktop web client and have some questions.

What is the maximum recommended users per RDweb server? 

In an environment with a few thousand RDS users is there likely to be more load on the RDWeb servers and Gateway servers when using the web client vs using the standard client?

Thanks!

Hello, I am trying to access an EMR system for a new client and have been able to access it from my personal computer and from other computers, but not from my work laptop. I keep getting the error message " You're computer can't connect to the Remote Desktop Gateway server. Please contact your system administrator for assistance." when I try to connect. I have spoken to as many system administrators as I could, have worked with two different IT teams, and no one can seem to figure out what is wrong! If anyone has any ideas of how to fix this I would greatly appreciate it! Thank you!

Dear all,

Enviorment:

2 DCs: Windows Server 2012R2
1 Terminalserver Session Broker: Windows Server 2016 (Session Broker and License Server)
3 Terminalserver Host: Windows Server 2016 (RDS Host)

If I deploy a new GPO on the DCs to the OU of the terminalservers the deployment works fine for all users. If I deactivate the GPO on the DCs and force the gpupdate on the terminalservers the GPO will stay activated to the users. After a bit of research it seems like the ntuser.dat from the user stored in the user profile disk won't be updated. If I delete the ntuser.dat manually and login again to the terminalservers I will get the right activated GPOs.

Folder permissons for the folder where the UPD are stored: Everyone (Read and Execute, Read Folder), System (Full Access), Every Terminalserver (Full Access), Domain-Admins (Full Access), Local Users (Read and Execute, Read Folder) Local Admins (Full Access)

File permissions for UPD vhd-files: Everyone (Read and Execute), System (Full Access), AD User himself (Full Access), Every Terminalserver (Full Access), Admin (Full Access), Domain-Admins (Full Access), Local Users (Read and Execute, Read Folder) Local Admins (Full Access)

For me it seems like the ntuser.dat do not work fine. Has anyone an idea?

Thanks!

I have a RDS farm consisting of several Server 2012 R2 session hosts. I'm utilizing user profile disks and folder redirection.

The problem is as follows:

When a user logs off a session on one of the RDS session hosts, an eventID 1530 is logged, followed by an eventID 1533. The user's locally cached profile remains on C:\User of the session host with only the links to the folders that are specified in the user profile disk configuration (everything checked in "store only the following folders on the user profile disk").

Running process monitor (on the RDS session host) after the user has logged off the session host shows that svshost.exe still had open handles to the top level folders in the user's temporary profile:

So, the result of this behavior is that the next time the user connects to that RDS session host, a new local profile directory is created "c:\users\username.000", "c:\users\username.001", etc.

This is quite problematic because we are utilizing Google's G-Suite Outlook Sync connector and it would appear that at least some of the configuration for that points to hard-coded paths starting with "c:\users\username\", so if the cached profile is mounted in another folder, like "c:\users\username.000" Outlook cannot load the G-Suite profile.

I don't understand what is causing these handles to remain open after the user logs out of the session. The handles that remain open include:

c:\users\username\Appdata\Local

c:\users\username\Appdata\Roaming

c:\users\username\Desktop

c:\users\username\Documents

The only way to actually delete the local cached profile folder is to either force these handles closed (via process explorer) or reboot the RDS session host server, after which the locked folder can be deleted.

Has anybody else encountered this behaviour? It makes the setup with user profile disks unusable.

Hi all,

We have made a RDS Farm to deploy a Virtual App. After configuring the roles, we have this structure:

• server1 - RDBroker/RDGateway/RDWeb access
• server2 - RDBroker/RDGateway/RDWeb access
• server3 - RDLicensing/RDSH
• server4 - RDLicensing/RDSH
• server5 - RDSH

server 1 and 2 are in DMZ VLAN, and server 3, 4 and 5 in midd VLAN. To publish our public DNS, we use a pool into VIP F5 that balance the connections with Round Robin mode and assign a static public IP to this DNS.

All roles are in HA: RD bróker have a DNS RR register with the server 1 and 2 IP, RDGateway is duplicated on both servers, RD Web Access and IIS is installed on both servers and the RDSH role is blanacing via RDBokrer service.

The question is: Is possible to check the health status of every role (RD Gateway, RD Bróker and RD Web Access) to remove of the F5 pool the machine when some role is out of service in a server1 or 2 ?

Thanks!

Gerardo,

Hello,

I have two Windows Server 2016 servers (RDS-01 and RDS-02) on one client, each with RDS in standalone mode.

The RDS-01 server has the roles:
- Remote desktop access via the web The server
- Remote Desktop Services License Manager
- Remote desktop session host
- Service Broker for Remote Desktop Connections

RDS-02 has the role of "Remote Desktop Session Host". There is no automatic load balancing configured.

RDS-01 publishes RemoteApp programs, on which RDS-02 comes to connect.

The problem I have is this:
- The RDS-01 server is randomly crashed. That is, you can not open new TSE sessions (black screen, then server kick)

When this happens, I systematically have such errors in the event viewer: "An error occurred during the transition of CsrConnected in response to EvCsrInitialized. (Error code 0x80070057)"

Although we search the net, many people encounter this problem but no resolution was found.

The RDS-02 server does not present any problems with RDS session connection, like the one described above.

The updates installed on both servers are identical.

Has anyone ever encountered such crashes?
Thank you in advance for your help :)

PS : Sorry for my english

Hi,

I have a strange issue with credentials delegation...

I have an RDP taken from RDWeb, which does work. However, it annoyingly prompts for credentials on domain PC's - despite credential delegation being in place.

I have tried adding to the GPO TERMSRV/* and specifying the URL, gateway, and RDSH's, still the same.

The RDP uses a connection to remote.domain.com. If I open MSTSC and put the domain in, it does show windows credentials will be used.

Here's where it gets even weirder:

Using credentials manager, if I manually add the URL and logins, the RDP the works.

If I use a batch file to automate adding the credentials into manager, they do appear correct. However, when attempting to launch the RDP it prompts for password still. Refreshing the credential manager then shows the entry has been deleted. I have tested, and it is the launching of the RDP which prompts windows to delete the credentials. This is the same whether the credentials persistence are in as "Log-In Session" or "Enterprise".

Obviously I'd rather get the delegation working correctly, rather than messing around with batch files and Windows credentials manager. But an interesting addition of facts to the scenario...

Many thanks in advance!

Side note. this all works fine using the legacy reweb and rds client.

When trying to connect using the web client, we get the usual "Oops, we couldnt connect".

When i look in the dev view, I see websocket connection to the gateway failed, 404:

WebSocket connection to 'wss://gateway.testcloud.co.uk/remoteDesktopGateway?CorId=%7B334da63a-1571-428b-903f-b23d4a860000%7D&ConId=%7B32369577-63bd-4dee-a4bc-dd8f08495d4e%7D&ClGen=HTML%3D1&ClBld=Type%3DRdClient%3B%20Build%3Dprivate&AuthS=SSPI_NTLM' failed: Error during WebSocket handshake: Unexpected response code: 404

Any ideas?

Hi All,

I have created a DC and I have 5 servers which have to be using RDS User CAL Licensing. DC is one of the 5 Servers that I have.

Now I have added all the machines to the Domain that I have created and also configured the Licensing Role as required, but now the servers are disconnected stating that it has passed the grace period. I have a User CAL License available with me. Below details are configured as per the requirement on of them

RD Licensing / RD Session Host / RD Gateway - All Servers

RD Connection Broker / RD Web Access - only on one server which is not a DC

I want to activate the license and make sure I have access to all the 5 Servers which are configured in the same domain.

Kindly suggest if any changes with the gpedit.msc is required or with the regedit which I presume shouldn't be done as I have a proper license available.

I would like to configure the existing mis-configuration to be corrected. Let me know what kind of details you need in order for me to get this fixed.

When I try to connect using RDP the host screen turns black and remains black after remote client disconnects.  If I then try to reconnect, the remote shows the same black screen as the host.    If I disconnect the remote and retry connection I continue to get black screen unless I delete credentials and manually enter the same password as was previously saved.  The connection is then shows the actual screen.

However, when remote client is disconnected the host remains stuck on black screen and unresponsive to any keyboard input.   Cntl+Alt+Delete does nothing.  The monitor power light is blue which indicates the monitor is not in a sleep mode, but display is hung on black.  The only way I have found to bring it back is to hold the power off button for 10 seconds, then restart.

I have tried:

-reverting back to the Microsoft generic driver by deleting display driver
 -booting in safe mode
 -doing a clean boot with all services disabled except Microsoft, Intel and Acer, plus all startup programs except for core essential
 -disabling persistent bitmap caching on client machine in RDP experience tab
 -changing colors to 24 bit
 -changing Local Policy on host machine [Use WDDM graphics display driver for Remote Desktop Connections] to Disabled.

I have also tried all the suggestions at this link
https://www.kapilarya.com/fix-black-screen-with-remote-desktop-in-windows-10

...except for installing the suggested patch because that patch seems to be for 1903

I had the same problem with an earlier build but there was a patch that fixed it.  But with the latest update, it's back.

Any assistance would be greatly appreciated.

djroller

Hi

I have set up RDS on Win 2019 server, but when trying to connect to the I keep getting that the Gateway in unavailable.

I can connect to there server with RDP fine, but not RDWeb. Could someone point me in the right direction.

I am using Azure

Hello colleagues

When we are doing such config (enable multiple sessions per user):

Computer Configuration\ Administrative Templates\ Windows Components\ Remote Desktop Services\ Remote Desktop Session Host\ Connections

Restrict Remote Desktop Services users to a single Remote Desktop Services session     Disabled

We are not able to reconnect to any disconnected session that was running previously.

It seems that it was mentioned here for Inside build, but we have same...

https://techcommunity.microsoft.com/t5/Windows-Server-Insiders/Bug-no-reconnect-to-disconnected-session-with/m-p/282056/highlight/false#M829

Any solutions for this problem?

Regards,

Sergii V

Hello,

I've set for my client a big RDS Farm, on two distincts locations. All of the users are using Wyses to connect to the farm. On the internal network everything is fine, but when trying to connect from outside, after login in, I get this message

"Your Computer can't connect to the remote computer because the Remote Desktop Gateway server is temporarily unavailable."

In the logs, I get those errors :

• Microsoft-Windows-TerminalServices-RDPClient/Operational : EventID 1033 :"CAAClientAdapter, :: 'm_spHelper->ReadCreds failed' in CAAClientAdapter::CreateTunnel at 380 err=[0xffffffff],"
• Microsoft-Windows-TerminalServices-RDPClient/Operational : EventID 1033 : "CClientProxyTransport, :: 'm_ClientAdapter->CreateTunnel failed' in CProxyRawTrans::CreateProxyConnection at 2116 err=[0x800759d9], "
• Microsoft-Windows-TerminalServices-RDPClient/Operational : EventID 1033 : "CClientProxyTransport, :: 'Gateway connection time out is 90' in CClientHTTPProxyTransport::Connect at 1099 err=[0x800759d9], "
• Microsoft-Windows-TerminalServices-RDPClient/Operational : EventID 1033 : "CClientProxyTransport, :: 'CreateConnection failed' in CClientHTTPProxyTransport::Connect at 1108 err=[0x800759d9], "
• Microsoft-Windows-TerminalServices-RDPClient/Operational : EventID 1033 : "CClientProxyTransport, :: 'Gateway Error' in CClientProxyTransport::SetErrorStatus at 2818 err=[0x800759d9],"
• Microsoft-Windows-TerminalServices-RDPClient/Operational : EventID 1033 : ":CClientProxyTransport, :: 'Gateway Error' in CClientProxyTransport::SetErrorStatus at 2818 err=[0x800706ba], "

The farm consists of 2 RDBroker in HA (with 2 SQL Servers AlwaysOn for the database), 2 RDGateway (HA), 2 RDWebAccess (HA), 1 RDlicence Server, an 10+ RDSH. A wildcard Certificate is set on the external name for all roles.

• rds.external.com : RR DNS name for the RD Brokers
• rdsweb.external.com : RR DNS name for the RDWebAccess

When connecting to the RDWebAccess FQDN (rdsweb.external.com) from external network, i can connect to the website, use my credential to view the collection of session I can connect to. But when I use one of them, I get this error message. If I download the rdp file, I can see that all the correct adress are in use:

full address:s:rds.external.com
gatewayhostname:s:rdsweb.external.com
workspace id:s:rds.external.com
use redirection server name:i:1
loadbalanceinfo:s:tsv://MS Terminal Services Plugin.1.CollectionName
use multimon:i:1
alternate full address:s:rds.external.com

As we use KEMP GeoLoadbalancing, I have in the public DNS a CNAME for rdsweb.extrernal.com, redirecting to rdsweb.geo.external.com, and the NS for this zone are set to the public IP of the distant site, with our internal DNS resolving all this to the correct farm member, for geo loadbalancing purpose.

Also the RAP and CAP policies are set in the 2 RD WebGateway.

Any hints on what to check or do to allow connection the farm from outise their network ?

Regards

my code is here:

CMsRdpClientShell m_MsRdpClientShell = m_rdp.get_MsRdpClientShell();

VARIANT font_val;
font_val.vt = VT_BOOL;
font_val.lVal = TRUE;
m_MsRdpClientShell.SetRdpProperty(_T("allow font smoothing"), font_val);

I have the following:

RDS Gateway = Windows 2016

TS server = Windows 2008 R2

TS Server2 = Windows 2016

I get into the RD webpage without issue, there lies 2 RDP published apps pointing to 2 different servers.

When the icons are launched and authentication box appears, domain credentials are put in, and the error stated below comes up.

End users can access the gateway without issue, when they select the TS Server RDP icons they get the following error:

RemoteApp Disconnected - Your computer can't connect to the Remote Desktop Gateway server. Contact your network administrator for assistance.

The TS connection is set to maximum, everything else is set correctly to. I have read all the articles I can find and it has not resolved the issue, is there something I am missing?

Currently we are running Windows Server 2016 RDS with User Profile Disk. We are looking at installing FSLogix so we can do cached Outlook mode with indexing and OneDrive.

If we install FSLogix Office 365 User Profile Containers what happens to the current User Profile Disk? Do we just point the containers to where they are located and it works without issue? Or does it create a new User Disk for the users?

Thank you

Hi.

Environment:

• Windows Server 2016
• RDS Remote Apps
• Office 2016 - MSI Installation
• Windows 10 Enterprise v1803 clients

The Outlook window dissaperars or looses focus when the cursor is moved between e-mails or tasks. Resulting in the application behind Outlook showing instead.

The problem is sporadic and it does not matter what window is behind Outlook. PDF reader, Excel, etc...

The video below shows the problem.

Remember: In the video the user is only moving the mouse cursor. No mouse clicks and no keyboard keys are in play here.

https://streamable.com/5am7k 

./ Lars Olsen