Quantcast
Channel: Remote Desktop Services (Terminal Services) Forumu
Viewing all 27533 articles
Browse latest View live

RD Gateway NPS issue (error occurred: "23003")

$
0
0

I setup a RD Gateway on both Windows server 2016 and Windows server 2019. That should be a strainght forward process following Microsoft doc and multiple other website (https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds-deploy-infrastructure).

When I try to connect I received that error message Event Log Windows->TermainServices-Gateway

The user "DOMAIN\Username", on client computer "IP", did not meet connection authorization policy requirements and was therefore not authorized to access the RD Gateway server. The authentication method used was: "NTLM" and connection protocol used: "HTTP". The following error occurred: "23003".

I found many documentation that claim that registering the NPS server (https://docs.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-manage-register) should fix that issue, I register the server. Both are now in the "RAS and IAS Servers" Domain Security Group. But We still received the same error. Can in the past we broke that group effect?

I continue investigating and found the Failed Audit log in the security event log:

Network Policy Server denied access to a user.
Contact the Network Policy Server administrator for more information.
User:
 Security ID:   NULL SID
 Account Name:   DOMAIN\Username
 Account Domain:   DOMAIN
 Fully Qualified Account Name: 
DOMAIN\Username
Client Machine:
 Security ID:   NULL SID
 Account Name:   LM-G710-8.0.0
 Fully Qualified Account Name: -
 Called Station Identifier:  UserAuthType:PW
 Calling Station Identifier:  -
NAS:
 NAS IPv4 Address:  -
 NAS IPv6 Address:  -
 NAS Identifier:   -
 NAS Port-Type:   Virtual
 NAS Port:   -
RADIUS Client:
 Client Friendly Name:  -
 Client IP Address:   -

Authentication Details:
 Connection Request Policy Name: TS GATEWAY AUTHORIZATION POLICY
 Network Policy Name:  -
 Authentication Provider:  Windows
 Authentication Server:  SERVER.FQDN.com

Authentication Type:  Unauthenticated
 EAP Type:   -
 Account Session Identifier:  -
 Logging Results:   Accounting information was written to the local log file.
 Reason Code:   7
 Reason:    The specified domain does not exist.

I have then found that thread which claim that I should disabled NPS authentifaction

https://social.technet.microsoft.com/Forums/windowsserver/en-US/f49fe666-ac4b-4bf9-a332-928a547cff77/remote-desktop-gateway-denying-connections

I try it but disabling the NPS authentification leave me a bad impression...

Did anyone have a clue why I cannot resolve the domain.

For the testing/debuging purpose and I install The RD Gateway on a AD member server in main network, no other firewall than the windows one.

The only thing I can suspect is that we broke the "RAS and IAS Servers" AD Group in the past.



RD License Server vending to multiple domains (Win Server 2016)

$
0
0

Hi everyone, 

I currently have a License Server outside of a domain.
I have multiple domains with RD Servers (no trust between domains), and I want them to point to the License Server.

Based on an article and Microsoft Support, what I mention above is not possible (article doesn't mention Win Server 2016).

There's a similar question where some people answer that it IS possible, assuming Per Device CALs are used.

In my current test, the license diagnoser (installed in RD Server) shows no errors, but CALs are never vended. 

Questions:

  1. Any pointers or possible solutions to have A SINGLE License Server provide licenses to multiple domains? 
  2. If I include the License Server in a domain and set up trusts between all other domains (RD Servers), will a trust be set up between RD Server domains?

Links: (My account is not verified, so no links allowed)

* Article: Search for "Best practices for setting up Remote Desktop Licensing (Terminal Server Licensing) across Active Directory Domains/Forests or Workgroup"

* Other question: Search for "Terminal Services Licensing Server Cross-Domains"

Thanks!


Windows Store RD Client can not connect

$
0
0

I have Windows 10 Pro and Windows 10 Home computers, both fully up to date, nether on a Windows Domain.

Home can connect, with the (old) Windows Desktop RD client, to connect to the Pro.

Home will not connect to the Pro with the Windows Store RD Client.  The error is that the Username or password is not correct.

I've searched and see there are a lot of problems reported with connecting from the Windows Store RD client and tried some of the options suggested. I've also seen that the Windows Store RD client reputedly has better security, so good it can't connect!

So:

1) How can I connect with the Windows Store RD client?

2) Is it worth the effort of persisting with the Windows Store client or is the old desktop client just as good?

 

Maintenance mode on RDS collection

$
0
0

Hi All,

Just wanted to check with you all on is there a possibility to provide a maintenance window on RemoteApp collection level.

We have Production collection and Test Collection in an event we need to take down the production collection. For this purpose, we send emails to our client saying that that environment will not be available. Is there a way that we can let them know when they launch the RemoteApp?

We have 400+ end users that we need to notify when there is a maintenance window. 

BTW we have Window server 2012 R2 for all RDS servers.

I really appreciate your help.


Shekar-Technet

Windows 2016 RDS - Start Menu Not Working - get-appxpackage returns nothing

$
0
0

I'm having an issue on a single RDS 2016 server at the moment where the start menu doesn't open.  

I've gone though lots of steps including sfc /scannow  (No errors)   DISM with all the options (No Errors)

I've cleared the Registry in firewall policy\restricted services\configurable\system.

I believe the issue is that I don't have any applications registered in the get-appxpackage at all, it just comes back blanks where as on working machines I get a list of about 15.

I've tried to install the packages by hand using variations of 

Add-AppxPackage -DisableDevelopmentMode -Register C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\AppxManifest.xml -Verbose 

This returns the following;

Add-AppxPackage : Deployment failed with HRESULT: 0x80073CF6, Package could not be registered.
An internal error occurred with error 0x800705AA. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
NOTE: For additional information, look for [ActivityId] 5597e571-c93a-001c-e6eb-97553ac9d401 in the Event Log or use the command line Get-AppxLog -ActivityID
5597e571-c93a-001c-e6eb-97553ac9d401
At line:1 char:1
+ Add-AppxPackage -DisableDevelopmentMode -Register C:\Windows\SystemAp ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : WriteError: (C:\Windows\Syst...ppxManifest.xml:String) [Add-AppxPackage], IOException
    + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand

If I then use Get-AppxLog -ActivityID5597e571-c93a-001c-e6eb-97553ac9d401

Time                      ID           Message
----                      --           -------
20/02/2019 17:22:29       301          The calling process is powershell.exe
20/02/2019 17:22:29       603          Started deployment Register operation on a package with main parameter: AppxManifest.xml and Options: 0. See
                                       http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       10002        Creating Resiliency File
                                       C:\ProgramData\Microsoft\Windows\AppRepository\75f29027-c919-4974-89c9-f53bb4413b5f_S-1-5-21-1787921346-3847137862-2124306101-500_1.rslc for
                                       Register Operation on Package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy.
20/02/2019 17:22:29       607          Deployment Register operation on package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy has been de-queued and is running
                                       for user FISRDS1\Administrator.
20/02/2019 17:22:29       613          Adding uri to the list of Uris: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\AppxManifest.xml.
20/02/2019 17:22:29       447          GetFullyQualifiedReference from the String Resource Map for package full name:
                                       Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy and reference string: Microsoft Corporation failed.
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.visualElements windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.search windows.fileOpenPicker windows.fileSavePicker windows.cachedFileUpdater
                                       windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch windows.fileTypeAssociation windows.protocol
                                       windows.appointmentsProvider windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks
                                       windows.webAccountProvider windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService
                                       windows.appointmentDataProvider windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience
                                       windows.dialProtocol windows.restrictedLaunch windows.accountPictureProvider windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.activatableClass.collector .
20/02/2019 17:22:29       10000        About to service package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy. Setting the package state to disabled returned
                                       with 0x80070490.
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.stateExtension windows.applyDataExtension windows.repositoryExtension
                                       windows.capability windows.MRT windows.visualElements windows.alarm windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.gameExplorer windows.search windows.fileOpenPicker windows.fileSavePicker
                                       windows.cachedFileUpdater windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch
                                       windows.fileTypeAssociation windows.contentType windows.protocol windows.appointmentsProvider windows.defaultPrograms
                                       windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks windows.webAccountProvider
                                       windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService windows.appointmentDataProvider
                                       windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience windows.dialProtocol windows.restrictedLaunch
                                       windows.integrityExtension windows.licensing windows.accountPictureProvider AppSync windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.DeviceSetupManager windows.activatableClass.collector windows.certificates windows.preCompilationExtension
                                       windows.ntServices windows.wmiProviders windows.iisModules windows.performanceProviders windows.eventProviders windows.runTime
                                       windows.DeviceAccess windows.indexedDB windows.MicrosoftAccountClient.SignOut windows.searchIndexer windows.geolocation windows.userDataAccess
                                       windows.repositoryExtension.remove windows.stateExtension.remove .
20/02/2019 17:22:29       827          Capability parsing started for the package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy
20/02/2019 17:22:29       5252         An internal error occurred with error 0x800705AA. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       306          error 0x800705AA: While processing the request, the system failed to register the windows.stateExtension extension due to the following error:
                                       Insufficient system resources exist to complete the requested service.
                                       .
20/02/2019 17:22:29       316          error 0x800705AA: Cannot register the request because the following error was encountered during the registration of the windows.stateExtension
                                       extension: Insufficient system resources exist to complete the requested service.
                                       .
20/02/2019 17:22:29       5252         An internal error occurred with error 0x80070002. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       331          error 0x80070002: While reverting the request, the system failed to de-register the windows.stateExtension extension due to the following
                                       error: The system cannot find the file specified.
                                       .
20/02/2019 17:22:29       300          error 0x80073CF6: Cannot register the Microsoft.Windows.Cortana_cw5n1h2txyewy package due to the following error: Package could not be
                                       registered.
                                       .
20/02/2019 17:22:29       605          The last successful state reached was ResolvedDeferredRegistrations. Failure occurred before reaching the next state RegistrationChanged. hr:
                                       0x80073CF6
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.stateExtension windows.applyDataExtension windows.repositoryExtension
                                       windows.capability windows.MRT windows.visualElements windows.alarm windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.gameExplorer windows.search windows.fileOpenPicker windows.fileSavePicker
                                       windows.cachedFileUpdater windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch
                                       windows.fileTypeAssociation windows.contentType windows.protocol windows.appointmentsProvider windows.defaultPrograms
                                       windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks windows.webAccountProvider
                                       windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService windows.appointmentDataProvider
                                       windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience windows.dialProtocol windows.restrictedLaunch
                                       windows.integrityExtension windows.licensing windows.accountPictureProvider AppSync windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.DeviceSetupManager windows.activatableClass.collector windows.certificates windows.preCompilationExtension
                                       windows.ntServices windows.wmiProviders windows.iisModules windows.performanceProviders windows.eventProviders windows.runTime
                                       windows.DeviceAccess windows.indexedDB windows.MicrosoftAccountClient.SignOut windows.searchIndexer windows.geolocation windows.userDataAccess
                                       windows.repositoryExtension.remove windows.stateExtension.remove .
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.visualElements windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.search windows.fileOpenPicker windows.fileSavePicker windows.cachedFileUpdater
                                       windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch windows.fileTypeAssociation windows.protocol
                                       windows.appointmentsProvider windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks
                                       windows.webAccountProvider windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService
                                       windows.appointmentDataProvider windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience
                                       windows.dialProtocol windows.restrictedLaunch windows.accountPictureProvider windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.activatableClass.collector .
20/02/2019 17:22:29       10001        Finished servicing package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy. Setting the package state to enabled returned
                                       with 0x0.
20/02/2019 17:22:29       401          Deployment Register operation with target volume C: on Package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy from:
                                       (AppxManifest.xml)  failed with error 0x80073CF6. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       404          AppX Deployment operation failed for package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy with error 0x80073CF6. The
                                       specific error text for this failure is: An internal error occurred with error 0x800705AA. See http://go.microsoft.com/fwlink/?LinkId=235160
                                       for help diagnosing app deployment issues.

I can't seem to get the system to re-register those applications!

Open to any suggestions?  (Please no, have you restarted the server!)

This happens on all users including local admin and new accounts.  Happens in Safe and Clean Boot.

Thanks.

Remote Desktop fails to connect on Windows 7 for users who have been assigned administrator rights. [The Local Security Authority cannot be contacted]

$
0
0

Everything was working fine until about 2 months ago.

I have a Windows 7 system that I access with Remote Desktop Connection from a Windows 10 system.  One day I found that my user account, which had been given administrator rights quite some time ago, couldn’t log on remotely.  The Windows 7 system was configured for remote access with the setting “Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure)”. When I tried to log on, I got an error stating “The Local Security Authority cannot be contacted”

If I configured Windows 7 to “Allow connections from computers running any version of Remote Desktop (less secure)”, then I could log in but I didn’t want to use this less secure setting.

Doing some experimentation, I found that if I enabled the built-in Administrator account, then the Administrator could log in remotely using “Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure)”.

If I created a new standard user called Test.  I found that Test could also could log in remotely using “Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure)”.

If I promoted Test to an administrator, then Test couldn’t remotely log on.  He got the LSA error.  If I demoted my account to a standard user then I could log in remotely using “Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure)”.

When I promoted my account back to an administrator, the logon failed with the LSA error.

All users have valid passwords that are set to never expire and are members of the Remote Desktop Users group.  The only thing that is changing is whether or not the users have administrative privileges.

Is this a permissions issue, or a behavior change cause by an update to Windows 7?


Mark Wilson

Looking for TP []

$
0
0

Hey TP [] looking for you to do some consulting work, see here:

https://social.technet.microsoft.com/Forums/windowsserver/en-US/f18f0cc6-a1c8-40d0-984b-7a5b8af2b0a3/rds-consulting-and-services?forum=winserverTS#f18f0cc6-a1c8-40d0-984b-7a5b8af2b0a3

Just need a way to contact you.

RemoteApp Disconnected

$
0
0

We have one user who gets this "RemoteApp Disconnected" very frequently.


Can't RDP / Network Share Across Subnet

$
0
0

I have 1 Server that can't RDP or be RDP'd, access file shares or have its file shares accessed from other servers on a different subnet. 

I can access the file shares and RDP to and from it from other servers in the same subnet. 

Windows Firewalls are off, no I cannot change the IP address for testing because web and application services are dependent upon it. 

Other servers can access shares and RDP across the subnets just fine. It's literally just this 1 server that's having the issue.

RDP server hangs suddenly

$
0
0

Hi folks,

I am dealing with weird issue on my Windows Server 2012 R2 server. Server is used as DC and RDS server.

Everything was working fine until Friday where I saw this problem first time.

Users reported that they are unable to log on to RDP - they see black screen only. User with active RDP connection are able to work but unable to log off from RDP. In server console I see that RDS is not working properly. I am able to restart all RDS services except this one - UmRdpService.

And there are some errors in event viewer.

13:05:13 Source - System, Service control manager - event ID 7011 - service UmRdpService timeout. 

And then another:

The same source and event id but service is different - hidserv, Netman, ScDeviceEnum, transaction  SysMain 

and the last one - event id 7046 - UmRdpService

There is another error in app event viewer.

13:00:13 - App - Application Hang - event id 1002 - program StwPh.exe verze 5.1.12103.2 stopped cooperate with OS

I would say that problem is caused by app - STWPh.exe.

What do you mean?

Thanks.


Jendislav

RDS brokers in multiple regions - where to put SQL

$
0
0

Hi All,

I'm designing a multi-region RDS 2016 farm where 2 of the regions have very stable internet connections but the 3rd does suffer from intermittent internet outages. The office is on an island in the Carribean and the telco thinks nothing of cutting the connection to the island for a few hours for maintenance every so often so there's not much I can do about that. I also have to think about hurricanes and the odd ship that hits the undersea cable. As if things weren't difficult enough :)

Currently, all users at all offices are using PCs but we are introducing RDS with the long term plan to have everyone using RDS session-based desktops, also available externally. There are many reasons for this, including an ever-growing population of remote users.

The main user population is in the Carribean but our SQL databases for critical in-house applications, Exchange and a few other important apps run out of our main data centre located in a very stable environment but will all be moving to Azure (US) and O365 this year.

My preference would be to put all the RDS environment (brokers, GW, Web, RDSH etc) in our main data centre or Azure as our critical data and apps aren't accessible during an internet outage anyway but I've already lost that argument.  So that's enough background.

To ensure users in the Carribean office can launch an RDS desktop session from a thin client when they have no internet connection, along with having local RDSH servers, I'll have to have the brokers in HA, one in the Carribean, the other in our main data centre. As this will require SQL, will the broker in the Carribean office still function should it not be able to communicate to the SQL DB in our main data centre? is the broker clever enough to cache the settings locally and continue to work or will it cease to handle any connections when the DB is unavailable?

If it will not function without a continuous connection to the DB, I guess my only option would be to have the SQL DB in HA group with both SQL servers servicing their local brokers. I'd really like having to avoid paying for 2 SQL licenses.

Thanks

Conor


Server 2008 R2 Std Terminal Server frequent BSOD

$
0
0

I have a 2008 R2 Std Term Server.  Has been having 3 to 5 BSOD per day over the last few days.  

Have tried:

- Remove and reinstall production apps

- Run scans with WebRoot and MBAM (no issues found)

- SFC

- CHKDSK

- Driver Check and Update (Driver Reviver)

- Windows Updates

- Removed all un-needed virtual hardware (CD/DVD, Floppy, etc)

Server is a VMware virtual machine version 8.  Host is a Dell FC430 running ESXi 5.5 (build 2068190).  A second VM (Server 2008 R2 File Server) is running on the host as well, not having any issues.

DMP and MSinfo files available as soon as my account is verified by MS and I can post links for download

Thank you in advance.

Recovering Remote Desktop Services after installing AD

$
0
0

We have two servers here. a 2008r2 domain controller, and a 2012r2 file/print/rds server.

I installed AD onto the 2012r2 server in the hopes that it could work as a backup dc, not realizing that doing so would kill Remote Desktop services.

So I removed AD from the 2012r2 in the hopes that would bring back RDMS, but it doesn't. Every time I try to start the service it says "The Remote Desktop Management service failed to start. Error code: 0x88250001"

Did installing the AD role change something that did not get reverted when I removed the role? Is there a way to get this server to accept RDP connections again?

As an aside, I am also getting this error message. "RD Connection Broker service denied the remote procedure call (RPC) from an unauthorized computer ::1."

RDS Gateway Domain-Joined in New DMZ or Existing?

$
0
0

Is there a best practice regarding putting an RDS domain-joined gateway in an existing DMZ with other systems or creating a new isolated DMZ for it? 

Thought process is that if a system in the DMZ is compromised it could more readily lead to a compromise of the gateway and then straight to a domain controller.

 

RDS 'full desktop' vs. 'apps'?? (pros & cons)

$
0
0

I've tried to find comments or articles about the pros & cons of using an RDS 'full desktop' vs. 'apps'.

Particularly if using 'apps' would help better manage the RDS hosts' memory and cpu requirements, particularly in light of needing to offer Google Chrome as an additional browser because Internet Explorer is getting old and can not display some sites. But Chrome eats up a lot of resources, particularly if people leave tabs/windows running. 

We presently have a lot of device licenses and I am also thinking about changing them to user licenses instead, this would enable using the new HTML5 client.

I imagine anything said about this topic would apply to Citrix XenApp too.

Thank you, Tom


How to find what TLS protocol the Client requesting for RemoteApp

$
0
0

Hello,

I wonder what protocol does the client requests when launching the RemoteApp.  We choose to Negotiate option for the collection and client compatible on security.

On the network traffic, we are only allowing TLS1.2. sometimes when a client launches the Remote app and they facing spinning issues " configuring remote session" and spins forever. Sometimes it will connect just fine. Wondering it could be because of the communication issue between client and RDS server.

Please help me how can I see whether it is a communication issue or not?



Shekar-Technet

Webaccess role question

$
0
0

Hi,

I'm setting up a RDS 2016 environment. I have configured the webaccess role on the gateway server. The gateway server is in a DMZ.

Do i also need a webaccess server available inside the network, besides the one in the DMZ? 

RDS 2019 (but probably other versions as well): locked RDP session logs in after session reconnect

$
0
0

Hi. I'm running into some sort of security issue. Some of our customers actively lock their RDP session so obviously no-one can use it. It seems that when you lock your RDP session, and then get a reconnect to the server, and the RDP client reconnects, it automatically logs you in again, circumventing the lock.

Easy to abuse too: locked session? Just disconnect the network cable / wifi until the session starts reconnecting, and reconnect the cable and *poof* you are in.

Now some of this is prevented as we have some customers that have 2FA implemented on the RD Gateways, so when the session reconnects, you'll need to approve the 2FA. But not all customers have that.

Would there be any way to prevent this? Anyone else can confirm this?

UPD (User Profile Disk) overwritten at logon

$
0
0

Hello,

since end of november i'm dealing with a curious problem with user profile disks. In some new installed environments with RDSH deployment sometimes an existing user profile disk is overwritten with the uvhd-template.vhdx. In other deployments UPD works like a charm.

Everytime the UPD is overwritten it seems like the user never had a UPD, because the eventlog shows the same entrys like first creation of a UPD for a user.

I tried to get rid of the problem with several methods:

- changing standard gpo for rdsh settings
- deployment without gpo (configuration only via server manager)
- patching server before/after rdsh role deployment
- different antivirus programs on RDSH and Server with UPD Share


For a better understanding for the deployment some details:

UPDs are stored on fileserver (Server 2016) on an hidden share on the server
RDSH (Server 2016) is in most cases a deployment with all roles on one server


I searched the internet for a detailed documentation how the process auf mounting/creating a UPD works or where i can get a detailed logfile about the process but i haven't found something.

Anyone has an idea about this? If additional information is needed feel free to ask :)


Remote Desktop Services is only allowing two connections

$
0
0

We have a Dell TS130 running Windows Server 2016 system which is supposed to server as a Remote Desktop Services server.  It lets two people connect via RDP and then says we have limited connections and all of the connections are in use, try again later.  Considering we have ten licenses something is clearly wrong.  The Remote Desktop Licensing Diagnoser says no problems detected.   4 licenses issued 6 left available. It sees the licenses and it issuing the licenses but only allows two connections at a time.  I spent all day yesterday  on the phone with Dell.  They can't find a problem and sent me to a Microsoft phone number which leads me to this situation.

Microsoft told me on the phone that the service ticket must be initiated online but the URL they directed me to will not allow me to submit a ticket because we don't have a support contract and it will not let me submit a per incident ticket because it says we are an "Azure Client"??  The only Azure connection is a couple of laptops that predate the server.  I'm very frustrated and I wonder if Microsoft can come up with any other ways to piss me off.

If anyone has any helpful suggestions I would appreciate them.

Viewing all 27533 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>