Hello

I have :

3 x physical Server 2016 as hyper V host
1 x Virtual Server 2016 as Broker and Web access
40 x Windows 10 entreprise 1803 as Virtual desktop collection pooled. It was working very well with UPD (User profile disk) on a SOFS share.

Last week I create a new user and he can't get his new UPD working.
I decide to clean a lot of things : I remove the collection and try to create a new one.

When I choose my VM template (Wich work well since long time) I get the error :

could not retrieve the virtual desktop template details for MasterW10c

I enable log, and searcg with Dbgview :

Composant RdmsUI : Exception occurred in IsMasterVMPrerequisiteSatisfied for VM MasterW10c, VMHost CLOUD2.cxxat.com. Exception details: System.IO.FileNotFoundException: à System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode, IntPtr errorInfo)
   à System.Management.ManagementObject.InvokeMethod(String methodName, ManagementBaseObject inParameters, InvokeMethodOptions options)
   à Microsoft.RemoteDesktopServices.Common.TsVm.QueryOfflineInformation(String& Build, String& CurrentVersion, String& EditionId, Boolean& fIsRdvIcInstalled, Boolean& fIsVmbusCapable, String& InstallationType, Int32& ProcArch, String& SysPrepImageState, String& SysPrepMode)à Microsoft.RemoteDesktopServices.RDManagement.Model.ExternalApiProvider.GetOfflineVmInformation(String vmName, String hostName)
   à Microsoft.RemoteDesktopServices.RDManagement.ViewModel.Collections.MasterVirtualMachineViewModel.IsMasterVMPrerequisiteSatisfied(VMDescriptor masterVM)

I can't post processmon sreenshot because my account is not verified but search "could not retrieve the virtual desktop template details for" on G00GLE and i post it on first spiceworks result

I try to deploy from any of my 3 Host -> same problem
I remove all remote desktop host role and remote desktop broke +web and reinstall them -> same problem
I install another broker + web access on another 2016 server (on the AD :-( ) -> same problem

I don't know when this problem appear (I found it when i add a new user. One of our last change is installation of Acronis Backup to backup some VM/shared drive. I uninstall Acronis from all our machine and nothing change. I do some Windows Update.

Thanks

Hello,

I need to know WHO (IP Address) and WHEN accessed my computer (with remote desktop). is there any log file ? (Windows 7)

Regards

-- Mreza

This is related to issue which was discussed on older versions of Windows servers. Windows 2016 server (domain -joined) is not connecting via RDP. Showing generic error. "This computer can't connect to the remote computer". Event Source:Schaneel error is observed while trying to connect.

Log Name:      System
Source:        Schannel
Date:          —
Event ID:      36870
Task Category: None
Level:         Error
Keywords:     
User:          SYSTEM
Computer:      XXXXX
Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030D.
The internal error state is 10001.

Referred relevant articles related to this.

Followed blog https://blogs.technet.microsoft.com/askperf/2014/10/22/rdp-fails-with-event-id-1058-event-36870-with-remote-desktop-session-host-certificate-ssl-communication/

- Permission NETWORK_SERVICE missing on file C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f686aace6942fb7f7ceb231212eef4a4-XXXXX

- Took ownership and provided permission to NETWORK SERVICE as per the article.

- Once permission provided, rdp is prompting for credentials. however doesn't go through, it says, "LSA cannot be contacted, it may be due to expired password:. It happens with all the accounts.

-As soon as Remote Desktop Service is restarted, the permission on C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f686aace6942fb7f7ceb231212eef4a4-XXXXX gets reset and find the NETWORK SERVICE is missing, the previous error occurs

Appreciate any support to troubleshoot this issue.

We have around 15~ Remote Desktop Session Host servers of varying versions (2012 R2, 2016 and 2019) which are experiencing freezing and flickering issues with "Not Responding" appearing in the top bar and the program being unresponsive when switching between tabs. Other symptoms include screen flickering and, when in Task Manager, the tabs sometimes disappear until you roll the mouse over them. These issues started appearing after the weekend of 23rd March 2019 (23/03/19).

I have been scouring forums looking for other people with the same issue but can't find anyone with similar symptoms except someone called Chris_UKDE and his questions haven't been answered either.

At first, we thought that this was caused by a Windows Update but we have been through all of the updates and cannot find any consistent update or lack of update across the servers that seems to have caused the problem. We thought it might have been KB4489889 but after uninstalling this, the problem still remains.

We have opened a case with Microsoft and we are waiting for them to analyse some logs that they gathered on Friday and they have advised various registry fixes and disabling hardware acceleration but none of these have worked. I am taking to the forums to see if anyone else is a. having any luck with their diagnosis and b. having these issues at all(!) and c. if we manage to fix it, to share it with you so you don't have to experience the same pain we have.

The issue does NOT appear to happen in Safe Mode BUT when running a Selective Startup from MSConfig, these issues still happen, eluding that it's still a Microsoft element causing the problem. We are mainly seeing the problems in Microsoft Office programs but we do get a few issues in other Microsoft programs, such as Internet Explorer/Task Manager and also Chrome.

Most of the servers are running on VMWare ESXi 6.0-6.5 but we do have one native Windows Server with the problem. We have tried updating/uninstalling VMWare tools but this does not seem to fix anything. We also thought this might have been related to the video driver, so we booted the server with "Base Video" options in MSConfig but this still didn't fix the problems.

I am hoping that there are others in the same position as me, looking for an answer but having no forum to discuss it on, hence this post. Any advice greatly appreciated.

Lewis

Hi, I have implemented standard RDS 2016 farm deployment in single forest with single domain - 2 Web Access, 2 Connection Brokers and 2 Session Hosts) and collection with many published apps. I want to expand this somehow to other forests too which trust forest hosting RDS 2016 farm.

Is there any detailed guide how to implement this? There are some docs about multi-tenant RDS but I do not see anything useful for my case scenario. I guess I need new session hosts per forest but could I use existing WA/CB servers without adding new ones? 

Any help would be appreciated. Thanks in advance!!!

Hello All,

Thank you in advance, We have 10 servers which are on workgroup and we need to configure the per device license for 10 servers.

So is it possible that i can configure RDSH and install 10 device license on it and rest 9 servers to point that RDSH for license or do i need to install the per device license on each server. please suggest how should i configure this.

Dayanand Gavas

Dear All,

We have a Windows 2012 R2 Stand Server running Remote App Services, Recently since the certificate was getting expired we have changed it with a new 2 yrs certificate, but IE and Chrome on the client still keep on showing the old cert. The old certificate is not yet expired , but i have actually removed it from IIS and removed and reinstalled the RD Gateway services 

However some client show new certificate also , all internal clients are showing new certificate,

Moreover there is a strange issue that client would fail to connect till client registry is editing with the below key , could some one help please,

RDGClientTransport= 1

Need Help

Hasan Reza

Hi guys, 

My server is on MS Azure is running on Windows Server 2016.

One of the users sporadically has her File Explorer not responding. 

It lasts for a minute or so and then File Explorer comes back to normal. 

The server is patched with the latest updates and only half of its 16 virtual cores and 64GB RAM is used. 

Tried to enable "Launch folder windows in a separate process" - No difference. 

Just wondering if there any way to avoid profile rebuild.

Regards,

I am planning to buy Windows Server 2016 Essentials, Can more than 1 user do a remote login session into the server?

For example: 3 user accounts and 3 RDP sessions

Should I make additional CAL related purchases as well? 

I have a Windows 2008 Server that I have been connecting to once a month remotely to apply OS updates.  Often, I reboot that server and it uses auto-logon to login and run an application. 

Today, I rebooted the server and when I try to connect with RDP, I get the login prompt and enter my credentials, I see a few expected messages fly by on the host OS (the last one I see is the word Welcome), but then the screen goes black.

The apps on the server are running successfully because our applications can connect to them, we just can't logon to the desktop of the Windows Server 2008.

I made no configuration changes (I NEVER do) other than to apply the latest Windows Server updates.

I would prefer not to drive to the computers location, or try to coordinate a time to have the server hosting company assist me with troubleshooting; but is there anything else I can do?  Any ideas about what might cause this?

Hi

I have a 1 in all farm (all roles on 1 server) and when connecting remotely I frequently get disconnected. I have to kill the app from Task Manager, then login again and relaunch whatever remote app I was using.

This is the error that comes up:

What could be causing this?

Thanks, M

Maelito

Hello everybody , my problem is that sometimes I've to use VPN over my RDP Server but once I Click connect to VPN , the RDP disconnects directly and I cannot reconnect again till I reboot the SERVER again , I use Windows Server 2016 .

I've read some solutions that says I need to uncheck the Default Gateway in IPV4 options but I can't find this option in Windows 2016

Can you please help me to solve the issue and connect the VPN over RDP ? 

Hi All,

Need a suggestion and recommendation

We are team of 10 and were using 4 servers as Jump servers to access our environment 

Team has grown to 30 now and 4 servers with limted 2 rdp sessions are not enough, i have some RDS license 

• Should i install the RDS license on each jump server ?
• Can i use a single server with RDS license and may give some session based access to team

Please advice and suggest a best solution where i can fulfill the requirement using minimum number of license

Thank you so much 

Rahul

I have a session host group that uses user profile disks.  When I try to login a second time into the group with a user account, I expect that the user should get logged in with a temporary profile due to the other session locking the UPD.  Instead, the user profile service is failing the login due to the inaccessible profile.  On my previous domain, this wasn't an issue.  

I checked and verified the obvious GPO setting, "Do not log users on with a temporary profile" was NOT enabled.  I'm not sure what else could prevent the temporary profile from being created.

I can connect to my server using the desktop app on Windows 10. (I am not using a gateway.)

If I however use the UWP Windows 10 app (from the Store), or the iOS app from the AppStore, or the RDP app from Windows Mobile from the Store I cannot connect from within the LAN nor from the internet and get the following series of events on the server:

The last event 103 in detail:

The mobile apps work just fine connecting to my Windows 10 PC.

If there is anybody who can shed light on this, I would be very grateful.

Leo

Your password may have expired or the remote pc might not accept blank passwords

Hi all,

I am rather unclear about how to set up RD Gateway and Read Only Domain Controller in perimeter network. I have read some of the popular blogs, among those: https://techcommunity.microsoft.com/t5/Enterprise-Mobility-Security/RD-Gateway-deployment-in-a-perimeter-network-Firewall-rules/ba-p/246873 . But I would need a step-by-step guide on how to practically implement this.

I have a two-firewall setup of" internet-outer firewall- perimeter network - inner firewall- corporate internal domain". I have full rights in the internal domain (10.10.1.0/24), but have limited rights in the perimeter network (172.1.0.0/0.0.255.255), which is another domain. I have setup a RODC, and have joined this to the internal domain, and promoted as RODC successfully. Have set up "allowed" and "denied" password replication policies. I have placed RODC in the perimeter network. I have setup a RD gateway server, and currently has not joined neither internal domain nor domain in the perimeter network. It is only set up as a member in perimeter network. I have full rights to configure firewall ports both on the outer firewall and inter firewall. The intended RD Gateway and RODC should be in the perimeter network subnet, but do not  joined the perimeter domain (obviously). there are no firewall between RD Gateway and RODC in the perimeter network.

What I want is to configure the RD Gateway in perimeter network to answer all RDP requests from internet, and authenticate users towards the RODC. If a user is authenticated, she will be allowed (by RAP) to connect to RDSH in the internal domain through say 3398 (I will reassign an uncommon port in the RAP and on the internal firewall NAT to session host).

I know I would need to open ports for RODC to replicate with RWDC. for testing purpose I can manually cache the users passwords. What I fail to understand, is how the RD Gateway in perimeter subnet(172.1.0.0) to contact a DC (in my case the RODC) on the same subnet for authentication. what would I do to let RD Gateway look for my RODC? should I put the RODC as the DNS server on the NIC of RD Gateway? I tried this, and it does not seems to work."There are currently no logon servers available to service the logon request".

Please help and I would be very grateful your assistance.

I am having issues with domain-joined client computers connecting to a RemoteApp or Remote Desktop session via the internet. I have the feed set up so that the shortcuts appear in a start menu folder. When the client (Win 10 or 8.1) is on our internal network, the shortcuts to RemoteApps and Desktops work immediately without the user being challenged for credentials. However, when connecting from the internet, the user is challenged for credentials. External access is via a Windows Server 2012 R2 machine running the Web Application Proxy role. The RD web interface is published via the web application proxy using pass-though. The gateway, web access and broker roles are all installed on the same Server 2016 Standard box. There are 2 distinct problems when clients try to connect externally:

1) On Win 8.1 the client can enter their credentials and connect. We want them to not be prompted - the user experience should be the same both within the internal network and externally.

2) On Windows 10, the client enters their credentials, which are then rejected - the user cannot access the RemoteApp or desktop externally, the credentials dialogue box simply opens again.

I have implemented group policies on the clients to enable caching of credentials and automatic pass through authentication. These policies include: "Allow delegating default credentials" for our terminal servers the "Set RD Gateway authentication method" policy set to "Use locally logged-on credentials".

I can't see anything logged on the broker/gateway to indicate why auth is failing on the Win 10 clients, either in the Security logs or the Remote Desktop specific Applications and Services Logs. Is there something I can enable to log and audit this information and help get to the bottom of this?

Thanks in advance!

Matt Nock

Hello,

We have setup an RDS environment for remote app and remote desktops.

For internal addresses, we are bypassing the Gateway.
For this specific app, we are perfectly able to access the remote app via the internal network. We don't want to expose the App externally.

People who need to use the app from home, need to startup a VPN session so that they are connected to the local network. This seems to work but NOT all the time. Sometimes, the Gateway is not bypassed and we get the error that access is not authorized.

What could be the reason for this?

What would also help is to know how RDS detects if the connection is local or not (some very general info is there on the web like: "the client will check if it can reach the target system" -> How?)

Is there some logging available where we can see what goes wrong?

Thanks,
WiM

We have 22 Thin Client servers with domain FL @ 2016. All 22 servers are running 2016 Standard. DC's are Server 2016 Standard. We are also all Windows 10. Patched and running fine.

We are migrating to a new web filter that requires us to Use automatic configuration script. We have tried pushing it out with GPO and registry keys. I have also tried applying the setting locally on the machine.

We can see the Automatically detect settings change. It shows it has applied with gpresult /r but the address never shows up in the address bar. I can manually add it to an account but we have over 1k users in different OU's and this will not work.

No events in the event log and the WinHTTP Web proxy Auto service is running.

I created a separate OU just for this test and it is applied to our user.

This has our Filter engineer baffled and I have been trying for days.

Any help would be great.

Thanks.

Hi,

I recently installed Windows Server 2019 on our company's server machine (PC A). The purpose is to have multiple users who have Win 10/7 Home/Professional to log on PC A to use software installed on it. The schematic diagram of what I'd like and the current situation can be seen below.

However, I could not set the RD licensing manager (after activation succeeded) to issue the licenses. Here are what I have done:

I purchased the RD CALs (5 per device CALs) and installed the manager on PC A. See below for the running status.

I did some search online but the answers vary themselves. I realized that the first problem is that, I could not find the RD Session Host Role in the Server Manager->"Add roles and features", as many were advising installing from many blogs I found, see below

Many people's screenshot is different than mine. So I tried to do the "Remote Desktop Services Installation", which gives me these errors (one if I do quick, one if I do standard installation):

That's where I feel confused. I searched again and realized that my configuration is a "Workgroup" mode, not the "domain" mode, and I don't know how to convert this standalone-server PC A to a domain host. Any advice will be appreciated!