Hi All, I am having trouble implementing SSO. My environment: RDGW with RDWA ---> RDCB ---> 2 x RDSH. All servers are 2012 R2 and clients are a mixture of Windows 7 & 8.

Currently, users need only supply their credentials once to log into RDWA to launch a RemoteApp and "Connect to remote PC" from within RDWA prompts the user for authentication once.

I would really like to avoid users having to enter any authentication details from domain joined computers connecting from both internal and external.

I made changes to RDWG: %windir%\Web\RDWeb\Pages\web.config to enable WebSSO - it is documented clearly in the file how to enable Windows Authentication. [You must also enable Windows Authentication in IIS for Default Web Site. I also disabled Anonymous Authentication but perhaps this is not necessary.]

WebSSO works, however, every time a published app is launched the user is prompted for credentials. Also, "Connect to remote PC" prompts the user for authentication twice.

There is a lot of documentation relating to GP settings but it seems to apply to 2008 and 2008 R2. What else needs to be done to 2012 for a complete SSO solution?

Many thanks.

I have a Windows 2008 R2 server, and every time someone logs in via Remote Desktop, or on the console, it crashes.  The only way to get it back is to power it off, and back on.

It will continue to ping, but, file sharing, and all network services (it is my Exchange server!) stops.  It never fully logs in, but stops at "Welcome."

We cannot trace it to any change.

It is a Virtual server on Vmware.  There are no events in the event log that point to why it crashes.

Any ideas on how to troubleshoot?

Dear IT-Pro´s,

I´m currently trying to start an remoteapplication via mstsc with the option "Start the following program on connection."
I´ve tried it in two different labs.

Setups tried (same for both labs):
#1:
TS1 -> mstsc to TS2 with "Start the following program on connection"
Path: C:\Windows\System32\notepad.exe
Start in: C:\Windows\System32\

#2:
TS1 -> mstsc to TS2 with "Start the following program on connection"
Path: "C:\Windows\System32\notepad.exe"
Start in: "C:\Windows\System32\"

#3:
TS1 -> mstsc to TS2 with "Start the following program on connection"
Path: "%windir%\system32\notepad.exe"
Start in: "%windir%\system32\"

#4:
TS1 -> mstsc to TS2 with "Start the following program on connection"
Path: %windir%\system32\notepad.exe
Start in: %windir%\system32\

One of my labs just terminates the session as soon as it is established (without opening the application) with the error ID 9009 from the source "Desktop Window Manager" and the following description:
"The Desktop Window Manager has exited with code (0xd00002fe)

In the other lab (this one is with two clean installations of Windows 2012 R2 with Remote Desktop Services and no group policies or stuff like that) it is just establishing a normal remote desktop session instead of just opening the program for me. It doesn´t even start the program within the remote desktop.
No errors in this case.

Do you guys have a clue what this could be?

Thanks in advance
GoProo

/e:
I want to reach this goal without setting up a whole RDS-environment, so without RemoteApp.
It was possible with earlier versions of Windows Server.

We are using RDS collection with two Windows Server 2012R2 session hosts. Both hosts are virtual servers (clean installation) and are used as session hosts (terminals) with 10 to 25 users each. RDS Connection Broker is also virtual machine with Windows Server 2012 R2. Our users are using Windows 7 Embedded thin clients with MSTSC RDP 8.0.

There is problem with high cpu load on these servers. Sometimes Svchost.exe starts to cause 60-100% load. Our virtual machines have 10 virtual processor cores. Load is caused by LSM (Local Session Manager) Service from DCOM Launcher group. Svchost creates many thread as you can see on picture attached. Sometimes this load disappears after 12-24 hours, sometimes it needs restarting whole server.

We still cannot find cause of this problem, although we managed to reproduce this issue one time by logging two admin accounts to server console and force disconnecting one of these accounts by third admin account connecting to server console by RDP mstsc.exe with -admin parameter.

Our users are very unsatisfied :-(

This is screenshot of Process Explorer - svchost.exe - Threads:

Hi,

I have external connector licenses for the 4 session hosts in my farm.

I have activated a license server for the hosts to use.

The instructions in http://support.microsoft.com/kb/887432/en-us just say to set it up but don't add any licenses.

If I do this then all my hosts report that no licences are available.

There is no key for the external connector so I'm unsure as to what to do next!

Any ideas?

Thanks 

I am deploying a new RD Services 2012 server and purchased 25 Per Device CALs.  I realized that I should have purchased Per User CALs and I would like to know the procedure to change this before I go live.  Do I have to call the Microsoft License Clearing House first?  Do I use "Edit deployment properties" to change the licensing mode or do I also have to modify the local policy?

Thanks in advance

Rob Walker

We have a new Windows 2012R2 server and have just installed Remote Desktop Services on it.

We added some licenses through SPLA, Volume License And the Per User CALs show up in RD license manager.

But even though the Total Licenses number is correct, it says 0 Available, and 0 Issued. So where did our licenses end up?

When we connect now, it pulls a "Build-In OverUsed" License.

How do we solve this?

Thanks / Finn Bøgild

Hi,
Has anyone here measured the amount of resources it takes if the clients are using dual monitors?
Are there any guidelines on how much bandwidth and server capacity is required at different screen resolutions? I have many users how use dual 24" monitors with their thin clients and they experience a slowness in their sessions. It was not as noticable when they used one screen.

Thanks for any imputs.

Regards,
Boffen

Hi Guys,

I am experiencing a problem with Remote Desktop Services running on Windows Server 2008 R2.  The RDS deployment is setup as a server farm with the following servers:

• RD-SH-01 (Session Host)
• RD-SH-02 (Session Host)
• RD-SH-03 (Session Host)
• RD-BROKER (Connection Broker and RD Licensing Server)
• RD-REMOTEACCESS (RD Web Access and RD Gateway)

All servers in the farm are operating as normal however sometimes when a RD Session Host reboots or has no logged in users for a period of time, the User Profile Service starts rejecting login requests and returns the following error message:

The User Profile Service service failed the logon.

User profile cannot be loaded.

Due to the way the Connection Broker works in 2008 R2, a server failing to take logon requests correctly has the ability to take down the entire farm which is what my customer is experiencing in their environment.

The RD Farm is setup to use folder redirection and roaming profiles to ensure the user gets a consistant experience regardless what server in the farm they connect to. All servers in the farm are identical in system configuration, lockdown policies and RDS configuration which is mostly administered through Group Policy.

To resolve a failed session host a simple server reboot of the effected host is required.  Sometimes up to 3 or 4 reboots are required before the host starts taking connections normally again.  Also rebooting a session host for maintenance during for Windows Updates or other purposes may also introduce the problem.

This morning I had a call from my customer and the issue was occurring to RD-SH-01 - the server needed to be rebooted 4 times before it started processing user logons as normal.

I don't understand how multiple reboots magically resolve the issue, perhaps a system service is starting before another service which it is dependent upon?  Has anyone else out there had a similar problem?

Any suggestions or feedback would be greatly appreciated.

Kind Regards,

Clint Boessen MVP - Exchange Server, MCSE, MCITPx6, Dip Network Engineering
Perth, Western Australia

Blog: http://clintboessen.blogspot.com
Employer: http://www.avantgardetechnologies.com.au

Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

I’m looking for the proper location to set the TS Program Compatibility Flags (for controlling application execution in execute mode) under 2012 server.

On Server 2003, we can use:HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server\Compatibility\Application\MYAPP

On Server 2008, we can use:HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Terminal Server\Compatibility\Applications\MYAPP

Is there a similar setting in 2012 Server?

Environment: Session Based

RDSGW1 - Roles: RD Connection Broker (High-Availability Configured), RD Gateway, RD Web Access
RDS1 - Roles: RD Session Host
RDS2 - Roles: RD Session Host

DNS Configured to remoteapp.domain.com (pointing to IP of RDSGW1)

Scenario:

User 1: Connects fine to remoteapp.domain.com.  User 1 is authenticated and launches a remoteapp.  User 1 connects to the application hosted on RDS1 and all is fine and well.  User 1 logs out ofremoteapp.domain.com

I open up RDSGW01 and disallow new connections to RDS1.

User 1: Connects fine to remoteapp.domain.com.  User 1 is authenticated, but is still trying to launch a connection to apps onRDS1.

I shutdown RDS1 as a test to see if RDSGW01 would redirect that client toRDS2 but same result.  The application hangs as it is unavailable onRDS1.

Is there a configuration change that needs to be done in order for that clients connection to fail over toRDS2?

As an aside, it does seem to balance users across both RDS1 andRDS2 remote applications fairly evenly.  I would assume that denying new connections to servers would have done the trick, but not in my experience thus far.

Any takers?

Hi, I'm now deploying Remote Desktop Server with Brokers High Availability and 2 session host servers.

Everything seems fine and everyone can login without any problem but I always receive an error every 15 minutes called

"Config sync failed. Following error occurred: 0x80070057" on two brokers.

Anyone has a idea about that? Thanks.

Hope somebody can help. One of our customers is using a 2008R2 TS/RDP environment and published a specific Accounting application which is used by several remote offices. This (Accounting) depends heavily on the "shell working directory" or "Start In".

We are in the proces of migrating this application to a 2012R2 environment and the application has to be published as a RemoteApp. Within the GUI or New-RDRemoteApp there is no option to specify the "shell working directory".

I have already tried to make a .CMD file, publish this as a remoteapp but this does not function also (Application errors).

Is there any way to set the "shell working directory' and publish it as a remoteapp?

Best regards,

Jacob

I've got a Windows 2003 Server with SP2 that RDP has quit working on.  (It used to work)  I can ping the server, but, I cannot telnet to it on port 3389.  A netstat on the server itself shows 3389 listening.  RDP is enabled on the server and the settings match those on other similar servers on the same vlan that I am not having any issues with.  I've rebooted multiple times.  I've checked the registry settings for terminal services and it shows enabled and on the correct LanID and Port. (again, matches the other servers)  I can map a drive to this server from another one without any problems.  I've done a netsh winsock reset, and I've deleted and re-added the RDP-tcp connection in Terminal Services Configuration. 

I am at a loss. 

There are plenty of blogs/forums with this issue, but, I've tried the solutions offered and have made no headway.

I even tried installing Dameware to see if I could get any kind of remote connection to this server, and Daweware also failed to connect.  I could not telnet to it on port 6129 (the Dameware port).

Anyone have advice for me?

Hi,

Fairly new to RDS and I have a couple of basic questions I would like some help with if possible.

I want to provide RDS to a small company of 30-35 users. Of these 22 are at the head office the rest are at remote offices.

They wish to provide a full desktop to these users (internally and externally) so they can run Office apps and a small number of LOB Applications.

I want to deploy one Hyper-v server with the services for RDS on two VM's running on the host. These VM's will also supply AD and file access. 

For the relatively small amount of users is this an acceptable route? I understand there will be no high availability etc.

What roles would you spread across the 2 VM's?

Does anybody have any pointers\Guidance\Good websites with information for:

1. Setting up RDS
2. Configuring RDS for the scenario above
3. Locking down Remote users in their Remote Desktop Session
4. Installing Applications onto the RDS server
5. Configuring printers etc

Any help or assistance would be appreciated.

Thanks

Mark 

Mark | http://syscen.blogspot.com/

Hi

I developed an application in visual studio C#, I send raw data to an Epson thermal printer, but the printing is very slow, is unacceptable to deliver my app to an end users with  this printing issue. Printing a receipt.

I read about windows 2008 r2 terminal service having the printing perfomance problems and took some advice from others people having the same issue, but nothing work.

I did the following :

1- disable the render print job on client computer on my windows 7 client.

2- I try to disable the render print job on client computer on my server using gpedit, even though I changed it still active.

should I reboot the server, already reboot the virtual server.

3- send a print test and it is printed very fast.

My platform:

Windows server 2008 r2 Enterprise Sp 1, virtualized server with vmware - a hosted server

Remote desktop connection 6.1.

Easy print is disable.

Generic / Text Only is the driver used.

I'll appreciate any advice to help me, at this time I really need it.

Thanks in advance.

Javier Bisono.

Hi, I've recently deployed 2 x Dell R720 servers running 2012 R2 with NVidia GRID K2 GPU's and am having major issues with enabling RemoteFX, I've had to disable RemoteFX to get things working correctly.

Virtual Machines are Windows 8.1 x86 ENT fully updated with RemoteFX adaptor installed, client machines are either Windows 8/8.1 x64, Windows 7 SP1 X64 with RDP 8.1 updates or ThinPC with RDP 8.1 updates, RDP 8 is enabled via group policy. All drivers and firmware have been updated to the latest possible version available from Dell, I have also tried the NVidea GRID driver directyly from NVidia which actually makes Issue 2 worse

Issues 1, When clients connect the session randomly opens fullscreen but the resolution is set to 1024x768 so appears with black borders, switching the VDI session to windowed mode and then choosing fullscreen sometimes resolves this and sometimes it doesn't.

Issue 2, Sometimes when a client connects the session comes up with a black screen and then the sessions ends, this will happen to one or two users randomly while everyone else is fine and then all of a sudden they can connect without any issue.

Issue 3, Occasionally users log off or disconnects but their session remains active, the session can't be logged off nor shadowed and the virtual machine appears to hang, sometimes just shutting down the virtual machine resolves it other times a full server reboot is required.

I've also got an event viewer filled with errors I can't seem to resolve.

20499 
Remote Desktop Services has taken too long to load the user configuration from server for user administrator

1306 
Remote Desktop Connection Broker Client failed to redirect the user

8462 
Remote Desktop Virtualization Host failed to set zeroconfig information from the virtual machine

This one originally occurred on the template VM and wouldn't allow the creation of the VDI pool, now it appears on almost every pooled VDI machine.

1208 

Remote Desktop Services failed to join the Connection Broker on server .
Error: Current async message was dropped by async dispatcher, because there is a new message which will override the current one.

2056
The Remote Desktop Connection Broker server could not enumerate the targets for the provider named NULL from the database.

20498
Remote Desktop Services has taken too long to complete the client connection

1296

Remote Desktop Connection Broker Client failed while getting redirection packet from Connection Broker.
User : 
Error: Element not found. 

226
RDPClient_SSL: An error was encountered when transitioning from TsSslStateDisconnected to TsSslStateDisconnected in response to 25 (error code 0x8000FFFF).

36
An error occurred when transitioning from CsrConnected in response to EvCsrInitialized. (ErrorCode 0x800708CA)

I've also had various other issues like 25 of 60 pooled machines being created before the rest fail with errors saying the template can't be used to create virtual machines..

Any help with all these issues would be greatly appreciated.

Thanks.

We have 2 RDP session servers, a single application collection and we have configured UPD for user profile redirection.

We have a legacy application which writes a user.sid file to \appdata\local\virtualstore to identify itself and the user on to an IBM mainframe. if we use local user profiles the sid is written and accessible but when we use UPD files the application cannot store the sid and when the user logs off the user.sid file is removed. 

We have tried manually configuring what folders are redirected to the UPD and leaving it as full redirection but neither works. I have read an article that states the \appdata\local is not stored within the UPD and is generated from the default UPD at logon. 

Is there a workaround that doesn't involve modifying the application and where it stores its data?

Thanks

Simon