External Remote Apps Windows clients cannot authenticate with internal Session Host

October 15, 2018, 9:51 am

≫ Next: All RDS on one server - Licensing

≪ Previous: QuickSessionCollection Showing Up (How to Remove)

$

0

0

Hello,

I have a Remote Apps deployment which includes two servers. Server A is deployed with all RD roles (session host + gateway) and is reachable from the outside via 443; and Server B which is only a session host and is open for internal traffic only.

All users from inside my network are able to open apps published on both servers, without a problem.

Windows users from the outside are only able to open apps published on server A. When they try to open an app from server B they get the error "An authentication error has occurred 0x607" with the server name of server B. It seems that the authentication doesn't work properly through the gateway (server A) for published apps.

Important note #1 - Opening a standard Remote Desktop Connection (mstsc) from the outside to server B by configuring the gateway in the advanced tab works perfectly. It seems that this problem is only related to the published apps.

Important note #2 - Opening the remote apps on Server B works perfectly from a "Remote Desktop" app for mobile - for example, from an Android phone or an iPad.

Does anyone have any ideas?

---

All RDS on one server - Licensing

October 15, 2018, 11:26 am

≫ Next: Per User CAL and Per Device CAL on the same RDS Cluster?

≪ Previous: External Remote Apps Windows clients cannot authenticate with internal Session Host

$

0

0

This is for a non profit and a semi lab environment so I know having all your RDS environment on one virtual server is not a best practice but it is what it is.

My question:  Right now RDS is deployed gateway, webapp etc on one server and students log on to this server via web.  This is in trial version.  There are roughly about 20 students.  So what exactly do I need to purchase for licensing for RDS?  The server itself is activated but RDS isn't.

Per User CAL and Per Device CAL on the same RDS Cluster?

October 16, 2018, 7:48 am

≫ Next: Server 201 - Remove Server RDS FARM

≪ Previous: All RDS on one server - Licensing

$

0

0

My office currently uses RDS Cluster setup as per User and we are setting up a new App which uses one device, so it makes sense that for that app we switch to Per Device CAL. 

Can the current cluster we have setup support both licences types? I.E can we use it in mixed mode or will it only support one type of licence? 

I assume one licence manager can support both types of licences, i am just not sure if the same server can support both or if you need to pick one or the other. 

I have search the web but i can't find the answer for this question. Hoping someone can help out. 

Server 201 - Remove Server RDS FARM

October 16, 2018, 4:30 pm

≫ Next: One Drive Client for Windows Server 2019

≪ Previous: Per User CAL and Per Device CAL on the same RDS Cluster?

$

0

0

I have server 2012 which I setup a server farm consisting of 3 rds-servers and services server for the gateway, licensing, broker etc. I would like to eliminate the server farm, and just connect directly to each individual rds server....like we do with our old terminal server setup.

I feel like I was "lucky" to get it working, and if I had to re-create it, it would be a nightmare.

Can anyone add compelling reasons to leave it as is?

What about recovery comments. It's hosted at an offsite service under a HyperV-vm environment. Are there some easy steps for me to take which would make recovering from failed hardware?

Thanks for any comments,

Bret

One Drive Client for Windows Server 2019

October 17, 2018, 12:57 am

≫ Next: LowerCase instead of Uppercase, Digits instead of Numbers

≪ Previous: Server 201 - Remove Server RDS FARM

$

0

0

Is there a supported one drive client available with the new released Windows Server 2019, for using it with RDS Farm?

Especially for on demand capability, this will be a biiiig improvement for RDS Farms, since using roaming profile.

Thanks for insight

LowerCase instead of Uppercase, Digits instead of Numbers

October 17, 2018, 2:42 am

≫ Next: logic and algorithm of work and launch of published applications

≪ Previous: One Drive Client for Windows Server 2019

$

0

0

Hello,

we have Handheld Scanners (with Windows CE 6) which using a Client-Programm on a Windows 2016 RDP Server. The Scanners are scanning EAN128 Barcodes.

Since last week we have a strange issue starting in the middle of the day without installing any update or restarting the RDP Server. Instead of UpperCase chars it is scanning Lowercase (aaa instead of AAA) and instead of Special characters it is printing digits ($$$ is noe 444). It Looks like CAPS Lock is active but funny enough a lower char is still lowercase and a Digit is still a Digit.

If i scan directly into Notepad on the scanner i get for example $$$52PalNr$%&127 (this is the intended string i created) and if i scan into Notepad as remoteApp on the scanner i get 44452palnr457127

Anybody an idea what is messed up in the RDP Session?

Thank you,

Thomas

logic and algorithm of work and launch of published applications

October 17, 2018, 4:12 am

≫ Next: Windows Presentation Foundation error

≪ Previous: LowerCase instead of Uppercase, Digits instead of Numbers

$

0

0

Hi!

What is the logic and algorithm of work and launch of published applications based on the roles: Session Host (two), Gateway, RD connection broker (one), RD Web Access. Those. What processes on which servers are first started?

Everywhere Windows 2012 r2

Thx!

---

C уважением к Вам, Я

Windows Presentation Foundation error

October 17, 2018, 2:15 pm

≫ Next: Login Error: Please wait for the User Profile Service hang on Domain Controller (Need your help)

≪ Previous: logic and algorithm of work and launch of published applications

$

0

0

When I try to add the click event to the xaml code: <Button x:Name="cmdCalcUnitPrice" Content="Calculate" HorizontalAlignment="Left" Margin="48,16,0,0" Grid.Row="9" VerticalAlignment="Top" Width="54" Click=" "/> . IntelliSense shows the "New Event handler popup, but when I hit the TAB key, I get the error message "Ensure Event Failed". When I double click the control to try and insert an Event stub in vb code-behind file, I get the error message "Unable to add event handler". Also, if you have controls on a window form, shouldn't you see something in the vb code-behind file?

Thanks

---

Login Error: Please wait for the User Profile Service hang on Domain Controller (Need your help)

October 17, 2018, 10:29 am

≫ Next: RDS user connection issues

≪ Previous: Windows Presentation Foundation error

$

0

0

I am having a very strange issue while I login via Remote desktop on my Domain Controller.  I didn't do any Windows updates or any changes at all.  I just walked in one morning and it started doing this.  I have since updated the domain controller and my VM Host with all the latest windows updates as of October 2018, rebooted and still having issues.  Nothing seems to work.

 

Sometimes, but not all of the time I can't login as it will just hang with the message

 

"Please wait for the User Profile Service....".

 

I have rebooted my server that the User profiles are located on and I have rebooted the Domain controller and I can login at first but at logout it will lock up and I don't know why.

 

There is plenty of space where the User Profile information is stored and I can get to it via UNC paths when it's working fine.

 

\\server\Profile$\

 

Event Logs are saying on the Domain Controller:

 

I am getting an EVENT ID: 6005 which is "The winlogon notification subscriber <Profiles> is taking long time to handle the notification event (Logon).

 

So basically I am getting Event ID error 6001 to 6006 and I don't understand why I am getting this, it doesn't make a lot of sense.

 

RDS user connection issues

October 9, 2018, 8:51 am

≫ Next: Cannot login to Windows Server 2012 R2 after installation

≪ Previous: Login Error: Please wait for the User Profile Service hang on Domain Controller (Need your help)

$

0

0

Hi,

We have a simple setup here but we have a problem with users have intermittent connection issues. The event log isn't the most helpful so I was wandering if anyone here can point me in the right direction. In lamens terms this is my issue.

We have a Kemp load balancer to two RDS gateways and then our RDS connection broker then our RDS hosts. All are Windows Server 2016. 

Daily we get issues from remote working users that when they first connect they get the configuring connecting dialog box (after all the authentication) and it just stays there and either times out or the user just cancels. When they click on the RDP icon and attempt to connect a second time, it works fine and logs straight in. 

I understand there are many factors (user internet connection etc) but we (IT) have ourselves, in the evening gone home and tested it and get the same issue. spinning circle on configuring, cancel it or wait until it times out, try again and straight in. 

Is there anywhere you can tell me where I can look like a RDS log where I can see exactly what it is doing so I can get to the bottom of this issue?

On a side note I can see in the "TerminalServices-Gateway" log on one of the gateway servers, I keep seeing this warning and error (same time) against a mixture of users, daily;

Warning: The user "domain\user1", on client computer "IP address", met connection authorization policy and resource authorization policy requirements, but could not connect to resource "RDS Host 4". Connection protocol used: "UDP". The following error occurred: "23005".

Error: The user "domain\user1", on client computer "User IP address", failed connection to the remote server "RDS Host 4" using UDP proxy. The following error occurred : "2147965405".

Now, I dont know if this is related to what everyone is experiencing but it doesnt show this error and warning for everyone who has the two attempt connecting issue. I just put that in to see if it helps. 

I just want to know if there is anywhere I can see exactly what is happening when connecting (RDS logs etc).

Any help is much appreciated.

Regards

Cannot login to Windows Server 2012 R2 after installation

October 25, 2018, 1:43 am

≫ Next: User in multiple RDS collections

≪ Previous: RDS user connection issues

$

0

0

Need help to log into Windows Server 2012 R2 after installing it on a laptop running Windows 10.

Admin password cannot get in too.

Thank you.

User in multiple RDS collections

October 24, 2018, 4:50 am

≫ Next: RDP disconnection during live migration

≪ Previous: Cannot login to Windows Server 2012 R2 after installation

$

0

0

Hello,
I currently have an RDS farm with 2 session hosts managed by a deployment server. It is 2 hosts are managed by a single collection.
I would like to create a new collection with a new session host or I will put my users from another site to be able to manage everything from the same deployment server.
My problem is that my management sometimes has to move to other sites and it is therefore interesting for me to have them in several collections at the same time. As a result, he could connect to a different collection depending on the site he is on.
But after a lot of research, it was impossible to find out how to do it. So I turn to you if you already know solutions.
Thank you :)

RDP disconnection during live migration

October 24, 2018, 7:48 am

≫ Next: RDP Connection limit

≪ Previous: User in multiple RDS collections

$

0

0

I just got done with a migration from a 2012 hyperv failover cluster to a 2016. This cluster host a whole RDS envoirnment then i have been running for years. When it was on the 2012 cluster i could live migrate server and i would only notice a fraction of a second hiccup on my remote apps etc. However on the new cluster i am know being disconnected from the server completly with the following error message. 

"Your Remote Desktop Services session has ended.

The connection to the remote computer was lost, possibly due to network connectivity problems..........."

There is no attempt at a re-connection or anything.

If i manually reconnect i am brought back right were i was left off. Any ideas on how i can make this live migration of a terminal session host a smoother process for end users?

RDP Connection limit

October 23, 2018, 9:00 pm

≫ Next: Cannot sign in to published app on windows server 2016 Remote desktop services

≪ Previous: RDP disconnection during live migration

$

0

0

Hello All, I am new to windows server 2012 r2 I have a task to migrate win2012 r2 server to another cloud so I have few question

1) Is there any RDP concurrent session limit in win2012 r2

2) Do I have to must create a domain controller as I have only 5 user

3) currently I installed windows2012 r2 on a machine created user and created group for remote desktop and all 5 user made member of this group and they are accessing it remotely via rdp is this enough or do I need to do something else please advise

4) I have user CALs on old machine for 5 users can I transfer this to new machine if yes then how

Cannot sign in to published app on windows server 2016 Remote desktop services

October 23, 2018, 6:15 am

≫ Next: 2016 RDS deployment with authentication Error Code 0x607 when users connect from offsite

≪ Previous: RDP Connection limit

$

0

0

I have a problem with a published app. It is published through Remote desktop services, but when I start it the Remote desktop session prompts me with this message:

"To sign in remotely, you need the right to sign in through Remote Desktop Services. By default members of the Administrators group have this right. If the group you're in does not have the right, or  if the right has been removed from the Administrators group, you need to be granted the right manually."

I have checked the session host, and nothing is wrong with this. The user have permissions in the Groups Remote desktop users and administrators.

When you get the above message you can press OK, and you get the normal login window for the servers and as it turns out the server that the published app is trying to use is the connection broker, not the session host. So that is the explanation that this is not working even if permissions are correct.

But why does it try to Connect to the CB and not the session host?

We have a setup that exists of two servers with the roles Connection broker, Gateway and Web Access. We have 5 session hosts and the app in question is published to one of these.

I have been thinking that the user needs access to the connection broker, but we have an old RDS solution on 2012, which is identical, and no extra permissions are given to users on the servers containing CB,WA and GW.

Could it be the RAP and RAC policies? they are in a good way identical, but I can make an effort and go through them again.

I am stomped.

 

---

2016 RDS deployment with authentication Error Code 0x607 when users connect from offsite

October 19, 2018, 6:13 am

≫ Next: Server disconnects idle users even with GPO set

≪ Previous: Cannot sign in to published app on windows server 2016 Remote desktop services

$

0

0

I have a relatively simple setup.  I have a previous 2012 R2 deployment that I am replacing with this 2016 deployment.  1 Gateway, 1 Broker, and 2 Load Balanced Hosts.  Everything is working fine for users connecting from the local network.  Users connecting remotely are getting a Code 0x607 authentication error when they are redirected to the second host.

Our gateway server is using a 3rd party certificate.  This server is running 2012 R2.  It is still part of the 2012 R2 deployment, but my understanding is that it should continue to work just fine.  The eventual plan is to replace this server with a 2016 that is part of this deployment, once I have transitioned my users.

Our Broker server also serves as a host.  This server is using a cert issued by our local domain CA.  All is well on this machine.  The RDWeb service is also installed here. I should mention that our users do not use the RDWeb service.  Rather, I use the RDWeb to get an RDP file that I distribute to the users.

Our 2nd Host is where we are seeing the issue.  This server is also using a cert issued by our local domain CA.  When users are redirected to this serverwhile connecting remotely, they are getting the error I mentioned above.  

My clients require TLS.  The RDP files are directed toward the Broker and have all of the load balancing details and use  redirection server name set to 1.

The 0x607 error seems to indicate that I have a certificate issue when the client is trying to connect to the host.   What has me confused is the the fact that they work just fine locally, when only one of my servers has issues remotely (both using local domain cert).

It is my understanding that we should not be using a DNS Farm name with 2012+ versions of RDS.  Perhaps I am breaking that logic by handing out a static RDP File.  If that is the case how do I fix it?  I have thought about getting a 3rd party cert for my internal domain servers, but that is an expensive guess if I am wrong about the issue.  

What have I done wrong?

Server disconnects idle users even with GPO set

October 25, 2018, 10:04 am

≫ Next: startmenu, remote desktop

≪ Previous: 2016 RDS deployment with authentication Error Code 0x607 when users connect from offsite

$

0

0

I have a server that has a few Remote Desktop users. I want the users to be able to stay logged in even after they are idle. I set the GPO Idle Session Limit to Never but it still logs off the user each night. Is there a different GPO setting to keep users logged on or did I configure this GPO incorrectly. Also, is there a GPO setting for just administrator users? Thanks!

startmenu, remote desktop

October 25, 2018, 10:44 am

≫ Next: RDS 2016 / 2019 - Pooled server based virtual desktops

≪ Previous: Server disconnects idle users even with GPO set

$

0

0

hi all,

what's the best way to remove server manager etc from Users startmenu? can we configure it manuel with GUI?

or is this the best way for new user

powershell Import-StartLayout -LayoutPath \\server\share\LayoutModification.xml -MountPath $env:SystemDrive\

---

Chris

RDS 2016 / 2019 - Pooled server based virtual desktops

October 25, 2018, 12:08 pm

≫ Next: Explorer.exe not responding / SLOW printing

≪ Previous: startmenu, remote desktop

$

0

0

Hey all,

i would like to switch some customers from vmware to hyper v. I need to know if its possible to create a pooled vdi group based on server datacenter edition as vdi desktop. As far as i have tested the rd virtualization host in 2016 gives the error non client based sku when creating the pooled group. Is there a way in at least server 2019 or maybe 2016 to create server based virtual desktops with rds and hyper v like linked clones server based in vmware horizon view?

If anybody knows something or if there is another way in hyper v and rds without extra software like citrix im looking forward for the answer. Thank you.

Explorer.exe not responding / SLOW printing

October 25, 2018, 12:49 pm

≫ Next: Web client - Forcing keyboard settings

≪ Previous: RDS 2016 / 2019 - Pooled server based virtual desktops

$

0

0

Hi,

I am currently running a Terminal Server on Windows 2012 R2 with all the latest updates installed.

We have a print server also running on a different 2012R2 machine.

Printing is really slow.. If I open printer properties and click Print Test page it takes up to 30 seconds until the dialog box "A test page has been sent to your printer" shows up.

I also notice while having Resource monitor running during these tests that explorer.exe goes to "not responding" and then goes back to running once the dialog box pops up.

I have uninstalled the anti-virus (trend) as well, but no difference.

I ran DISM.exe /Online /Cleanup-image /Restorehealth

and sfc /scannow

I'm running out of ideas on what to try next..