I have two Win 2008 r2 sp1 servers. Both are RD Session host servers. One of them is also serving as a RD Gateway server AND RD Web access server. Most everything is working well and as planned. However, I am having an issue with the the RD Web Access.
In the RD Web access server configuration page, I've set "One or more RemoteApp sources" and I've added two servers there, separated by a semicolon (eg RDServer1;RDServer2), and as expected a long list of RemoteApps hosted on both servers is shown . The issue is that whatever server is listed second (eg RDServer2) won't allow sso to work right -- when I click a link for a RemoteApp hosted on RDServer1 I am not prompted again for login credentials. However, when clicking a link for a RemoteApp hosted on RDServer2 I am prompted "Enter Your Credentials". I've tried swapping the order of the "Source Name" servers, and after a reboot indeed links to the RemoteApps hosted on that second server now prompt for me to "Enter your credentials".
Things I've tried:
1. Trying various server name formats (IP address, NetBIOS name, FQDN, and more) to no apparent effect.
2. Applied the hotfix from KB2524668 to both servers.
3. Flushed the IE caches for the client machines.
4. Tried various AD login accounts
5. Ensuring that the RD Web Access server is added to the local group "TS Web Access Computers" on both servers. This is one step that I'm not 100% sure of -- it is clear to me that the RD Session host server that doesn't contain RD Web access should be there, but I'm not totally clear as to whether the dual-duty RD Web server/RD Session host should have this setting. I've tried it both ways, but it doesn't seem to make a difference.
I'm stumped.