I have 1 Server that can't RDP or be RDP'd, access file shares or have its file shares accessed from other servers on a different subnet. 

I can access the file shares and RDP to and from it from other servers in the same subnet. 

Windows Firewalls are off, no I cannot change the IP address for testing because web and application services are dependent upon it. 

Other servers can access shares and RDP across the subnets just fine. It's literally just this 1 server that's having the issue.

Everything was working fine until about 2 months ago.

I have a Windows 7 system that I access with Remote Desktop Connection from a Windows 10 system.  One day I found that my user account, which had been given administrator rights quite some time ago, couldn’t log on remotely.  The Windows 7 system was configured for remote access with the setting “Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure)”. When I tried to log on, I got an error stating “The Local Security Authority cannot be contacted”. 

If I configured Windows 7 to “Allow connections from computers running any version of Remote Desktop (less secure)”, then I could log in but I didn’t want to use this less secure setting.

Doing some experimentation, I found that if I enabled the built-in Administrator account, then the Administrator could log in remotely using “Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure)”.

If I created a new standard user called Test.  I found that Test could also could log in remotely using “Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure)”.

If I promoted Test to an administrator, then Test couldn’t remotely log on.  He got the LSA error.  If I demoted my account to a standard user then I could log in remotely using “Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure)”.

When I promoted my account back to an administrator, the logon failed with the LSA error.

All users have valid passwords that are set to never expire and are members of the Remote Desktop Users group.  The only thing that is changing is whether or not the users have administrative privileges.

Is this a permissions issue, or a behavior change cause by an update to Windows 7?

Mark Wilson

I'm having an issue on a single RDS 2016 server at the moment where the start menu doesn't open.  

I've gone though lots of steps including sfc /scannow  (No errors)   DISM with all the options (No Errors)

I've cleared the Registry in firewall policy\restricted services\configurable\system.

I believe the issue is that I don't have any applications registered in the get-appxpackage at all, it just comes back blanks where as on working machines I get a list of about 15.

I've tried to install the packages by hand using variations of 

Add-AppxPackage -DisableDevelopmentMode -Register C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\AppxManifest.xml -Verbose 

This returns the following;

Add-AppxPackage : Deployment failed with HRESULT: 0x80073CF6, Package could not be registered.
An internal error occurred with error 0x800705AA. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
NOTE: For additional information, look for [ActivityId] 5597e571-c93a-001c-e6eb-97553ac9d401 in the Event Log or use the command line Get-AppxLog -ActivityID
5597e571-c93a-001c-e6eb-97553ac9d401
At line:1 char:1
+ Add-AppxPackage -DisableDevelopmentMode -Register C:\Windows\SystemAp ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : WriteError: (C:\Windows\Syst...ppxManifest.xml:String) [Add-AppxPackage], IOException
    + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand

If I then use Get-AppxLog -ActivityID5597e571-c93a-001c-e6eb-97553ac9d401

Time                      ID           Message
----                      --           -------
20/02/2019 17:22:29       301          The calling process is powershell.exe
20/02/2019 17:22:29       603          Started deployment Register operation on a package with main parameter: AppxManifest.xml and Options: 0. See
                                       http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       10002        Creating Resiliency File
                                       C:\ProgramData\Microsoft\Windows\AppRepository\75f29027-c919-4974-89c9-f53bb4413b5f_S-1-5-21-1787921346-3847137862-2124306101-500_1.rslc for
                                       Register Operation on Package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy.
20/02/2019 17:22:29       607          Deployment Register operation on package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy has been de-queued and is running
                                       for user FISRDS1\Administrator.
20/02/2019 17:22:29       613          Adding uri to the list of Uris: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\AppxManifest.xml.
20/02/2019 17:22:29       447          GetFullyQualifiedReference from the String Resource Map for package full name:
                                       Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy and reference string: Microsoft Corporation failed.
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.visualElements windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.search windows.fileOpenPicker windows.fileSavePicker windows.cachedFileUpdater
                                       windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch windows.fileTypeAssociation windows.protocol
                                       windows.appointmentsProvider windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks
                                       windows.webAccountProvider windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService
                                       windows.appointmentDataProvider windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience
                                       windows.dialProtocol windows.restrictedLaunch windows.accountPictureProvider windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.activatableClass.collector .
20/02/2019 17:22:29       10000        About to service package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy. Setting the package state to disabled returned
                                       with 0x80070490.
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.stateExtension windows.applyDataExtension windows.repositoryExtension
                                       windows.capability windows.MRT windows.visualElements windows.alarm windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.gameExplorer windows.search windows.fileOpenPicker windows.fileSavePicker
                                       windows.cachedFileUpdater windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch
                                       windows.fileTypeAssociation windows.contentType windows.protocol windows.appointmentsProvider windows.defaultPrograms
                                       windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks windows.webAccountProvider
                                       windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService windows.appointmentDataProvider
                                       windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience windows.dialProtocol windows.restrictedLaunch
                                       windows.integrityExtension windows.licensing windows.accountPictureProvider AppSync windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.DeviceSetupManager windows.activatableClass.collector windows.certificates windows.preCompilationExtension
                                       windows.ntServices windows.wmiProviders windows.iisModules windows.performanceProviders windows.eventProviders windows.runTime
                                       windows.DeviceAccess windows.indexedDB windows.MicrosoftAccountClient.SignOut windows.searchIndexer windows.geolocation windows.userDataAccess
                                       windows.repositoryExtension.remove windows.stateExtension.remove .
20/02/2019 17:22:29       827          Capability parsing started for the package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy
20/02/2019 17:22:29       5252         An internal error occurred with error 0x800705AA. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       306          error 0x800705AA: While processing the request, the system failed to register the windows.stateExtension extension due to the following error:
                                       Insufficient system resources exist to complete the requested service.
                                       .
20/02/2019 17:22:29       316          error 0x800705AA: Cannot register the request because the following error was encountered during the registration of the windows.stateExtension
                                       extension: Insufficient system resources exist to complete the requested service.
                                       .
20/02/2019 17:22:29       5252         An internal error occurred with error 0x80070002. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       331          error 0x80070002: While reverting the request, the system failed to de-register the windows.stateExtension extension due to the following
                                       error: The system cannot find the file specified.
                                       .
20/02/2019 17:22:29       300          error 0x80073CF6: Cannot register the Microsoft.Windows.Cortana_cw5n1h2txyewy package due to the following error: Package could not be
                                       registered.
                                       .
20/02/2019 17:22:29       605          The last successful state reached was ResolvedDeferredRegistrations. Failure occurred before reaching the next state RegistrationChanged. hr:
                                       0x80073CF6
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.stateExtension windows.applyDataExtension windows.repositoryExtension
                                       windows.capability windows.MRT windows.visualElements windows.alarm windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.gameExplorer windows.search windows.fileOpenPicker windows.fileSavePicker
                                       windows.cachedFileUpdater windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch
                                       windows.fileTypeAssociation windows.contentType windows.protocol windows.appointmentsProvider windows.defaultPrograms
                                       windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks windows.webAccountProvider
                                       windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService windows.appointmentDataProvider
                                       windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience windows.dialProtocol windows.restrictedLaunch
                                       windows.integrityExtension windows.licensing windows.accountPictureProvider AppSync windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.DeviceSetupManager windows.activatableClass.collector windows.certificates windows.preCompilationExtension
                                       windows.ntServices windows.wmiProviders windows.iisModules windows.performanceProviders windows.eventProviders windows.runTime
                                       windows.DeviceAccess windows.indexedDB windows.MicrosoftAccountClient.SignOut windows.searchIndexer windows.geolocation windows.userDataAccess
                                       windows.repositoryExtension.remove windows.stateExtension.remove .
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.visualElements windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.search windows.fileOpenPicker windows.fileSavePicker windows.cachedFileUpdater
                                       windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch windows.fileTypeAssociation windows.protocol
                                       windows.appointmentsProvider windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks
                                       windows.webAccountProvider windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService
                                       windows.appointmentDataProvider windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience
                                       windows.dialProtocol windows.restrictedLaunch windows.accountPictureProvider windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.activatableClass.collector .
20/02/2019 17:22:29       10001        Finished servicing package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy. Setting the package state to enabled returned
                                       with 0x0.
20/02/2019 17:22:29       401          Deployment Register operation with target volume C: on Package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy from:
                                       (AppxManifest.xml)  failed with error 0x80073CF6. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       404          AppX Deployment operation failed for package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy with error 0x80073CF6. The
                                       specific error text for this failure is: An internal error occurred with error 0x800705AA. See http://go.microsoft.com/fwlink/?LinkId=235160
                                       for help diagnosing app deployment issues.

I can't seem to get the system to re-register those applications!

Open to any suggestions?  (Please no, have you restarted the server!)

This happens on all users including local admin and new accounts.  Happens in Safe and Clean Boot.

Thanks.

Hello everyone,

I am trying to figure out the easiest way to allow more than 2 RDP sessions at a time on my Windows 2016 Server Standard. I have tried using the google to help, but there are so many suggestions and 90% of them result in the original poster disappearing so I don't know the best way to accomplish this. I don't need anything extravagant setup, I just need more than 2 people to be able to rdp into the server at the same time.

Any help would be appreciated.

Thanks,

Hi, I've this issue after migration of RDS server from 2012 R2 to 2016 and client have Windows 10 1709 but with Windows 10 1703 no issue.

Any suggestions?

Good day Everyone,

So, the agreement between my company and another was to use terminal services for their users to connect and use the published apps, which was fine to test out during the 60day trail period. Complications occurred when the white-listing of specific sites stopped working and we had to find ways around this, which meant that by the time things got sorted, the 60 day trail period you get when installing RDS role, expired. 

The company doesn't want to purchase any CAL's for their 2/3 users (users is expecting to grow, hence terminal services) and requested that terminal services be removed for the time being. This is fine, because I can just uninstall the RDS role form server manager. 

The problem is, even after uninstalling, RDS still appears in the quick access on the left in server manager. I am not an expert on RDS or terminal services, but i would expect it to be removed. But this isn't the real problem, the problem is, even after removing the role, windows still complains about there not being a license configured in the license manager, which means that users can't RDP to the computer. I've been searching the internet and cannot find a solution. 

I already tried going to regedit HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp and selecting decimal and setting it to 3389. 

My understanding is that server is for some reason still sending incoming rdp requests to the session host? And that it's checking for a license on the license manager since the temp license expired.. Not sure what the process is that it's following. 

I just want to reinstate that default RDP, so that users can atleast connect to the machine again. 

I saw a fix where a user said you must go to the session host config and create a new RDP-Tcp listener, but i have no session host server added, and cannot add one. 

Any help would be appreciated please. 

Thanks

Hi,

Can anyone answer the question which variant for the load balancing at  RDS farms is the best practice option. 

DNS round robin between all session hosts or no DNS round robin and the connection only goes to the connection broker.

Hi,

I have somme troubles with my RDS infrastructure.

I have one physical server with 2 collections.

When a client try to connect to the second collection. Both collection doesn't work anymore till we restart the Remote Desktop Services on the Connection Broker server.

The client get this error : "This computer can't connect to the remote computer.The two computers couldn't connect in the amount of time allotted.  Try connecting again.  If the problem continues, contact your network administrator or technical support"

The first collection working pretty well untill any body tries to connect to the second collection.

Any advices or suggestions?

All servers OS are 2016 STD

Best Regards

we have RDS installed in Windows 2016 standard edition and use session-base desktop deployment.

It was working fine for about one year. About two weeks ago, we started to have the following issue:

This computer can't connect to the remote computer.
The two computers couldn't connect in the amount of time allotted. Try connecting again. If the problem continues, contact your network administrator or technical support. 

When this issue happens, we find some users are disconnected in the RDS-Collections-QuickSessionCollection. But we cannot log/sign off those users, they are always showing there.

BTW, we can sign of those users in the Task Manager-Users. 

We can solve this issue by restarting the server. How to fix it without restarting the server?

Thanks!

Hi

I've been messing around with trying to get remotefx usb redirection to work, at the moment i just need a mouse to work through it.

my setup:

Host: Running Windows 10 Enterprise 64bit, it have a connected monitor, mouse and keyboard.

Client: Running Windows 10 Enterprise 64bit, not much else to say about this.

I've setup the needed group policies for this to work on both ends.

When i connect from the client to the host, and i select my 2nd mouse to be redirected, in the remote desktop program, the mouse gets detected and installed, and i can even find it on the device manager on the host, but i the cursor is not moving at all, no responds from the right or left click either, still it gets detected.

I can setup my phone to be redirected, but not the mouse, it simply doesnt work.

Is there any solution to this problem?

Hello!

I use MsTsc ActiveX control to add RDP functionality to my WPF application. The control is hosted inside WinFormsHost control. My application hangs on shutdown from time to time. Here is the stacktrace of the hanging thread:

Is there a way to debug this issue? MsTsc version is 10.0.17134.

Regards,

Igor.

I have been having difficulties getting the computer permissions to work by group in the RA Network Resource policy for remote desktop farms in HA mode.  Published app's fail to connect because I cannot find a way to add the HA gateway name to an AD group.  The AD group needs a computer account with the alias name of the connection broker.

I am always forced to use a RD Gateway-managed group or allow users to connect to any network resource in the RA policy.  Either of these are not desirable, we'd like to use a single AD group for this across multiple RDS servers in our farm.

Does anyone know a simple way to add an AD alias "computer" account for the HA Gateway name so I add it to an AD group and use that group in the RA Gateway policy to allow users to connect to published apps on the RDS servers themselves?

We have two servers here. a 2008r2 domain controller, and a 2012r2 file/print/rds server.

I installed AD onto the 2012r2 server in the hopes that it could work as a backup dc, not realizing that doing so would kill Remote Desktop services.

So I removed AD from the 2012r2 in the hopes that would bring back RDMS, but it doesn't. Every time I try to start the service it says "The Remote Desktop Management service failed to start. Error code: 0x88250001"

Did installing the AD role change something that did not get reverted when I removed the role? Is there a way to get this server to accept RDP connections again?

Dear All,

we have a ADC  server on windows 2012 r2 but its working very slow when i view like task manager,disk management some time get hang and some time working good. kindly suggest how to resolved this issue.

Thanks & Regards

Naved Anjum 

Good afternoon all;

I have an issue and not sure how to complete this.

2012 R2 for all servers
2 connection brokers in HA, 1 license server, 1 web access server, and 5 session hosts

There are 2 session collections on there. One of them is very old and was setup by someone else. this one works fine and when people click on the RDP full desktop icon ( Not a published Remote Desktop MSTSC Remoteapp). They get all settings prefilled correctly, RDP to the connection Broker farm name, with the RD gateway...it all works.

Put in a new session collection to 2 new session hosts that were put up for this purpose.

Everything works EXCEPT the prefilling of RDP settings, as of right now they come in blank.
How do I get this to be prefilled like the old session collection?

Every time I try to modify the deployment using

Set-RDsessionCollectionConfiguration -CollectionName XXXXX -CustomRdpProperty "full address:s:broker.example.com gatewayhostname:s:rdp.example.com" -ConnectionBroker ZZZZZZ

Whenever I try to apply this it looks like its going to apply but gives
You cannot call a method on a null-valued expression 
"At line:1 char:1"

Can anyone help me get through this? or some other way to apply those settings? I was poking at this for hours today and can't find a reason why this is not applying.

I even tried copying the custom RDP session deployment configuration reg keys for the old one into the new session but that didn't work.

Goofball

Hi everyone,

We have customer that has a strange issue. Only few users have this issue and not everyone. Scenario is like this, customer have roaming profiles with folder redirection. They have application that is installed on all rds servers. That application calls another program and to make this work they had to change registry entry for every users under HKCU\software\software name

Now issue here is that when some users log in path to the program changes from S (which is manually configured in registry and it is giving path to the files of program) to C: where the program is installed. My question is, is this windows error of is this the application error. I think that windows registry should not change this automatically or am I wrong? I am not sure what to do because application vendor told us that this is windows issue not application?

Hi TechNet,

Environment : 2 RDSH servers and 1 RDCB server (all 2012R2 datacenter)  ; Win-7 & 10 clients ; 3rd party app published.

Issue description :

Hi,

is there some cmdlet to disable the user consent?

We have a Dell TS130 running Windows Server 2016 system which is supposed to server as a Remote Desktop Services server.  It lets two people connect via RDP and then says we have limited connections and all of the connections are in use, try again later.  Considering we have ten licenses something is clearly wrong.  The Remote Desktop Licensing Diagnoser says no problems detected.   4 licenses issued 6 left available. It sees the licenses and it issuing the licenses but only allows two connections at a time.  I spent all day yesterday  on the phone with Dell.  They can't find a problem and sent me to a Microsoft phone number which leads me to this situation.

Microsoft told me on the phone that the service ticket must be initiated online but the URL they directed me to will not allow me to submit a ticket because we don't have a support contract and it will not let me submit a per incident ticket because it says we are an "Azure Client"??  The only Azure connection is a couple of laptops that predate the server.  I'm very frustrated and I wonder if Microsoft can come up with any other ways to piss me off.

If anyone has any helpful suggestions I would appreciate them.