Hi,

I have somme troubles with my RDS infrastructure.

I have one physical server with 2 collections.

When a client try to connect to the second collection. Both collection doesn't work anymore till we restart the Remote Desktop Services on the Connection Broker server.

The client get this error : "This computer can't connect to the remote computer.The two computers couldn't connect in the amount of time allotted.  Try connecting again.  If the problem continues, contact your network administrator or technical support"

The first collection working pretty well untill any body tries to connect to the second collection.

Any advices or suggestions?

All servers OS are 2016 STD

Best Regards

Hello Experts,

There are 5 RDV hosts (2012R2) on Hyper-V with pooled VMs configured. These 5 hosts have approx. 100, 100, 200, 200, 200 sizes (number of VMs configured using template). When I checked, Hyper-V has fetched 50, 50, 100, 100, 100 VMs (approx. again) from these RDV hosts respectively. 

So, is load balancing happening normally here ? Does Size of Hosts matter when Hyper-V load balances among hosts ?

I have been checking for some documents/articles from Microsoft in internet but couldn't find an exact article sharing this knowledge !

Please clarify the same and any help providing documents/articles from Microsoft on this topic is much appreciated !

Thanks in advance,

SJNC.

Hello guys,

We consistantly encounter this effect on Windows 10 machines connecting to Windows Server 2016 Terminal Servers using the RDWEB gateway. When the client screen turns off the monitor to save power and the user comes back and presses a key, the last thing on the screen of the RDS session is displayed and everything is frozen for a good few seconds before displaying the login screen of the Terminal Server. Very nice when people are doing back transfers or paying salaries.

This only happens on 2016 Terminal Servers when connecting through RDWEB and using a W10 client. Domain joined or not, it does not matter. Nothing is displayed in the logging of the RDS host, gateway, broker or client.

Also, this is not a limit by the Terminal Server policies, the auto logoff after disconnect and auto lock times are set to at least 10 minutes while I can reproduce this after 1 minute when setting the screen energy saving settings to 1 minute.

Can someone please point me into a direction? I seem to be the only person on earth who can consequently reproduce this. Also, we know that simply locking your session is the way to go, especially when leaving sensitive data on screen but you know how users are.

We have updates all our servers and W10 clients (1809) and have this on multiple, totally different locations using totally different internet connections, locations, policies etc. Nothing fancy but a simple RDS deployment and some Office apps are everything they have in common.

Dear All ,

I have a Remote Desktop session Host which is my application server and added to the domain.

I have a brand new HP LaserJet 700 M712 ,which i installed in local system using the Complete driver from HP.

Then the users is taking the RDP to the server from local system and this printer is showing redirected in remote desktop session for the user.

But when i trigger a print to this redirected printer nothing prints.

No error messages shows.

This is for some systems only not for all system 

The OS of local system is Windows 7 Pro and Server is Windows server 2008 R2 standard.

I have tried lots of troubleshooting .Below are the steps

1 . Installed diffrent driver UPD PCL6 both in local system and server.

2 . Cleared the Print Spooler and restarted the spooler service

Please provide me any solution .

I'm having an issue on a single RDS 2016 server at the moment where the start menu doesn't open.  

I've gone though lots of steps including sfc /scannow  (No errors)   DISM with all the options (No Errors)

I've cleared the Registry in firewall policy\restricted services\configurable\system.

I believe the issue is that I don't have any applications registered in the get-appxpackage at all, it just comes back blanks where as on working machines I get a list of about 15.

I've tried to install the packages by hand using variations of 

Add-AppxPackage -DisableDevelopmentMode -Register C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\AppxManifest.xml -Verbose 

This returns the following;

Add-AppxPackage : Deployment failed with HRESULT: 0x80073CF6, Package could not be registered.
An internal error occurred with error 0x800705AA. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
NOTE: For additional information, look for [ActivityId] 5597e571-c93a-001c-e6eb-97553ac9d401 in the Event Log or use the command line Get-AppxLog -ActivityID
5597e571-c93a-001c-e6eb-97553ac9d401
At line:1 char:1
+ Add-AppxPackage -DisableDevelopmentMode -Register C:\Windows\SystemAp ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : WriteError: (C:\Windows\Syst...ppxManifest.xml:String) [Add-AppxPackage], IOException
    + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand

If I then use Get-AppxLog -ActivityID5597e571-c93a-001c-e6eb-97553ac9d401

Time                      ID           Message
----                      --           -------
20/02/2019 17:22:29       301          The calling process is powershell.exe
20/02/2019 17:22:29       603          Started deployment Register operation on a package with main parameter: AppxManifest.xml and Options: 0. See
                                       http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       10002        Creating Resiliency File
                                       C:\ProgramData\Microsoft\Windows\AppRepository\75f29027-c919-4974-89c9-f53bb4413b5f_S-1-5-21-1787921346-3847137862-2124306101-500_1.rslc for
                                       Register Operation on Package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy.
20/02/2019 17:22:29       607          Deployment Register operation on package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy has been de-queued and is running
                                       for user FISRDS1\Administrator.
20/02/2019 17:22:29       613          Adding uri to the list of Uris: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\AppxManifest.xml.
20/02/2019 17:22:29       447          GetFullyQualifiedReference from the String Resource Map for package full name:
                                       Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy and reference string: Microsoft Corporation failed.
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.visualElements windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.search windows.fileOpenPicker windows.fileSavePicker windows.cachedFileUpdater
                                       windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch windows.fileTypeAssociation windows.protocol
                                       windows.appointmentsProvider windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks
                                       windows.webAccountProvider windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService
                                       windows.appointmentDataProvider windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience
                                       windows.dialProtocol windows.restrictedLaunch windows.accountPictureProvider windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.activatableClass.collector .
20/02/2019 17:22:29       10000        About to service package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy. Setting the package state to disabled returned
                                       with 0x80070490.
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.stateExtension windows.applyDataExtension windows.repositoryExtension
                                       windows.capability windows.MRT windows.visualElements windows.alarm windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.gameExplorer windows.search windows.fileOpenPicker windows.fileSavePicker
                                       windows.cachedFileUpdater windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch
                                       windows.fileTypeAssociation windows.contentType windows.protocol windows.appointmentsProvider windows.defaultPrograms
                                       windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks windows.webAccountProvider
                                       windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService windows.appointmentDataProvider
                                       windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience windows.dialProtocol windows.restrictedLaunch
                                       windows.integrityExtension windows.licensing windows.accountPictureProvider AppSync windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.DeviceSetupManager windows.activatableClass.collector windows.certificates windows.preCompilationExtension
                                       windows.ntServices windows.wmiProviders windows.iisModules windows.performanceProviders windows.eventProviders windows.runTime
                                       windows.DeviceAccess windows.indexedDB windows.MicrosoftAccountClient.SignOut windows.searchIndexer windows.geolocation windows.userDataAccess
                                       windows.repositoryExtension.remove windows.stateExtension.remove .
20/02/2019 17:22:29       827          Capability parsing started for the package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy
20/02/2019 17:22:29       5252         An internal error occurred with error 0x800705AA. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       306          error 0x800705AA: While processing the request, the system failed to register the windows.stateExtension extension due to the following error:
                                       Insufficient system resources exist to complete the requested service.
                                       .
20/02/2019 17:22:29       316          error 0x800705AA: Cannot register the request because the following error was encountered during the registration of the windows.stateExtension
                                       extension: Insufficient system resources exist to complete the requested service.
                                       .
20/02/2019 17:22:29       5252         An internal error occurred with error 0x80070002. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       331          error 0x80070002: While reverting the request, the system failed to de-register the windows.stateExtension extension due to the following
                                       error: The system cannot find the file specified.
                                       .
20/02/2019 17:22:29       300          error 0x80073CF6: Cannot register the Microsoft.Windows.Cortana_cw5n1h2txyewy package due to the following error: Package could not be
                                       registered.
                                       .
20/02/2019 17:22:29       605          The last successful state reached was ResolvedDeferredRegistrations. Failure occurred before reaching the next state RegistrationChanged. hr:
                                       0x80073CF6
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.stateExtension windows.applyDataExtension windows.repositoryExtension
                                       windows.capability windows.MRT windows.visualElements windows.alarm windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.gameExplorer windows.search windows.fileOpenPicker windows.fileSavePicker
                                       windows.cachedFileUpdater windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch
                                       windows.fileTypeAssociation windows.contentType windows.protocol windows.appointmentsProvider windows.defaultPrograms
                                       windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks windows.webAccountProvider
                                       windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService windows.appointmentDataProvider
                                       windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience windows.dialProtocol windows.restrictedLaunch
                                       windows.integrityExtension windows.licensing windows.accountPictureProvider AppSync windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.DeviceSetupManager windows.activatableClass.collector windows.certificates windows.preCompilationExtension
                                       windows.ntServices windows.wmiProviders windows.iisModules windows.performanceProviders windows.eventProviders windows.runTime
                                       windows.DeviceAccess windows.indexedDB windows.MicrosoftAccountClient.SignOut windows.searchIndexer windows.geolocation windows.userDataAccess
                                       windows.repositoryExtension.remove windows.stateExtension.remove .
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.visualElements windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.search windows.fileOpenPicker windows.fileSavePicker windows.cachedFileUpdater
                                       windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch windows.fileTypeAssociation windows.protocol
                                       windows.appointmentsProvider windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks
                                       windows.webAccountProvider windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService
                                       windows.appointmentDataProvider windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience
                                       windows.dialProtocol windows.restrictedLaunch windows.accountPictureProvider windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.activatableClass.collector .
20/02/2019 17:22:29       10001        Finished servicing package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy. Setting the package state to enabled returned
                                       with 0x0.
20/02/2019 17:22:29       401          Deployment Register operation with target volume C: on Package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy from:
                                       (AppxManifest.xml)  failed with error 0x80073CF6. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       404          AppX Deployment operation failed for package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy with error 0x80073CF6. The
                                       specific error text for this failure is: An internal error occurred with error 0x800705AA. See http://go.microsoft.com/fwlink/?LinkId=235160
                                       for help diagnosing app deployment issues.

I can't seem to get the system to re-register those applications!

Open to any suggestions?  (Please no, have you restarted the server!)

This happens on all users including local admin and new accounts.  Happens in Safe and Clean Boot.

Thanks.

Hi. I'm running into some sort of security issue. Some of our customers actively lock their RDP session so obviously no-one can use it. It seems that when you lock your RDP session, and then get a reconnect to the server, and the RDP client reconnects, it automatically logs you in again, circumventing the lock.

Easy to abuse too: locked session? Just disconnect the network cable / wifi until the session starts reconnecting, and reconnect the cable and *poof* you are in.

Now some of this is prevented as we have some customers that have 2FA implemented on the RD Gateways, so when the session reconnects, you'll need to approve the 2FA. But not all customers have that.

Would there be any way to prevent this? Anyone else can confirm this?

OneDrive for Business is an explorer shell extension, does anyone know how I can install it in Citrix / Terminal Services?

Even if the explorer shell extension isn't possible, it would be nice to know if anyone on here has presented the OneDrive for Business to their users in any other way i.e. a mapped drive etc?

thanks in advance.

Everything was working fine until about 2 months ago.

I have a Windows 7 system that I access with Remote Desktop Connection from a Windows 10 system.  One day I found that my user account, which had been given administrator rights quite some time ago, couldn’t log on remotely.  The Windows 7 system was configured for remote access with the setting “Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure)”. When I tried to log on, I got an error stating “The Local Security Authority cannot be contacted”. 

If I configured Windows 7 to “Allow connections from computers running any version of Remote Desktop (less secure)”, then I could log in but I didn’t want to use this less secure setting.

Doing some experimentation, I found that if I enabled the built-in Administrator account, then the Administrator could log in remotely using “Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure)”.

If I created a new standard user called Test.  I found that Test could also could log in remotely using “Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure)”.

If I promoted Test to an administrator, then Test couldn’t remotely log on.  He got the LSA error.  If I demoted my account to a standard user then I could log in remotely using “Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure)”.

When I promoted my account back to an administrator, the logon failed with the LSA error.

All users have valid passwords that are set to never expire and are members of the Remote Desktop Users group.  The only thing that is changing is whether or not the users have administrative privileges.

Is this a permissions issue, or a behavior change cause by an update to Windows 7?

Mark Wilson

Hello from Austria !!

First of all I wanna say, please excuse my bad english.
Since about 5 weeks I am struggling with the problem, 
that after a reboot of a fully patched 2012R2 RDS server,
the printer and drive redirections at logon will be done only about 2-3 hours after the reboot.
For users who do not log out / disconnect, they work the whole day. But when you log in again, no drives or printers will be redirected.

Sometimes the redirections work after lunch, but here they will be done only about 30 minutes.
After that time, new logged in users will not get any redirections.
At weekends, things usually work the whole weekend.

I have already done SFC / scannow, DISM / Online / Cleanup-Image / RestoreHealth.
Restarting "Remote Desktop Service Port Forwarding in User Mode" service does not change anything.

Deactivating and activating the "Device Redirector Bus for Remote Desktop" in the Device Manager has  worked only once, then the redirected drives and printers reappeared in the session.
Only the restart of the server (what happens Monday to Friday at 5:30) is bringing back the redirects for the mentioned 2-3 hours.

In the event log I find no error messages in consense with Remote Desktop.

I look forward to any kind of feedback, thanks in advance !!!

Regards from Austria

Reinhold

Hello Everyone,

I have a RDS implementation working with 2012r2 in a domain A.
Users from domain B (With an external two-way non-transitive trust with A) can access, log-in, use remoteapps, rds sessions, etc..

The problem is when I enable the RDWeb password reset feature. For example, taking 2 users with the "User must change password at next logon" option enabled:
If the user is from domain A, I get prompted to change the password and it works great.
If the user is from domain B, I get prompted to change the password, but after writing the new password it says that the user name or password is not valid.

Any clues?

I found this issue that I don't know if it's somehow related
http://social.technet.microsoft.com/Forums/en-US/cf14fc3e-2a4a-4f4e-8dd6-fed2ecdf7d7b/cross-forest-password-reset?forum=ilm2

Thanks

Microsoft Lover

Hello,

I have windows10 pro build 1809 with the last updates …. when I try open any remoteapp the authentication not working and askme always for user name and password.

I tried with muilti defernets server but it's not working !

so whats the problem ?

thanks.

Microsoft Lover

Hi Guys,

I have a scenario where domain users/machines are connecting to non domain machines via an RDG.

The users would like to avoid the first authentication check (their domain acct, to the RDG), and I'm not sure if it's possible or not.
I know I could implement a similar solution via web access, but looking for a solution natively with the ms rdc

Regards,

Jamie

Jamie Courtes MCTS - SCCM 2007 MCTS - SCCM 2012

Hi,

We have users running a RemoteApp from a Server 2008R2 RDS Server.

For users running the RemoteApp on a Notebook or Desktop they can update their password using CTRL+ALT+END

Users running on thin clients that connect to an RDS Server that they run the RemoteApp on we are unable to use CTRL+ALT+END to change their passwords.  Instead it drops them out of the RemoteApp.

Can someone advise the process or requirements to reset the password via a RemoteApp running via an RDS session?

Cheers,

Sean

Hi All,

I'm designing a multi-region RDS 2016 farm where 2 of the regions have very stable internet connections but the 3rd does suffer from intermittent internet outages. The office is on an island in the Carribean and the telco thinks nothing of cutting the connection to the island for a few hours for maintenance every so often so there's not much I can do about that. I also have to think about hurricanes and the odd ship that hits the undersea cable. As if things weren't difficult enough :)

Currently, all users at all offices are using PCs but we are introducing RDS with the long term plan to have everyone using RDS session-based desktops, also available externally. There are many reasons for this, including an ever-growing population of remote users.

The main user population is in the Carribean but our SQL databases for critical in-house applications, Exchange and a few other important apps run out of our main data centre located in a very stable environment but will all be moving to Azure (US) and O365 this year.

My preference would be to put all the RDS environment (brokers, GW, Web, RDSH etc) in our main data centre or Azure as our critical data and apps aren't accessible during an internet outage anyway but I've already lost that argument.  So that's enough background.

To ensure users in the Carribean office can launch an RDS desktop session from a thin client when they have no internet connection, along with having local RDSH servers, I'll have to have the brokers in HA, one in the Carribean, the other in our main data centre. As this will require SQL, will the broker in the Carribean office still function should it not be able to communicate to the SQL DB in our main data centre? is the broker clever enough to cache the settings locally and continue to work or will it cease to handle any connections when the DB is unavailable?

If it will not function without a continuous connection to the DB, I guess my only option would be to have the SQL DB in HA group with both SQL servers servicing their local brokers. I'd really like having to avoid paying for 2 SQL licenses.

Thanks

Conor

Is there or will Microsoft announce some kind of the API for the Microsoft Azure RemoteApp? 

Thanks.

I'm new to the windows server world and have been asked to check if any of them use SPLA. How would I do this?

I checked to see if any of them run RDS services and one of the servers does as well, how can I check CALs?

I have a typical RDS setup. I have a connection broker and 5 hosts. I manage the system. One of the hosts is just for our dev environment. We are mostly using remoteapp.

I want to delegate permission so our dev users can only enable/disable an RDS host to accept new connect for a particular host.

I don't want to give them the ability to do enable/disable the rest of the production hosts. They will be doing this through the gui or through PowerShell.

thanks!

Hi,

i have a 2012 r2 RDS server with 15 per-user license.

When an administrative user connect to the server via RDP a license is assigned and scaled from the total.

There is a way to access the server as administrator without use the users license?

Thanks for help,

regards.

Fabio