I need to stop Local devices and resources (Drive access) for only one user in remote desktop connection , I can enable/disable it for all users but I don't know how to activate it for one user.
I need to stop Local devices and resources (Drive access) for only one user in remote desktop connection , I can enable/disable it for all users but I don't know how to activate it for one user.
Hello,
I have a problem with my setup. If I connect via RDP to a termianlserver through a RDGW I must type the AD-Credentials two times.
One time for the RDGW and one time for the terminalserver.
I have configured the deployment setting of the RDGW to "Use RD Gateway credentials for remote computers" but it´s not working.
Both systems are Windows 2016 Server.
Have anyone an idea and can help me please?
Hello,
I wonder what protocol does the client requests when launching the RemoteApp. We choose to Negotiate option for the collection and client compatible on security.
On the network traffic, we are only allowing TLS1.2. sometimes when a client launches the Remote app and they facing spinning issues " configuring remote session" and spins forever. Sometimes it will connect just fine. Wondering it could be because of the communication issue between client and RDS server.
Please help me how can I see whether it is a communication issue or not?
Shekar-Technet
Hi,
We want to use RDP for connecting to remote machine, execute Desktop Application Automation there. The challenge that we face is that on the customer end there are restrictions on idle timeout in RDP session. Once we start executing the automated desktop application and if execution takes longer that than the idle timeout to execute, the remote desktop session ends, and the Desktop Automation fails. Is there a way to handle this?
1. I have tried TSCON, but TSCON unlocks the console session, so it may not be acceptable to customers.
2. I have also tried Java's Robot classes to do some mouse action(https://stackoverflow.com/
Is it possible to keep the RDP session from disconnecting on Idle Timeout?
Thanks in Advance.
Best,
Sumit
Hi,
Is it possible to use MsRdpClient9NotSafeForScriptingClass in .net console application or .net form application? If yes how can I do it? Are there any Samples?
Thanks in Advance!
Best,
Sumit
I have a problem with mstsc.
I run the mstsc in the HP thin clint to login the server remotely,but it doesn't work. The detail problem is shown as follows.
Problem name:APPCRACH
APP name:mstsc.exe
6.3.9600.16415
524b4de4
mstscax.dll
6.3.9600.16415
52901 d9b
c0000005
T he os is wes 7 in thin clint and server 2012 in server.
We've attempted to set up up Virtual IP for our RDSH in Windows Server 2019 for a tricky application that requires it (NetDocuments NDClick). However, it appears that it doesn't work. Has this feature been deprecated in Windows Server 2019?
We did the exact same setup on our 2016-servers, and there it works perfectly fine.
Any ideas, or some updated documentation on the subject available?
Hi,
I just discovered that regular users have "special" permission at the root. They are granted rights to create folders.
Is it just me and my servers ?
Hello everybody.
We have an old Citrix farm, there each published application points to an Excel file (an individually customized BI report). Around 500 applications we have there.
So now we migrating this repository to a new RDS 2016 deployment, based on the Windows Server 2016 Standard x64.
We've created a PowerShell script, which make this publications automatically.
But after publication of around 60 RD apps Server manager stops responding, and RDS stops functioning. We've tried to reproduce this behavior under the Windows Server 2012 Standard x64 deployment - same result.
We've deployed 58 RD apps, and started to add RD apps one by one manually. Same result, after the publication of 61 or 63 Server manager stops refreshing, High Availability (but not necessary) RD Connection broker stops responding, and all the RD apps stops functioning.
An example of 23 published apps here:
It obvious that I could provide two files: the .ps script and the .ini so anyone could reproduce this situation (publish dummy RD apps) in their environment to check the situation... But would you? )
We have a customer wit a newly setup cloud server environment with RDS (single server). The first day of production the datacenter that holds the servers lost the NIC (virtual network card) in the VMware-environment.
We added a new NIC and the server was accessible again. But here is where the problems begin:
- The sessions is never registered and therefore the users cannot disconnect and later connect again
- The users need to remember to Sign Out every time they leave the RDP-session
If we look in the Server Manager on the RDS we get this error:
When running checks in Powershell we get these results:
PS C:\Windows\system32> Get-RDSessionCollection
CollectionName Size ResourceType CollectionType CollectionDescription
-------------- ---- ------------ -------------- ---------------------
QuickSessionCollection 1 RemoteApp programs PooledUnmanaged
PS C:\Windows\system32> Get-RDSessionCollectionConfiguration -CollectionName QuickSessionCollection | fl
CollectionName : QuickSessionCollection
CollectionDescription :
CustomRdpProperty : use redirection server name:i:1
PS C:\Windows\system32> Get-RDSessionHost -CollectionName QuickSessionCollection
Get-RDSessionHost : No session collection QuickSessionCollection was found.
At line:1 char:1
+ Get-RDSessionHost -CollectionName QuickSessionCollection
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Write-Error], WriteErrorException
+ FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Get-RDSessionHost
PS C:\Windows\system32> Get-RDServer
Server Roles
------ -----
RDS01.PRENOVA.SE {RDS-RD-SERVER, RDS-CONNECTION-BROKER, RDS-WEB-ACCESS, RDS-GATEWAY...}
PS C:\Windows\system32> Get-RDUserSession
CollectionName DomainName UserName HostServer UnifiedSessionId
-------------- ---------- -------- ---------- ----------------
QuickSessionCo... PRENOVA admmisko RDS01 86
QuickSessionCo... PRENOVA magges RDS01 113
QuickSessionCo... PRENOVA kathyt RDS01 106
QuickSessionCo... PRENOVA johfor RDS01 97
QuickSessionCo... PRENOVA emeohm RDS01 94
QuickSessionCo... PRENOVA ulrnor RDS01 119
QuickSessionCo... PRENOVA lareri RDS01 121
QuickSessionCo... PRENOVA ulfagr RDS01 124
QuickSessionCo... PRENOVA andkle RDS01 114
QuickSessionCo... PRENOVA kimami RDS01 118
QuickSessionCo... PRENOVA lenwes RDS01 93
QuickSessionCo... PRENOVA Urbohm RDS01 125
QuickSessionCo... PRENOVA parbom RDS01 96
PS C:\Windows\system32> Get-RDConnectionBrokerHighAvailability
Get-RDConnectionBrokerHighAvailability : A valid fully qualified domain name (FQDN) for the server was not specified.
At line:1 char:1
+ Get-RDConnectionBrokerHighAvailability
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Write-Error], WriteErrorException
+ FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Get-RDConnectionBrokerHighAvailability
PS C:\Windows\system32> Get-RDSessionCollection
CollectionName Size ResourceType CollectionType CollectionDescription
-------------- ---- ------------ -------------- ---------------------
QuickSessionCollection 1 RemoteApp programs PooledUnmanaged
HELP WANTED:
We need help in solving this situation once and for all. We would like this fixed without installing a new RDS as they have som difficult applications that we do not want to install again.
HOW do we get rid of the probable cause of this issue? Is it the first (lost) NIC's MAC-address that is causing this?
Is that MAC-address hidden somwhere in the Registry or in Windows Server 2016s own local DB?
Any tips on HOW this should be fixed is HIGHLY APPRECIATED!
Regard
Mikael Sköld, Atea
Atradius
Hi,
I have a setup with the following servers running Windows Server 2016
1x RDGW, RDCB, RDWA, RDLicensing.
5x RDSH
Im using UPD on the collection.
I have noticed very long login times, after policys etc are shown on screen it sits at a black screen for between 20sec and sometimes up to 5min.
I have also noticed that the svchost.exe that controls the Windows Firewall is using 25% to 50% when a user logs in and using around 1200Mb memory.
After I found this I checked the Windows Firewall with Advanced Security and found thousands of Cortana, Work or school account, Your account, Contact Support rules.
I found a script in this thread that could delete the rules https://social.technet.microsoft.com/Forums/windows/en-US/9aad7675-d1ba-4900-9d85-0cd117f5514f/new-firewall-rules-created-for-each-user?forum=win10itprosetup
This made the CPU usage and memory usage go down to normal levels, but after every login a user does it builds up the list of rules again. With many users logging in to the system the rules build up very fast and the login times gets high and every server gets slow.
Example on our RDSH01 server that have been running in production since 2017-04-13 the script found and deleted 66153 rules that it found with "$Rules = Get-NetFirewallRule -All | Where-Object {$profiles.sid -notcontains $_.owner -and $_.owner }"
The script also tryed to get rules with this command "$rules2 = Get-NetFirewallRule -All -PolicyStore ConfigurableServiceStore | Where-Object { $profiles.sid -notcontains $_.owner -and $_.owner }" but fails with an "not enough space error"
The script removes the rules from here with the content of $rules "HKLM:\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules"
and $rules2 was meant to clean up at "HKLM:\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Configurable\System"
but doesnt do anything because of the error on the Get-command. If I try to access it with regedit it stops to respond, guessing there are too many items in that container for it to handle.
Anyone know a solution for this problem?
Regards Fredrik
Hello!
I am looking for explicit information about Disconnect option in Remote Desktop Services for Windows Server 2016.
Til now, I not found an official Microsoft doc talking about whats is the correct group that allow the non-admin group to disconnect an user for RDS Windows Server 2016. Could someone help me?
“Vote As Helpful” and/or “Mark As Answered” - MCSA - MCSE - http://www.ucsteps.com/
Hi,
I have a RDS 2016 server. I need to install a local printer queue for some reason. This printer needs to be available for all users that logon to the server.
If i install that printer using my administrator account, will it be available for all users? Or do i need to install it somehow under every users login? If so, how can i achieve that?
Hello,
As you can see in the title, I would like to allow 1 RDP connection per user, between 2 TSE servers that are not Inside a Active Directory.
Is it possible ?
My idea is :
1 + Build 2 scripts started at the opening user session.
2 + Scripts do : check the rdp connection list (logins) and compare with the opening login
3 + Scripts do : if there is already a connection, the session is closed.
(or the other session already connected is closed ... then2 scenarios).
How to do this ?
Regards,
PS : It could be great to use AD, instead these scripts ...but my boss don't want to use AD ...
Hello all,
I have a windows 2016 sever that about 4 users RDP to run an application on the server. This application has files that need to be backed up in multiple places. Since we moved the application from a PC to a server, we have one into one issue regarding our DVD backups. When we insert a blank CD into the drive, only the local admin and domain admin are allowed to read/write. I've changed the local group policy to allow this, I've added certain users to the local admin groups as well as power users. When we try to access it with one of the user accounts other than local Admin and domain Admin, we get a disk unreadable error. My work around right now is to have the user log on as local admin and run the disk back up but I'd like to get this figured out and resolved. Thanks for any help in advance.
I'm looking for an answer that seems to be a common question, but I'm not finding answers that exactly fit in the threads.
We have a WS2012 domain with WS2016 Remote Desktop Services running a session host.
Users connect via the RDWeb gate on the WS2016 machine.
We need:
1. to hide the local drives on the session host (the WS2016 machine).
2. keep the user's local profile on the 2016 server but have their default drives be a network drive (meaning they can't see, or save to, their local profile on the session host either).
3. to still let them see the local drives of the machine they used to access the gate (meaning for example, they still need to see their computer out in the field, from the workspace.
4. we DO NOT want the restrictions on the session host to be forced on them on their regular company computers.
In a nutshell, if you sign into the RDWeb gate and start a session, you'll only have Explorer in the list.
When you open that, you should only see the network drive being assigned to you and no other drives or folders.
Alert from Microsoft Forum