Hi
I want to change the date format for RDP users for just one VM. I have created the policy and did the f5 trick as per this post
https://theezitguy.wordpress.com/2014/08/07/group-policy-use-regional-settings-to-change-date-format/
but still the date format is correct when i RDP.
Under scope - security filtering of the GPO i have entered my own username as well as the VM name in question, any idea why the settings isnt taking effect ?
Hi guys,
Currently I work in project to allow all users access que RD Web Access.
In this project I need allow the all users access the web page automatic, I don't know what's the paramenters I need to change in the web.config file.
Could you help me ?
Thank's!
Marcus
Hi Guys
I am running a 2012R2 RDS environment with 'HA' Connection Brokers with SQL in the background hosting the RDS DB. All working nicely. What I have noticed however is that if I use the 'Active' Broker Server Manager (GUI) to update Collection or RemoteApp settings, I seem to get inconsistent results. Before I give a couple of example, What is the best practice for updating Collection or RemoteApp settings in an HA Broker/SQL enviroment? GUI or Powershell? Or should the both give exactly the same result?
Thanks!
is there any way to Restrict the users from access the network resources only allow them to join domain controller.
Hello everyone!
Please note: All the servers in this case are WS2008r2 unless otherwise stated.
I've got a client whose active directory domain is let's say "int.domain.com". However the only 3rd party ssl cert I have to work with is a wildcard certificate for "*domain.com".
When users connect to the remote desktop service, ie they connect via rds.domain.com - they initially get the wildcard certificate, but when they are then directed to the individual remote desktop servers, they get an error because they then receive the self signed cert for the servers - rds1.int.domain.com and rds2.int.domain.com.
I've added the hostnames for rds1 and rds2 to the domain.com DNS on my domain controller, so that rds1.domain.com points to the IP address of rds1.int.domain.com etc.
I need a way of getting the rds service to use the rds1.domain.com and rds2.domain.com dns names so I can authenticate them using the wildcard cert.
Is this possible!?
Hello
Is there any "official" word about using different versions of Windows server in an RDS deployment? Is it supported and if so to what extent ? Can't seem to find a definitive resource about this.
Any pointer most welcome !
Whenever I connect to more than one RDP session that is through a gateway, some of them will not allow me to log on. I get the error "The logon attempt failed" and that is all. If I disconnect from some of the other sessions and reboot my computer, I can then connect to the server that was given me said error.
I can also connect to the server giving me said error without closing down other sessions or rebooting by connecting through a Hyper-V virtual machine on my computer.
None of this makes any sense. Has anyone else seen this behavior?
James
Hello. First time posting here, so please bear with me and my broken English.
I'm working as IT guy in small company that uses program called Symfonia for invoices, wares etc. It is installed on virtual machine with Windows Server 2012 R2, to which people connect via RemoteApp shortcuts with redirecting of their local printers.
My problem started 3 weeks ago, when one of rdp sessions hanged while probably printing bill from Posnet Thermal connected via USB and redirected using COM port. I couldn't (using local administrator account on server) log that user out or kill their instance of Symfonia.exe (access denied)(wait chain empty in task manager). I installed ProcessExplorer to change permissions to kill hanged process, but something weird happened. I couldn't use ProcessExplorer using "run as administrator", it just doesn't show up, but process creates itself in Task Manager. It worked normally (not as admin), but i couldn't change permissions of other processes.
After one process hanged, anyone who tried to print something would experience same thing, even while using not redirected printer.
And the best part is, sometimes when this occurs, I can't log out myself from local admin user (sits at logging off).
Only thing that helps in this situation is restarting server itself, which sometimes doesn't "end", just hangs in "turning off" state. Have to forcefully shut it down in that case.
While everything runs normally (more or less for about a day after restart) I can normally run ProcessExplorer as administrator.
I have an rds farm with three rds_host servers. I have defined three domain user groups for sage_sales, sage_admin and sage_outside.
I have three collections pointing to the three rds host servers; sage_sales, sage_admin and sage_outside.
In my tests:
When I setup a user Joe in the Domain user manager, and make him a member of the sage_admin group, he can log into the RDWEB portal by entering his domain.user/password and clicking sign in. He is presented with the collection icon as shown below.
Clicking on the Sage_Admin icon takes the user to a successful remote session on the correct rds host configured for sage_admin users.
When my test user Joe is a member of two groups (sales_group and admin_group), he is presented with two collection icons after signing into the rdweb portal as shown below:
However Joe can only connect using the Sage_Admin icon. When clicking the Sage_Sales icon, the following error dialog is displayed.
What is happening here? I can't find any difference in the group rights.
Does the Set Primary Group in the Domain User settings effect which icons are available in an rdweb session?
Comments on these configuration options would help. What a battle!!
When I log in RDS servers to try and publish applications to RD Web Access. The Collection tab is missing under my profile. Other users log into the server and the Collection tab is visible. Does anyone know the fix for this?
I am looking for a way to allow domain users click the .rdp file and it can auto automatically logon the remote desktop server and run remote app with their AD credential. I currently published the remote app and downloaded the remote app .rdp file to the workstation. But it still requires users to type username and password to logon, then the remote app run.
Thanks,
Hanson
Hi,
I would want to install RDS Licences User CALs for a windows server 2012 r2.
Is it a must to have Active Directory to effect this or I can install without the need for the AD?
Much appreciate the assistance/advise.
Hi,
I got an error in RDP server 2008
The remote desktop session host server is in per device licensing mode and no redirector mode, but the license server does not have any installed licenses with the following attributes Product Windows Server 2008 or Windows Server 2008 R2 Licensing mode: Per Device License type: RDS CALs or VDI.
In the license manager section, the green checkbox is checked but the error still exists. I reactivated the license but the problem has not been solved. Any help would be appreciated.
Thanks
Hi,
For some reason I had to install a local printer queue on my Windows Server 2016 XENAPP server. We use RES Workspace Manager as well.
Now i can set a network printer as default, but how can i achieve this with a local printer queue?
Hi All,
Right now, here is my current situation. Whereby 1 server has 2 same CAL license with 10 Users. Supposedly we allow 10 users to rdp, but it turns out the RDP session shows 20 Users connected.
Any idea, why is it capable of more then 10 Users with a same CAL License?
Hello everyone, I am in need of some help with my setup of Remote Desktop Services (RDS).
So for my setup, I have 2 physical machines(Server A & Server B) which are running Windows Server 2016 Standard on them.
Server A have the following features installed - Broker, Web, Gateway, License, Host.
Server B have the following feature installed - Host.
Both of the servers are joined to an Active Directory (AD) and I have created a RDS Farm to house the 2 servers.
Under the collections, I have created a new collection (Collection01) and allowing the access from a certain user group.
My question is that, am I able to fix the user to the Server that he have entered before, so that he won't be swing around between 2 Servers ?
The broker will help to load balance only at the initially login of the user.
Hello all,
I have a windows 2016 sever that about 4 users RDP to run an application on the server. This application has files that need to be backed up in multiple places. Since we moved the application from a PC to a server, we have one into one issue regarding our DVD backups. When we insert a blank CD into the drive, only the local admin and domain admin are allowed to read/write. I've changed the local group policy to allow this, I've added certain users to the local admin groups as well as power users. When we try to access it with one of the user accounts other than local Admin and domain Admin, we get a disk unreadable error. My work around right now is to have the user log on as local admin and run the disk back up but I'd like to get this figured out and resolved. Thanks for any help in advance.
We've attempted to set up up Virtual IP for our RDSH in Windows Server 2019 for a tricky application that requires it (NetDocuments NDClick). However, it appears that it doesn't work. Has this feature been deprecated in Windows Server 2019?
We did the exact same setup on our 2016-servers, and there it works perfectly fine.
Any ideas, or some updated documentation on the subject available?
Hi guys,
Currently we have two RDS deployments, which we use for RemoteApp purposes 1 deployment consists of:
- 1 single server with RD web, RDCB and Session Host role. (this was configured long time ago)
Other deployment is:
- HA deployment with 2 web, 2 rdbc, 6 session host and 2 licensing servers. No RD gateways involved.
I want to migrate the single RDS server to our HA deployment. So the connectionbroker and Web Acces roles will become obsolete.
Is there a specific way to do this? Or do I need to delete all roles, and add the server from the other deployment as a session host? (apart from all the firewall rules ofc)
Thanks!