Hello,

We have a Windows Server 2016 box that is being used for users to remote in to their computers by way of RDWeb. Every time someone goes to the website to login we we get the following Warning logged in events:

Event code: 3005 
Event message: An unhandled exception has occurred. 
Event time: 10/26/2018 10:49:47 AM 
Event time (UTC): 10/26/2018 2:49:47 PM 
Event ID: 00f90daa62f94580925cf71413f5874d 
Event sequence: 5 
Event occurrence: 1 
Event detail code: 0 
Application information: 
    Application domain: /LM/W3SVC/1/ROOT/RDWeb/Pages-6-131850389869549350 
    Trust level: Full 
    Application Virtual Path: /RDWeb/Pages 
    Application Path: C:\WINDOWS\Web\RDWeb\Pages\ 
    Machine name: XXXXXX 
Process information: 
    Process ID: 5096 
    Process name: w3wp.exe 
    Account name: IIS APPPOOL\RDWebAccess 
Exception information: 
    Exception type: NullReferenceException 
    Exception message: Object reference not set to an instance of an object.
   at Microsoft.TerminalServices.Publishing.Portal.FormAuthentication.TSFormAuthTicketInfo..ctor(HttpContext objHttpContext)
   at ASP.en_us_default_aspx.<GetAppsAsync>d__0.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Web.UI.PageAsyncTaskManager.<ExecuteTasksAsync>d__3.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Web.UI.Page.<ProcessRequestAsync>d__554.MoveNext()

 
 
Request information: 
    Request URL: https://XXXXXXXXX:443/RDWeb/Pages/en-US/Default.aspx 
    Request path: /RDWeb/Pages/en-US/Default.aspx 
    User host address: XXXXXXXX 
    User:  
    Is authenticated: False 
    Authentication Type:  
    Thread account name: IIS APPPOOL\RDWebAccess 
 
Thread information: 
    Thread ID: 115 
    Thread account name: IIS APPPOOL\RDWebAccess 
    Is impersonating: False 
    Stack trace:    at Microsoft.TerminalServices.Publishing.Portal.FormAuthentication.TSFormAuthTicketInfo..ctor(HttpContext objHttpContext)
   at ASP.en_us_default_aspx.<GetAppsAsync>d__0.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Web.UI.PageAsyncTaskManager.<ExecuteTasksAsync>d__3.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Web.UI.Page.<ProcessRequestAsync>d__554.MoveNext()
Custom event details: 

I have set up my Server (2008 R2 Foundation) for remote desktop and RemoteApp as per the instructions provided by Microsoft.  I am using a single server for all functions.  When a user logs in to the Server through remote desktop, the remote desktop screen comes up and then the user immediately gets an 'Access is Denied' message.  If the user connects through RDWeb, the RemoteApps are displayed, but when the user clicks on an application, they are prompted again for their login credentials and then they get the remote desktop screen with an 'Access is Denied' screen as well.  This happens even for Administrators.

I am getting very frustrated with this as I have read many blogs and tried everything to no avail.  PLEASE help me.

I've been having a tough time finding a clear answer on this, so I hope someone can shed some light on this for me.

I have a few RDP Windows Server 2016 Datacenter Servers in Azure that I want to enable more than 2 concurrently RDP Sessions on. This I would assume now is called a CAL license Such as mentioned here https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds-client-access-license ..... Now I would need per device as we are using these in a workgroup with no active directory and this is for security reasons with an outside company coming into my Point-To-Site VPN connection. 

Where do I go to get these licenses and what exactly do I need to setup? From my past experience with AD, I would setup a license server like it describes in the link and I had the company get me licenses to add to the server. 

Now I believe I have to setup the same kind of server, but where do I get these licenses from exactly? I am supposed to grab these myself and can't find any easy way to get these. Would like a straight answer on that if possible.

Also why is it so complicated to get these licenses? I find it overly complicated and hard to find information or straight answers to do this. Maybe Microsoft should think of making this easier in such areas like Azure and implement it in Azure itself? Just a thought lol

Any help would be much appreciated to stop me from pulling my hair out on this one

Thanks

Hi,

I got an error in RDP server 2008 

The remote desktop session host server is in per device licensing mode and no redirector mode,
but the license server does not have any installed licenses with the following attributes
Product Windows Server 2008 or Windows Server 2008 R2 Licensing mode:
Per Device License type: RDS CALs or VDI.

In the license manager section, the green checkbox is checked but the error still exists. I reactivated the license but the problem has not been solved. Any help would be appreciated. 

Thanks

We have an RDS server (2016).  Since November or October, every cumulative update (well until Jan, haven't applied latest yet), breaks RDP. We can connect to the gateway fine, but accessing the RD desktop just fails with a warning about not being able to connect.  If I uninstall the Cumulative update, then all works again.

Event log shows hundreds of Schannel events (A fatal error occurred while creating a TLS client credential. The internal error state is 10013.)  The remote desktop management service fails to start and the server manager shows this issue:

the server pool does not match the rd connection broker that are in it. errors

Any ideas on how to fix?

Hello,

As you can see in the title, I would like to allow 1 RDP connection per user, between 2 TSE servers that are not Inside a Active Directory.
Is it possible ?

My idea is :

1 + Build 2 scripts started at the opening user session.

2 + Scripts do : check the rdp connection list (logins) and compare with the opening login

3 + Scripts do : if there is already a connection, the session is closed.
(or the other session already connected is closed ... then2 scenarios).

How to do this ?

Regards,

PS : It could be great to use AD, instead these scripts ...but my boss don't want to use AD ...

I'm trying to set up 2019 RDS to replace our 2008R2 Terminal Server.  I used this paper as a guide, but did not publish any apps, just using session based desktops: https://gallery.technet.microsoft.com/Windows-Server-2016-Remote-ffc383fe

I have a broker server, gateway server, web server and two session hosts.  Licensing server is running on the broker server but not activated yet.  I also haven't enabled the gateway server yet as I'm just testing internally. So far I have just one collection pointing to one of the session host servers. We are not testing any remote apps, just session based desktops.

Here's the problem:

• I'm able to initially get two users connected (either directly on the broker server, or through the Remote Desktop Web Access page) If a third tries to connect, it hangs at a black screen and eventually gives the message "failed to reconnect to your remote session.  Please try to connect again".  I would expect to see a message about not enough licenses or do you want to bump someone else off.
• During the black screen time, and before the error message, the active two users get bumped off, but then automatically reconnect.
• If I then log off one or both of the active users, I'm unable to log anyone into the server again.  They all get the black screen and the error message.  At this point I'm only able to log into the server on the console.  The only way to fix this is to reboot the broker server, and the cycle begins again.

Here's what shows up in the Event Viewer on the Broker server:

• When active users get bumped out theTerminalServices-LocalSessionManager log shows an error like this: “Session 3 has been disconnected, reason code 3489660929”. Also shows reason codes 12 and 0.  Also get this error in the same log: “An error occurred when transitioning from CsrConnected in response to EvCsrInitialized. (ErrorCode 0x80070102)”

• In the RemoteDesktopServices-RdpCoreTS Operational log, we get lots of weird errors:

-TCP socket READ operation failed, error 10054”; “RDP_TCP: An error was encountered when transitioning from StateUnknown in response to Event_Disconnect (error code 0x80072746).”;

-RDP_SEC: An error was encountered when transitioning from FStateProcessingData in response to FEventPostReceiveFailed (error code 0x80072746).”

-RDP_SEC: An error was encountered when transitioning from FStatePassthrough in response to FEventCheckAndCompleteReadsFailed (error code 0x8007139F)”.

-Failed InputMgr->GetHandles' in CUMRDPConnection::GetInputHandles at 4043 err=[0x80070102]”; “'GetInputHandles Failed' in CUMRDPConnection::GetInputHandles at 1401 err=[0x80070102]”

Here’s what I’ve tried:

• All servers are updated
• Removed and recreated my collection
• Rebooted many times
• Restarted the Windows Audio service
• Tried both from the RD Web Access page and directly connecting to the Broker server
• Tried disabling firewalls on all RDS servers

I’m kind of at a loss and it’s driving me bananas. Any suggestions would be much appreciated!

George Moore

++ Users are able to rdp and connect to the session.

++ Users are able to disconnect the session and re-connect.

++ Users are able to rdp from one machine and connect to the session, by leaving that session not disconnected and when trying to rdp from another machine they are not able to connect to the active session having the previous established session getting disconnected.

++ The issue is happening in 2016 environment.

++ But customer is able to rdp to the same active session from another machine in 2008R2 environment.

++ Have UPD on both environments. 

++Could any one please suggest on the above scenario.

Hi Windows 10,

I am having an issue with Windows 10 - every day.

But last 3-6 months, remote desktop connections fail with a black screen on my network!

Now I have started to feel true hate towards this OS, as this error, now seems to settle as a forever error that will stay?!

Issue is using RDP to other Windows10 device on my network, now serves a black screen after connection has been idle for some time - or it just turns black, just as i log in?!

I am able to remove black screen - only if disconnect, and reconnect. But again. After some time. I get a black screen again?!

As Windows continues with their disapointments towards the proffesionals on Windows10 since release.

This error in question, I really want fixed - to be working as it has always been - since the dark ages . RDP should just work! Every time - all the time. 

So anyone - before I look up a lawyer to fight this - Please assist with the right trick to get this fixed......

Awaitng that true fix------ anyone?

Regards, Kato.

I recently deployed a few 2016 servers into my 2008R2 Domain-Ive read all the online descriptions of basically doing this and looking at group policy

https://social.technet.microsoft.com/wiki/contents/articles/33801.remote-desktop-troubleshooting-unable-to-copy-paste-files.aspx

Both are set to not configured or disabled-However still greyed out when attempting to cut and paste a fiile in an RDP session.

This works however no issue copying files between 2008R2 servers. Only when attempting to copy and paste either between 2016 servers or 2008r2 to 2016. Help!!!!

Hi,

Is it possible to use MsRdpClient9NotSafeForScriptingClass in .net console application or .net form application? If yes how can I do it? Are there any Samples?

Thanks in Advance!

Best,

Sumit

I've seen this error discussed, but need little more detail. I want to understand how to create RDS Farms with correct initial settings to avoid this.

When clicking on a Remote Desktop Icon for a remote collection (Sage_Sales). I enter my credentials and see this dialog.

Then I see this warning about the certificate mismatch.

Then I see this error if I click [Yes]

Can someone explain why each dialog/error is displayed?

I want to be able to look back at this thread, and correct my configurations.

Regards

I have an issue I have been attempting to diagnose for about a week now. I only posted a few times ever and I am not used to requesting assistance so, please if there is anything I should have obviously mentioned just ask and I will fill you in. 

Little background. My primary environment is 100% on VMware with 3 hosts using Dell Compellent storage. I have 2 Virtual servers acting as sessions brokers and gateways, one of these servers is a licensing server and I had 12, session hosts. All servers are 2012r2 and were about a month behind on updates when this started around March 6th.  I shut down my VMs on the 10th when adding a storage expansion to the environment. After the system came back up this issue hit hard starting right on the 11th.

I am having an issue with the 2012 R2 Session hosts in my environment logging users out and I am not sure why. I have a primary RDS collection and a single server we use for various IT functions acting as its own license server, Session broker and host. Both the primary RDS collection and this IT server both log out users at what appears to be random. When I look in the logs of the Hosts, they show the logoffs as normal events with the reason being 12. I have confirmed the sessions timeouts are set appropriately both in GPO and in the session settings of the collection. These log outs happen if a user connects through the session broker or directly to the server via a console connection as an administrator. I have removed all nonessential GPOs from the servers. The only GPO settings being sent to the servers are a registry key for a database connection, 2 simple scripts to audit and add log on and logoff times to a notepad, loopback set to replace, and a policy adding websites to the trusted sites and allowed pop-ups. I have confirmed these are the only settings for both the user and computer GPO using gpresult. 

This log off event happens for users and administrators. while testing I will log my account into each server and monitor so I can view logs when I get the long off the event. The logs as far as I can tell look the same as if I were to hit the log off button in the start menu. Sometimes I will get logged off of just one server, or sometimes 2 or 3 at the same time(confirmed by logs down to the second) which tells me something is causing this event. 

Since the issue has started I have removed the expansion cabinet, updated all sessions hosts to current windows updates and added two more hosts for a total of 14. I have removed all nonessential GPOs, double checked and set session timeouts in both the collection session settings and GPO, Attempted to set keep alive in RDS GPO settings to 1. I have around 15-20 users using 1 remote app on these hosts during daytime business hours. 

My hope is to get some assistance with diagnosing a possible issue with the server itself, or helping figure out within logs what may be initiating the log of events.

I have not posted any logs because with everything I have looked through this week, I am not sure what is relevant to a trained eye. I can answer any questions and produce logs to anyone who may be able to assist with this issue.

Hi,

So nothing like being on the cutting edge......

I have been testing Server 2019 RDS and so-far-so-good apart from an issue with the Windows Search Service.

It appears that in Server 2019 each user gets their own search database EDB file in their profile path (appdata\roaming). e.g.

C:\Users\username\AppData\Roaming\Microsoft\Search\Data\Applications\S-1-5-21-3901271148-1553943383-1671037523-1629\S-1-5-21-3901271148-1553943383-1671037523-1629.edb

When they log on and log off; this is connected to the search service and the following event log is generated

Source:ESENT
EventID: 326
SearchIndexer (10896,D,50) S-1-5-21-3901271148-1553943383-1671037523-1629: The database engine attached a database (3, C:\Users\username\AppData\Roaming\Microsoft\Search\Data\Applications\S-1-5-21-3901271148-1553943383-1671037523-1629\S-1-5-21-3901271148-1553943383-1671037523-1629.edb). (Time=0 seconds)

Unfortunately it appears that this process is not very stable and on some logons the database in the users profile does not attach and the following error is generated

Source:Search
EventID: 3057
The plug-in manager <Search.TripoliIndexer> cannot be initialized.
Context: S-1-5-21-3901271148-1553943383-1671037523-1629 Application

Source:Search
EventID: 3028
The gatherer object cannot be initialized.
Context: S-1-5-21-3901271148-1553943383-1671037523-1629 Application, SystemIndex Catalog
Details: The specified object cannot be found. Specify the name of an existing object.  (HRESULT : 0x80040d06) (0x80040d06)

And a few more similar but related errors....

No subsequent logon/off will succeed in attaching the database until the Windows Search service is restarted

I am not testing with User Profile Disks or Roaming Profiles
There is no AV on the server

Any ideas?

Andy

Andrew

hello i have 2 servers to use for rds build. 

can i install the broker on one of the hosts? or can these roles not be combined with session host role? or better yet can i install the broker on both session host for high availability of the broker role?

obviously best practice dictates to use dedicated server for the broker . 

thanks. 

We recently setup a Windows 2016 RDS collection. This consists of the following servers:

 - Server 1 (RDS Broker, RDS Licensing)
 - Server 2 (RDSH)
 - Server 3 (RDSH)
 - Server 4 (RDS Web Access & RDS Gateway) (server 4 is located in our dmz)

We have an external dns record "apps.somedomain.co.uk" which points to server 4. 
We have an internal dns record "rds.somedomain.local" which points to server 1.

We can successfully browse and log into https://apps.somedomain.co.uk\rdweb, however, when we attempt to connect to the RDSH farm, using the RDP shortcut within the RDWeb portal, it attempts to log us directly onto the gateway/web access server (server 4) rather than query the broker and direct the session onto one of the RDSH servers!

Internally, if we RDP to rds.somedomain.local we are successfully redirected to one of the RDSH servers and we can see user session are being load balanced.

We have deleted and recreated the rds collection but we get the same issue. Below is a screen shot of what we see when using the RDP shortcut within the RDWeb portal. It appears both the 'remote computer' and the 'gateway' are pointing to the same dns record which resolves to the gateway/web access servers. How can we update the collection settings so the RDP shortcut has the correct dns address for both remote computer (ie: rds.somedomain.local) and gateway server (apps.somedomain.co.uk)?

Hello everybody,

I'm planning to install a new RDS farm with Server 2019. I'm customizing everything I need, but got stuck at the start menu.
How can I hide/remove the integrated Apps from start menu like Settings, Search and Windows-Security.
I'm ok with Settings and Search, but Windows-Security must be hidden before I can deploy this new farm.

Thanks for your help.

Hi All

I have a virtualised (VMWare) RDS 2012R2 environment with 20 Session hosts spread across 6 Dell ESXI Hosts - 2 Sets of different PowerEdge Models. Over the past 4-6 weeks we have started to get multiple event 7011's followed by a 7046.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UmRdpService service.

The following service has repeatedly stopped responding to service control requests: Remote Desktop Services UserMode Port Redirector

At this point some existing connected users cant sign out and applications start to crash including explorer.exe. Trying to shutdown via the GUI just hangs and the only way to get the server back is to reset the power using vSphere console. 

Applications on the Session Hosts are mainly MS Office 2016, Acrobat Reader, 7Zip and Webroot AV. Windows OS and applications are fully patched and up to date and Dell Firmware and drivers are fully up to date. 

Users connect in via RemoteApp and local drives and printers are redirected into their sessions. 

The weird thing is, like clockwork the crashes happen at the end of each day usually between 16:00 - 18:00 - To me its like a degradation symptom or perhaps its the actions of users disconnecting or logging off their session - Its affecting a couple of servers each day. 

On top of this, it appears 7011, 7046 results in a BSOD. I have grabbed the Memory.dmp file and opened it with WinDbg. 

Im now trying to figure out the dmp - uploaded to PasteBin here (happy to paste dmp here but didnt want to "dump" to much information in the post)

What stands out to me is rdbss.sys

Probably caused by : rdbss.sys ( rdbss!__RxAcquireFcb+1f3 )

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80179d3ba44, address which referenced memory

BUCKET_ID:  AV_rdbss!__RxAcquireFcb

PRIMARY_PROBLEM_CLASS:  AV_rdbss!__RxAcquireFcb

My rdbss.sys version - 6.3.9600.18895

Can anyone help to try and decipher the above and suggest next/best cause of action?

Many thanks :)

Hi,

to prevent users from knowing about other users on a terminal server what can I do?

By default users could:

-browse c:\users\*
-use taskmgr.exe
-tasklist
-qwinsta
-netstat
-? perhaps other commands, applications

to gain information about other users on a Terminal Server like Account Name, processes used, Network Connections.

I could prevent access to the obvoius like eventvwr + other administrative tools, c-drive or adjust permissions on qwinsta.exe but with cmd.exe and taskmgr.exe it already is difficult because it limits users e.g. from ending a hanging process.

Ideally it also would require to whitelist every single allowed application and prevent execution of portable software for users.

Are there any recommendations?

thank you

Markus

We have RDS licensing role on windows 2008 R2 server. Whole Citrix setup is then configured and running using that.

We now want to upgrade it to windows 2016 setup. If we use the same key to activate new windows 2016 RDS licensing server, will it affect the existing setup.

We have only one key with 100 RDS CALS and we need to ensure existing setup is not disturbed as its being in production where users are using it 24/7.

Once the new setup is ready, we will decommission the old setup. But the transition need to be smooth.

Any idea?

Shahid Roofi