Folks,

Just noticed this becoming an issue on a Windows 2012 R2 Terminal Server after the last round of Patch Tuesday updates stemming from August 9th, 2016.

Typically, I'm rebooting the server every 24 hours to over-correct the issue - rebooting not being the best option here.  

In previous discussions, it's advised to remove KB3002657 or KB3035132 from the server.  Is this still the best option to restore full functionality even with the last round of patches and updates? Just to confirm, we are not using webroot as an AV solution. 

We are experiencing a RemoteApp default printer redirection issue in Windows Server 2016 that we are not seeing in Windows Server 2012R2.   We have the following simple environment:

1.       Windows Server 2012R2 with RDS Quick Start installed.
2.       Windows Server 2016 with RDS Quick Start installed (configured identically)
3.       Window 10 Client with attached HP printer configured as “Default” printer.

When we launch WordPad as a RemoteApp on the client (via RDWeb) and try to print a document, we see different behaviors: 1) When launched on Server 2012R2, the client’s default printer (HP printer) is shown as the default printer (expected behavior), 2) When launched on Server 2016, the server’s default printer (XPS Document) is shown as the default printer (unexpected behavior).

We’ve verified that all of the Group policies and connection settings are correct and identical between the two servers.  However we noticed the values ofHKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows:Device keys are different:  2012R shows redirection to client printer, 2016 shows server printer.

Is this a bug in Server 2016?  Anything else we should check or configure?

Thanks,

cyorlano

Hi,

How can I solve his issue on Windows 10 Home? All solution on the web is related to pro version.

Hi All

I have a virtualised (VMWare) RDS 2012R2 environment with 20 Session hosts spread across 6 Dell ESXI Hosts - 2 Sets of different PowerEdge Models. Over the past 4-6 weeks we have started to get multiple event 7011's followed by a 7046.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UmRdpService service.

The following service has repeatedly stopped responding to service control requests: Remote Desktop Services UserMode Port Redirector

At this point some existing connected users cant sign out and applications start to crash including explorer.exe. Trying to shutdown via the GUI just hangs and the only way to get the server back is to reset the power using vSphere console. 

Applications on the Session Hosts are mainly MS Office 2016, Acrobat Reader, 7Zip and Webroot AV. Windows OS and applications are fully patched and up to date and Dell Firmware and drivers are fully up to date. 

Users connect in via RemoteApp and local drives and printers are redirected into their sessions. 

The weird thing is, like clockwork the crashes happen at the end of each day usually between 16:00 - 18:00 - To me its like a degradation symptom or perhaps its the actions of users disconnecting or logging off their session - Its affecting a couple of servers each day. 

On top of this, it appears 7011, 7046 results in a BSOD. I have grabbed the Memory.dmp file and opened it with WinDbg. 

Im now trying to figure out the dmp - uploaded to PasteBin here (happy to paste dmp here but didnt want to "dump" to much information in the post)

What stands out to me is rdbss.sys

Probably caused by : rdbss.sys ( rdbss!__RxAcquireFcb+1f3 )

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80179d3ba44, address which referenced memory

BUCKET_ID:  AV_rdbss!__RxAcquireFcb

PRIMARY_PROBLEM_CLASS:  AV_rdbss!__RxAcquireFcb

My rdbss.sys version - 6.3.9600.18895

Can anyone help to try and decipher the above and suggest next/best cause of action?

Many thanks :)

Hi.

We are rolling out RDS 2019 in our environment. We've got a lot of complaints about the DPI settings not being able to set in the session anymore like in 2008R2, but it has to be done on the local client, which is really cumbersome. However, when done so, we still have some applications with issues.

Now, for most of them I can fix it by setting the compatibility settings:



On a Server 2019 test machine, when set to Application, the application actually shows up fine. On RDS2019 though, it doesn't. I've been working on this for a while, until I installed a machine from scratch, do one step of our installation script at a time, and see where it started failing. It turn out as soon as we enable the RDS role, the DPI settings don't have any effect anymore, and the app is all blurry.

When I remove the RDS role, they start working again. Would anyone know how to fix this?

Hi guys,

On a random base (daily, weekly) we're experiencing major log-in problems on our Windows Server 2012 R2 Remote Desktop Services farm. The VM's are hosted on Hyper-V 2008 hosts and we're not using Citrix techniques etc.

Users are reporting that they cannot log-in, the log-in sessions hangs with a blank screen when loading their user profile (e.g. Please Wait For The User Profile Service).

In the System event log of the server on which the user is logging on the following errors are shown:

Source:        Service Control Manager 
Date:          23-12-2014 7:28:01
Event ID:      7011 
Task Category: None 
Level:         Error
Keywords:      Classic
User:          N/A 
Description: 

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UmRdpService service.

…and after 30 (or sometimes 60) seconds, the same error only another service (in random order):

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UmRdpService service.

…and after exactly 30 seconds, the same error only another service:

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UxmSms service.

etcetera, with the following errors:

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Netman service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the AudioEndPointBuilder service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WPDBusEnum service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the NlaSvc service.

The Portable Device Enumerator Service service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the TrkWks service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UmRdpService service.

These errors are logged continuously.

An administrator cannot solve this since he isn't able to login in as well (console or remotely), only a hard reset of the VM is possible to use the affected server again.

I took different steps to solve this problem without any success, like:

- Installing the latest Windows updates
- Removed unnecessary printer drivers, print monitors and print processors (no local printers/drivers are installed, only Remote Desktop Easy Printer driver is used)
- Searched different forum posts, but found only hotfixes for Windows Server 2008 R2.

Can someone please help me with this annoying problem?

Many thanks!!

EDIT:
Of course is increasing the time-out not really an option here... http://social.technet.microsoft.com/wiki/contents/articles/13765.event-id-7011-service-timeout.aspx

Hi,

I have a setup with the following servers running Windows Server 2016

1x RDGW, RDCB, RDWA, RDLicensing.

5x RDSH

Im using UPD on the collection.

I have noticed very long login times, after policys etc are shown on screen it sits at a black screen for between 20sec and sometimes up to 5min.

I have also noticed that the svchost.exe that controls the Windows Firewall is using 25% to 50% when a user logs in and using around 1200Mb memory.

After I found this I checked the Windows Firewall with Advanced Security and found thousands of Cortana, Work or school account, Your account, Contact Support rules. 

I found a script in this thread that could delete the rules https://social.technet.microsoft.com/Forums/windows/en-US/9aad7675-d1ba-4900-9d85-0cd117f5514f/new-firewall-rules-created-for-each-user?forum=win10itprosetup

This made the CPU usage and memory usage go down to normal levels, but after every login a user does it builds up the list of rules again. With many users logging in to the system the rules build up very fast and the login times gets high and every server gets slow.

Example on our RDSH01 server that have been running in production since 2017-04-13 the script found and deleted 66153 rules that it found with "$Rules = Get-NetFirewallRule -All | Where-Object {$profiles.sid -notcontains $_.owner -and $_.owner }"

The script also tryed to get rules with this command "$rules2 = Get-NetFirewallRule -All -PolicyStore ConfigurableServiceStore | Where-Object { $profiles.sid -notcontains $_.owner -and $_.owner }" but fails with an "not enough space error"

The script removes the rules from here with the content of $rules "HKLM:\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules"

and $rules2 was meant to clean up at "HKLM:\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Configurable\System"

but doesnt do anything because of the error on the Get-command. If I try to access it with regedit it stops to respond, guessing there are too many items in that container for it to handle.

Anyone know a solution for this problem? 

Regards Fredrik

Hello,

into my RDS deployment, currently i've some app published with a longer name because it's the same app than other but on another host version.

The newly published app with a longer name are truncated. 

For example the name of the app is : "Valid Windows 2016 - My application"

Into the remote desktop web access, the name of the app is truncated at "Valid Windows 2016 -"

How can i increase the number of chars displayed for each icon of app ?

Thank you,

Hi guys,

I have a Microsoft Remote Desktop Services deployment in my company that is now configured, however I am still struggling with the firewall ports to open, and there seems to be no documentation on the web talking about it. (At least no up-to-date documentation)

My servers are all running on Windows Server 2016 Datacenter, and my clients are on Windows 10 Professional.

I have a server that acts as the Web Access, Licensing and Broker server (Let's call it RDWLB), another server that acts as the AD DC (Let's call it DC), and another as the RD session host. (Let's call it RDSH) NLA authentication is also enforced.

I have checked this link: https://social.technet.microsoft.com/wiki/contents/articles/16164.rds-2012-which-ports-are-used-during-deployment.aspx but not all ports I monitored are mentioned here.

Here are the ports I have identified as potentially being used when a client tries to login to a remote desktop. (X -> Y : TCP 123 means that the host X sends a packet to host Y on port 123)

RDWLB -> RDSH : TCP 135, 1317, 1322, 1535, 1537

            -> DC : TCP 88, 135 & UDP 53, 389

Client -> RDSH : TCP 3389 & UDP 3389

         -> RDWLB : TCP 3389 & UDP 3389

         -> DC : TCP 88 & UDP 53, 389

DC -> RDSH : TCP 1025, 1036to1039, 1041to1046, 3035

RDSH -> DC : TCP 88, 389, 3389 & UDP 53, 389, 3389

I am OK with the ports not in bold, but would someone please be able to explain to me what the ports in bold are?

If I block some of them, it slows down the connection process, in particular the 1535 & 1537 ones, where it gets stuck on "Securing Remote Connection..." for some time.

Thanks in advance!

hi,

I want to share a fix rectangle area of my desktop(sharer) to my viewer, and the viewer can control(mouse and keyboard) this fixed shared area. i have finished it by using RDPSession an RDPViewer, that is supplied by AxInterop.RDPCOMAPILib. 

But, when the viewer try to control the sharer, the delay of operations(both mouse and keyboard) is very high. when i try to use mstc.exe to do this directly,  no delay of operations.

1、How can i fix the high delay of operation by using RDPSession or RDPViewer？ 

2、If the delay between the RDPSession and RDPViewer can't be reduce, is there some other way to share and control a fix rectangle area of my desktop?

the following is my code:

        private void shareButton_Click(object sender, EventArgs e)
        {
            Rectangle rect = Screen.GetBounds(this);
            m_rdpSession = new RDPSession();
            m_rdpSession.OnAttendeeConnected += m_rdpSession_OnAttendeeConnected;

            Rectangle shareArea = new Rectangle(axRDPViewer1.Location.X, axRDPViewer1.Location.Y, axRDPViewer1.ClientRectangle.Width, axRDPViewer1.ClientRectangle.Height);
            m_rdpSession.SetDesktopSharedRect(shareArea.Left, shareArea.Top, shareArea.Right, shareArea.Bottom);
            m_rdpSession.Open();

            IRDPSRAPIInvitation invitation = m_rdpSession.Invitations.CreateInvitation("baseAuth", "groupName", "", 64); 
            textBox2.Text = invitation.ConnectionString;
        }

        void m_rdpSession_OnAttendeeConnected(object pAttendee)
        {
            //viewer can contorl sharing area
            IRDPSRAPIAttendee att = pAttendee as IRDPSRAPIAttendee;
            att.ControlLevel = CTRL_LEVEL.CTRL_LEVEL_INTERACTIVE;
        }

and the viewer:

        private void button1_Click(object sender, EventArgs e)
        {
            axRDPViewer1.Connect(textBox1.Text.Trim(), Environment.UserName, "");
        }

Hi guys,

I bought MS license WinSRV2019  with User CAL x8; RDS User Cal x4and I installed WinSRV2016.

after installed and Activated window, I checked on the RD Licensing manager -> the total license of RDS per User Cal still appear "0".

so that please help how to activate RDS service to appear as I bought- 4 x RDS User Cal.

Many Thanks

hi

i have RDS CAL 2012 with a valid SA.

Can i use this to Remote Desktop Servise to Windows Server2016?

Do i need to upgrade my RDS License?

We have an RDS server (2016).  Since November or October, every cumulative update (well until Jan, haven't applied latest yet), breaks RDP. We can connect to the gateway fine, but accessing the RD desktop just fails with a warning about not being able to connect.  If I uninstall the Cumulative update, then all works again.

Event log shows hundreds of Schannel events (A fatal error occurred while creating a TLS client credential. The internal error state is 10013.)  The remote desktop management service fails to start and the server manager shows this issue:

the server pool does not match the rd connection broker that are in it. errors

Any ideas on how to fix?

Hi,

I would want to install RDS Licences User CALs for a windows server 2012 r2. 

Is it a must to have Active Directory to effect this or I can  install without the need for the AD?

Much appreciate the assistance/advise.

I've seen this error discussed, but need little more detail. I want to understand how to create RDS Farms with correct initial settings to avoid this.

When clicking on a Remote Desktop Icon for a remote collection (Sage_Sales). I enter my credentials and see this dialog.

Then I see this warning about the certificate mismatch.

Then I see this error if I click [Yes]

Can someone explain why each dialog/error is displayed?

I want to be able to look back at this thread, and correct my configurations.

Regards

I have an rds farm with three rds_host servers. I have defined three domain user groups for sage_sales, sage_admin and sage_outside.

I have three collections pointing to the three rds host servers; sage_sales, sage_admin and sage_outside.

In my tests:

When I setup a user Joe in the Domain user manager, and make him a member of the sage_admin group, he can log into the RDWEB portal by entering his domain.user/password and clicking sign in. He is presented with the collection icon as shown below.

Clicking on the Sage_Admin icon takes the user to a successful remote session on the correct rds host configured for sage_admin users.

When my test user Joe is a member of two groups (sales_group and admin_group), he is presented with two collection icons after signing into the rdweb portal as shown below:

However Joe can only connect using the Sage_Admin icon. When clicking the Sage_Sales icon, the following error dialog is displayed.

What is happening here? I can't find any difference in the group rights.

Does the Set Primary Group in the Domain User settings effect which icons are available in an rdweb session?

Comments on these configuration options would help. What a battle!!

Whenever I connect to more than one RDP session that is through a gateway, some of them will not allow me to log on.  I get the error "The logon attempt failed" and that is all.  If I disconnect from some of the other sessions and reboot my computer, I can then connect to the server that was given me said error.

I can also connect to the server giving me said error without closing down other sessions or rebooting by connecting through a Hyper-V virtual machine on my computer. 

None of this makes any sense.  Has anyone else seen this behavior?

James

I am looking for a way to allow domain users click the .rdp file and it can auto automatically logon the remote desktop server and run remote app with their AD credential. I currently published the remote app and downloaded the remote app .rdp file to the workstation. But it still requires users to type username and password to logon, then the remote app run.

Thanks,

Hanson