Hi All

I have a virtualised (VMWare) RDS 2012R2 environment with 20 Session hosts spread across 6 Dell ESXI Hosts - 2 Sets of different PowerEdge Models. Over the past 4-6 weeks we have started to get multiple event 7011's followed by a 7046.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UmRdpService service.

The following service has repeatedly stopped responding to service control requests: Remote Desktop Services UserMode Port Redirector

At this point some existing connected users cant sign out and applications start to crash including explorer.exe. Trying to shutdown via the GUI just hangs and the only way to get the server back is to reset the power using vSphere console. 

Applications on the Session Hosts are mainly MS Office 2016, Acrobat Reader, 7Zip and Webroot AV. Windows OS and applications are fully patched and up to date and Dell Firmware and drivers are fully up to date. 

Users connect in via RemoteApp and local drives and printers are redirected into their sessions. 

The weird thing is, like clockwork the crashes happen at the end of each day usually between 16:00 - 18:00 - To me its like a degradation symptom or perhaps its the actions of users disconnecting or logging off their session - Its affecting a couple of servers each day. 

On top of this, it appears 7011, 7046 results in a BSOD. I have grabbed the Memory.dmp file and opened it with WinDbg. 

Im now trying to figure out the dmp - uploaded to PasteBin here (happy to paste dmp here but didnt want to "dump" to much information in the post)

What stands out to me is rdbss.sys

Probably caused by : rdbss.sys ( rdbss!__RxAcquireFcb+1f3 )

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80179d3ba44, address which referenced memory

BUCKET_ID:  AV_rdbss!__RxAcquireFcb

PRIMARY_PROBLEM_CLASS:  AV_rdbss!__RxAcquireFcb

My rdbss.sys version - 6.3.9600.18895

Can anyone help to try and decipher the above and suggest next/best cause of action?

Many thanks :)

Hello support,

I have a new Windows server 2019 standard installation.  It is a Hyper -V host and has a VM for RDS.  whenever I reboot the host server it comes up with the Unexpected shutdown Dialog box.  I do not see any errors in the event viewer like 6008 or 41.

I appreciate any help or input.

Thanks,

Jamshid

Hi everyone,

didn't know where else to turn on this one as I've been building TS/RDS farms/clusters for over 15 years and I've never seen anything like this before:

here is the setup:

• RDSGW01 - RDS Gateway Server
• RDSCB01 - RDS Connection Broker
• RDSSH01 - RDS Session Host 1
• RDSSH02 - RDS Session Host 2
• RDSSH03 - RDS Session Host 3

i'm not using DNS round robin for the load balancing, the RDP file has the necessary settings for the load balancer. for the most part everything works absolutely perfectly and as expected. its the next part that has me stumped.

i also need to let you know that this set up is allowing multi user logins (i know, but it was a customer requirement)

here are the users:

• User 1 (has a home folder drive set via profile in AD)
• User 2 (has mapped drives via GPO's)
• User 3 (has a home folder drive set via profile in AD)

User 2 logs in, starts working no problem. When User 1 logs in they also have no problem however, a few minutes later User 2 gets the home folder drive from User 1 mapped in their session... it just appears. then later when User 3 logs in the same thing happens, their home folder drive appears as a drive in User 2's session.

at first i thought it was a rogue GPO or something but profile drives aren't mapped that way. User 2 has no access or policy or scripts that should let them have these drives....

help !

FYI. users are getting different RDS Hosts when they log on so its not as if its isolated to a single server.

I am a contractor at Microsoft and need to log onto a lab remote connection to be able to test and verify content I am creating. I have brought the RDS sign in up and entered what I believe is the "Computer" name. That is the information under External Hostname. Is that the correct information to provide for Computer? Because I just get a message saying:

Remote Desktop can't connect to the remote computer for one of these reasons:

1) Remote access to the server is not enabled

2) The remote computer is turned off

3) The remote computer is not available on the network

Make sure the remote computer is turned on and connected to the network, and that remote access is enabled.

Am I doing something incorrectly or does it just take 24 - 48 hrs. to enable the connection for my ID (which I did not enter).

We have an Windows 2016 RDS collection consisting of a 1 x RDCB, 1 x RD Web Access, 1 x RD Gateway and 7 x RDSH servers. User Profile Disks are enabled. We redirect the users Documets, Desktops & Appdata to a seperate file share.

Users are reporting IE11 does not retain their usernames & passwords, desipite selecting 'remember/save', when logging into websites etc. We have installed Chrome on the RDSH servers and this seems to correctly saves the users login details. How can we get IE to retain the users passwords etc.

Please note, we are using RDS rather than VDI.

Hello,

I have a problem to hide the "Disconnect" button from the Start menu on Windows Server 2019 - Remote desktop services.

I have enabled these two GPOs:

Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands under User Configuration \ Administrative Templates \ Start Menu and Taskbar

Remove "Disconnect" option from Shut Down dialog under Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\RD Session Host\Remote Session Environment

With these, the "Shut down, sleep, etc." buttons are now hidden, but the "Disconnect" button did not want to hide. It is still there. 

The test user did not have any other GPOs enabled, just one, where these two settings are.

Please, is it a bug or is there anything else to have set up?

Thanks.
Regards,
Stefan

We have a RDS user whose local USB drives are visible to all RDS users.  I am new to RDS and I would like to know where to change the USB settings?

Thank you,
Mike

We currently use RemoteApp for RDS to give clients access to our software as a service product. The system has many components and services, some of which run on Windows Server (like RDS), and others which are Linux based.

We're looking into containerizing our software so it's easier to deploy new instances of it. We run three now, production, staging and dev, but creating a new environment is way to manual a process.

One question is how you would go about spinning up new instances of RDS. Can RemoteApp be deployed in some kind of container system? Is there way to automate the deployment of RDS, it's really pretty painful and manual now.

Note that we run almost everything in AWS, not Azure, and that is not going to change anytime soon given the amount of data that we have on S3 already and the amount of time it would take to retool.

Hi all

RDS version 2012/2016. No RDGW. 

If necessary to deploy two RDS servers to enhance secure? 

The first internet facing RDS server create few local account for user login.  

Then user login to the second internal RDS server with Domain account via RemoteAPP or RDP link. 

I know it's not BPA of Microsoft RDS topic. 

Does anybody know this two RDS servers architecture helpful to secure RDS login or protect RDS?

Thanks

Johnny_Yao

Hi everybody,

I have an issue with RD Connection Brokers in a highly available setup backed by a SQL Server 2017 Enterprise Availability Group. The setup works correctly while the database is running on SQL node A of the availability group, users can logon via RDWeb and start their RemoteApp(s). When the Availability Group fails over to SQL node B, users can not start their RemoteApps, nor connect to a disconnected session, they are faced with these errors:

- The requested session access is denied.

- Your remote Desktop Services session has ended, possibly for one of the following reasons:

   The Administrator has ended the session.

   An error occurred while the connection was being established.

   A network problem occurred.

   For help solving the problem, see "Remote Desktop" in Help and Support.

Any idea's how to resolve this?

Hi Guys, 

Hoping I can get some advice on this.

I am in the process of building a Remote Desktop VDI 2016 environment. I am trying to working out a reasonable topology that is secure but also has a reasonable foot print. So I don't build and maintain servers that are not required. 

I am a little surprise that I cannot find one clear document on a good topology. I see documents talking about having a AD in the DMZ and other about only a Gateway in the DMZ with access to the internal AD servers. Both of these don't seem like the best option in terms of security. 

My thoughts is to setup a Reverse proxy in the DMZ pointing to the internal Gateway server that can then talk to the broker and enable access, with the webserver being installed on the Broker. (Yes I would configure HA)

So the basic layout is this. 

Firewall || Reverse Proxy (ARR) || Firewall || Server 1 (Gateway Server), Server 2 (Webserver, Broker), Server 3 (RD Virtual host)

Would like to hear people thoughts and this and if anyone can see any problems. 

Thanks for your time.

Craig G

Craig G

Dears ,

Please we need your support remote service does not work and I get the below error .

Please advise .

Br,

"Windows could not start the Remote Desktop Services service on LocalComputer

Error 1075: The dependency service does not exist or has been marked for deletion .

"

hi, i just got a lenovo yoga which has a 3200x1900 resolution screen.  rdp does not render the desktop big enough on a high resolution screen and is unusable.  I was happy to find rdcm 2.2 handles the high resolution fine. but when i upgraded to rdcm 2.7, the remote desktop is much to small to be usable again.

  I have played with resolution setting in rdp/rdcm but the problem is the desktop icons are just too small.  I finally back-rev'd to 2.2

does anyone know how i can report this bug to the developer?  or if you know of a way to make 2.7 it work on high resolution screen....

thanks in advance

to be clear, the problem is that on a 3200x1900 screen, the size of the icons in the rdp session is so small its hard to read them.  if i play around with the rdp resolution, i am only making the desktop bigger or smaller, the icons are not scaling to that.  This is different in rdcm 2.2.  in 2.2, the icons are scaled up on a large desktop, making them usable.

Tony Guadagno

Dears,

I am trying to install CAL licenses using web. but the link https://activate.microsoft.com/ is frequently going down these days.

is there any other alternative ways to generate RDS and install it on Win server 2012?

is there any issue with activate.microsoft.com? and any timeline to fix it?

thanks

Barznj

Running Windows Server 2016 Remote Desktop Services (session-based desktops).

Multiple session host servers, one DC, all running as VMs under Citrix XenServer 7.1. The servers are fully updated to present time as of 7 March 2019.

Every few days a user reports that after logging in to an RDS session he does not see his desktop but sees a black screen. When this happens, I can see that some users on that same RDS server still have their session working normally, but every user logging in after this also gets this black screen.

There are numerous references to this problem on the internet. It is apparently occuring since Server 2012 and has never been fixed.

Some people recommend to restart the Windows Audio service. Does not help in my case, never does when it happens to me. Other recommendations were to remove Firefox browser from the RDS session host servers. I did that two months ago and it seemed to help for one week but then it came back. I have not found any other recommendation - there seems to be simply no solution, except restarting that RDS session host server, which is a major inconvenience, it throws out the other users which still work, it takes 10 minutes or more to restart that server, and it can only be done manually. Most often it has to be force-restarted on top of it, as the server is totally unresponsive, and then some users may loose their user profile. Then I have to delete that user and recreate his user profile. Major trouble.

In the last few months I have rebuilt all RDS session host servers from scratch - total new installation, all updates, totally clean. It STILL happens. I have that system running since 2 years, and it has been a problem all the time.

When I try to log in to the console of the offending RDSH I can sometimes not even log in . Sometimes it does let me log in but I also get a black screen as local admin user (both Server\Administrator and Domain\Administrator). In this case, I can bring  up TaskManager via Ctrl+Alt+End and run a command prompt. I can restart services this way and execute other commands, but anything relating to the UI does not show up. Screen stays black.

Managed once to get the black screen off by restarting ShellExperienceHost service but then this logged out all users somehow and corrupted some profiles.

The only applications installed on the RDSH servers are Chrome browser, Thunderbird email client, Libre-Office.

From what I can find on the internet this problem occurs since the release of Windows Server 2012. This is seven years ago. I do not know if this happens to everyone, but there seems to be no common denominator from what I can find, it seems to happens on all sorts of environments, pointing to a bug within Windows Server itself.

From what it seems it is related to the new UI system implemented with Windows 8 (and Server 2012) because I can find no reference to this occurring with Server 2008. I have not run RDS on Server 2008 myself so I have no first-hand experience.

Is there ANYTHING I can do about this? It does NOT seem related to my setup which is really rock-bottom basic. Many users are reporting this as a dreaded issue they hope one day will be fixed by Microsoft.

Can it be related to the virtualization software? Anything having experienced that issue on bare-bone installs of RDSH servers? Any difference with Hyper-V VMs?

WHEN IS THIS GOING TO GET FIXED? THIS IS A PROBLEM SINCE 2012 - 7 YEARS!

I feel forced to start researching for non-Microsoft solutions for RDS type solutions because I simply cannot tolerate non-functional software. To the users it looks like it is me as admin who is not doing his job!

Atradius

Hi,

Just want to make sure of something before we upgrade our Terminal servers to 2019.

Can we leave our domain controllers on 2016 (due to exchange 2013) but upgrade our Terminal servers and Terminal licensing to server 2019. Will the 2019 licensing server be able to communicate with 2016 AD servers without any issues? 

Thanks

Good Day,
I am having these 3 issues with my RDS farm:
I published an app via RemoteApp to the outside world.
The environment is full Windows Server 2016 Version is 1607 build 14393.2906

There is 1 server RD Licensing server (This server is a domain controller)
There is 1 connection broker
There is 1 Gateway server and this server is also WebAccess Server
There are 2 Session Host
There is 1 application published through remote app. This is the app that we are talking about.

When customers connect they see this:

The certificate is issued by a trusted thirdparty to ts.domainname.com The publisher is also ts.domainname.com
1. My first question. Why is this message appearing? And how to make it skip. Does a wildcard certificate help for this problem?
2. The remote computer is rdscluster.intra.domain name, I want to change this to cluster.domainname. Where is this modified? I dont want internal stuff shown to the outside world
3. After this message, the system asks me to log in again. How to autolog through second logon?
It worked before but I think it stopped working after modifying the Publisher name. And when the second logon screen appears it says The logon attempt failed. It then shows the username without the domain name.
I modified the webscripts-domain.js so that the user only needs to put in the username. But I think in the second logon this is not copied the right way

I hope I supplied enough info this way. If not, please let me know what to provide more

This is an interesting one which doesn't seem to have much in the way of documentation for Windows 2012 yet.

When clicking on a RemotApp program on RDWeb the following message appears:

All of the correct SSL certificates are installed under Server Manager > Collections > Deployment Propertiesthey're all assigned in there and they are all correct. I have also set a Certificate in RDS Gateway Properties.

I've also tried selecting Private as the logon option on RDWeb but again this still makes the box above appear.

On earlier versions of RDS you could specify Digital Signing for remote apps but this option doesn't seem to exist on Server 2012. Does anyone have any ideas?