Hi all,
Confused with this. We have a collection which is set to log disconnected sessions after 5 minutes. This is also set in a group policy. The brokers are server 2016, session hosts are a 50/50 split between 2016 and 2019 whilst we fully test 2019. Happening on both 2016 and 2019.
I'm looking at the list of users right now and can see two who have been disconnected an hour ago.
any ideas?
Thanks
The task you are trying to do can't be completed because remote desktop services is currently busy.
We keep getting this error - The temporary fix is restart remote desktop services, is there any permanent fix?
Hello colleagues
When we are doing such config (enable multiple sessions per user):
Computer Configuration\ Administrative Templates\ Windows Components\ Remote Desktop Services\ Remote Desktop Session Host\ Connections
Restrict Remote Desktop Services users to a single Remote Desktop Services session Disabled
We are not able to reconnect to any disconnected session that was running previously.
It seems that it was mentioned here for Inside build, but we have same...
Any solutions for this problem?
Regards,
I setup a RD Gateway on both Windows server 2016 and Windows server 2019. That should be a strainght forward process following Microsoft doc and multiple other website (https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds-deploy-infrastructure).
When I try to connect I received that error message Event Log Windows->TermainServices-Gateway
The user "DOMAIN\Username", on client computer "IP", did not meet connection authorization policy requirements and was therefore not authorized to access the RD Gateway server. The authentication method used was: "NTLM" and connection protocol used: "HTTP". The following error occurred: "23003".
I found many documentation that claim that registering the NPS server (https://docs.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-manage-register) should fix that issue, I register the server. Both are now in the "RAS and IAS Servers" Domain Security Group. But We still received the same error. Can in the past we broke that group effect?
I continue investigating and found the Failed Audit log in the security event log:
Authentication Details:
Connection Request Policy Name: TS GATEWAY AUTHORIZATION POLICY
Network Policy Name: -
Authentication Provider: Windows
Authentication Server: SERVER.FQDN.com
Authentication Type: Unauthenticated
EAP Type: -
Account Session Identifier: -
Logging Results: Accounting information was written to the local log file.
Reason Code: 7
Reason: The specified domain does not exist.
I have then found that thread which claim that I should disabled NPS authentifaction
https://social.technet.microsoft.com/Forums/windowsserver/en-US/f49fe666-ac4b-4bf9-a332-928a547cff77/remote-desktop-gateway-denying-connections
I try it but disabling the NPS authentification leave me a bad impression...
Did anyone have a clue why I cannot resolve the domain.
For the testing/debuging purpose and I install The RD Gateway on a AD member server in main network, no other firewall than the windows one.
The only thing I can suspect is that we broke the "RAS and IAS Servers" AD Group in the past.
Hi,
I have been trying to deploy a server 2016 RDS and its weirdly giving me this error at this stage. I cant say I have had this problem before either!
I cant get anything out of event viewer which seems to point me at what is faulting.
The server has been rebuilt twice but still now luck.
We suspected a conflict with an older RDS in the live environment which we have also removed but still get to this point.
Is this likely to be a fault in the domain somewhere?
Any help would be greatly appreciated.
many Thanks,
Steven Parsons
Hi RDS Expert,
Thanks for your time.
I have summarized the issues below – hope you can help me.
Hard Ware: IBM 3500 M4 128 System Memory - RAID 10
OS software all on same box:
Host is: 2012 r2
VM1 name is: SQL1 ( running 2008 r2) - IP -192.168.1.131 (this box also has AD on it!)
VM2 name is: T1 (Terminal server-RDS) ( running (2008 r2 ) – 192.168.1.132
VM3 name is: T2 (Terminal server-RDS) (running 2012 r2) – 192.168.1.133 – In-place upgrade
VM4 name is: B2B ( running (2008 r2 ) – 192.168.1.134
VM5 name is: API (running 2012 r2) – 192.168.1.135 – In-place upgrade
I have started in-place conversion from 2008 r2 > 2012 r2. I have converted two over successfully.
VM1 has two domain controllers SQL1 and T1, It has SQL2012 and AD on the same VM
The server VM2 (T2) is the bringing up the message above, it is an in-place upgrade from 2008 > 2012.
I'm running out time I have procrastinated long enough. 11 days left
This is a production environment so need your help to get this straight.
The system is several years old and never had any major problems before I started this in-place upgrade.
This system was built by someone else so I will need some help to get to the right place to make any changes.
I was informed that’s the reason I’m getting the message so I purchased 50 RDS & 50 CALs.
The RDS licenses should go on your license server but where would that be exactly?
I first tried to install all 50 RDS on the AD server – did not help.
It said successful
Please help me please.
Any input will be greatly appreciated
Thanks,
Jim
Jim Hedge
I am at my wits end with trying to get our connection broker's into HA, hoping someone has additional ideas as I've sunk an obscene amount of time into this already. Feels like the HA piece of the RDS Connection Broker got about 20min of development.
Problem: Server Manager (Tried via PowerShell also) HA wizard refuses to connect to SQL instance.
Configuration
Absolutely nothing I do will allow the HA piece of RDS to recognize and connect to the SQL instance, it's absolutely poor code or a bug I just don't know how to get around it.
Microsoft RDS expert assigned to organization cant even figure this one out. Read carefully!
After normal business hours (6pm-7am), users can remote into the RDS farm using Username/password AND PKI Token.
During normal business hours (7am-6pm), users at SPECIFIC locations (not every location with RDS access) can only login to the farm with username/password. If they attempt to use PKI Token they get the "You cannot logon because the logon method you are using is not allowed on this computer." error. Again those same users CAN login with PK/Token after normal business hours but CANNOT during business hours.
I am convinced it is not a GPO or STIG issue because the do not run on timers. Also don't think it is a Session Host user space issue because I have 4 SHs and only about 15 ppl on each HS at any given time during the day.
I don't know what else to do, someone please give me the answer to this crazy issue. PLEASE!!!
Hello everybody
I even have a scenario with Windows Server 2012, where on the remote console via VMWare I enter username / password and then black screen.
I try to do Remote Desktop, open the remote console and then close without asking for Login.
I can only log in to the VMWare console in safe mode.
All the tips I try to apply are not successful.
I appreciate any information that can identify where this failure is and avoid redoing the installation.
Best Regards,
Robenildo de Oliveira
Robenildo de Oliveira <robenildo.oliveira@outlook.com>
I am getting a 60 minute session warning. Why is this warning coming up? Is this a configuration issue?
Hi,
So nothing like being on the cutting edge......
I have been testing Server 2019 RDS and so-far-so-good apart from an issue with the Windows Search Service.
It appears that in Server 2019 each user gets their own search database EDB file in their profile path (appdata\roaming). e.g.
C:\Users\username\AppData\Roaming\Microsoft\Search\Data\Applications\S-1-5-21-3901271148-1553943383-1671037523-1629\S-1-5-21-3901271148-1553943383-1671037523-1629.edb
When they log on and log off; this is connected to the search service and the following event log is generated
Source:ESENT
EventID: 326
SearchIndexer (10896,D,50) S-1-5-21-3901271148-1553943383-1671037523-1629: The database engine attached a database (3, C:\Users\username\AppData\Roaming\Microsoft\Search\Data\Applications\S-1-5-21-3901271148-1553943383-1671037523-1629\S-1-5-21-3901271148-1553943383-1671037523-1629.edb).
(Time=0 seconds)
Unfortunately it appears that this process is not very stable and on some logons the database in the users profile does not attach and the following error is generated
Source:Search
EventID: 3057
The plug-in manager <Search.TripoliIndexer> cannot be initialized.
Context: S-1-5-21-3901271148-1553943383-1671037523-1629 Application
Source:Search
EventID: 3028
The gatherer object cannot be initialized.
Context: S-1-5-21-3901271148-1553943383-1671037523-1629 Application, SystemIndex Catalog
Details: The specified object cannot be found. Specify the name of an existing object. (HRESULT : 0x80040d06) (0x80040d06)
And a few more similar but related errors....
No subsequent logon/off will succeed in attaching the database until the Windows Search service is restarted
I am not testing with User Profile Disks or Roaming Profiles
There is no AV on the server
Any ideas?
Andy
Andrew
Dear readers I have the following issue when a user wants to reset their password via the RDWeb password reset.aspx
"Your password cannot be changed. Please contact your administrator for assistance."
What I have done so far :
- Went into the IIS Manager and set the "PasswordChangeEnabled" to true.
- Reset the IIS Manager via CMD.
- Activated the logging (which doesn't work by the way).
- Rebooted the host & client to be sure.
Does anyone else have this problem aswell or does someone know the solution to said problem?
Hope to hear from someone.
Kind regards,
Sander ten Voorden
Good morning,
we are looking for a solution to the problem described in the article which is available at: https://support.microsoft.com/pl-pl/help/2925429/print-jobs-are-lost-or-an-application-crashes-in-microsoft- enterprise for Windows Server 2008 R2. Please let me know
if we can get the patch described in the article to solve this problem for this system.
regards
Krzysztof
Hello,
The situation is this: I've got a server running on a different network (using windows server 2003) and a host at home (running windows 8.1 x64), and I use both to edit work documents and print stuff at home. The printer used is an HP Deskjet F2480 Series.
Now in the past when this pc was running win 7 everything ran just fine. But I recently upgraded to win 8.1 and now the remote desktop connection is refusing to print stuff. The printer doens't even show up in the printer and scanners thing in the control panel.
I've tried multiple things, checked everything there is to check:
checked the printers box in "local devices and resources" of the remote desktop connection app
restarted the printer and remote desktop services on the local and remote pc
installed both 32-bit and 64-bit drivers on the local pc
added the LTP1 port to the printer so the remote server could use that port to print (connected to usb locally)
Now the farthest I've got is installing a dummy printer (print to file) using drivers from HP (no real driver for windows server so I used the ones for xp), and then reconnected to the server and the real printer showed up (as HP Deskjet f2400 Series on ....). So I thought problem solved but now he just plain refuses to actually print stuff. You can select him and print to him but then he gives an error in the print queue and just stays there, doing nothing.
Is there anyone with the same situation as me? Has anyone found out what the problem is?
Thanks in advance, hope I can fix this thing :)
Hi,
Simple question: what would be best practises to reboot a RDS 2012 server (in a 4 server farm with broker) on which lots of applications and users are. I guess a daily reboot would be best, right?
Please advise.
J
Jan Hoedt
I'm having an issue that I can't seem to get to the bottom of. I have one user (thus far) that when she attempts to use her remote resources, The authentication initiates, goes through the four or five steps visible on the screen, and then suddenly hangs
at "Preparing Windows". If I just let it sit there it will eventually proceed in about ten minutes, and then can be accessed.
I have tested on 3 different Macs and a Win 10 client, all with the same result. When I try my credentials, it works perfectly every time.
I've looked through the logs and I can not find anything indicating the issue.
I also followed this MS doc on User profile analysis:
https://docs.microsoft.com/en-us/windows-server/storage/folder-redirection/troubleshoot-user-profiles-events
I ran the license analysis tool and indicates I have extra CALs so it's not that, in fact I saw the event where this user was assigned a new CAL about 2 weeks ago, but has had this issue since their first logon.
I see others have had similar issues but no concrete solution.
Please advise
Hello,
Setting up a lab, trying to make an RDS farm be "highly available"... but it doesn't seem right. 1st attempt, not sure what to expect (expecting too much?). My main question is, can I setup RD Web, Gateway, Broker (server 2016) using MS tools to make them HA? Ignore session host and VDI for now. Any tips on what I may have done wrong so far?
Scenario
All server roles configured for HA (trying). Say an external person logs into RD Web, connects to his office PC. Can I reboot one of the servers in the HA pairs to do maintenance and not effect the RDP session? I'm fine with a brief pause
in service (IE: screen pauses for a second or two while it switches to another node/host).
My Issue
In my lab, when I reboot one of my web/gateway pairs, the RDP session to a PC gets disconnected and cannot reconnect. HA isn't working it seems. Or is that only for Session Host sessions in a RDS collection?
My Lab Server Names/Roles
Running on PC with Server2016 Hyper-V Host
Another tidbit. When the RDP session to the PC is active, I can see the active session in the RD Gateway Manager on only one of the two gateways. I had thought I should be able to see it on both Gateways, but I was wrong (in my lab). Seem right to you too?
Hi Guys,
We are setting RDWEB with Windows 2016 server.
From the RDWEB client session the drive mappings are displayed differently from what the user would see from their windows explorer on their PC.
EG. Mapped drivers from RDWEB show up as Driver letter followed by the clients PC name.
Is it possible in RDWEB to display the drive mapping as they would see on their PC?
EG.
So it have the share name in the mappings... Not the PC name...
Is this possible to fix?
Thxs Chris
The task you are trying to do can't be completed because remote desktop services is busy
keep getting this error on windows server 2016 temporary fix is restart remote desktop services, looking for a permanent fix.