Windows 2012 NLB and the 2012 RDS Gateway

December 10, 2015, 11:43 am

≫ Next: Trouble showing 2 monitors with 4K resolution using Remote Desktop Services (Windows Terminal Server 2012) from Windows 10

≪ Previous: RemoteApps Accounting

$

0

0

Hi All,

I am working on a project at the moment where there are 2 RDS 2012 Gateway servers in the DMZ.

The Session hosts, Webaccess and brokers are on the Internal LAN.

The client has setup a DNS record for remote.rds.co.uk for example and NAT'd the address to the DMZ lets say 192.168.200.30

The Gateway servers primary NIC's are on 192.168.200.10 and 192.168.200.11.

There is a secondary NIC in each box to be used by Microsoft NLB and these addresses are 192.168.200.20 and 192.168.200.21. The NLB virtual IP is set to 192.168.200.30 (The NAT'd address).

Now the question is when we create the firewall rules for this to go from the DMZ to the internal Network so we specify the 192.168.200.30 address or 192.168.200.20 \ 192.168.200.21 or 192.168.200.10 \ 192.168.200.11 for RDP 3389 protocol ?

Essentially I need to know if you hit the load balanced address where does the exiting traffic come out from ?

Thanks Ivan

---

Trouble showing 2 monitors with 4K resolution using Remote Desktop Services (Windows Terminal Server 2012) from Windows 10

November 30, 2015, 8:23 am

≫ Next: RDS Session shows in disconnected state and not resetting

≪ Previous: Windows 2012 NLB and the 2012 RDS Gateway

$

0

0

Hi,

I have installed 2 monitors with 4K resolution on my Windows 10 PC. I have tried to get both screens to work bye using Remote Desktop Services on at Terminal Server (Windows 2012 Server). It Works verry well on the Windows 10 PC. I have check the button for Connect all screens.

It will only Connect 1 monitor with this high resolution.

If i reduce the resolution on one monitor (one with 2560x2048 and one with 3840x2160), then both monitors will work in the Terminal Server Connection. But this is not good to work with.

It seems that the Remote Desktop Connection can`t use 2 monitors with 4K resolutions (3840x2160)?

Anybody that has a solution for this?

RDS Session shows in disconnected state and not resetting

March 9, 2011, 1:44 pm

≫ Next: RemoteApp and Desktop Connections URL setting is missing in GPO

≪ Previous: Trouble showing 2 monitors with 4K resolution using Remote Desktop Services (Windows Terminal Server 2012) from Windows 10

$

0

0

We are running a Win 2008 R2 RDS environment.  We are currently in pre-production testing and I noticed that user sessions, as viewed from Remote Desktop Services Manager, are showing disconnected users in a disconnected state but not removing the session from the server.  Example, one of my test users disconnected 4 days ago and it still shows a disconnected session.

We are using roaming profiles.  

I'm unable to find where to get disconnected sessions to reset themselves after a period of time either on the server or via GPO. 

What am I missing?

RemoteApp and Desktop Connections URL setting is missing in GPO

December 10, 2015, 9:30 am

≫ Next: Terminal Services runs much slower on network than external connections.

≪ Previous: RDS Session shows in disconnected state and not resetting

$

0

0

Hi,

I am trying to use GPO to deploy RemoteApp and Desktop Connections feed URL to all Windows 7, but I can't find the settings anywhere in the GPO.

Network info:

Windows 2008 R2 AD.

RDS servers windows 2012 R2.

Windows 7 workstations.

Thanks for your help.

Terminal Services runs much slower on network than external connections.

November 26, 2015, 9:53 am

≫ Next: Troubleshoot printing documents and from internet

≪ Previous: RemoteApp and Desktop Connections URL setting is missing in GPO

$

0

0

Hello all,

My client is experiencing slow performance to their Terminal Server.  When working with a consultant, who is at least 3000 miles away, they connected to the consultant via a screen share application (Teamviewer, WebCentral, etc) and the consultant then RDP'd back into my client's RDS server.  Even with the double trip, the responsiveness of the consultant's RDS session was blazing fast compared to local clients on the network.

This is very confusing to me given that the local network should have the fastest connection to the server.  All clients are experiencing the slower response time (thus why it wasn't identified until screen sharing a distantly remote user).  While the local response times are not unworkably slow, they are slow enough that now seeing how fast an external user can use the RDS server, they want it fixed.

Not that it should matter, but here are the details on the rest of the network:

-1 virtual host, 2 processors, 128GB RAM, SAN

-9 virtual servers hosted on it.

My biggest confusion comes from the fact that internal and external users are hitting the same RDS server, so the experience should be the same, if not the external users being a little slower due to the distance.  It seems like external users are getting higher priority to resources, but I wouldn't even know how that would be set up and I built the RDS server.

Please let me know where I should look and if you require any further information.  I rarely post on forums but this one has got my brain twisted.  :)

Greg

Troubleshoot printing documents and from internet

December 10, 2015, 9:14 pm

≫ Next: IE11 crashed all the time ntdll.dll error

≪ Previous: Terminal Services runs much slower on network than external connections.

$

0

0

I printed a test page from the laptop to my HP officejet 4620. I cannot print from an internet website or word. The programs tell me to check the connection. The printer is not offline. It is selected default. The printer has copy paper. Please help.

IE11 crashed all the time ntdll.dll error

December 11, 2015, 12:32 am

≫ Next: Windows 2012R2, language bar disappears after shadow

≪ Previous: Troubleshoot printing documents and from internet

$

0

0

We recently upgraded from IE10 to IE11 on our Citrix servers (w2k8R2)

Now we have the problem, that IE11 crashes all the time. Mostly when you try to open a hyperlink or a new tab.

The Eventviewer shows me something like that:

Event ID: 1000
Task Category: (100)
Faulting application name: IEXPLORE.EXE, version: 11.0.9600.16384, time stamp: 0x52157231
Faulting module name: ntdll.dll, version: 6.3.9600.16408, time stamp: 0x523d45fa
Exception code: 0xc0000005
Fault offset: 0x0001e12c
Faulting process id: 0x1e84
Faulting application start time: 0x01ced715c9f58083
Faulting application path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll

I already tried...

Reset IE - no help.
Addons disabled - no help.
Disable Protected Mode - no help.

Another local user account - no help.

I also tried to replace the ntdll file with the following command:

icacls c:\windows\system32\ntdll.dll /grant Administrators:F
But the error is still there.

I added a regkey, so everytime the IE crashes, a dump will be created. I opened this dump with WinDbg and it shows me that:

Loading unloaded module list
..
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(1958.15a0): Access violation - code c0000005 (first/second chance not available)
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for ntdll.dll -
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for kernel32.dll -
eax=00000000 ebx=02b8ef84 ecx=6abe4285 edx=002e54c0 esi=00000002 edi=00000000
eip=7722015d esp=02b8ef34 ebp=02b8efd0 iopl=0         nv up ei pl zr na pe nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00000246
ntdll!NtWaitForMultipleObjects+0x15:
7722015d 83c404          add     esp,4

Anybody an idea what we can do? I dont want to uninstall IE11.

Thanks for any help

Windows 2012R2, language bar disappears after shadow

January 22, 2015, 1:08 am

≫ Next: Multiple RDP Sessions - Server 2012 r2

≪ Previous: IE11 crashed all the time ntdll.dll error

$

0

0

Hi,

We faced with the problem: when administrator disconnects from his shadow session, language bar in user's session disappears (hot keys stop working too).

Hardware/Software:
1. Clients: Win8.1 (pc), WinCE (thinclient)
2. Servers: Win2012R2 (all hotfixes have been installed)
3. Roles: RDS
4. Administrators' pc: Win8.1 (pc)

Steps to reproduce:
1. Users open their sessions. Language switching works fine, language bar is on its place.
2. Administrator connects to active session with command: mstsc /v:%HOSTNAME% /shadow:%SESSIONID% /control /noconsentprompt
3. User's issue resolved. Administrator closes his shadow window and language bar disappears in the user's session (hot keys also stop working). User has to logoff and then logon again.

I found that the Remote Assistant has the same issue too (msra /offerRA %USERPCNAME% -> Help -> Disconnect -> lang issue).

May be someone faced with the same issue too?
Thank you for your help.

---

Multiple RDP Sessions - Server 2012 r2

December 11, 2015, 4:44 am

≫ Next: Offically reset RDS 120day grace period

≪ Previous: Windows 2012R2, language bar disappears after shadow

$

0

0

Need to allow users to login via RDP into multiple sessions simultaneously. Bought  a Volume License (8 licenses) and installed.

And thought all was well. Until one day logging in and got the error "The remote session was disconnected because there are no Remote Desktop License Servers available to provide a license. Please contact the server administrator."

The license is installed. I can see it in the RD Licensing Manager. 

 Attempted to apply KB Article #2916846 or http://hotfixv4.microsoft.com/Windows%208/Windows%20Server%202012%20RTM/nosp/Fix477842/9200/free/472460_intl_x64_zip.exe

With no luck. 

Then ran the fix here to get more time 120 days http://www.stopdoingitwrong.co.uk/server-2012-rds-there-are-no-remote-desktop-license-servers/

It seems the licenses were perhaps added incorrectly? All the instructions I have found though require AD or multiple machines.

I just want multiple users to be able to login via RDP at the same time.

Offically reset RDS 120day grace period

December 11, 2015, 6:23 am

≫ Next: RDSH Collection : Unable to retreive collection properties

≪ Previous: Multiple RDP Sessions - Server 2012 r2

$

0

0

Dear Forum Members,

We have faced a situation where we taken over a Remote Desktop Session Host server (all roles on that and only one server) which 120 days timer has been reset 2 times by the previous administrator. We have forced the owner to buy the correspondig linenses to use the service normally, but now 4 days are left and it is impossible to order the appropriate licenses in such a short period of time.

My question would be: are there any methods to "offically" reset the 120days timer again in order to have some time and chance to make this server licensed? I found a few articles about how to do that, but I'm not sure even it can be done three times (for example normal server can be rearmed three times):

http://anilgprabhu.blogspot.hu/2014/05/reset-trial-terminal-license-on-windows.html

http://www.puryear-it.com/blog/2013/10/10/microsoft-windows-server-2012-rds-licensing-server-available-event-1130-event-1128/

http://ravingroo.com/949/server-2012-rds-no-remote-desktop-license-servers-available/

Thank you for your help and ideas!

Best Regards,

Christian

RDSH Collection : Unable to retreive collection properties

December 5, 2015, 1:12 am

≫ Next: Black Screen and strange errors with RemoteApp

≪ Previous: Offically reset RDS 120day grace period

$

0

0

Hi,

 

I have a problem with a Windows 2012 R2 Farm.  When I try to add a new RD Session Host to a collection , I receive:  “Error - unable to retrieve the session collection properties”

I can create a new collection and add rdsh with no error, I can suppress one rdsh from a collection but it’s impossible to add one. Domain admins are part of all collection.

In powershell with add-rdsessionhost I receive the same errror.

I work for a big university in France and more than thousands user work on this farm.

I need help.

Have you an idea?

Black Screen and strange errors with RemoteApp

November 9, 2015, 12:09 am

≫ Next: RDP Credentials inside RDS Session

≪ Previous: RDSH Collection : Unable to retreive collection properties

$

0

0

Hello guys!

I can't get answer on my local technet forum, because i ask in here. 

One user can't connect to RemoteApp. It instead the program displays a black screen.

I have some test:

1. Starting RemoteApp Terminal Server №1s under my account, I login undermy account to the client computer - has successfully connected.
2. Starting RemoteApp Terminal Server №1 under my account, I was connected with auser account to the client computer - is not successful
3. Starting RemoteApp Terminal Server №1 under the user's credentials when I connect with auser account to the client computer - is not successful
4. Starting RemoteApp Terminal Server №2 under my account, I login undermy account to the client computer - has successfully connected.
5. Starting RemoteApp Terminal Server №2 under my account, I was connected with auser account to the client computer - successful
6. Starting RemoteApp Terminal Server №2 under the user's credentials when I connect with auser account to the client computer - successful

TS №1 - Windows Server 2012 TS №2 - Windows Server 2012 R2

After analyzing the situation revealed several types of errors occur when connecting to a RemoteApp everywhere. Several user's have problems. If you connect simply RDP, using the gateway, then it works.

1. Black screen. (The above analysis was given situation)

Error: There is no possibility to get a log, I can throw a little later.

2. When the login and password will not allow - "An attempt to login fails." Under other data connection to RDP works.

Errors:

RDPClient_TCP: An error occurred during the transition from TcpStateFrontAuth in TcpStateFailure in response to the 7. (Error code: 0x0).

RDPClient_TCP: An error occurred during the transition from TcpStateFrontAuth in TcpStateFailure in response to the 7. (Error Code: 0x8009030C).

RDPClient_SSL: An error occurred during the transition from TsSslStateHandshakeStart in TsSslStateDisconnecting in response to the 7. (Error code: 0x80004005).

RDPClient_SSL: An error occurred during the transition from TsSslStateDisconnected in TsSslStateDisconnected in response 25. (Error code: 0x8000FFFF).

Windows 7 Professional VLSC image

3. When you connect to RemoteApp - "RemoteApp programs off - Unable to connect to a remote computer"

Errors:

RDPClient_TCP: An error occurred during the transition from TcpStateConnectingTransport in TcpStateDisconnected in response to 2. (Error code: 0x80004004).

4. Attempts to connect to the RemoteApp 5-60 minutes, but it is impossible. Errors client writes.

Errors:

RDPClient_TCP: An error occurred during the transition from TcpStateConnectingTransport in TcpStateDisconnected in response to 2. (Error code: 0x80004004).

RDPClient_SSL: An error occurred during the transition from TsSslStateHandshakeInProgress in TsSslStateDisconnecting in response to 8. (Error code: 0x80004005)

All the updates are installed. All users have the right to access. Windows 7 Professional.

I feel in the jamb of the RDS.

1. Gateway / Broker

The credentials used to connect to, have not worked.

Connection name:
URL-address connection: https: //domain/rdweb/feed/webfeed.aspx
Error Code: 0x8007052E, 0x0

Client Connection Broker Remote Desktop was unable to redirect the user domain \ Username.
Error: NULL

The user domain \ Username on the client computer "212.19.138.3" meets the requirements of the authorization policy resources and authorized to connect to the resource, but because of the mismatch of the resource "IP TS 2012 №2 Windows Server R2" resource authorization policy requirements the connection is not authorized. Try to connect to other network resources or reduce the level of safety RD Gateway by modifying the connection authorization policy requirements.

2. TS №1 Windows Server 2012:

Setting the default connection is canceled. Connecting the default can not be used in the system, part of the deployment of Remote Desktop Services.

3. TS 2012 №2 Windows Server R2:

Remote Desktop Services have spent too much time to load the user configuration to the server \\ dc.domain for the username

Setting the default connection is canceled. Connecting the default can not be used in the system, part of the deployment of Remote Desktop Services.

RDP Credentials inside RDS Session

December 7, 2015, 8:30 am

≫ Next: Cannot Access Remote Desktop from Outside the LAN

≪ Previous: Black Screen and strange errors with RemoteApp

$

0

0

Hi,

we have an environment with 4 RDS Session Hosts, 2 Connection Brokers and 1 Remote Gateway. All machines are Windows 2012 R2. The users use Romaing Profiles and Folder Redirection.

Users, inside their RDS Session, launch a RDP connection to another server and enable the checkbox to save their credentials to RDP client. This works untill the servers are rebooted.

There is a method to save definitively their RDP credentials? 

Thank You!!

-Davide S.-

Cannot Access Remote Desktop from Outside the LAN

December 11, 2015, 8:16 am

≫ Next: Remote Desktop Manager 2.7 with new Win 10 update issues

≪ Previous: RDP Credentials inside RDS Session

$

0

0

Friends:

My RD setup went kafluie.  We are running Win10 virtual machines on a Server 2012R2 box.

Out of the blue, we were unable to connect, getting a certificate error.  I got a new CSR and a new certificate and installed it.  Great.  Now we can access our virtual machines from within the LAN --- but not from outside the LAN.

Unfortunately, the error message is meaningless:  "Your computer can't connect to the remote computer because an error occurred on the remote computer that you want to connect to.  Contact your network administrator for assistance."

It stands to reason that my Gateway is not correctly set up, and sure enough its using a self-signed certificate instead of my SSL cert.  But the problem is that I can't install my cert because it is in the wrong format.  My certificate is a CRT file but I need PFX or P12.  I was going to use sslshopper to convert it, but I do not have my private key.

OK, so then I thought I'd use Management Console with the Certificates snap-in to Export in PFX format.  But that option is grayed out.

Oy!

Can anyone tell me what the heck I'm doing wrong?

Micah

Remote Desktop Manager 2.7 with new Win 10 update issues

November 17, 2015, 10:36 am

≫ Next: SSL Certificate for RDP port 3389

≪ Previous: Cannot Access Remote Desktop from Outside the LAN

$

0

0

Since the new Windows 10 update, my Remote Desktop Connection Manager software is buggy. When running it on my external monitor (connected by USB adapter), the mouse does not show up visually, it is there, just cannot see it.  I move the RDCMAN to my Surface Pro 3 screen (primary) it works fine.  Also, since the Win 10 update, when I use RDCMAN to connect to a Windows 2012 R2 server, it is smaller than the screen with garbage in the black space -- main issue is that the mouse is about an inch off to the bottom right of where the visible mouse actually is.  I have downloaded MultiDesk and it works just fine on all my monitors and with 2008 and 2012 server without issue.  Any ideas?  Or does Win 10 break the RDCMAN 2.7?

---

SSL Certificate for RDP port 3389

December 7, 2015, 2:43 pm

≫ Next: Not able to take RDP to windows server 2012

≪ Previous: Remote Desktop Manager 2.7 with new Win 10 update issues

$

0

0

Hi

I am getting the following vulnerability from all my Windows servers (win2012 R2). I believe to fix this vulnerability I will have to configure my RDP to use a certificate. I know nothing about certificates and here are my questions:

1. How do I configure RDP to use a certificate?

2. If I am connecting to the server(has the SSL certificate) from my laptop(does not have the certificate). If my laptop does not have a SSL certificate, will I still be able to connect to the server?

3. I am also getting the same vulnerability for HTTPS, can we use the same SSL certificate for both HTTPS and RDP?

THREAT:
An SSL Certificate associates an entity (person, organization, host, etc.) with a Public Key. In an SSL connection, the client authenticates the remote
server using the server's Certificate and extracts the Public Key in the Certificate to establish the secure connection. The authentication is done by
verifying that the public key in the certificate is signed by a trusted third-party Certificate Authority.
If a client is unable to verify the certificate, it can abort communication or prompt the user to continue the communication without authentication.

SOLUTION:
Please install a server certificate signed by a trusted third-party Certificate Authority.

Not able to take RDP to windows server 2012

December 12, 2015, 12:00 am

≫ Next: RD license and RD CAL installation on 2008r2 workgroup server

≪ Previous: SSL Certificate for RDP port 3389

$

0

0

Unable to Take RDP to the Windows server 2012 standard , I get no error when i RDP ,it simply disconnects. 

Logged in by ILO and found out in event viewer EVENT 4005, Winlogon    -  The Windows logon process has unexpectedly terminated.

I have tried to end users from task manager  and also tried to take mstsc /console that did not work either. Kindly help to resolve the issue.

RD license and RD CAL installation on 2008r2 workgroup server

December 8, 2015, 1:37 am

≫ Next: Use of WildCard Certificate for RDS Server

≪ Previous: Not able to take RDP to windows server 2012

$

0

0

Hello

I have a 2008r2 server which is in work group and not connected to internet.I need to enable multiple RDP session on the server.

I need to install licensing server and per device CALs on the same server. I have been provided the Enterprise Agreement number for the CAL license

Please let us know how best i can implement this

Use of WildCard Certificate for RDS Server

December 12, 2015, 2:36 am

≫ Next: Mapped DFS share shown with red X on network drive in Windows Server 2012R2 with RDS role installed

≪ Previous: RD license and RD CAL installation on 2008r2 workgroup server

$

0

0

Hi,

We are using DigiCert WildCard Plus Certificate for our organization.

We would like to know do we need to request different certificate for RDWeb / RD Gateway .... etc from DigiCert OR we can import the "*.mycompany.com" Certificate for them ?

Thanks

Mapped DFS share shown with red X on network drive in Windows Server 2012R2 with RDS role installed

December 8, 2015, 11:46 am

≫ Next: Using RD Gateway outside of the office for RDS (VDI)

≪ Previous: Use of WildCard Certificate for RDS Server

$

0

0

Hello everybody, 

Faced with strange situation. I have DFS namespace based on Windows Server 2012R2 and same RDS server. Issue is very simple: if you map DFS share to network drive, no matter how, via logon script or via group policy, the first user which logs in get this drive ok, second logged in user gets red X on this drive but still able to access it. 

If I map this drive via GPO, after second user log in I can see warning in Event Viewer

The user 'R:' preference item in the 'Test DFS mapped drive {7CDE4506-692E-422B-9299-D12CB15F7CC6}' Group Policy Object did not apply because it failed with error code '0x80070055 The local device name is already in use.' This error was suppressed.

No matter if checkbox "Run in logged-on user's security contest" were marked or not. 

After some tests I recognised following:

1. If you map drive manually from Windows Explorer, second logged in user gets same red X on that drive

2. If you map drive manually and use "connect using different credentials" options and even enter credentials of logged on user, then the problem goes away.

3. So I created script which do it in following way:

net use Z: /delete

net user Z: \\dfsnamespace\root /user:domain\%username%

This works fine but I'm wonder that this bug a bit well known on Google and there is no any reaction from MS as well about this point. Could please hint me anything about this issue? I don't like this workaround and I think there has to be another way to solve this issue.