Fixing RD Gateway server public vs. private hostname mismatch

May 10, 2017, 1:50 pm

≫ Next: RDS users are getting multiple User Profile Disks on RDS 2012 R2

≪ Previous: When are RDS CALs needed?

$

0

0

Way back in August of '14 I posted about being perplexed over RD Gateway Server FQDN vs. Certificate Subject Name. Well, I did manage to get everything working BUT still to this day the external and internal hostnames do not match (a natural byproduct of using a different external and internal domains, so very common I'm sure). To illustrate, we have these two FQDN's for the server (private vs public):

• TS.private.com (the RD Gateway server and, for all intents and purposes here, the only TS/RDS server) **VERSUS**
• RDS.public.com (which our https://rds.ourdomain.com/rdwebsite directs to, 3rd party SSL cert and all are legit).
  

"TS.private.com" now has a DNS A record (inside our LAN only) to make the public name"rds.public.com" resolve to its private IP (192.168.x.x) as of today. I'd now like to simply update IIS bindings to use the PUBLIC...

---

RDS users are getting multiple User Profile Disks on RDS 2012 R2

May 10, 2017, 7:50 pm

≫ Next: Change of rdp port number not working for RD connection users

≪ Previous: Fixing RD Gateway server public vs. private hostname mismatch

$

0

0

Hi

In our RDS 2012R2 environment I use user profile disk to store "Roaming user profile data" and "User registry data", all other data is handled by redirected folders. What I have seen a few times now is that users end up with several UPD files created against their name but each with a different SID in the filename. For one user for example it looks like this:

UVHD-S-1-5-21-.......-1102.vhdx - his actual SID
UVHD-S-1-5-21-.......-11642.vhdx
UVHD-S-1-5-21-.......-11643.vhdx
UVHD-S-1-5-21-.......-11647.vhdx

Does anyone know why this might be occurring?

Change of rdp port number not working for RD connection users

May 11, 2017, 1:03 am

≫ Next: RD Gateway ask for Credentials in middle of RemoteApp Session

≪ Previous: RDS users are getting multiple User Profile Disks on RDS 2012 R2

$

0

0

I've changed the RDP port via the registry and rebooted the server. If a change the port number within the remote desktop connection manger of the server I can than get in, but on a remote desktop connection  I have to manually type in the port number after the server name to gain access (server name: port number).

I think you can set the new rdp port on a gpo but I cant find where the setting is as most articles just say to change it via the registry.

RD Gateway ask for Credentials in middle of RemoteApp Session

May 11, 2017, 10:11 am

≫ Next: Terminal Services - Enforce Time Limit For Idle Sessions With Exclusions

≪ Previous: Change of rdp port number not working for RD connection users

$

0

0

Hello,

First off we are using Server 2012r2 Remote Desktop Services. Everyone logs in through RD Web Access to access their Remote Apps. 

I have on user that every 3 to 4 hours a prompt come up from RD Gateway Server asking for credentials. She types them in, then all apps open, lock up for a minute and then just close. Then she has to reopen all her apps. 

Why would the RD Gateway Server ask for credentials in middle of her session. No other users are having this problem.

Terminal Services - Enforce Time Limit For Idle Sessions With Exclusions

May 11, 2017, 3:55 pm

≫ Next: Windows 2008 Remote desktop server cannot find domain controller

≪ Previous: RD Gateway ask for Credentials in middle of RemoteApp Session

$

0

0

I am trying to figure out if it would be possible to create an exclusion for a single user account on a terminal server when "Set time limit for active but idle Remote Desktop Services Sessions" is being enforced as 1 hour via GPO

I currently log off idle sessions after an hour. I don't want to change this. However I need to somehow exclude an account from being logged off after an hour of inactivity, or if that account becomes disconnected. That account will only ever be logged in from the server console.

The reason being is there is an application on the server that must be running at all times and the developers where not smart enough to make it a service as it really should be. So I have to create an account that will auto login to the server at boot and run this software. I can't use a scheduled task (or similar) to run the software...

Windows 2008 Remote desktop server cannot find domain controller

May 15, 2017, 10:00 am

≫ Next: Some Applications don't recognize Printers when printers pushed via User GPO

≪ Previous: Terminal Services - Enforce Time Limit For Idle Sessions With Exclusions

$

0

0

I am in the middle of a minor crisis with a customer and any help would be appreciated.

At this customer, we have a 2011 Small Business Server and a 2008R2 Enterprise server which runs 15 rpd users for a manufacturing application. Over the weekend, I remotely installed some MS updates on both servers and now the rdp server cannot authenticate domain users. I can log on locally to the server console and it works fine, but when I try to logon over rdp, I get this.

"The specified domain does not exist or could not be contacted."

I have had to create local users on the rdp server temporarily so that folks can get into their application and get some work done, but I have been working on this for 5 hours and have not figured out what is going on.

I have triple checked the network settings on the rdp server. It is a member of the domain and has...

Some Applications don't recognize Printers when printers pushed via User GPO

May 16, 2017, 4:54 pm

≫ Next: MYOB API Installation Problem

≪ Previous: Windows 2008 Remote desktop server cannot find domain controller

$

0

0

Running W2012R2 Remote Desktop Services.

I have a LOB application that I am setting up for our users which they'll need to print customer applications.

I used the option on my print server to deploy the printers via USER GPO. when I log in, I run gpresult to make sure that the policy is applied correctly, however, when I'm inside the application, it doesn't see any of the printers in the printer selection option.

I opened up another app such as MS Word and it CAN see the printer.

I then switched it up and deployed the printers via COMPUTER GPO. log in again to make sure the policy applies, NOW the printers show up.

Was curious to know in general if applications read printers mapped to COMPUTER gop instances such as the latter and not the USER gop. I want to be able to map the printers via USER GPO because I'm performing a poor man's RDS...

MYOB API Installation Problem

May 16, 2017, 5:45 pm

≫ Next: Remote Desktop Virtualization Host Problems

≪ Previous: Some Applications don't recognize Printers when printers pushed via User GPO

$

0

0

Hi all!

I'm having an issue getting the latest version of the MYOB AccountRight API installed on a terminal server.

It fails at the time that a black command prompt window comes up but it disappears too quickly for me to hit pause and see what it is doing.

I've tried going to MYOB support but never got a response, below is the log. I'm hoping someone else has had this issue!

[7C54:3E6C][2017-04-04T12:32:59]i001: Burn v3.8.1128.0, Windows v6.3 (Build 9600: Service Pack 0), path: C:\Users\admin-brett\Desktop\MYOB.AccountRight.API.Bootstrapper.exe, cmdline: '-burn.unelevated BurnPipe.{4FC038FD-D52F-4C33-9F7B-C5954ED70E60} {1F88EA72-968B-4360-AC7A-33489BD107DD} 13600'
[7C54:3E6C][2017-04-04T12:33:00]i000: Setting string variable 'WixBundleLog' to value 'C:\Users\ADMIN-~1\AppData\Local\Temp\MYOB_AccountRight_API_20170404123300.log'
...

---

Remote Desktop Virtualization Host Problems

May 17, 2017, 8:58 am

≫ Next: RDS / 2FA / Duo

≪ Previous: MYOB API Installation Problem

$

0

0

Recently I ran updates on all of my RDS virtualization Host Servers. Now all of my Pooled desktop users that have Profile Disks are not able to log-in correctly, They are receiving temporary profiles and most of the time they cannot even connect, They receive a message about not being able to "wake the VM"

I have tried resetting the VM.

Disconnecting the UPD manually.

Some of the HOst servers are showing Three different errors:

Event 8461-----Remote Desktop Virtualization Host could not run the Hyper-V WMI job.

Error description: NULL
See also Hyper-V event logs
Hresult: 0x80078000

Event 4893-------Remote Desktop Virtualization Host could not attach a user profile disk to the virtual desktop for a user account with a SID of S-1-5-21-xxxxxxxxxxxxxxxxxxxxxx

Virtual desktop name: Pooled-x
Hresult: 0x80078000

Event 8479-------Remote Desktop...

RDS / 2FA / Duo

May 17, 2017, 11:41 am

≫ Next: Remote Desktop Farm with Gateway - Can't find computer

≪ Previous: Remote Desktop Virtualization Host Problems

$

0

0

Last year I wrote this post:

https://community.spiceworks.com/topic/1626524-2fa-and-rds

We didn't move on this at all, which was fine. There was a lot of other stuff to do. Now that I am getting into the nitty gritty and have found a potential show-stopper, I wanted to revisit this topic.

We've deployed RDS on a single server. All roles are there. The users utilize the RemoteApp function in Windows 7/10 to publish icons on their desktop. That there was a pretty big deal to them and they've not used the web access at all, either internally or externally. (In fact, you can't access RDS externally which is how we've designed it for now.)

Duo says that if we use 2FA, the users will no longer be able to use the RemoteApp subscription function. I suppose it means that for the every day desktop workers, they'll need to login to the RDS website,...

Remote Desktop Farm with Gateway - Can't find computer

May 18, 2017, 7:17 am

≫ Next: Remote Desktop Farm with Gateway - Can't find computer

≪ Previous: RDS / 2FA / Duo

$

0

0

I'm setting up a test RDS Farm all in 2012, setup something like this;

2 x servers both with gateway/connection broker/web access roles installed

Gateways farmed and connection brokers configured in HA

2 x session hosts

Everything works fine and I can connect through to my load balanced session collection via the brokers swimmingly.

I'm trying to get rid of the certificate name mismatch errors that can occur when you publish an internal farm like this externally. So my Farm (i.e. record for brokers) is rdsfarm.domain.local. Theres a powershell script available on the interweb (set-rdpublishedname I think) which when ran should mean I can can the RDS farm published name to that of my external domain and not have the name mismatch error show each time clients connection. However, after running that script and downloading the RDP file from...

Remote Desktop Farm with Gateway - Can't find computer

May 18, 2017, 8:30 am

≫ Next: Windows Store Remote Desktop tuning

≪ Previous: Remote Desktop Farm with Gateway - Can't find computer

$

0

0

I'm setting up a test RDS Farm all in 2012, setup something like this;

2 x servers both with gateway/connection broker/web access roles installed

Gateways farmed and connection brokers configured in HA

2 x session hosts

Everything works fine and I can connect through to my load balanced session collection via the brokers swimmingly.

I'm trying to get rid of the certificate name mismatch errors that can occur when you publish an internal farm like this externally. So my Farm (i.e. record for brokers) is rdsfarm.domain.local. Theres a powershell script available on the interweb (set-rdpublishedname I think) which when ran should mean I can can the RDS farm published name to that of my external domain and not have the name mismatch error show each time clients connection. However, after running that script and downloading the RDP file from...

Windows Store Remote Desktop tuning

May 22, 2017, 6:40 am

≫ Next: RDP Remote printer

≪ Previous: Remote Desktop Farm with Gateway - Can't find computer

$

0

0

I just recently started using the Remote Desktop from the Windows store on Windows 10 Enterprise. 

* Is there a limit of about 8 or 10 open sessions?   This about where it develops a problem talking to the next machine.   These are all remote desktop sessions directly to a Windows Server edition from 2008 R2, 2012 R2 or 2016.   

* In full screen mode, as it logs in or out, there are at least three full screen layering operations done.  Is there any way to optimize this?   Seems to me something like vnc would draw it as bocks rather than a layer for background, then desktop backgroup image,  then desktop icons. Happens on login and logout.   What drives this?  I don't think I have any group policies in play?

RDP Remote printer

May 22, 2017, 7:12 am

≫ Next: Can RDP resolution be set for Dell WYSE?

≪ Previous: Windows Store Remote Desktop tuning

$

0

0

Employees at a business client remote into a cloud based 2012 R2 Server hosting a business application. Reports are printed to the client's local network printer. We are seeing regular failures of the remote desktop host to remain connected to the local network printer. Based on the reports of the user's experience, the RDP host doesn't see, connect and redirect to the remote printer, and / or loses the printer connection during a remote session. The session itself remains connected and the business app can be used, except for printing.

A couple of weeks ago the firmware in the network printer was updated to the latest available, and the sleep settings in the printer were set to the maximum timeout available. The problem appeared resolved until this morning when it cropped up again.

The employees stay connected the entire business day,...

Can RDP resolution be set for Dell WYSE?

May 22, 2017, 10:56 am

≫ Next: Mac users are sometimes not connected to their existing RDP session

≪ Previous: RDP Remote printer

$

0

0

Hi all,

I'm deploying some Dell WYSE thin clients and ran into an issue with screen resolution over RDP. I've got a handful of different monitors, but most are 1600x1900 or 1920x1080; however, in RDP, all are set to 1024x768. I looked in the WYSE cloud portal, but couldn't find any settings to fix this. The thin clients are registered with CCM, so all their settings can be manipulated through the cloud. Anyway, if anyone has run into this and knows of a fix, I'd definitely appreciate hearing it. 

Thanks!

---

Mac users are sometimes not connected to their existing RDP session

May 23, 2017, 6:09 am

≫ Next: Configure Windows Server 2016 to find Remote Desktop License Server on LAN

≪ Previous: Can RDP resolution be set for Dell WYSE?

$

0

0

This issue only occurs for users that are connecting from Macbooks - they are using Microsoft Remote Desktop for Mac.

• Our setup comprises of two terminal servers in a farm (running Win Server 2008 R2), let's call them S1 and S2.
  
• S1 also acts as the Session Broker.
  
• Load balancing is achieved through DNS round robin.
  
• Users connect to the farm using a domain name.
  

The issue occurs if a user's Macbook goes to sleep. Upon waking up from sleep, MRD attempts to reconnect to the terminal server. The following messages are displayed:

• "Connection to the remote PC was lost. We're trying to connect again."
  
• Followed by: "Negotiating credentials..."
  

Unfortunately, MRD often seems to fail to 'negotiate credentials' as it lands users on the login page. Upon entering their login credentials, users are logged on the other server. This is how they end up with...

Configure Windows Server 2016 to find Remote Desktop License Server on LAN

May 23, 2017, 8:15 am

≫ Next: Is there such a thing as a portable Thin Client

≪ Previous: Mac users are sometimes not connected to their existing RDP session

$

0

0

History:  I started my current position in April and I was able to access all servers using Remote Desktop.  I have two servers running Windows Server 2016 and the other four are running Windows Server 2008.  I did not know that Windows Server 2016 requires Remote Desktop Licenses Server to be installed until now.  I am unable to access this server at this time.

Problem:  One of my servers running Windows Server 2016 has passed the grace period but this server is also running AD.  On the other server I have installed Remote Desktop Licenses Server Role.  I found in a technet forum that Remote Desktop Licenses Server cannot be installed on a server running AD.  

Question:  How do I point my server to the Remote Desktop License Server?  

Is there such a thing as a portable Thin Client

May 23, 2017, 12:48 pm

≫ Next: Remember Me checkbox missing with RemoteApp over SSL

≪ Previous: Configure Windows Server 2016 to find Remote Desktop License Server on LAN

$

0

0

Hello,

I can't find a portable thin client out there anywhere.   

I am running a terminal server environment with thin clients.  Its a standard setup:  the thin clients boot up, obtains an IP, locates the valid file server, and downloads the WNOS.INI file.

I also have tons of laptops.   I would like to use portable thin clients in place of these laptops.  All of the portable thin clients I see have some type embedded OS.   I need to take all interaction away from my end users so they boot up and see the same thing they would see on a standard thin client. 

I would think there would be a portable wireless device out there that can do this.    If there isn't one in existence then why not?  

Thanks for any input! 

Remember Me checkbox missing with RemoteApp over SSL

May 23, 2017, 12:55 pm

≫ Next: Cannot see local printer from remote desktop

≪ Previous: Is there such a thing as a portable Thin Client

$

0

0

So, I'm wondering if anyone can tell me why this is happening. Normally, when you use MSTC.exe to sign into a server using remote desktop, there's a remember me checkbox you can use to remember your credentials.

While messing with a Remote App installation using Windows Server 2016, I noticed that check box was missing. 

What I found is that if port 3389 is forwarded through the router to the Connection Broker server, then you can get the remember me box for RemoteApp applications. However, if you force it through SSL by closing port 3389, that checkbox goes away.

Can anyone point me to why this is happening, or how to get that checkbox back while still using SSL should the need arise? I really don't want to open port 3389.

Thanks!

Cannot see local printer from remote desktop

May 23, 2017, 4:40 pm

≫ Next: remote desktop issue

≪ Previous: Remember Me checkbox missing with RemoteApp over SSL

$

0

0

I have a local Windows 10 PC with an HP M2727 printer set as default. I used to have a Windows 7 Remote Desktop to which it used to connect and print.

Now I have a Windows 10 Remote Desktop, and the printer from local PC does not display. And I cannot install the HP M2727 driver because it needs the printer to be connected :(