I've been trying to use a great script from the Gallery:
https://gallery.technet.microsoft.com/scriptcenter/Remotely-log-users-off-377c848d

It works great for me but I'm a Domain Admin.  I'm trying to enable my ERP admin as well as our help desk folks to manage user sessions.  We just want them to be able to send a message or log off a user(s).

Server Manager doesn't work because they get Access Denied on all of the hosts.

I understand the security but this defeats the purpose of having help desk staff when sys admins have to manage all facets of the RDS system.

Am I missing a setting or is this just not possible?

Hi all

I have a clusterd instance for HA connection Broker on a different port than 1433. My port is 1438. How can i specify in the string connection the different port? It's Possible?

Can do somelike this?

DRIVER=SQL Server Native Client 11.0;SERVER=SqlName:1438;Trusted_Connection=Yes;APP=Remote Desktop Services Connection Broker;DATABASE=SQL12GP

Thanks!

I have already set the security layer as SSL. However, encryption level is still blank and cannot select the level. Please advise how to fix it.

I have installed Microsoft Remote Desktop 8.0.5 For MAC OSX 10.8.5 and added new remote connection in the list which works fine.
Now i export same connection to .rdp file but when i execute it mstsc opens remote os login screen for user password to login (which is already in keychain store).

Question:

• how can i launch .rdp file so that it will not ask remote user password?
• where/how to store password?

------- .RDP File ----------

screen mode id:i:0
use multimon:i:1
session bpp:i:32
full address:s:192.168.1.130
audiomode:i:0
username:s:mylabs\administrator
disable wallpaper:i:0
disable full window drag:i:0
disable menu anims:i:0
disable themes:i:0
alternate shell:s:
shell working directory:s:
authentication level:i:0
connect to console:i:0
gatewayusagemethod:i:0
disable cursor setting:i:0
allow font smoothing:i:1
allow desktop com
bookmarktype:i:3
use redirection server name:i:0

Thanks in advance

We're having some intermittent issues with our NAV RemoteApp client not opening correctly.  The page doesn't fully render and the window cannot be moved around the screen, the only solution is to end the mstsc process.  It looks like this:

I've found that this often happens if the user is listed as "disconnected" Under Server manager > Remote Desktop Service > Connections > QuickSessionCollection 

If I log the user off, they can launch the RemoteApp a 2nd time no problem.  As a workaround I created a GPO that immediately logs off a disconnected session.  This has resolved 90% of the occurrences for this problem but does still occasionally happen.

Network doesn't seem to be the cause as it happens on the local Gb LAN just as frequently as our VPN users and no packet loss is occuring between client and server.

Any suggestions?  Cheers!

Hi,
I have a PS script that creates a VM on VCenter, join it to the domain, adds RDSH 2012 r2 role then add it
to the appropriate RDS collection.

For that, I import 3 powershell modules :

#Import required Modules & Snapins
 Import-Module ActiveDirectory
 Import-Module RemoteDesktop
 Add-PSsnapin VMware.VimAutomation.Core

This runs (appearently) OK from both x86 and x64 powershell command line Windows or ISE
But when running the script itself witch both calls RemoteDesktop ps commandlets
and  VMware.VimAutomation.Core's snapin commandlets, things turn Red. 

from a x64 window PS window, I get :
New-OSCustomizationSpec : This cmdlet requires 32bit process. Please run PowerCLI in 32 bit mode.

from a x86 window PS window, I get :  
Import-Module : The specified module 'RemoteDesktop' was not loaded because no valid module file was found
in any module directory.

At line:3 char:2

+  Import-Module RemoteDesktop

+  ~~~~~~~~~~~~~~~~~~~~~~~~~~~

    + CategoryInfo          : ResourceUnavailable: (RemoteDesk

    + FullyQualifiedErrorId : Modules_ModuleNotFound,Microsoft.PowerShell.Commands.ImportModuleCommand

Any Help Please ?

MCTS Windows Server Virtualization, Configuration

Hi,

We have a customer server which is Windows 2012. We installed RDS session host server role and configured it to use RD licensing server as per thehttps://support.microsoft.com/kb/2833839?wa=wsignin1.0

After configuring, when I open RD license diagonser tool, it says, RD license server is not available. Also shows, credential not available. When I enter the credential by clicking, provide credentials, it does not get applied. I see no event logs related to RD service. However, I see the below event log which points to RD licensing server.

Ok, I have racked my brain trying to figure this out and I'm out of ideas.

Issue - Random Windows 7 PC that has updated to RDP 8.0 gets this error when they try to connect to a server we have set up for them through a gateway.  Only happens when the computer is updated to RDP8.  Downgrading to RDP7.1 fixes the issue and they can connect just fine.

The issue only affect a very small number of computers.  Most Windows 7 computers with RDP 8.0 can connect just fine.  But right now, I am working with a client that has their own computers and domain (I have no control over) that are affected by this issue.  This is not the only client I have run into with this issue as well. 

This problem is essentially what is described here - http://www.examiner.com/article/fixing-an-error-occurred-on-the-remote-computer-with-remote-desktop-connection  Except I would really like to know if there is a fix other than uninstalling RDP 8.

Hi,

I have a Outlook PRF file that works perfectly with 32 bit office on Windows 7 but when I try it on a 64 Windows 2008 R2 server it doesnt seem to run as Outlook displays the run through dialog box for new profiles.

This is the command:

"C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE" /importprf "\\SERVER\software\Office2010\Outlook_Only.prf"

I've also tried a VB script with these commands which also doesnt work:

oShell.RegDelete "HKCU\Software\Microsoft\Office\14.0\Outlook\setup\First-Run"
 oShell.RegWrite '"HKCU\Software\Microsoft\Office\14.0\Outlook\setup\importPRF","\\SERVER\software$\Office2010\Outlook_Only.PRF", "REG_SZ"
 oShell.RegWrite "HKCU\Software\Microsoft\Office\14.0\Outlook\UserData","1","REG_DWORD"

Anyone any ideas?

Thanks

I have recently purchased windows server and now wants to purchase some user CALs. Few users will do mstsc of WinServer from within the premises and few customers will do the mstsc from remote location, a different city. Remote user will login via internet connection into the LAN and then do mstsc of WinServer. 

Please tell me exactly what products has to be purchased to facilitate this. I have zeroed in on the below:

1. WinSvrCAL 2012 SNGL OLP NL UsrCAL

2. WinRmtDsktpSrvcsCAL 2012 SNGL OLP NL UsrCAL

If this is correct, then please guide on how exactly this works? For example, The user doing mstsc from within premises requires item 1 only and users doing mstsc 
from different city requires item 2 only, or both 1 and 2 is required in both case.

The terminal server services gives a countdown of 120 days from date of installation and ultimately expires and all connections thru mstsc stops. And then the server is reinstalled. So one major concern is whether purchase of these CALs will stop this inconvinience for ever?

Please reply asap. CAL requirement is very urgent but can not proceed unless this clarity comes from you.

Good Day Everyone,

There has got to be an easier way to rename a folder in your session collection rather than unpublishing all the applications and removing the folder and re-publishing the applications to the newly named folder.

Anyone know how to change a published folder name in a session collection for rdweb?

Hello, dear colleagues!

I have problem with printing on RDS (Windows Server 2012 R2). We are executing printer drivers in isolated processes. But sometimes PrintIsolationHost.exe faults 200 times a hour and causes Print Spooler to fail.

Examples of errors:

Faulting application name: PrintIsolationHost.exe, version: 6.3.9600.16384, time stamp: 0x5215f03c
Faulting module name: ntdll.dll, version: 6.3.9600.17114, time stamp: 0x53649e73
Exception code: 0xc0000374
Fault offset: 0x00000000000f87a8
Faulting process id: 0x1347c
Faulting application start time: 0x01d0187efb514f3b
Faulting application path: C:\Windows\system32\PrintIsolationHost.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: 423cfe70-8472-11e4-95a3-005056a224fb
Faulting package full name:
Faulting package-relative application ID:

Faulting application name: splwow64.exe, version: 6.3.9600.16384, time stamp: 0x5215f01d
Faulting module name: ntdll.dll, version: 6.3.9600.17114, time stamp: 0x53649e73
Exception code: 0xc0000374
Fault offset: 0x00000000000f87a8
Faulting process id: 0xae7c
Faulting application start time: 0x01d01846b8f40037
Faulting application path: C:\Windows\splwow64.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: 2d5ef196-8472-11e4-95a3-005056a224fb
Faulting package full name:
Faulting package-relative application ID:

Faulting application name: spoolsv.exe, version: 6.3.9600.16384, time stamp: 0x5215d570
Faulting module name: ntdll.dll, version: 6.3.9600.17114, time stamp: 0x53649e73
Exception code: 0xc0000005
Fault offset: 0x0000000000030489
Faulting process id: 0x143b0
Faulting application start time: 0x01d0187a74d7b105
Faulting application path: C:\Windows\System32\spoolsv.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: ddb33928-8472-11e4-95a3-005056a224fb
Faulting package full name:
Faulting package-relative application ID:

Faulting application name: spoolsv.exe, version: 6.3.9600.16384, time stamp: 0x5215d570
Faulting module name: KERNELBASE.dll, version: 6.3.9600.17055, time stamp: 0x532954fb
Exception code: 0xc0000002
Fault offset: 0x0000000000005bf8
Faulting process id: 0x142b8
Faulting application start time: 0x01d0187fab656d9c
Faulting application path: C:\Windows\System32\spoolsv.exe
Faulting module path: C:\Windows\system32\KERNELBASE.dll
Report Id: f10aa42a-8472-11e4-95a3-005056a224fb
Faulting package full name:
Faulting package-relative application ID: 

How can I explore it? 

Thanks.

We have a client with a set of servers running Remote Desktop Licensing Manager (offhand I don't recall if this is a 2008 or 2012 environment but I assume process should be similar either way)

We provide the license to our client through our SPLA, and the type is "RDP Per User CAL". We have a Service Provider License Agreement with Microsoft and an "agreement number" that we enter when setting up the Remote Desktop License Server, using the  "Install Licenses Wizard" 

A certain quantity were initially installed, they now want to cut back on the number of per-user CALs.

Microsoft's online docs seem to be really lacking here, I found no info on reducing the number of installed CAL licenses. I think I vaguely recall once finding a doc that indicated that you have to completely tear down your Remote Desktop License Server and set it up from scratch to enter a different amount of User CAL's?  Can this be right it seems utterly ridiculous.  


Is there a way to reduce the number of CAL's?  (and how, as have never seen anything in the GUI for this).

Or do we really need to remove the Remote Desktop Licensing server and reconfigure it like brand new just to set a different number of CAL licenses? (and if so, what happens to existing user access in the meantime. There's be a delay from when the admin of these servers uninstalls or removes the licensing server to when we log in to enter our agreement number and new # of Cal's, as we don't give our customers our agreement number.

Hi,

I want to be sure about entries before starting HA configuration from the first Broker machine.

As a reference I use the instructions :

• On the next screen, you will need to enter information for the SQL server, database, database location and the DNS name for High Availability for the RD Connection broker farm to be accessible on. The information entered is as follows:

  Database Connection String: (In this example the database name will be RDFarm)
  

  DRIVER=SQL Server Native Client 11.0;SERVER=DC01;Trusted_Connection=Yes;APP=Remote Desktop Services Connection Broker;Database=RDFarm

  Folder to store database files:(This is from a default installation of SQL for demo purposes. Please check with your SQL admin on the correct location.)

  C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\DATA

  DNS Round Robin Name: Enter the DNS Round Robin name the RD Brokers will be accessed one. (This should be placed into DNS prior to proceeding)

  QUESTIONS:

  SQL 2012 is installed on dedicated Server 2012 VM. Native client 11 is installed on each broker from the SQL installation disk.

  SQL server is installed using Default Instance.

  1. in database connection string I have to change only the server name from the example's one (SERVER=DC01) to real SQL server name: 00vrds-sql

  2. for Folder to Store Database Files... In the example it is local drive.

  I accessed the DATA folder on my dedicated SQL server using UNC from the broker's machine and it is accessible when logged in with domain admin account. However Domain Admin is not SQL admin account. Just in case that it will not work I added SQL admin account to the local Admin group of Broker from which I want to transfer DB.

  The server Manager for SQL admin profile is configured and properly shows RDS deployment. Probably it will make sense to transfer SQL DB being logged in as SQL admin.

  Please correct if required.

  Thanks.

--- When you hit a wrong note its the next note that makes it good or bad. --- Miles Davis

I'm racking my brain, I've done this before but I'm doing this in another lab environment . Non-Domain computers (Outside) trying to RDP in via the Gateway (Domain-Internal is working).  Certs aren't an issue as they're installed, I've tried it multiple ways, but for now I'm using the self signed generated via the RD Gateway manager.  I can go to https://rdgatewayurl/rpc and authenticate and get a blank page (external and internal).

New Domain, 2k8R2 Functional Level, no real GP customization at all, except not requiring NLA and enabling RDP on the internal "servers" in a specific OU.  My Account has Admin privileges on all the servers in question.

Another stupid question: This should also work with just the RD Gateway role installed, right?  I've tried it both ways with no luck.

RD Gateway is logging Event 4625 in the Security Log.  I feel like this should be obvious but my brain is fried.

An account failed to log on.

Subject:
	Security ID:		NULL SID
	Account Name:		-
	Account Domain:		-
	Logon ID:		0x0

Logon Type:			3

Account For Which Logon Failed:
	Security ID:		NULL SID
	Account Name:		myadminaccount@somedomain.com
	Account Domain:

Failure Information:
	Failure Reason:		An Error occured during Logon.
	Status:			0xC000035B
	Sub Status:		0x0

Process Information:
	Caller Process ID:	0x0
	Caller Process Name:	-

Network Information:
	Workstation Name:	EXTCOMP
	Source Network Address:	-
	Source Port:		-

Detailed Authentication Information:
	Logon Process:
	Authentication Package:	NTLM
	Transited Services:	-
	Package Name (NTLM only):	-
	Key Length:		0

This event is generated when a logon request fails. It is generated on the computer where access was attempted.

The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.

The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).

The Process Information fields indicate which account and process on the system requested the logon.

The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.

The authentication information fields provide detailed information about this specific logon request.
	- Transited services indicate which intermediate services have participated in this logon request.
	- Package name indicates which sub-protocol was used among the NTLM protocols.
	- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.

Hi All,

I have a very simple winforms app that I am using to try and track down what is happening with keyboard events when using RemoteApp.

Basically I have a form and a textbox that track the KeyDown, KeyPress and KeyUp events.

As soon as I start my app via RemoteApp I receive multiple KeyUp events without even pressing a key.

Does anyone know why RemoteApp would be sending these random KeyUp events.

The code of my simple test app is as follows:

Public Class Form1

  Dim lst As New List(Of String)

  Private Sub AddtoList(str As String)
    lst.Add(str)
  End Sub

  Private Sub TextBox1_KeyDown(sender As Object, e As System.Windows.Forms.KeyEventArgs) Handles TextBox1.KeyDown
    AddtoList("txt KeyDown" & vbTab & "KeyCode is " & e.KeyCode)
  End Sub

  Private Sub TextBox1_KeyPress(sender As Object, e As System.Windows.Forms.KeyPressEventArgs) Handles TextBox1.KeyPress
    AddtoList("txt KeyPress" & vbTab & "KeyChar is " & e.KeyChar)
  End Sub

  Private Sub TextBox1_KeyUp(sender As Object, e As System.Windows.Forms.KeyEventArgs) Handles TextBox1.KeyUp
    AddtoList("txt KeyUp" & vbTab & "KeyCode is " & e.KeyCode)
  End Sub

  Private Sub Form1_FormClosing(sender As Object, e As System.Windows.Forms.FormClosingEventArgs) Handles Me.FormClosing
    AddtoList("Form Closing")
    IO.File.AppendAllLines(Application.StartupPath & "\SimpleKeyUp_v2.txt", lst)
  End Sub

  Private Sub Form1_KeyDown(sender As Object, e As System.Windows.Forms.KeyEventArgs) Handles Me.KeyDown
    AddtoList("Form KeyDown" & vbTab & "KeyCode is " & e.KeyCode)
  End Sub

  Private Sub Form1_KeyPress(sender As Object, e As System.Windows.Forms.KeyPressEventArgs) Handles Me.KeyPress
    AddtoList("Form KeyPress" & vbTab & "KeyChar is " & e.KeyChar)
  End Sub

  Private Sub Form1_KeyUp(sender As Object, e As System.Windows.Forms.KeyEventArgs) Handles Me.KeyUp
    AddtoList("Form KeyUp" & vbTab & "KeyCode is " & e.KeyCode)
  End Sub

  Private Sub Form1_Load(sender As Object, e As System.EventArgs) Handles Me.Load
    AddtoList("Form Load")
  End Sub
End Class

Simply opening and closing the app via RemoteApp gives the following results:

Form Load
Form KeyUp KeyCode is 9
txt KeyUp KeyCode is 9
Form KeyUp KeyCode is 16
txt KeyUp KeyCode is 16
Form KeyUp KeyCode is 16
txt KeyUp KeyCode is 16
Form KeyUp KeyCode is 17
txt KeyUp KeyCode is 17
Form KeyUp KeyCode is 17
txt KeyUp KeyCode is 17
Form KeyUp KeyCode is 9
txt KeyUp KeyCode is 9
Form KeyUp KeyCode is 18
txt KeyUp KeyCode is 18
Form KeyUp KeyCode is 9
txt KeyUp KeyCode is 9
Form KeyUp KeyCode is 18
txt KeyUp KeyCode is 18
Form KeyUp KeyCode is 9
txt KeyUp KeyCode is 9
Form Closing

Cheers and Thanks in Advance!

Dwayne

We are implementing a new Windows 2012 R2 RDS server.  We allow full desktop sessions from outside the network and we're also running a single RemoteApp for local users.  The RemoteApp isn't playing well with redirected printers so I would like to disable them for the RemoteApp but not the full desktop session.  Most all of the users use both the RemoteApp while in the office and the full desktop session when they're outside or I would disable it per user.

Thanks for any and all suggestions.

Hi guys,

On a random base (daily, weekly) we're experiencing major log-in problems on our Windows Server 2012 R2 Remote Desktop Services farm. The VM's are hosted on Hyper-V 2008 hosts and we're not using Citrix techniques etc.

Users are reporting that they cannot log-in, the log-in sessions hangs with a blank screen when loading their user profile (e.g. Please Wait For The User Profile Service).

In the System event log of the server on which the user is logging on the following errors are shown:

Source:        Service Control Manager 
Date:          23-12-2014 7:28:01
Event ID:      7011 
Task Category: None 
Level:         Error
Keywords:      Classic
User:          N/A 
Description: 

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UmRdpService service.

…and after 30 (or sometimes 60) seconds, the same error only another service (in random order):

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UmRdpService service.

…and after exactly 30 seconds, the same error only another service:

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UxmSms service.

etcetera, with the following errors:

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Netman service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the AudioEndPointBuilder service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WPDBusEnum service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the NlaSvc service.

The Portable Device Enumerator Service service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the TrkWks service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UmRdpService service.

These errors are logged continuously.

An administrator cannot solve this since he isn't able to login in as well (console or remotely), only a hard reset of the VM is possible to use the affected server again.

I took different steps to solve this problem without any success, like:

- Installing the latest Windows updates
- Removed unnecessary printer drivers, print monitors and print processors (no local printers/drivers are installed, only Remote Desktop Easy Printer driver is used)
- Searched different forum posts, but found only hotfixes for Windows Server 2008 R2.

Can someone please help me with this annoying problem?

Many thanks!!

EDIT:
Of course is increasing the time-out not really an option here... http://social.technet.microsoft.com/wiki/contents/articles/13765.event-id-7011-service-timeout.aspx