Hello,

I currently have a very interesting problem:

Some (not all) printers show up multiple times on every user session on the specific terminal server. This behavior show up on both of the 2 servers. Also the printer only shows up multiple times under the control panel, but not in the printer dialog.

The users are not part of either printer operators, Administrator or Power Users.

The servers are Windows Server 2012.

I cannot find a reason for this after some hours with my friend Google.

Does someone have any idea how to fix this?

Thanks in advance

Paul

I'm racking my brain, I've done this before but I'm doing this in another lab environment . Non-Domain computers (Outside) trying to RDP in via the Gateway (Domain-Internal is working).  Certs aren't an issue as they're installed, I've tried it multiple ways, but for now I'm using the self signed generated via the RD Gateway manager.  I can go to https://rdgatewayurl/rpc and authenticate and get a blank page (external and internal).

New Domain, 2k8R2 Functional Level, no real GP customization at all, except not requiring NLA and enabling RDP on the internal "servers" in a specific OU.  My Account has Admin privileges on all the servers in question.

Another stupid question: This should also work with just the RD Gateway role installed, right?  I've tried it both ways with no luck.

RD Gateway is logging Event 4625 in the Security Log.  I feel like this should be obvious but my brain is fried.

An account failed to log on.

Subject:
	Security ID:		NULL SID
	Account Name:		-
	Account Domain:		-
	Logon ID:		0x0

Logon Type:			3

Account For Which Logon Failed:
	Security ID:		NULL SID
	Account Name:		myadminaccount@somedomain.com
	Account Domain:

Failure Information:
	Failure Reason:		An Error occured during Logon.
	Status:			0xC000035B
	Sub Status:		0x0

Process Information:
	Caller Process ID:	0x0
	Caller Process Name:	-

Network Information:
	Workstation Name:	EXTCOMP
	Source Network Address:	-
	Source Port:		-

Detailed Authentication Information:
	Logon Process:
	Authentication Package:	NTLM
	Transited Services:	-
	Package Name (NTLM only):	-
	Key Length:		0

This event is generated when a logon request fails. It is generated on the computer where access was attempted.

The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.

The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).

The Process Information fields indicate which account and process on the system requested the logon.

The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.

The authentication information fields provide detailed information about this specific logon request.
	- Transited services indicate which intermediate services have participated in this logon request.
	- Package name indicates which sub-protocol was used among the NTLM protocols.
	- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.

I understand that by default only 2 pooled virtual desktops stay in the running state while saved virtual desktops are started up as needed.   I would like to change the number of running virtual desktops in my Pooled Collection so that 10 are ready for user login and don't have to be woken up.

How can I do this in RDS Windows 2012 R2?

Hi there,

I have setup a 2012R2 RDS farm. The setup is as follows:

1 RDGateway (2012R2)

1 RDWEB server (2012R2)

2 RD Session Hosts (2012R2)

1 RD Broker (2012R2)

Internal domain is mydomain.local. External domain is mydomain.com. There is a wildcard cert in use on the farm, gateway etc for *.mydomain.com.

Everything works fine internally and externally via RDWeb. The issue I'm having is when I try to use 'Connect to Remote PC' from RDWeb when connecting externally. I get the message ' Remote Desktop can't fins the computer xyz..'. This happens whether I use an IP address, NetBIOS name or FQDN. There is a fix indicated here: http://www.concurrency.com/infrastructure/remote-desktop-services/remote-desktop-cant-find-the-computer-through-rdweb-and-gateway/

However, using this fix requires me to enter my credentials twice every time I want to connect to an onsite PC from outsite. The first authentication prompt is for the gateway and the second for the PC itself.

I guess my questions are:

1) Is the fix mentioned in the article (manually entering the default TS gateway in IIS on the RDweb server) the only way to resolve the 'cannot find computer' error or is there another way to do this?

2) If the answer to 1(above) is yes, then is there any way to avoid double authentication prompts (I realise the second prompt for the local PC I am connecting to will always be there due to certificate issues and the fact that the local pc FQDN is mypc.mydomain.local).

Thanks,

HA

I have been struggling with trying to create a shadowed RDP session on windows 2012 R2

I have read many many web sites but still cant get it to work right.

I have added all the roles to the server. (I think now I have added too many of all the remote things, but anyway)

Now when I go to Manager I see IIS and Remote desktop on LHS.

I click on RD and then Collections.

Currently Im logged in via RD and I open a second session via RD using the same administrator name.

However I cannot see any Connections in the connections column on the RHS. Not one. I try the search mechanism under user and use domain\loginname  eg ibm\admin2

Why cant I see any connections ???

Is there more that I need to do?

Thanks

Hi guys,

On a random base (daily, weekly) we're experiencing major log-in problems on our Windows Server 2012 R2 Remote Desktop Services farm. The VM's are hosted on Hyper-V 2008 hosts and we're not using Citrix techniques etc.

Users are reporting that they cannot log-in, the log-in sessions hangs with a blank screen when loading their user profile (e.g. Please Wait For The User Profile Service).

In the System event log of the server on which the user is logging on the following errors are shown:

Source:        Service Control Manager 
Date:          23-12-2014 7:28:01
Event ID:      7011 
Task Category: None 
Level:         Error
Keywords:      Classic
User:          N/A 
Description: 

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UmRdpService service.

…and after 30 (or sometimes 60) seconds, the same error only another service (in random order):

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UmRdpService service.

…and after exactly 30 seconds, the same error only another service:

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UxmSms service.

etcetera, with the following errors:

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Netman service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the AudioEndPointBuilder service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WPDBusEnum service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the NlaSvc service.

The Portable Device Enumerator Service service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the TrkWks service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UmRdpService service.

These errors are logged continuously.

An administrator cannot solve this since he isn't able to login in as well (console or remotely), only a hard reset of the VM is possible to use the affected server again.

I took different steps to solve this problem without any success, like:

- Installing the latest Windows updates
- Removed unnecessary printer drivers, print monitors and print processors (no local printers/drivers are installed, only Remote Desktop Easy Printer driver is used)
- Searched different forum posts, but found only hotfixes for Windows Server 2008 R2.

Can someone please help me with this annoying problem?

Many thanks!!

EDIT:
Of course is increasing the time-out not really an option here... http://social.technet.microsoft.com/wiki/contents/articles/13765.event-id-7011-service-timeout.aspx

Hi,

Now i am not able to delete the following key (It say CAnnot delete GracePeriod: Eroor while deleting key.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\RCM\GracePeriod

Hi all,

I am trying to setup our RDS Web Access to authenticate via RSA SecureID using the RSA Web agent on the RDS Web Access-server. I do not have a ISA/TMG server and i will not be able to get this. I have been looking alot arround the net for a fix for this, but the only guides and questions out there is when people are using an ISA.

I got RDS Web Access and Gateway on the same server and a RDS farm behind. It works great without the RSA authentication.

I have installed the RSA Web Agent on the server and it intergrates perfect with IIS and on a testpage it has been tested and it works.

But when i enable the "RSA SecureID Web Access Authentication" on the Default Web Site, the /RDWeb just breaks down with Internal Server error 500. When enabling i get an error with "This web site has one or more applications which have custom application pool that is incompatible with the Web Agent" I'd figure that the pool that is incompatible is the RDWebAccess-pool.

The server error 500 gives me the following information (accessed from localhost):

Module SecurIDModule
Notification BeginRequest
Handler StaticFile
Error Code 0x00000000
Requested URL https://localhost:443/RDWeb
Physical Path C:\Windows\Web\RDWeb
Logon Method Not yet determined
Logon User Not yet determined

It happens even borefore i enable the RSA Authentication for the RDWeb application.

Has anyone got RDS Web Access to work directly with the RSA Web agent?

I hope you can help me out here - thanks.

/rGjorret

Hi,

I'm building Web Application Proxy with ADFS Preauth for RD Web and Gateway. Can anybody help with these 3 questions:

1. ADFS:
   What is the best way to configure Relying Party Trusts in ADFS for RD Web and Gateway?
   
   
2. RD Web:
   If I configure RD Web for windows integrated authentication, then I can logon to ADFS and successfully access the RD Web page, however no credentials are passed through to the client for connecting via RD Gateway.
   If I configure RD Web for forms based authentication then I have to logon twice however it appears to set a TSWAAuthHttpOnlyCookie cookie correctly and credentials are passed through to the client for connecting via RD gateway.
   How do I achieve SSO for both RD Web and RD Gateway?
   
   
3. RD Gateway:
   I can't get gateway to work through WAP. I am wondering if this might be because it is attempting to authenticate with NTLM instead of Kerberos? I get repeated auth popups with "the logon attempt failed". Nothing useful in Web Application Proxy log. In the headers below extracted from fiddler my WAP is 'rdsext.lab.local'.

About the only doco I've found on this is here: https://technet.microsoft.com/en-us/library/dn765486.aspx

Any assistance appreciated!
Simon.

RDG_OUT_DATA https://rdsext.lab.local/remoteDesktopGateway/ HTTP/1.1
Cache-Control: no-cache
Connection: Keep-Alive
Pragma: no-cache
Accept: */*
Cookie: TSWAAuthClientSideCookie=Name=lab%5Ctestuser&MachineType=public&WorkSpaceID=CB1.lab.local
User-Agent: MS-RDGateway/1.0
RDG-Connection-Id: {9DB5E643-DA7E-4D22-89FF-F6AB061CFBDE}
RDG-Correlation-Id: {6BB275E1-B8E1-44EE-B45C-ABE1BCA00000}
RDG-User-Id: dAB0AEAAcwBsAGEAYgA=
Host: rdsext.lab.local
Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGA4AlAAAADw==

Hi,

I want to store my RDS 2012 R2 User Profile Disks share on a high-performance NAS appliance, not on a Windows Server.

When I attempt to create the share either through the UI or PowerShell it tells me:

Could not create the template VHD. Error Message: The network location \\fs8600nas\RDS_VDI_Profiles is not available..

It works fine when I point to a Windows Server instead of the NAS, so I assume it is attempting to talk to management services on the Windows Server in order to generate the template VHD. Is there a way around this?

I have tried pre-populating the template VHD to no avail.

Does anyone know if it is possible to manually setup the share, or otherwise get it work on a NAS?

Thanks,
Simon.

We build turn-key solutions for customers, and for years, we have been doing this. What I am looking for is a script-based method of performing the following actions:

1. Install Remote Desktop Services Session Host
2. Configure some "standard" settings: IdleTimeOut, Disconnected session behavior, temporary folders, encryption levels and such

My understanding, with w2k12, is all of this must be done to a Session Collection.  I have a PowerShell script that performs the install of Remote Desktop Services - Session Host, Connection Broker, and Web Access (Add-WindowsFeature RDS-RD-Server, RDS-Connection-Broker, RDS-Web-Access) while NOT on a domain, and now I am stuck trying to configure it.

When testing with this server on my production domain, I can get the following command to run: ($strFQDN is populated in the script)

New-RDSessionDeployment -ConnectionBroker $strFQDN -WebAccessServer $strFQDN -SessionHost $strFQDN

Once off of the domain (which is a requirement for customer server builds, not allowed to be on my domain, or any until it is at the customer site) I cannot get this command to function as expected. I am presented with the following output:

New-RDSessionDeployment : Validation failed for the "RD Connection Broker" parameter.
<ServerName> Unable to connect to the server by using Windows PowerShell remoting. Verify that you can
connect to the server.
At C:\scripts\ConfigureRDS.ps1:23 char:1
+ New-RDSessionDeployment -ConnectionBroker $strFQDN -WebAccessServer $strFQDN -Se ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Write-Error], WriteErrorException
+ FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,New-RDSessionDeployment

The answer provided here (http://social.technet.microsoft.com/Forums/en-US/winserverTS/thread/cbffb2d4-ff9d-49ee-a9ce-a60db2262422) is simply a cop-out, as to why this was so poorly designed. Yes, more people are moving to the AD world. Why in the world could that be used a justification to just completely bend over your smaller customers? Or, customers that provide a value-add on your products? But, I digress...

Thoughts? How can I accomplish this VERY simple task WITHOUT putting this system on a Domain? (Well, very simple in Windows Server 2003/8/8R2)

HI,
recently I configured a server with Windows 2008 Server R2. On this server I installed Remote Desktop Services. I have a problem with printer redirection with MS Windows Clients (Windows 7 and Windows 8). I tried with different printers Samsung, Brother and Sharp. It's not a problem of configuration because all MAC OSX Client can print with their printers on the Remote Desktop Connection using printer redirection. I tried the same printer, a Brother DCP-7065DN using a MAC OSX Computer and a MS Windows Computer: with MAC OSX Computer printer redirection works, with MS Windows Computer doesn't.

I verified:

• Remote Desktop Session Host Configuration and in Client Settings the option Disable Windows Printer in not flagged
• in Local Group Policy Editor: Do not allow client printer redirection is not configured
• in Local Group Policy Editor: Use Remote Desktop Easy Printer driver first: i tried with all options but it doesn't work I verified
• in Computer Management in Device Manager that Remote Desktop Device Redirector Bus in working
• On the MS Windows Client in the Remote Desktop Connection Property Printer Redirection is active and I can see the printer redirected on the server

If I give a print command with notepad on the remote desktop session on the server, I can see that the Server spooler is managing the print job but the client spooler doesn't receive anything.

What could be the problem? Is there a way to enable logs on the server to understand the flow of the data between Server and Client?

Thanks

I was under the impression that with RDP protocol 8.1 on the local system, Windows 7 SP1 in this case if I connected to RDS running on server 2012 R2 that I would have support for USB device pass through.  Such that the software running on the 2012R2 server would see the device plugged in.

I have a fairly specialized use situation where that does not appears to be occurring.  In one of our science labs I am trying to replace 16 terminals that currently connect into a citrix deployment.  I want to put 16 thin clients in place running Windows 7 Thin PC with RDP 8.1.  I want to connect to the RDS implementation on campus and via a published remoteapp run some lab software that works with a USB lab interface.  If I run the lab software on the PC I will be using as a thin client I can capture data from the USB interface.  If i connect into the remoteapp instance of that lab software it does not see the lab interface that is connected to that system.

I have checked that the RDP connection checks the box for "other supported Plug and play devices and devices that I plug in later.  I can connect to simple things like USB drives that are connected but this is the first acutal USB device I have tried to interface with.

In testing I can connect my android phone to the local PC and see it as a drive resource in a remote app.  

Hello,

Using this equipment:

Client: Win 7 Enterprise + SP1 and mstsc.exe 6.3.9600 (RDP 8.1 supported)

Server: Server 2008 R2 Remote Web App

Network Connection: Juniper Junos VPN to corporate network

Application: .NET Windows Forms 4.0 - No hangs on normal Remote Desktop Connections

We can connect to the Remote Web App and the Application appears.  After about 4+ minutes using the application, it hangs (does not respond to any mouse clicks).   The process must be killed with Task Manager.  We can connect again and the Application works for about 4+ minutes.

Here is the Client side error:

Here is the debug exception message:

Unhandled exception at 0x000007FEB0F8BA0A (mstscax.dll) in mstsc.exe: 0xC0000005: Access violation reading location 0x0000000000000780.

Here is the Windows application event log entry:

Faulting application name: mstsc.exe, version: 6.3.9600.16415, time stamp: 0x524b5b3d
Faulting module name: mstscax.dll, version: 6.3.9600.17276, time stamp: 0x53e954b3
Exception code: 0xc0000005
Fault offset: 0x000000000043ba0a
Faulting process id: 0x26ec
Faulting application start time: 0x01d09a5846b87a91
Faulting application path: C:\Windows\system32\mstsc.exe
Faulting module path: C:\Windows\system32\mstscax.dll
Report Id: 98545daf-064c-11e5-ad58-00090ffe0001

Thanks

MisterT99

I have set up a test Server 2012 RDS collection (Single Server for now) and implemented User Profile disks.

I have two problems.

First: My generic test user can connect and does successfully use the user profile disk as expected. However, atlogoff, the system event log contains these errors:

The error (NTFS 137) is: The default transaction resource manager on volume C:\Users\ts3.test encountered a non-retryable error and could not start.  The data contains the error code.

The warning (NTFS 50) that concerns me is:

It appears that the user profile disk is being "disabled" or "disconnected" before the profile data is completely written at logoff. What can I do to troubleshoot this?

Second:

Update: A post from Mike Connor on the following page: -LINK- solved the problem described below. 

My administrative user always logs on now with a temporary profile. At the beginning, the UPD was working and mounting. That stopped working. In attempting to troubleshoot, I logged the admin user off and deleted the UPD disk file from the share. I remember it working again after generating a new UPD disk file in the share. Soon, it quit working again. I deleted the UPD disk file again from the share and ever since, it has never regenerated a new UPD andalways logs on with a temporary profile.

Hello

I'm having an odd problem with a new 2008R2 terminal server & printer redirection.

In a few words everything seems to be working as expected: the client gets the auto mapped printer and can print - no error reported. However the print job never gets redirected to the local printer.

The odd part is that no error is reported, neither to the user nor to the event log (both on client or server). The job simply vanishes in thin air..

This is the case with most applications except when printing from Outlook 2010 where the program return a "Printer is not ready" error... Strange that Word, Excel or notepad would print but not Outlook...

Also strange is that the print redirection is working with Mac RDP client but not Windows (XP, vista or Win7). Ie same user, same client printer, works with Mac RPD...

Worth mentioning is that the TS server is virtulized and I have read some remarks about VMWare tools possibly interfering.Don't know if it's relevant, have not found anything specific to our setup.

Any help / pointer most welcome.

Where is the Remote Desktop Session Host Configuration tool in Server 2012 ?

This is an MMC snap-in found on earlier servers, even if RDS is not installed.  In Server 2012, even if the Remote Desktop Session Host role is installed, this tool is still not available.

I'm looking for the Server 2012 tool to adjust security settings like TLS authentication, High encryption level, choice of TLS certificate, NLA, etc.

Thanks!