Hello

We're trying to set up a server to work at through multiple terminals (linux clients primarily). And it is working perfectly but at some point local printers and folders just stop redirecting (no \\tsclient and no printers in Printers and Faxes). After a restart redirecting does work.

Couldn't find anything remotely useful in the logs. There are events if a redirect was successful but if not - completely nothing. As if I didn't check appropriate checkboxes.

The problem persists on different OSs and versions. Been trying Linux, Win XP, Win 7 clients. All exactly the same. So pretty sure it's a server issue.

The License Server is not configured yet. Don't think it's really relevant but maybe worth mentioning.

Currently I am working on a data center intergration project where i am getting connected to each data center through a Jumphost, which has TCP 3389 openend to my Citrix desktop. The Jumphots are part of differnt domains respective of each data center. Now let me describe the problem I am facing here . When I use MSTC client from citirx desktop and try to connect to the jumphost with domain\username and correct password it takes some time in Securing connection screen and then it gives "YOUR CREDENTIALS DID NOT WORK" in the same scenario when I use a differnt RDP client known as WEBRDP( java applet ) it works fine with the same credentials. I could find successfull logon event when i use WEBRDP and failure event when use MSTC client.

Failure Event when use MSTSC ( Using correct password and user name )

--------------------------------------------------------------------------------------------------------

Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          8/13/2012 3:49:22 PM
Event ID:      4625
Task Category: Logon
Level:         Information
Keywords:      Audit Failure
User:          N/A
Computer:      rdp001.ams2.sf.priv
Description:
An account failed to log on.
Subject:
 Security ID:  NULL SID
 Account Name:  -
 Account Domain:  -
 Logon ID:  0x0
Logon Type:   3
Account For Which Logon Failed:
 Security ID:  NULL SID
 Account Name:  c5177662
 Account Domain:  SFDC
Failure Information:
 Failure Reason:  Unknown user name or bad password.
 Status:   0xc000006d
 Sub Status:  0xc000006a
Process Information:
 Caller Process ID: 0x0
 Caller Process Name: -
Network Information:
 Workstation Name: DEWDFM4331
 Source Network Address: -
 Source Port:  -
Detailed Authentication Information:
 Logon Process:  NtLmSsp
 Authentication Package: NTLM
 Transited Services: -
 Package Name (NTLM only): -
 Key Length:  0
This event is generated when a logon request fails. It is generated on the computer where access was attempted.
The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.
The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).
The Process Information fields indicate which account and process on the system requested the logon.
The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.
The authentication information fields provide detailed information about this specific logon request.
 - Transited services indicate which intermediate services have participated in this logon request.
 - Package name indicates which sub-protocol was used among the NTLM protocols.
 - Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />
    <EventID>4625</EventID>
    <Version>0</Version>
    <Level>0</Level>
    <Task>12544</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8010000000000000</Keywords>
    <TimeCreated SystemTime="2012-08-13T19:49:22.270771200Z" />
    <EventRecordID>19414</EventRecordID>
    <Correlation />
    <Execution ProcessID="484" ThreadID="1612" />
    <Channel>Security</Channel>
    <Computer>rdp001.ams2.sf.priv</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="SubjectUserSid">S-1-0-0</Data>
    <Data Name="SubjectUserName">-</Data>
    <Data Name="SubjectDomainName">-</Data>
    <Data Name="SubjectLogonId">0x0</Data>
    <Data Name="TargetUserSid">S-1-0-0</Data>
    <Data Name="TargetUserName">c5177662</Data>
    <Data Name="TargetDomainName">SFDC</Data>
    <Data Name="Status">0xc000006d</Data>
    <Data Name="FailureReason">%%2313</Data>
    <Data Name="SubStatus">0xc000006a</Data>
    <Data Name="LogonType">3</Data>
    <Data Name="LogonProcessName">NtLmSsp </Data>
    <Data Name="AuthenticationPackageName">NTLM</Data>
    <Data Name="WorkstationName">DEWDFM4331</Data>
    <Data Name="TransmittedServices">-</Data>
    <Data Name="LmPackageName">-</Data>
    <Data Name="KeyLength">0</Data>
    <Data Name="ProcessId">0x0</Data>
    <Data Name="ProcessName">-</Data>
    <Data Name="IpAddress">-</Data>
    <Data Name="IpPort">-</Data>
  </EventData>
</Event>

Success Event when using WEBRDP tool

----------------------------------------------------------

Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          8/13/2012 3:48:11 PM
Event ID:      4648
Task Category: Logon
Level:         Information
Keywords:      Audit Success
User:          N/A
Computer:      rdp001.ams2.sf.priv
Description:
A logon was attempted using explicit credentials.
Subject:
 Security ID:  SYSTEM
 Account Name:  RDP001$
 Account Domain:  AMS2
 Logon ID:  0x3e7
 Logon GUID:  {00000000-0000-0000-0000-000000000000}
Account Whose Credentials Were Used:
 Account Name:  C5177662
 Account Domain:  SFDC
 Logon GUID:  {00000000-0000-0000-0000-000000000000}
Target Server:
 Target Server Name: localhost
 Additional Information: localhost
Process Information:
 Process ID:  0x4a40
 Process Name:  C:\Windows\System32\winlogon.exe
Network Information:
 Network Address: 10.2.242.18
 Port:   57059
This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials.  This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />
    <EventID>4648</EventID>
    <Version>0</Version>
    <Level>0</Level>
    <Task>12544</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8020000000000000</Keywords>
    <TimeCreated SystemTime="2012-08-13T19:48:11.738766000Z" />
    <EventRecordID>19402</EventRecordID>
    <Correlation />
    <Execution ProcessID="484" ThreadID="1612" />
    <Channel>Security</Channel>
    <Computer>rdp001.ams2.sf.priv</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="SubjectUserSid">S-1-5-18</Data>
    <Data Name="SubjectUserName">RDP001$</Data>
    <Data Name="SubjectDomainName">AMS2</Data>
    <Data Name="SubjectLogonId">0x3e7</Data>
    <Data Name="LogonGuid">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="TargetUserName">C5177662</Data>
    <Data Name="TargetDomainName">SFDC</Data>
    <Data Name="TargetLogonGuid">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="TargetServerName">localhost</Data>
    <Data Name="TargetInfo">localhost</Data>
    <Data Name="ProcessId">0x4a40</Data>
    <Data Name="ProcessName">C:\Windows\System32\winlogon.exe</Data>
    <Data Name="IpAddress">10.2.242.18</Data>
    <Data Name="IpPort">57059</Data>
  </EventData>
</Event>

----------------------------------------------

The only field which is changed here is Security ID which is NULL SID in failure event and it is system in the successfull event . The IP address of the jumphost is actually NATed in network, When we use WBRDP TCP3389 connection is establishing properly. In one of the data center i configured a stand alone Win 2k8 R2 and it is able to connect with MSTSC client. When I tried a Local user in the Jumphost which is part of a domain is giving same credential error. Could any one please help ?

Lee

I worked through a problem this morning where I could not add a virtual machine to a pool. The virtual machine did not appear as a member of any virtual desktop pool, nor did it appear in the list of available virtual machines to add a pool. I was eventually able to have it appear in the list.

steps to reproduce:

1. configure environment with at least 2 virtual host servers in a failover cluster configuration, 1 server acting as a remote desktop services connection broker, and one virtual machine.

2. Create a virtual desktop pool on the connection broker server's remote desktop services connection manager management tool.

3. Add virtual machine to this pool. This machine should now show up in the list of machines added to the pool.

4. Migrate virtual machine to another virtual host server

Once you have completed step 4, the virtual machine will no longer show up as a member of its pool. You will be unable to add it, as it will not show up on the list of available virtual machines either. Once the virtual machine has been migrated back to its original host the machine will reappear in the list.

Ladies, Gents,

Been following the High Availability guides on Technet for RDP and have had great success. Also following the F5 deployment guide (http://www.f5.com/pdf/deployment-guides/f5-microsoft-remote-desktop-services-dg.pdf).  Again with success.  However I am running into one issue.  I cannot add my F5 VIP "rdpapps.domain.com" as a RemoteApp source within RDP Web access Configuration.  error: RD Web access was not able to access host (This is an Https connection correct, not 3389 ?) . The message also states if using a farm to specify the DNS name of the farm.  This is the VIP on my F5 https://rdpapps.domain.com.  Conceptually I am missing something simple here.

Https://rdpapps.domain.com works. I can login and select the Remote Desktop Tab and RDP to another server, however no Applications are listed. I have one application created and "publish via web access" is enabled.

setup....

Broker Cluster

brk.domain.com (Broker Failover Cluster VIP)

brk01.domain.com (Role RDP Connection Broker)

brk02.domain.com (Role RDP Connection Broker)

 -RemoteApp Sources (rdpapps.domain.com)  No errors when adding, however Event viewer states "Error in WMI interface to rdpapps.domain.com"

  -rdpapps.domain.com is a vip, not a host.  I am sure this is a clue, but now sure how to resolve.

Sessionhost Farm

sh-farm.domain.com (VIP on f5 TCP 3389)

sh01.domain.com (Role RDP Session host)  Member of BRK.domain.com

sh02.domain.com (Role RDP Session host)  Member of BRK.domain.com

RemoteApp and WebAccess

rdpapps.domain.com (VIP on F5 TCP 443. (SSL Terminated on F5, TCP 80 to RDP servers)

rdapp01.domain.com (Role RDP Session host, RDP Web Access)   Member of BRK.domain.com

rdapp02.domain.com (Role RDP Session host, RDP Web Access)  Member of BRK.domain.com

I'm in process to create new Terminal Server on Windows 2008 R2.

I just Terminal server role to the server. I have all TS application under Administrative Tools\Remote Desktop Services except the RemoteApp Manager.

The remoteprograms.msc file is missing from System 32 and System32\en-US folders

I found this file under winsxs\amd64_microsoft- windows......... folder, but then I run it I got MMC could not create snap-in

Please advise how can I add or install this.

Thanks

Hi,

I created the User folder on the root of E:\ drive and I enabled the GPO setting to create user profiles there instead of C:\Users. the problem is that it creates the folder on the E:\Users\jdoe.MY-DOMAIN but it is empty folder. It also keeps creating the users profiles on the C:\Users drive. Am I doing something wrong?

----------------------------------------------------------------------------------------

Computer Configuration/Policies/Administrative Templates/Windows Components/Remote Desktop Services/Remote Desktop Session Host/Profiles

Set Remote Desktop Services User Home Directory Enabled
Location: On the Local machine
Home Dir Root Path: E:\Users
If home path is on the network, specify drive letter for the mapped drive. 
Drive Letter Z: 
Loopback processing enabled for Merge.

-------------------------------------------------------------------------------------

Windows Server 2008 R2 RDS role enabled.

Hello,

I have installed a brand new 2008 R2 SP1 enterprise 64bit edition and did all the windows update. My AD is managed by 2003 servers.

This server is setup to be a terminal server with RD Web Access, Gateway, Licensing and Session Host. Also, it has Print Server and LDP Service installed. I have also Remote Network Policy setup. I left all the default options.

I did generate my own certificate from that server and if I install it on my client computer under the trusted section, it does say anything about having a certificate issue.

From my network, I can RDP, RD Web Access and RemoteApp to it without any issue at all.

From outside my network without using a VPN, I can see and login to the RD Web Access page and see the RemoteApp icons. When I click on the RemoteApp (any of them) I get prompt with a logon window and I under the same credential I used to enter RD Web Access. After a while it will prompt again the same logon window, I try again and again after a while it will ask for credential.

I have the exact same behavior from a Windows XP Pro (setup as a workgroup only) machine and a Windows 7 Home Premium.

I have looked all over the Internet and it's similar to http://social.technet.microsoft.com/Forums/en/winserverTS/thread/1da9cd90-80f4-4087-9edf-2d9cfa1d312f but I don't have exchange setup on it, so the solution is not applicable... it's not the exact same problem but it's the same behavior.

I also modified the js file for RD Web Access, but that didn't help.

When I look at the events, I can see under security that the user is being logged on when clicking on teh REmoteApp and providing credential, but gets logged off right after that:

An account was logged off.

Subject:
	Security ID:		MYDOMAIN\test
	Account Name:		test
	Account Domain:		MYDOMAIN
	Logon ID:		0x12964b5

Logon Type:			3

This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer.

I also got that warning after I installed the roles:

Installation succeeded with warnings. 

Roles:

Network Policy and Access Services
   The following role services were installed:
   Network Policy Server
   Informational: You can use a wizard in the NPS console to configure Network Access Protection (NAP). To open the NPS console after installation, go to Server Manager or click Start, Administrative Tools, Network Policy Server.

Remote Desktop Services
   Warning: This license server is not registered as a service connection point (SCP) in Active Directory Domain Services (AD DS). The license server will not appear in the list of known license servers in the Remote Desktop Session Host Configuration tool. To register the license server as an SCP in AD DS, use Review Configuration in the Remote Desktop Licensing Manager tool.
   Warning: RD Web Access requires additional configuration. On the Configuration page of the RD Web Access Web site, you need to specify the source that will provide the RemoteApp programs and desktops that will be displayed to users. For more information, see <a href="ts_remoteprograms.chm::/html/e1e047ce-d080-4568-b987-378fef46bea2.htm">Configuring the RD Web Access Server</a>.  
   The following role services were installed:
   Remote Desktop Session Host
   Remote Desktop Licensing
   Remote Desktop Gateway
   Remote Desktop Web Access
   Warning: Ensure that your RD Session Host servers are correctly configured to use this license server. For more information, see <a href="ts_license.chm::/html/7cd57119-808e-4777-ab21-1f75a718c1ad.htm">Configure License Settings on an RD Session Host Server.</a>
   Informational: <a href="ts_admin.chm::/html/21ea97a1-a75d-4ff6-87b1-faab342050a4.htm">Enable Windows 7 features on this RD Session Host server by using Desktop Experience.</a>
   Warning: Use the Remote Desktop Session Host Configuration tool to specify a Remote Desktop license server for this RD Session Host server to use. For more information, see <a href="tscc.chm::/html/fed1c160-dde3-49d5-a54f-a4e7a39f1695.htm">Configure License Settings for an RD Session Host Server</a>.

Web Server (IIS)
   The following role services were installed:
   Web Server
      Common HTTP Features
         Static Content
         Default Document
         Directory Browsing
         HTTP Errors
         HTTP Redirection
      Application Development
         ASP.NET
         .NET Extensibility
         ISAPI Extensions
         ISAPI Filters
      Health and Diagnostics
         HTTP Logging
         Logging Tools
         Request Monitor
         Tracing
      Security
         Basic Authentication
         Windows Authentication
         Client Certificate Mapping Authentication
         Request Filtering
      Performance
         Static Content Compression
   Management Tools
      IIS Management Console
      IIS 6 Management Compatibility
         IIS 6 Metabase Compatibility

Features:

Remote Server Administration Tools
   The following features were installed:
   Role Administration Tools
      Web Server (IIS) Tools

RPC over HTTP Proxy

My license server has been setup after the installation of the roles, it's working and seen my the Session Host. Also I setup RemoteApp and I can see them when I login to RD Web Acccess.

Can you help me figure out how to fix my login from outside my network?

Regards,

Yael

Hi folks!

I´m setting up a new small RDS environment for a customer.

We are not able to run RDS2012 as Session Hosts cus´ the LOB are not supporting it, yet.

I want to use 1 RDS 2012 WebAccess at the gate, and use 2 RDS 2008R2 Session Hosts. Where do i put the Connection Broker?

When the LOB is supported in W2012, we whan to switch over to RDS 2012 Session hosts.

It this scenario possible?

I also wonder if someone have a link to dokumentation about 2012RDS, blogs or other tech-info.

Thanks!

MrSWE

I have written my own Credential Provider and Credential Provider Filter to be used on a Windows Server 2008 R2 server.  My Credential Provider firstly authenticate the user against an AAA directory server, and if authorised creates or updates the user’s account on the Windows server for new and existing users respectively.

A problem occurs when using Remote Desktop for new users.  In version 6.1 of RDP, Windows uses by default Network Level Authentication (NLA) to firstly authenticate the user, however because for new users the user doesn’t exist on the Windows server (until my CP creates it) it fails before establishing a remote desktop connection.

I am working in a relatively secure environment so I don’t foresee any heighten security risks in disabling NLA.  Alternatively, if I leave NLA enabled, is there any support by Windows to wrap, customise, or replace the Windows CredSSP assuming it is this DLL which provided the NLA support on the server side?  Also, on the client side is there any way to off load the NLA authentication to another server – example to my AAA directory server?  I assume the latter option would mean installing software on each client that needs to connect to the Windows server which I would like to avoid if at all possible.

Ross

Ross Clemens

Ola, bom dia

Possuo um Windows server 2008 R2 x64 Enterprise, estou tendo problemas em relação a impressoras, o problema ocorre no perfil de todos os usuarios que acessam o seu remote desktop inclusive o administrador, ao clicar em Start > Devices And printers não são apresentadas nenhuma impressora, a janela fica processando e não traz resultado nenhum, mesmo que ja possua impressora instaladas, consigo instalar ele conclui o processo de instalação com sucesso mas mesmo assim não é apresentada na tela Devices and Printers, fiz um teste entrei com um perfil de um usuario que nunca acessou o seu Remote desktop, com este novo perfil criado quando clico em Devices And Printers ele me mostra algumas opções como se estivese funcionando normalmente, porem basta eu adicionar uma impressora qualquer que o problema ocorre, Device and Printers para de me apresentar as impressoras .

I have several users who do not have most applications installed locally.  The majority of their applications are remote apps. We have folder redirection in place to save the files on the file server in the same VMware stack. The terminal server is virtualized on a VMware 5.0 stack. The file server is a SBS 2011 and the Terminal server is 2008. When the users open remote apps or files there is a significant lag between the time they double click on the file to open and the time the file actually opens. Yet when they remotely RDP to the server the files open very fast. I discovered that file synchronization between the desktop and the Terminal Server was enabled. Any suggestions to improve performance would be appreciated.

Current config: ESXI, SBS 2011 with installed printers, TS 2008 R2 with network printers from SBS2011.

HP Universal Driver PCL 6 used (latest)

The printers in Terminal session sometimes disappears.

When they disconnect and log back on, they get there printers back.

The only error i could found for the printers is the following one, that i cant find back on the web:

Level: Error

Source: Printservice

ID: 365

Task Category: Initializing a print processor

General:

Windows could not load print processor hpcpp130 because EnumDatatypes failed. Error code 126. Module: 2\hpcpp130.dll. Please obtain and install a new version of the driver from the manufacturer (if available), or choose an alternate driver that works with this print device.

Details:

- System

  - Provider

   [ Name]  Microsoft-Windows-PrintService

   [ Guid]  {747EF6FD-E535-4D16-B510-42C90F6873A1}

   EventID 365

   Version 0

   Level 2

   Task 37

   Opcode 12

   Keywords 0x8000000000000900

  - TimeCreated

  [ SystemTime]  2012-10-17T03:31:52.255509000Z

   EventRecordID 1274

   Correlation

  - Execution

  [ ProcessID]  1228

   [ ThreadID]  13252

   Channel Microsoft-Windows-PrintService/Admin

   Computer HeijerTS.heijer.local

  - Security

  [ UserID]  S-1-5-18

- UserData

  - PrintProcEnumDataFailed

   Param1 hpcpp130

   Param2 126

   Param3 2\hpcpp130.dll

This error mostly occurs in the morning.

Anyone got a clue?

Hi,

I have 4 servers that i connect to using RDP and remote app. when the session is disconnected unexpectedly (Internet Outage) i have noticed that it takes about 1 minute to try to reconnect is there any way to make that delay shorter?

Hi

Please anyone of you get solution for this below error

While doing one my project i was unable to get solution for AXMSTSCComlib Error.

Regards

Anil Pomar

I have an issue with a new thin client with windows embedded installed where it does not auto logon to terminal service server (2008) after connecting using a rdp connection using a vb script. The rdp connection is set up as an application. It work fine with thin clients with xp installed on them, rdp connection is established as an application to the TS server and login fine with different credentials than the rdp application but when the script runs on the windows embedded TC it opens an rdp connection and connects to the terminal service server fine but fails to login to the TS server once the rdp connection has been established, the user credentials is just left blank.

The issue I have that the thin client do not have any keyboards as they for info only displaying production figures for that particular production job. We have recently had to change our thin clients as the model we use is no longer available and the new model is not xp compatible. It's not the script but seems to be an environmental issue and most likely a registry edit.

Good morning all,

I have just installed Windows Server 2012 Datacenter and started configuring Remote Desktop Services.

The idea is to have RDSWA + 2 session collections.

• 1 session collection for PROD environment
• 1 session collection for TEST environment

Both these session collections run the same applications, but with different configuration files (basically just a different version of the program and pointing to a different SQL Server)

I've created 2 Folders in the RDSWA (TEST and PROD), with the remote apps published here. The different applications have the same alias and name.

When I first start the application in the TEST folder, then the test Environment starts, if I open production with TEST opened, then he opens a second instance of TEST. Not of production. No session is opened on the server running production either.

The same goes for when I first start PROD.

Can anyone assist in this matter please?

Thank you.

Kind Regards,

Tom

Hi everybody,

After beginning the migration from XP to Windows 7 we noticed that the RDP initialization connection took about 30sec stuck on "Securing remote desktop".
I order to understand better the problem we analyzed the network traffic and discovered that the rdp client tried to contact an external "Akamai" server.
As the traffic is filtered the connection with this server seems to timeout and finally release the  "Securing remote desktop" step.
After some research we disabled the CredSSP setting in the Default.rdp : enablecredsspsupport:i:0, and everything works fine.

Anyway I have two questions :

1 - Why my RDP client is trying to reach an external server ?

2 - What's the security impact of disabling CredSSP ?

Thanks all,

Julien

Hi,

I am having some very annoying problems in my domain, it seems to be impossible for me to establish a remote desktop connection to any new servers or clients I add to it. I am able to RDP to my DC and also to one other application server which already exisited in another domain and was migrated but anything new just does not accept a connection. I have ensured I have the correct permissions and tried changing the ports they listen on but no joy.

 My domain is 2008 and the servers are all 2008 r2 also, my clients are all Win 7 ultimate desktops. I have looked at other threads and tried all they suggest but still can not get it to work. I am wondering if there is some thing in group poilicy at domain level which is blocking it from working??

Very odd and frustrating.

THanks

Andy

Thanks Andy