Hi,

What's the pratice to set default programs for users across a *farm* ?

It turns out that those settings are part of %UserProfile%\AppData\Local\Microsoft\Windows\UsrClass.dat which is, as you guessed, local ;-) and not part of the roaming profile nor redirected folders.

I don't want users having to set their, say, default browser or email software or whatever on every single server of the farm they will be redirected to by the broker.

So, I just can't set, say Firefox, as default browser through GPP.

So I'm maybe misleaded and there's another way ?

(note that a turnarround for Firefox is to run "start firefox.exe -silent -setDefaultBrowser" at a login script) but this is then not a "preference" but an enforcement. And there's no equivalent for Thunderbird AFAIK).

Hi,

I have a Demo VPC sitting on our internal domain server(server1.contoso.com). some users from different domain (customer.com) need to access the VPC and print document to their local printer. 

I tried to share the local computer, add printer via the TS port, install printer driver, check Share Printer option but still no luck.

Does anyone know how to achieve this? Thanks in advance!

We plan to use Remote Destkop Services Hosts with smart card authentication. Those hosts will be on hyper-v cluster which managed by SCVMM 2012.

When we enabled option Interactive Logon: Require Smart Card Authentication all works fine and users are authenticated only with token inserted into their notebooks. But when administrator connects to RDSH server through VMM console or Hyper-V console there is an error which require smart card.

Is it possible to allow some users logon to RDS without smart card or redirect USB token with certificate to VMM or Hyper-V virtual machine viewer?

Environent

1) One Remote Desktop Server hosting applications

2) One RDS server performing gateway services

Both servers are Windows 2008 R2 SP1.

ISSUE

Event Log Error: 5605

Source: Microsoft-Windows-WMI

Error:

The root\cimv2\TerminalServices namespace is marked with the RequiresEncryption flag. Access to this namespace might be denied if the script or application does not have the appropriate authentication level. Change the authentication level to Pkt_Privacy and run the script or application again.

Attempted Resolutions:

1) checked that Web Access Computers exists in wmimgmt.msc, properties, security, cimv2, terminal services with default permissions of Execute methods-enable accounts/remote enable options are checked.  THEY ARE

2) The seesion broker computer (gateway server) is also listed.

Done web searches but not finding answer

Any ideas?

I have purchased a * cert from Digicert and I am trying to apply it under RDS Session Host Configuration-->Double Click on Connection-->General Tab-->Certificate Select button.

Basically, when I click on this button it asks me to select a certificate but there are no certs listed. The weird thing is it doesn't say that no certificates are available. It almost seems like the software believes there are certs listed.

I have imported the cert into Computer-->Personal and Computer-->Remote Desktop certificate stores. I also obtained an internal domain cert and that one does not show up either.

Environment: Windows 2008 R2 64bit.

Your help is appreciated.



I have deployed 2008 R2 session based RDS in the following configuration:

Server1: Connection Broker / Licence / RDWeb

Server2: Session Host 1

Server3: Session Host 2

I have published a set of applications to both Server1 and Server2 session hosts and configured as part of connection broker farm called ‘RDS’ and have DNS records of rds.domain.local for both session hosts.

Everything works fine (load balancing, reconnect to disconnected sessions etc.) when users access full desktop.

I now want to use RDWeb and have installed the role to the connection broker server and configured RDWeb to use the fqdn of the connection broker as the ‘source’ on the RDWeb configuration page and get no error when applying the setting.

When logging into RDWeb as either a standard domain user or a Domain admin the RemoteApp Programs page is blank.  (All apps on both session hosts are assigned to ‘All Authenticated domain users’ and RDWeb is set ‘Yes’)

I have verified that RDWeb Server (Sever1) is a member of the ‘TS Web Access Computers’ group on the two Session Hosts (Server2 and Server3).

I’ve also tried using the Netbios name for the connection broker and localhost (as connection broker and RDweb are the same server) but the RemoteApp Programs is still blank. Additionally I have also published the RemoteApps to .rdp files and these work without issue so looks like the RemoteApp / Session Host configuration is good)

Checked the event logs on all three servers and there are zero errors, which seems to rule out a security issue.

I have enabled tracing in the RDWeb.config - the output for which is below, I'd be grateful if someone could look over the trace results and any assistance would be welcome....

Hi

We have implemented TS for client access, but are having an issue tying down security - effectively all users can access each others desktop sessions. Obviously something wrong, I'm hoping this is a common mistake with a quick solution. Any help appreciated.

TS: w2k8 r2 sp1 - farm but no session broker - restart of TS every day

mandatory profiles, roaming profile

folder redirections + lot of GPP/GPO sutomizations

Hello,

I know this problem has been discussed a lot on this forum, but I haven't found a solution yet.

I encouter the logon issue from time to time, with the event id 1542. As soon as I get the logon error a simple, the next logon is ok.

Last time I used proc mon to identify the root cause of the problem and I found an access denied for Registry Open event which seems to be related to the load of the user root hive (HKU\S-....). In the situation of this failed logon instead of retrying a logon I justed wanted to understand the access denied pointed out with the help of procmon....so I tried to logon with another admin account in order the look at the local profile cache and I discovered that an attempt to load the ntuser.dat with regedit returned the same access denied....so my ntuser.dat is  cause of the logon on failure with an access denied.

...but what is the root cause ? what is the cause of the bad ntuser.dat ? and also why do I have an ntuser.dat after all ? I'm using mandatory profiles so I should have ntuser.man only....instead I have both files in the cache (not in the roaming network folder just in the cache)*1 and a lot of other files ending with regtrans-ms.... like the never merge.... I suspect that when the merge occurs the ntuser.dat becomes corrupted...

*1 we have the same use of mandatory profile on our w7 workstations and we share the mandatory profile with the TS farm, moreover with share redirected folders too... maybe this could be the root cause

Can anyone help me on this case ?

Regards

Angelo

Hi All.

I have created an RDS Farm of 3 servers and a front end broker.  This setup is working fine and it is used to provide resiliant Remote Desktops each having their own iocons and layouts.  My issues are the following:

OUT LOOK PROFILES:  When logging on between one server and another, the new user has to set their outlook profiles up 3 separate times as they log onto a new server.  Roaming profiles are in use and working correctly - this does not negate this issue and i would like to find a way of making Outlook click "next", "next", "finish" as this would create the correct profile.

OUTLOOK SIGNATURES:  How would i centralise a once only signature creation?

DESKTOP ICON LOCATIONS:  The icons are different based on the server logged onto.  The icons are the same as roaming profile has dealt with this, but the locations on the desktop will ALWAYS be different under my setup - is there a way to ensure they are always in the same place from one server to another?  This is most important to me as 100 plus users complaining they cant find the icon they put in a certain place the day before will be a real pain.

Thanks all and i would apreciate any help at all.

Jon Chard.

Hi,

I'm having a problem with accessing servers Remote Desktop when using Windows XP clients.
Occurs the following problem:
When you disconnect session and try to reconnect a same session, the status show as connected to the Remote Desktop Management Console. For the user status is initializing ... forever.
The User Windows XP can connect only when logoff the session.
The problem also occurs when using RemoteApp.
As a workaround marked for "End Disconnected session: 1 minute" (only for RemoteApp server).
The problem does not occur when using Windows Vista or Seven.

Servers: Windows Server 2008 R2 SP1

This is expected behavior for Windows XP?
Tks.

MCITP|Enterprise Administrator

Hi Team,

I want to know the way for updating the RDS collection template (master sysprep template) that is used to create collection?

I have tried the below way but didn't get the updated in the collection VMs.

- Boot the sysprep mater image

- install the required softwares

- resysprep the image and shutdown it

- Went to RDS Collection and added new virtual machines in collection (deleted the old one's)

Once created I have logged into the machines but I am not seeing the updates (I have installed few softwares in the sysprep gold image and is not there in VMs in pool)

Can anyone let me know if I need to create a entire collection again or the way I am doing is a correct way? If its a correct way what could be the reason that I am getting the new installed software in sysprep image template in the VMs created in the pool based on the template?

How do we actually have security updates and other regular patches updated in the VMs? I feel we use the same approach?

Any suggestions will be appreciated.

Regards,

We have a Windows Server 2008 R2 SP1 RDS supporting many ThinClients, mostly using a mandatory profile on a Windows 2003 R2 AD environment

at the moment of the hang what we experienced was:

New RDP sessions got stucked in the legend "Iniciando" (we have the spanish MUI).

Systems Events shows a lot of Warnings:

The Group Policy Client Side Extension Group Policy Shortcuts may have caused the Group Policy Service to terminate unexpectedly. To prevent further failures in the Group Policy Service, this extension has been temporarily disabled until after the next system restart. Group Policy settings managed by this extension may no longer be enforced until the system is restarted. The vendor of this extension should be contacted if this issue recurs.

and after that a lot of this errors:

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the CryptSvc service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the NlaSvc service.

The RDP protocol component X.224 detected an error in the protocol stream and has disconnected the client.

timeout (30000 milliseconds) was reached while waiting for a transaction response from the Schedule service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the gpsvc service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the BITS service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SessionEnv service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the CertPropSvc service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the IKEEXT service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the iphlpsvc service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SessionEnv service.

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the iphlpsvc service.

During the problem we ping DC and Network Share where Profile and Document Redirection resides and they were working OK (we also did a\\server\HomeUsers and we reached it without problem)

Only reseting the server worked, Any Ideas of what could be causing this ?? Best Regards

Federico Giampietri Latamsupport IT Infrastructure Services

We try to open a Virtual Channel on a Windows Server 2012 with WTSVirtualChannelOpen(WTS_CURRENT_SERVER, WTS_CURRENT_SESSION, "name").

The function always hangs for 10 seconds and returns NULL. Afterwards called GetLastError returns 0x80004005 (unspecified error).

This problem only happens on  Server 2012, the same code works without problems on Server 2003 and 2008, using the same client.

Firewall is disabled (personal and domain).

• Did anything change between Server 2008 and Server 2012 that would cause such an "unspecified error"?
• Is there any way to get more detailed information on the cause of the error (e.g. activate logging on WTS... functionality)?

Any answers are appreciated ...

Andreas

I have a windows server setup, which has enabled RemoteApp. As a user, he can connect to RemoteApp or full desktop (RDP).

1) Let say user1 connects to app1 from client machine. The desktop session (Ex: session id -> 2) is created.
2) Now user1 closes the app1. The session will be in disconnected state.
3) Now the same user (user1) does RDP to the server, and here new session is created for same user.  (Ex: session id -> 3)
(can't reuse the existing disconnected session?)

Here the terminal server (RDSH) creates different sessions for Remote Desktop and Remote App connection. 

Is there any way so user1 should connect (RDP) to the disconnected RemoteApp session i.e id (2)instead of creating new session?  The setting "Restrict Terminal Services users to a single remote session"does not help here.

Thanks..

Hello everybody,

We have a problem with our Terminal Server, sometimes, when the users are working they recieve a black screen and no one can work or log any more.

We must to login as local administrator and reset the service or the server, so it works again.

Log Name:     Application

Source:       EvntAgnt

Date:         xxxxxxxx

Event ID:     3006

Task Category: None

Level:        Warning

Keywords:     Classic

User:         N/A

Computer:     xxxxxxxxxxxxxx

Description:

Error reading log event record. Handle specified is 20971572. Return code from ReadEventLog is 8.

Log Name:     Application

Source:       EvntAgnt

Date:         xxxxxxx

Event ID:     3003

Task Category: None

Level:        Error

Keywords:     Classic

User:         N/A

Computer:     xxxxxxxxxxxxxx

Description:

Error positioning to end of log file -- can't get oldest log record. Handle specified is 20971572. Return code from GetOldestEventLogRecord is 8.

Log Name:     Application

Source:       EvntAgnt

Date:         xxxxxxxx 1

Event ID:     3001

Task Category: None

Level:        Warning

Keywords:     Classic

User:         N/A

Computer:     xxxxxxxxxxxxxx

Description:

Log file not positioned at end.

Some one is having the same problem? someone knows how to resolve this?

I was looking around and I found that may be the server needs a hotfix. It's so, could you tell me where can I find this and from where to download? because I found a lot of forums and somethimes there aren't the hotfixes to download.

Thank a lot for you answere... we really need the solution asap.

Regards,

Hi 

I recently configured remote desktop services in windows 2008 R2 . Currently users accessing the remote machines using  "mstsc.exe" from xp machines. Is there any way to access remote desktop directly (without login to XP ) from the client PCs ? 

Hi there,

I've setup 2008 R2 with Remote Desktop Services and want to enable Drive-Redirection so Users which use Remote-Apps can use their local drives. Unfortunately I cannot remove the mark at "RDP-Tcp Properties" > "Client Settings" and Drive, Printer etc is greyed out and clicking on the checkbox doesn't work. I found no Policy which may be responsible for this...

Where do I have to enable Drive-Redirection?!

Best Regards
Miranda

Hi all,

I am trying to figure out how to activate an RDS Licensing role and install CAL's on a Windows Server 2012 Standard box. I have created an RDS Deployment, and installed all the necessary roles, I have configured the Licensing Mode and the license server list at the deployment level, however, I need to be able to activate and install CAL's (using my SPLA info) via Powershell (or command line). I know there was a fairly simple way to do this in 2008 R2, but I can't figure it out for 2012. Any help is appreciated.

I understand RDS is not recommended on DC due to security consideration.  However since I want to play it at home, it is not much a concern.  Such scenario works fine on Windows 2008 R2.  But on Windows 2012, the RDS (session-based, have not tried VDI, but expect same result) installation always fails and is incomplete on DC. 

In \Administrative Tools\Terminal Services, I only have RD Licensing Diagnoser and RD licensing manager.  The remote desktop service management service cannot be started (Error code: 0x88250001).  Is there any extra configuration needed for RDS working on Server 2012 DC or before the installation?  Thanks.