Hi everybody,

we have a new Terminal Server with Remote-Apps and a very interesting problem.

Host: ESXi 5.5

Guest: Windows Server 2012 R2

Remoteapp: CAS (not importend, all Remote-Apps have the problem)

Client-OS: Win7 and Win 8.1

Now the problem:

A Remote-App is started on a client - this works fine. The Remote-App opens a lot of windows (new mail, customer informations and so on) and it happens that the active windows lost the focus and jumps into the background and another windows is in front with the focus.

The problem is not reproducible and with this caution it is not possible to work with the Remote-App.

I found following hotfix (http://support.micro...b/2964832/en-us) but it is not applicable to the clients.

If somebody needs additional information, i will be available.

Thanks for your help and time!

Kind regards

srkonus

I've been receiving User Profile Service event id 1530 with nearly every logout from an rdp session.  Our environment is Windows 2008 R2 64 bit running on Citrix XenServer 5.5.  RDP is in remote administration mode.  Tested with and without Windows updates applied.  No additional printers added, no connection to a domain.

Because the environment is virtual, I've been able to try many combinations and have narrowed it down to this: When Windows 2008 R2 has a single processor, the event does not occur.  When I give the virtual server two processors, the event occurs with nearly every RDP logout.  Same results with or without XenTools installed.  I do not have the resources to test the single/multi processor difference on physical hardware.

Any insights would be appreciated. I've posted the full event as well as information about the process that is mentioned in the event.

AB.

Log Name:      Application
Source:        Microsoft-Windows-User Profiles Service
Date:          7/23/2010 8:38:51 PM
Event ID:      1530
Task Category: None
Level:         Warning
Keywords:     
User:          SYSTEM
Computer:      WIN-36DPBES2P14
Description:
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. 

 DETAIL -
 1 user registry handles leaked from \Registry\User\S-1-5-21-2545583-721118796-2022419212-1000:
Process 888 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2545583-721118796-2022419212-1000\Printers\DevModePerUser

----------

Process 888 is svchost.exe running UxSMS (Desktop Window Manager Session Manager), UmRdpService (Remote Desktop Services UserMode Port Redirector, TrkWKS (Desktop Distributed Link Tracking Client), and Netman (Network Connection)

I have set up my Server (2008 R2 Foundation) for remote desktop and RemoteApp as per the instructions provided by Microsoft.  I am using a single server for all functions.  When a user logs in to the Server through remote desktop, the remote desktop screen comes up and then the user immediately gets an 'Access is Denied' message.  If the user connects through RDWeb, the RemoteApps are displayed, but when the user clicks on an application, they are prompted again for their login credentials and then they get the remote desktop screen with an 'Access is Denied' screen as well.  This happens even for Administrators.

I am getting very frustrated with this as I have read many blogs and tried everything to no avail.  PLEASE help me.

I have gotten a server set up with Windows Server 2016 TP4, and deployed RDS on the server. I installed several applications that use several different rendering technologies (including OpenGL), and I am seeing no difference from RDS 2012 R2, even though I have enabled 1Gb of RAM for the graphics. The video card shows up on the client VM as Microsoft RemoteFX Graphics Device - WDDM, and is not recognized by any of the applications as a compatible card, so they have problems with hardware acceleration. For example, AutoCad 2016 does not allow me to enable hardware acceleration because it says my graphics card is not compatible. It is the same experience that we get when using RDS on Windows Server 2012R2.

On the server, we are running an Nvidia Grid K1, which is the top recommendation from Microsoft. I was not able to install the latest Nvidia driver, because it says the OS was not compatible. The only driver I was able to install successfully looks like it was from 7/2/2014 - 340.52. This is the only thing I could think of that would not allow RemoteFX to function properly. If this is most likely the cause of the issue, any information on a workaround would be great. I have tried to manually install the driver through Device Management, but it says that the driver is not compatible also.

I know my question is not specific, but I'm hoping that if nothing else, Microsoft becomes aware that the advertised improvements in 2016TP are not working - at least in our environment. I would have thought there would have been much more documentation about workarounds that might be required for the Grid K1, since that is the top recommended card, but I found nothing - Nvidia doesn't even mention 2016TP. My thought is that if the issue is the graphics driver, then Microsoft would have had to work closely with Nvidia on the driver, and there would be documentation somewhere.

I have been looking forward to the RemoteFX improvements in 2016 for many months, so it is pretty disappointing that I'm not seeing any change in performance.

I will put the question just as it was put to me.

"trying to see if remote desktop web access requires a registered domain name

my dad moved his server windows 2008 from his office to his house

he is now on a residential (dynamic IP) connection"

Like I said, pressed for time on this, just need pointer.  I honestly don't know that much about it, this is the first place I thought to come.

Thanks for the help.

Hi,

I have a session host in a Windows 2012 farm which has issues with a certain software.
So I need to troubleshoot and test with this specific account and point it to a certain session host.
I can disallow new sessions to other servers and open only the one for the particular server but that's not workable + I have the risk users who just logon will get on the server and I don't want them to.

Tried to logon with mstsc option /admin but that doesn't work either.

Please advise.
J.

Jan Hoedt

Hi,

I have recently built a new Windows 2012 R2 domain for a client, all of the servers reside on a virtual ESXi platform, only a few of the servers actually have internet access, for patching WSUS and anti virus downloads.

The plan is to use use "jump hosts" to only show the RDWEB portal giving users the ability only to run the required applications they need, this is a highly secure environment. Everything is deployed and working as it should with no errors and all of the applications work fine, on the first Jump Host which has internet access the RDWEB page takes just over a second to load the logon screen, BUT the 2nd jump host which does NOT have internet access due to a range of IP's being blocked reaching the proxy server the RDWEB page takes over 2 minutes to load.

If I change the IP address of the 2nd jump host, still on the same subnet using the same gateway, but is allowed internet access due to a range of IP's being allowed to reach the proxy server then the logon screen takes just over a second to load, so it cannot be the config of the server or of the RDWEB, as the ONLY difference is that the "jump host" can or cannot get to the Internet via an IP address change.

I need to deploy the same system to an enclosed environment that has NO internet access so need to understand why the "jump host" needs internet access for the RDWEB logon screen to appear in under a second.

Hello, 

I have a very frustrating problem. I want to use Windows 2008 R2 Terminalserver with Outlook 2016. 

Unfortunately every time a user starts Outlook, he installs the 64 bit Components. It seems there is one solution: Installing Windows Search Role and starting Outlook in Installation Mode. 

Seems to work. With that solution, there is another problem: It is not possible to search in pst-files. Windows error log says event ID 3036. Looks like, Windows Search cannot index pst-files (in network). The possible solution to disable indexing for Outlook does not work because the configuration change got reseted after relogin. This might happen because of our Roaming users. 

As you can see, I have one problem. When Windows Search is installed, pst-files are not searchable. When Windows Search is not installed, Outlook 64 bit Components get installed every start of Outlook. 

Is there anybody who has other ideas for a solution? 

Thank you for your help. 

Jens

I have a department of 3 to 5 users that require RDP access to a member server that is hosting a network Application. Their function is to update data on this application. To do this they require the following:

1. access to the application folder (D: only)
2. access to tools winthin the application (to import the data into the application)
3. restart/stop/start 2 of the application services

How can I give them RDP access but restrict them from performing any other functions on the server apart from those listed above?

Thanks in Advance.

Hi all,

Some time ago I opened this thread:
https://social.technet.microsoft.com/Forums/en-US/08f91854-27c2-4bc8-8845-d2435db51c1f/hanging-upd-profiles-in-2012-r2-rds-environment?forum=winserverTS

Since then I've made some changes in the GPO's, but this seemed to have the affect that a lot of users now get TEMP profiles in de RDS environment regularly.

The Event Viewer System logs show these messages:
Event ID 16: The access history in hive \??\C:\Users\USERNAME\ntuser.dat was cleared updating 2157 keys and creating 297 modified pages.
Event ID 16: The access history in hive \??\C:\Users\USERNAME\AppData\Local\Microsoft\Windows\UsrClass.dat was cleared updating 367 keys and creating 47 modified pages.

Also there are a lot of these events logged:
Event ID 20499: Remote Desktop Services has taken too long to load the user configuration from serverboth DC's for user USERNAME

This leaves the User Profile Disk corrupt and the only way to resolve this is to restore the UPD from an earlier moment.

Any thoughts?
I see a lot of RDS logs and searching online give a lot of results (non-related) back.

Kind regards,

Matthijs

Good day!

So, i have a small problem understanding certificates for RDS environments.

HEres what I have:

a broker with the name RDSBroker.site1.contoso.com

several RDSHs with names like RDSHXX.site1.contoso.com, where the XX stand for the number of the server, for example RDSH01.site1.contoso.com. Currently i have 01-04, in the future there will be a lot more and i cant say right now how much.

my collection, which is named WTScollection is accessed through round robin DNS. meaning, my colletion name has a entry in the DNS for every RDSH's IP.

When I connect to WTScollection i get the first certificate warning from on of the RDSHs, for example RDSH03.site1.contoso.com. And if the Breoker decides to redirect me i get a second certificate warning from another RDHS.

What kind of certificate do i need exactly (i assumed wildcard vertificate or SAN certificate?) and on which Servers does this need to be imported and in which location?

Hi guys

I have this issue in RDS 2008 where users keep getting disconnected and prompted for credentials.

I have checked:

• Configuration Properties > Sessions "Active session limit" to Never (force it by overriding user settings).
  This has been set through group Policy
• The licensing appears to be correct with no errors
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server
  fDenyTSConnections and all RDSH servers have set to 0.
• No HTTP redirection on default web site.

I checked a few other things, but nothing has prevailed.

I found the Event 4634 where accounts were being logged off on the AD server.

Im not too sure what the cause is, anything to look for?

Thanks
NN

Excuse,

I want to adjust my workstation (Windows Server 2008 Standard) display font like Windows XP can change it to "Extra large fonts ", but I can't find it on my server 2008.

Does any one can tell me the setting at where on Server 2008?

I don't want to change icon, just font size...

Thanks.

We currently run an RD farm with 5 RD hosts.  Users are distributed to the hosts based on load balancing.

When someone logs into any of the 5 servers, they can not only see the printers they've mapped, but printers other users (on the same host) have mapped.  It will even show duplicates.

For instance:

User A logs in and maps Printer 1

User B logs in and maps Printer 2

-At this point both User A and B can see both Printers 1 and 2.

User C logs in and maps Printer 1

-All 3 users now see 2 copies of Printer 1, and Printer 2.

Is there any way to hide other users printers, so each user ONLY sees the printers they themselves have mapped?

Thank you,

Nickolas

Good afternoon, everybody!

I have had a successful RDS deployment on Server 2012 R2 for quite some time now. Unfortunately, now that we are beginning to roll out some Windows 10 PC's, we are running into issues. I have a 2012 R2 RDS deployment at home as well, and I have no issues connecting to it from Windows 7, 8.1, or 10; whether internally or externally. This is what is confusing me the most.

The RDS deployment I have at work is a four server deployment. Two session hosts, one broker, and one server shares the RDWeb and Gateway roles. This may not be standard, but it is the easiest method behind our NetScalers. I only need port 443 opened on the firewall and one external IP.

Connecting from internally works from Windows 7, 8.1, or 10. Connecting externally works with Windows 7 or 8.1, but I get an error from Windows 10 computers: "Your computer can't connect to the remote computer because an error occurred on the remote computer that you want to connect to"

I have been racking my brain, scouring event logs, and searching Google for weeks now. The only thing I could find as a Band-Aid for the issue was a registry setting:

HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client

Name: RDGClientTransport

Type: Dword

Data: 1

This fixes the issue from Windows 10, but I do not want to require users to make this registry change on their personal computers. Most would not know what to do or how to do it.

Has anybody else experienced this? Any ideas on what else to check out? Everything works fine from Windows 7 and 8.1, so the Remote Desktop Services deployment is working properly. Is there something on the server side I can do to eliminate the requirement for the registry modification on users' computers?

I would appreciate any help with this, and thank you in advance!

Eric

With Server 2008 R2, we used to be able to give permissions using Remote Desktop Session Host to allow selected remote desktop users the ability to sign off other remote desktop users. But now with Server 2012 R2, in the Server Manager it  says you have to be logged on as a domain user to manage servers and collections. This server is not part of any domain and it's not going to be. This server is a workgroup. Our company server is used for Quickbooks with about 50 remote desktop users from all over the region.

I don't see any option to perform this task in group policy or local security policy. Remote Desktop Session Host is already installed. Is there another way to bring this up or maybe use the command line to give access?

Windows Server 2003R2. Terminal Services is installed and started. Remote Desktop is Enabled. In the Terminal Services Manager session window, RDP-TCP is shown as being in a listening state. But when I run netstat -a, port 3389 does not show up. RD client cannot connect. Telnet or ssh to that port does not connect.

TCP is working fine: I can use logmein to view the server; I can VPN to the server, I can look at SMB shares once the VPN is up. No TCP filtering is active. The Windows Firewall is not active.

How can I get port 3389 going and be able to RDP in?

The registry is still showing port 3389 as the listening port.

I have removed and re-created the RDP-tcp port without any trouble and without success. The properties are set on defaults.

Remote Desktop devices in the device manager show as operating fine.

It used to work fine and just recently (sometime in January) it stopped working. As far as I know, no new software was installed at that time.

I have reviewed a bunch of stuff found in Google but none of it seems to help, so far.

Hello,

I'm receiving warning messages from one of the Exchange mailbox servers:

Process powershell.exe (). <Domain controller name> is a read-only domain controller. Exchange Active Directory Provider requires that domain controllers are not read-only.

My question is can I define a different DC to be used instead of the RODC ?

After upgrading two of my machines to Windows 10 (Education N clean install and Pro N upgrade from Win8.1), I was not able to set up Remote Desktop as I was used to since Windows 7 (maybe this was possible before, too).

I am used to configure Windows to allow RDP connections as a user without password (home usage only). Apparently this is not working anymore after upgrading to Windows 10. (I have enabled this by modifying secpol.msc 's security policies. Further informations provided if needed).

With the "no password" setup i get immediatly disconnected by the local machine which seems to auto login by itself after connecting via RDP. The only solution I managed to find so far was to set up a password. 

Is this a bug or a feature?

Cheers