Situation: 1 Windows 10 PC is connected to a Windows 2012 R2 server through RDP. Drives are included.

When copying a file from local disk to serverdrive it is fine with files upto 10Kb. Bigger files freezes the screen and RDP connection is lost. Error 0x800703E3 appears. The other way around works fine. It has nothing to do with antivirus running on Hyper-V as mentioned in most articles. I think we tried everything. By the way, other workstations don't have this problem.

Any suggestions are welcome.

Hi

RemoteFX documentation states that Windows7 SP1 is the minimum requirement for it to work.

But my tests revealed that simply installing Windows7, then applying the SP1 update is not enough. It starts working once Windows7 is fully updated.

I wish to know which exact updates are required, on top of SP1 for RemoteFX to work.

Thanks!

Hey all, 

We've recently decided to replace our aging Citrix access, with RDS Web Gateway, to publish our existing internal 2008 R2 RDS infrastructure, to external users.

All is working fine , including 2 factor authentication, apart from a strange issue where users can't click connect on the Remote desktop Screen.

The connect to is pre-populated correctly, I think, but the connect is grayed out, see pic, until you click in the connect to field.  Then it can be selected.  No changes are made to the connect to box etc, it just seems to activate.

Remote desktop size, and different browsers don't make any difference.

The connection is pre-populated with whatever.externaldomain name.  There is no http or https listed.

Any thoughts?

Cheers

I have a server setup as a DC with AD and RDServices installed.

I have a second server with the GW and CB and IIS and licensing and whatever else it installed.

I am using no-ip.biz to provide the external name / DNS for RDWeb.

I am using DSL and have the ports 443; 3389; and 3391 open.

_______________________

Internally, I can open RDWeb, click on an app and VOILA! It opens just fine.

Externally, I can open RDWeb, login with my credentials, click on an app . . . . then wait for it... wait for it andBOOM! The really helpful "...gateway unavailable..." message appears.  At this point, it might as well be theBlue Screen of Death.

I am not an ordinary dummy but I am extraordinarily challenged.  LOL.

DNS is my biggest weakness - but I am almost at wits end, thinking there has to be something I need to do in DNS to make this work.  Many of you say (in other posts) create an A record for external and internal and etc etc etc.  I am supposed to be a professional and "get it"......  but I don't.  That's my weakness.  I am a DNS Flunky.

But alas, I hope my brothers and sisters who are great at quantum physics and algebraic triginometric pi-alpha equations can help me out here.

Embarrassed?  Sure... but at least I am asking for some help.

Hell, I'd even open up a rescue session so I could watch what the hell you do to fix this damn thing.

_________________

In all seriousness, guys, I am really stuck and need some guidance and help.  Anything someone will do to resolve this would be more than appreciated.

Chris

Hi all,

This one is driving me NUTS! The problem itself is when I go to connect to a session host using a web access server I get the error in the title.  This is only happening to some of my session hosts and not all.  I have compared them and can't find a single difference.  I also cant find anything useful in the event logs about this.  Below is my setup.

A full RDS environment using all Windows Server 2012 Data Center.  Nothing 2008 R2.  All Clean installs.

I have 6 servers a VM's split evenly between 2 ESXi 5.1 Hosts.
1. MP-RDP-CB1.inucoda.net (Connection Broker 1)
2. MP-RDP-CB2.inucoda.net (Connection Broker 2)
3. MP-RDP-GW1.inucoda.net (Gateway Server 1)
4. MP-RDP-GW2.inucoda.net (Gateway Server 2)
5. MP-RDP-WA1.inucoda.net (Web Access Server 1)
6. MP-RDP-WA2.inucoda.net (Web Access Server 2)

inucoda.net is an network that is the Domain that all servers are joined to via 2 Domain Controllers splits between each ESXi Host.
My outside domain that you can get to from the web is ucoda.net

The connection brokers have all servers used including session hosts added to the server pool and are configured in HA mode. They use a SQL Server 2012 Fail-over cluster that is on a separate set of VMs for their database and the DNS is configured as round robin. MP-RDP-CB.inucoda.net.  There are two entries of this each with one of the two IPs of the CB1 and CB2 servers.

On each CB server there is a RDS License server role installed with CALs installed and activated/registered. Both LIC servers have been added to the RDS deployment properties.

The GW servers each have the NLB role installed with an extra network adepter for NLB use. There is a DNS name of MP-RDP-GW.inucoda.net that points to the NLB IP of the GW Cluster.  Also both GW servers were added to the GW Server Farm part of the the GW properties.  

The WA servers are also in a NLB Cluster with an extra adapter and a DNS of MP-RDP-WA.inucoda.net pointing to the NLB IP.

Up steam from our inside Windows Domain at our ISP level there is a DNS entry of MP-RDP-WA.ucdoa.net and it points to the NLB IP of the WA NLB Cluster.  (This is not a public IP, we require you be on our VPN to be able to access the IP).

For certificates we have a Comodo issued wildcard of *.ucoda.net with the corresponding Comodo Root Trust and Intermediate Certs. We also have a wildcard *.inucoda.net created by our inside CA.

The *.inucoda.net cert is used for the CB SSO, CB Publishing, and GW while the *.ucoda.net cert is used for the WA.

All session hosts have been configured to use the *.inucoda.net for their RDP sessions.

I can confirm that the *ucoda.net cert is used for the WA part and all other parts are reporting the *inucoda.net, all with no errors or warnings.

For each session collection only one session host is used with no apps, (just RDP).  Security is set to only use NLA, SSL 1.0, High.

On each session host I have verified that the *inucoda and *ucoda certs are installed and the internal CA and Comodo CA/Intermediate CA is installed in the correct stores.  I have also verified that COM Security has the domain\TS Web Access group set with full perms for the Access and Launch/Activation. Also for WMI  Root\CMIV2\TermicalServcies Security has the domain\Ts Web Access group set with full perms. Lastly each group/user that has access to RDS is listed in the Remote Desktop users.

I've checked that both WA servers are listed in the TS Web Access group.

The GW servers RAS/RAP policies are set to be pretty open for testing with using any port, any network resource, and Domain Users and Domain Admins listed.

I have been trying to connect with Windows 8 and Windows 7 clients as the domain\administrator account.  Some of my session hosts connect fine and other don't .  It's always the same ones that connect and don't connect.  I can't find any difference  between the.   I've also blown away my entire RDS and started over with just a 3 server single node model with no NLB or RR DNS and the same exact error happens on certain servers.  I have sense gone back to the 6 server setup described here and again the same error on the same session hosts.

I have also tried Negotiate and RDS Compatible and disabling NLA only for security.  No change.  Now here is the interesting part. If I remove GW servers from RDS by just saying not to use them (not actually uninstalling them or anything), all session hosts connect just fine every time.  When I first did my RDS setup I got he same error with code 0x607 for every connection attempt and found i had to set the RAS/RAP to use any network resource instead of Domain Computers.  However, it is currently set like that and some still don't connect.   So it works with out the GW servers just fine.  It also works without them in the 6 node setup as well as the 3 node setup. 

I don't want to use it without the GW servers because since I am using all inside subnets with a VPN I have to add the CB IP/Name to my host file or it will not resolve and give an error about reaching the Connection Broker. Because I want to use a HA setup this is no good as there are two servers for it.  That's why I use the NLB IP of the WA and publish it with outside DNS with our ISP. 

Any ideas at all??

Thanks,
Chris

Hello all,

We deploy Navision 2009R2 through Remote Desktop Services, the deployment works fine but once I a while, when Navision opens a second program, just a small custom made program (a single .exe) used to trasfer data into navision, the screen starts to flicker and working becomes impossible.

We have to close the entire remoteapp connection and start over.

Steps taken:

• Server is up to date
• Changed to compatibility mode of the program
• Bumped up the vRAM
• Enable/disable RemoteFX

Extra information

• Virtual machine on ESX 5.5 (Host is HP ML380 g8)
• Connection between server & client is 40Mbs (more than enough)
• Frequency of the problem: less than three times a week.

What kan I do to troubleshoot this rather annoying problem and might anyone have a solution?

Kind regards,

After upgrading two of my machines to Windows 10 (Education N clean install and Pro N upgrade from Win8.1), I was not able to set up Remote Desktop as I was used to since Windows 7 (maybe this was possible before, too).

I am used to configure Windows to allow RDP connections as a user without password (home usage only). Apparently this is not working anymore after upgrading to Windows 10. (I have enabled this by modifying secpol.msc 's security policies. Further informations provided if needed).

With the "no password" setup i get immediatly disconnected by the local machine which seems to auto login by itself after connecting via RDP. The only solution I managed to find so far was to set up a password. 

Is this a bug or a feature?

Cheers

I have found that since trying a certain password logging into the Web Access for RDS 2012 R2, an error is generated.
It doesn't crash the server it just causes an error for the user logging in.
Sign in either as with domain\username, or upn, and using the password ")<bJKq<5" without the quotes, doesn't report wrong password but instead gives the error "Server Error in '/RDWeb/Pages' Application"    

This happens whether you enter the password for anyone trying to login. 

Small domain, with Windows Server 2012.  Several users connect to their work PCs when off site.  Usually I have no problem in setting this up for them.

About 4-6 weeks ago one user bought himself a new, Dell, Windows 7 OptiPlex PC for home use.  It runs Windows 7 Pro.  I set up an RDP connection to his work PC and tested it from home, as I usually do, to make sure it works OK.  I sent him the link and it fails to connect.  I took home his personal PC and tested it.  No luck at all.  I changed the firewall setting - I even completely disabled his firewall, temporarily.  I'm sure the RDP connection is set up, as I've copied it from my own (Windows 10) PC, on which it works OK.  When I turn in my chair, to my PC, I can connect straight away!   On his the message is: Your computer cannot connect to the remote computer because the Remote Desktop Gateway server is temporarily unavailable.  Try reconnecting later or contact your network administrator for assistance.

Any thoughts, please?

Slam JL

Hi expert.

my boss wants me to setup a 2008 r2 TS gateway as well as setup a 2008 r2 TS connection broker.

the idea is to have users from the internet hit the TS gateway and then redirected to our 2008 R2 TS farm.

we currently have only 1 2008 r2 termainl server setup. I want to add a second 2008 r2 Terminal server and create a connection broker to provide some load balancing

My question is actually a design question

Should I put the TS gateway and the connection broker on the same server 

or

should the TS broker be on a separate server

internet ..........> TS gateway.........>connection broker...............>TS or Session host server1 and Ts session host server2

or

internet..........> TS gateway & connection broker............>TS or session host server1 and TS session host server2

Also do I need a separate Connection brokers server or can I install connection broker and the 2nd session host server on the same server.

any info on the correct design would be appreciated..

thanks

Hi All ,

i enabled password change utility in Windows server 2012 R2 server to change password for our end users.

i can change the password with this utility but not any other users , i have all domain admin and local admin access for this server , but my end users just want to change their expired password with this utility but with out any access , is this possible?

When we tried to change any domain user password with this tool am getting below error.

Your password cannot be changed. Please contact your administrator for assistance.

can any domain users change their password with this utility ? without any access to RD Web access server. please advise.

Thanks,

Mani L

Mani L

Hello All,


I would like to build a server, and host a Remote App on it, up to 30 Users.
i would also like to put SQL server on the same box.

I have never built anything like this before, and i'm overwhelmed with the information out there.

i have a couple of questions:

Would a faster 3.5Ghz 6core or slower 2.6Ghz 8 core cpu be better for this task?

If i put like 256 Gig of memory in the box, would i have a problem running RDP and SQL on the same box?

I'm thinking of purchasing the SUPERMICRO MBD-X10SRH-CLN4F-O motherboard, it has a built in ASPEED AST2400 BMC graphics. Would this be good enough for Remote Desktop? or do i need to purchase something better?

Thank you

Hi, 

Im having issues publishing VDI assigned / pooled desktop collections.

There are three servers, lets call them server 1, 2, and 3.

When I try to either add to, or create collections, the process hangs with a "pending status" on server 1 and 3. Server 2 is always successful.

This just started happening. I have published 3 collections successfully prior to this. I have not made any changes (that Im aware of) to the servers.

I have turned on Debug logging and cannot find any relevant information. I am bound by an ITAR restriction and will have to scrub any logs that I share. But there are not many.

As far as i can see nothing is really being reported, its as if the system thinks the publish process is moving along, but its not. Interestingly enough after about 24 hrs I will cancel the task and then I will see an error in eventvwr that says "operation failed, reason - Canceled by user"

I have checked permissions on the drives and I have checked the export locations. I have gone as far as rebuilding the master template from scratch, even though server 2 publishes successfully.  I have changed the export location and the results are the same. 

Im trying to get this working because my company wants to see a more native MS solution to VDI.

Any advice would be grateful and if I have missed any crucial information I will gladly respond with what I can. 

I attached a couple screen shots to show you what it looks like and the RDS roles that are installed

UPDATE: MSDN will not allow me to attach images until my account is verified. 

UPDATE: 

I was able to pull a specific warning from eventvwr, Im not sure if this is related or not
"RD Connection Broker could not complete a remote procedure call to the Hyper-V server"

I'm testing out being able to launch a RDWEB-published application from outside our network(public)

I log into the portal fine, and can see the published icons.

I click the one I'm testing, and I'm presented with what appears to be a screen full of RD configuration

information as follows:

\

Thoughts?

Thanks,

Rich

Hello everyone,

My Self Suresh Kumar, Here the question is I can take remote using server manager and using command mstsc /shadow:ID /control, I want to delegate some users to take shadow for other user.

This users taking Shadow by using server manager but they cant by command. When they try from command Error Access is Denied.

Do I need to change any setting for those users.

Regards, K Suresh

Hello!

I'm interests in topic question. I have 2 rds servers and I want to unite them to RDS farm. But the problem is that UPD (user profile disks) stored only on one server and when this server is down thre is no access to user profiles. So, it is not HA desicion.

Desicion could be in cluster services that handles smb share, but I'm don't want to bring up cluster services on RDS servers. Actualy, I have cluster desicion that handles iSCSI targets, so iSCSI initiator could be solution in this case (mount targets on both servers), but I'm not sure that I can specify local storage in UPD storage settings.

Could anybody help me with that?

It is possible to allow in RDP sharing of disks. My question is what it the payload of this action? How to I measure this?To be exact, i'm talking only about the option being enabled in the client and server, no actual file transfer is in progress.

http://ultraimg.com/images/mstsc_2016-06-19_11-51-21.png