can I enable “Require Strict KDC validation” while using smart card to RDP to servers? Thanks
↧
Require Strict KDC validation
↧
RDS CAL license key
Is it possible to have multiple RDS licensing servers in an organisation, if so how are the CALs assigned ( user CALs ), is the same license key used for all servers?
Indu Biswakarma
↧
↧
anti virus & patching on terminal servers / RDS
how do terminal server 2012 / RDS servers handle services like anti virus and patching
Anti virus software is installed in install mode. What happens when the AV service downloads new DATs and engines, is TS smart enough to install these in install mode?
What about MS patches, is terminal server smart enough to put these on in install mode automatically if you are using services like SUS?
↧
RDS Per Device License multiple assigned per device
I have an RDS collection using 2012 R2 licence server with Per Device licences installed. All clients are Windows 7. Some clients have been allocated a licence and keep this licence assigned until it expires.
Other desktops get assigned a licence, each time they use a remoteapp, so in the issued licence list from WMI, they have multiple assigned licences all of which are active. The desktop HWID is the same, the only thing I notice is that the licences are IssuedTo to SYSTEM account but in the cases where the licences are assigned correctly, they are IssuedTo a named user in the domain. Example below (apologies would not allow me to paste screenshot):
ExpirationDate IssueDate LicenseId LicenseStatus sHardwareId sIssuedToComputer sIssuedToUser
20160724154156 20160520114224 11089 2 0002012265bfe99f86d9228bb814801b7dd0 DESKTOP-02 ADUSER1
20160629233135 20160201134902 6206 2 000201b69c8a45fd9de55288ef3291fd6a35 DESKTOP-03 ADUSER3
20160607115219 20160309115219 7956 1 000202095bfa82934dff11ae2d026f259350 DESKTOP-04 SYSTEM
20160724114356 20160425114356 10100 1 000202095bfa82934dff11ae2d026f259350 DESKTOP-04 SYSTEM
20160726113149 20160427113149 10221 1 000202095bfa82934dff11ae2d026f259350 DESKTOP-04 SYSTEM
20160727115821 20160428115821 10272 1 000202095bfa82934dff11ae2d026f259350 DESKTOP-04 SYSTEM
20160811083350 20160513083350 10797 1 000202095bfa82934dff11ae2d026f259350 DESKTOP-04 SYSTEM
20160714063330 20160429080538 10302 2 000202095bfa82934dff11ae2d026f259350 DESKTOP-04 SYSTEM
20160823164146 20160531114215 11476 2 000202095bfa82934dff11ae2d026f259350 DESKTOP-04 SYSTEM
20160607092024 20160411091328 9399 2 000203285cb65a8349658370d0524c02ee88 DESKTOP-05 ADUSER2
20160706113908 20160407113908 9298 1 00020331150560d05c654282885379c9843d DESKTOP-06 SYSTEM
20160706142006 20160407142006 9306 1 00020331150560d05c654282885379c9843d DESKTOP-06 SYSTEM
20160713074701 20160414074701 9601 1 00020331150560d05c654282885379c9843d DESKTOP-06 SYSTEM
20160714080745 20160415080745 9673 1 00020331150560d05c654282885379c9843d DESKTOP-06 SYSTEM
I think this might be permissions related, have read about licensing requiring AD attribute changes but that seems to only be for per user licences
↧
Implement MS Outlook Client in Caching Mode on Remote Desktop Services?
Last year our organization migrated from an on-prem email solution to Microsoft Office 365 cloud-based email. When using the Outlook thick client and O365, Microsoft states caching mode is required as there is too much latency between us and the cloud to provide a responsive thick client experience in online mode. Enabling of caching mode presents a problem for RDS because a .OST file is generated in each user's local profile so this file would be generated for each use profile on each server that a user would access. This is not a viable approach due to drive space, performance reasons, and the requirement for the end users to "recreate" their Outlook profiles every time they log into a different server or after profiles are purged for maintenance purposes. I have heard of some organizations hosting the .OST file on a network share with mixed results.
Short of going to a fully persistent VDI solution, I would be interested to hear if anybody else has been able to come up with a reasonable solution to make the Outlook thick client work on RDS with caching mode and a cloud hosted Exchange provider. We have been running OWA ever since our migration to O365, but our customer would like to know if there is a way for us to get full Outlook running on our RDS environment. Brian Madden had posted a similar topic on his blog a few years ago, but I did not really see a solid solution there either: http://www.brianmadden.com/opinion/Cloud-hosted-Exchange-with-RDSH-VDI-Outlook-is-a-performance-nightmare-Are-there-any-solutions
TIA
Josh
↧
↧
Local profiles creating TEMP profiles for login user in Terminal server 2012 R2 when login out side of network
Hi,
The user when logged to terminal server 2012, creates a profile of users and Profile list as .bak file, when we are trying to login to the terminal server from outside of network. If we are login to the same server in same network it's working fine.
We are using Windows sever 2012 R2 and deployed licence and certificates as well.
We have tried to delete Profile list and temp user account as well folder then also issue is same.
we have followed below link in order to fix this issue but could not get positive result.
https://community.spiceworks.com/topic/153360-user-gets-a-temporary-profile
https://social.technet.microsoft.com/Forums/office/en-US/ea7e2838-6dfa-432e-a942-800628aa9250/local-profiles-creating-temp-profiles?forum=winserverTS
https://social.technet.microsoft.com/Forums/office/en-US/2309e2e5-ca3f-499f-856c-395ffa23b8ce/remote-desktop-user-getting-locked-into-a-temp-profile-each-time-she-logs-in?forum=winserverTS
http://serverfault.com/questions/18724/user-profile-keeps-loading-temp-profile
Please suggest for the above. thanks
↧
RD Web Access 2012 R2 and Smartcard Authentication.
Hello,
I have question for my infrastructure.
I have the Web Access on a server then i have another server as Connexion Broker, and 2 others servers as RD HS.
My question is how can i configure the web access to accept smartcard authentication and also name hint on certificate.
My second question is for the connexion broker, when i am connected on the web access, i see the collection. Then i click on the collection but the system demand authentication. Is it possible to configure that to have SSO when I click on the collection.
↧
RD from server to desktop
Hello:
Im the new/only IT guy here at work. I am trying to RD into a desktop from the server and can't. I can RD from the server to my desktop without issue but can't to hers. I have gone into system options and allowed computers to RD in so my pc and hers are the same in that respect but can't figure out the issue. I do have AD running and am thinking it might be that but don't know where to start or what to check. ANY direction will be so helpful. Oh, The server is Server 2008 R2 desktops are Wind 7 Pro 64 bit
Kevin
↧
Server Standard 2012R2 Remote Desktop Redirected Printer Stops Printing error 372 Win32 error 2147500037
All of a sudden all RDS users cannot print on any redirected printers on a Windows Server 2012R2 (Local, not AD DC). Printers appear on server devices and printers. Print jobs appear in queue on server, then on local device, but disappear from
queues without printing. Behavior the same for multiple computers, Windows 7, and 8, all users, including administrators. Easy Print installed. Working on this for hours with no luck. Any help or suggestions appreciated!
↧
↧
RDS & internet browser
Hello,
I need to know if it's possible open a link using local browser instead of server browser during a RDS session.
Thanks a lot,
Mauro
↧
Remote Application on Windows 2008 r2
Good day
I have an accounting application on windows server 2008 r2 and I want two other client PCs to load and run automatically the accounting software on their different machines through a wired LAN provided. Please how do I configure the server with windows 2008 r2 O/S and clients running windows 7 o/s?
↧
Install Remote Desktop Services Failed on Windows 2012 Server
I understand RDS is not recommended on DC due to security consideration. However since I want to play it at home, it is not much a concern. Such scenario works fine on Windows 2008 R2. But on Windows 2012, the RDS (session-based, have not tried VDI, but expect same result) installation always fails and is incomplete on DC.
In \Administrative Tools\Terminal Services, I only have RD Licensing Diagnoser and RD licensing manager. The remote desktop service management service cannot be started (Error code: 0x88250001). Is there any extra configuration needed for RDS working on Server 2012 DC or before the installation? Thanks.
Update: this issue has been solved in Windows 2012 R2 Server. According to http://blogs.msdn.com/b/rds/archive/2013/07/09/what-s-new-in-remote-desktop-services-for-windows-server-2012-r2.aspx
"Single server RDS deployment including Active Directory. We now support running our RD Connection Broker role service on the same physical instance as an Active Directory Domain Controller. In addition, we publishedguidelines for how RD Session Host could be used without the RD Connection Broker."
The guidelines (http://support.microsoft.com/kb/2833839/en-us) primarily apply to Windows 2012 Server.
↧
RDP (Remote Desktop) to Windows 10 without passwords not possible anymore. Bug or feature?
After upgrading two of my machines to Windows 10 (Education N clean install and Pro N upgrade from Win8.1), I was not able to set up Remote Desktop as I was used to since Windows 7 (maybe this was possible before, too).
I am used to configure Windows to allow RDP connections as a user without password (home usage only). Apparently this is not working anymore after upgrading to Windows 10. (I have enabled this by modifying secpol.msc 's security policies. Further informations provided if needed).
With the "no password" setup i get immediatly disconnected by the local machine which seems to auto login by itself after connecting via RDP. The only solution I managed to find so far was to set up a password.
Is this a bug or a feature?
Cheers
↧
↧
2012 RDS and publishing full desktop and lockdown
Hi.
I have a lot of customers that today run thinclients against 2008/2008R2 RDS and full desktop, not remoteapps.
I'm working on a proof of concept for the 2012 RDS. I have made a Farm with one RCB and two Session Hosts. I have made a collection and set up DNS.
The farm is alive and I can log onto the servers with users.
What was missing in 2008 R2, and what is missing even more in 2012 seems to be a way to pin items to the taskbar and / or startmenu. Is it possible to publish apps to the new startmenu? Any possibility to customize it at all? So far I can't find any...
↧
The computer can't verify the identity of the RD Gateway Server. It's not safe to connect to servers that can't be identified.
Hello all,
I'm attempting to setup TS Gateway in an environment. After configuring Terminal Services, the RDC client, etc, etc.... I receive the error message stated in my subject line.
Here is the setup:
-External facing router with IP address of (not real) 10.10.10.1
-TS Gateway server named TS.SERVER.COM
-Edited the hosts file on the client to include an entry for 10.10.10.1 as TSG.SERVER.COM
I created the certificate for TS.SERVER.COM and specified it in TS Gateway Manager.
The RDC client is configured on a laptop (Windows 7):
'General' tab > 'Logon Setting' > 'Computer': TS.SERVER.COM
'Advanced' tab > 'Settings' > 'Use these RD Gateway server settings' > 'Server Name': TSG.SERVER.COM --- (ask for password)
Upon attempting to connect, I get the error message and have the ability to view the certificate. It pulls the certificate information from the TS Gateway server, but when I click 'View Certificate', I see 'Windows does not have enough information to verify this certificate'. So, just for S&G's, I exported and imported the certificate to the TS client and still got the error message.
I have never used Windows 7 as the TS client, but I am curious if there are any compatibility issues since the RDC client asks for RD Gateway information and not TS Gateway specifically. I know they are essentially the same thing, but RD Services is a bit different than TS in Server 2008 R2.
Can anyone provide any guidance? Hoping I'm missing something as opposed to compatibility issues.
Thanks in advance,
MDH
I'm attempting to setup TS Gateway in an environment. After configuring Terminal Services, the RDC client, etc, etc.... I receive the error message stated in my subject line.
Here is the setup:
-External facing router with IP address of (not real) 10.10.10.1
-TS Gateway server named TS.SERVER.COM
-Edited the hosts file on the client to include an entry for 10.10.10.1 as TSG.SERVER.COM
I created the certificate for TS.SERVER.COM and specified it in TS Gateway Manager.
The RDC client is configured on a laptop (Windows 7):
'General' tab > 'Logon Setting' > 'Computer': TS.SERVER.COM
'Advanced' tab > 'Settings' > 'Use these RD Gateway server settings' > 'Server Name': TSG.SERVER.COM --- (ask for password)
Upon attempting to connect, I get the error message and have the ability to view the certificate. It pulls the certificate information from the TS Gateway server, but when I click 'View Certificate', I see 'Windows does not have enough information to verify this certificate'. So, just for S&G's, I exported and imported the certificate to the TS client and still got the error message.
I have never used Windows 7 as the TS client, but I am curious if there are any compatibility issues since the RDC client asks for RD Gateway information and not TS Gateway specifically. I know they are essentially the same thing, but RD Services is a bit different than TS in Server 2008 R2.
Can anyone provide any guidance? Hoping I'm missing something as opposed to compatibility issues.
Thanks in advance,
MDH
↧
Not work HOT KEY(example ALT+TAB) in Windows Server 2012R2
Hello!
Remote Desktop Services Windows 2012 R2 are installed in our company for user's remote access .Currently we are having a problem with this service. When user is trying to log in on his PC remotely , he's haveing a problem with nonworking hot-keys(example ALT+TAB) in remote window. Is there any solution with this case?
Remote Desktop Services Windows 2012 R2 are installed in our company for user's remote access .Currently we are having a problem with this service. When user is trying to log in on his PC remotely , he's haveing a problem with nonworking hot-keys(example ALT+TAB) in remote window. Is there any solution with this case?
↧
Windows Server RDP License
Hi All
We have a client on a cloud server running their database software. We have 3 users and we have installed Remote Desktop Services.
Our hosting provider have dialed into the server and activated the 3 RDP CALS and everything worked fine. Now it's showing we have expired the 120 days grace period and we need to complete the configuration.
The odd thing is I didn't realise we had to do anything else. After speaking with the host again they say the cloud server needs to be connected to a domain, at the moment it's on a WORKGROUP as the client only has 3 concurrent RDP Connections at any one time.
Is the set wrong here, for the time being we have reactivated the 120 grace period.
Regards
Ryan
↧
↧
Issues with RD Gateway and NLB
Hi,
I'm trying to configure a RD Gateway farm using Windows Server NLB. I've got everything to function as expected. But the UDP connections often ends up on the other gateway server.
Example: One user has a TCP connection on Gateway 1 and the UDP connections on Gateway 2. What should I do to avoid this? Can this cause any issues? I've tried to change the affinity settings and "Network" results in the fastest connection.
My configuration details below.
Cluster ip: xx.xx.xx.30
Operation mode: Multicast
Port Rules:
All IP:s
Port range: 443 - 443
Protocol: 443
Affinity: Network
Gateway 1 ip: xx.xx.xx.31
Gateway 2 ip: xx.xx.xx.32
Thanks in advance
Best regards
Markus
Edit: all servers are running Windows Server 2012 R2 Standard.
↧
Does RDS work with ADFS?
Hi
I'm wondering if Remote apps [Remote Desktop Web Access (RD Web Access)] work with ADFS?
We have published a desktop application using windows remote apps. The customer want to authenticate using ADFS, is it possible?
If so please point me to an help which will help me to implement
Thanks
Sathish
↧
Remote Desktop Apps Not Working externally. Beyond Frustrated
I have a server setup as a DC with AD and RDServices installed.
I have a second server with the GW and CB and IIS and licensing and whatever else it installed.
I am using no-ip.biz to provide the external name / DNS for RDWeb.
I am using DSL and have the ports 443; 3389; and 3391 open.
_______________________
Internally, I can open RDWeb, click on an app and VOILA! It opens just fine.
Externally, I can open RDWeb, login with my credentials, click on an app . . . . then wait for it... wait for it andBOOM! The really helpful "...gateway unavailable..." message appears. At this point, it might as well be theBlue Screen of Death.
I am not an ordinary dummy but I am extraordinarily challenged. LOL.
DNS is my biggest weakness - but I am almost at wits end, thinking there has to be something I need to do in DNS to make this work. Many of you say (in other posts) create an A record for external and internal and etc etc etc. I am supposed to be a professional and "get it"...... but I don't. That's my weakness. I am a DNS Flunky.
But alas, I hope my brothers and sisters who are great at quantum physics and algebraic triginometric pi-alpha equations can help me out here.
Embarrassed? Sure... but at least I am asking for some help.
Hell, I'd even open up a rescue session so I could watch what the hell you do to fix this damn thing.
_________________
In all seriousness, guys, I am really stuck and need some guidance and help. Anything someone will do to resolve this would be more than appreciated.
Chris
↧