Administrator not able to access redirection-created subfolders

August 3, 2016, 9:11 am

≫ Next: Windows 2012 RDS Collection published app configuration

≪ Previous: Group Policy not applying on Windows 2012 r2 RDS servers

We have a Windows 2012 RDS collection with 1 connection broker, 2 hosts, 1 file server that holds the roaming profiles.

We have a group policy that redirect users' DESKTOP, DOCUMENTS, FAVORITES, DOWNLOADS to a network share (\\fileserver\userdata).

The redirections work. I see the \\fileserver\usersdata contains the user profiles and within each profiles, the DESKTOP, DOCUMENTS, FAV, DOWNLOADS folders are created.

The issue comes when I login as an administrator to the file server, when I try to access for example the DESKTOP folder within a user folder, I am getting access is denied. After checking, I have realize only SYSTEM and the users themself have access.

I as an admin can probably take ownership of all the user profiles but I am wondering if this a normal file access security behavior for the subfolders being created by redirection?

Please advise if there is a configuration I have missed.

Thanks,

↧

Windows 2012 RDS Collection published app configuration

August 3, 2016, 8:46 am

≫ Next: Temp profile issues

≪ Previous: Administrator not able to access redirection-created subfolders

We have a Windows 2012 RDS collection - 1 connection broker, 2 session hosts.

I have published an application and able to access it from RD WEB without a problem.

There are two issues:

1. When I click on the app from the RE WEB page, I see a RDP file being downloaded and I need to open it to access the app. How do I make it so that user can just click on the app and open?

2. After the app is opened, I check the drives that the app can access by clicking FILE>OPEN. I see the C drive of the web server is available to the users. How do I hide it?

Thanks,

↧

Temp profile issues

July 25, 2016, 5:53 pm

≫ Next: Unable to detect Smart Card Reader in Hyper-V (Windows Server 2012 R2) Virtual Machines Client (Windows Server 2012 R2)

≪ Previous: Windows 2012 RDS Collection published app configuration

Hey Guys

We have a client that has the following setup (all Windows Server 2012 R2 Machines in a virtualized environment, using UPD's)

Rd Broker

TS1, TS2, TS3

The issue we are having is that when <g class="gr_ gr_617 gr-alert gr_gramm gr_run_anim Grammar multiReplace" data-gr-id="617" id="617">a user signs</g> in but once their done doesn't sign out or their session is in a disconnected state, when they log back in and the broker sends them to a different TS, it logs them on with a temporary profile.

Any ideas what could be causing this as there are GPO settings set for restricting them to a single session.

Thanks

↧

Unable to detect Smart Card Reader in Hyper-V (Windows Server 2012 R2) Virtual Machines Client (Windows Server 2012 R2)

July 10, 2016, 8:27 pm

≫ Next: How to active multiple remote session in a system

≪ Previous: Temp profile issues

Hi,

We have encountered an issue during the sharing of local resources (smartcard reader) from Hyper-V Host Server to the VM Clients. The smartcard reader was able to detect in the Host Server but unfortunately we can't able to share it to VM clients even using the Enhanced Session Mode.

From the client VM, the smartcard reader is under the Hidden Objects which I think because by default the smartcard is selected in the Local Resources.

Can you provide us an input on this concern, and if this is still a limitation of Hyper-V. Thanks.

↧

How to active multiple remote session in a system

August 4, 2016, 1:13 pm

≫ Next: EDGE Browser in Windows Server 2016 RDS

≪ Previous: Unable to detect Smart Card Reader in Hyper-V (Windows Server 2012 R2) Virtual Machines Client (Windows Server 2012 R2)

How to active multiple remote session in a windows 7 and windows 2008r2

↧

EDGE Browser in Windows Server 2016 RDS

August 4, 2016, 4:55 am

≫ Next: Add Back a rebuilt RD Virtualization Host server AND it's RD Desktop Collection to RDS service

≪ Previous: How to active multiple remote session in a system

Hi All,

because of LTSB (Long Time Service Branch) with Window Server 2016 there is no Option to use EDGE Browser with Windows Server 2016 RDS. That means that we have to use IE 11 for the next ten Years ?

Any Suggestions

Greetings

Martin

↧

Add Back a rebuilt RD Virtualization Host server AND it's RD Desktop Collection to RDS service

June 22, 2016, 11:56 pm

≫ Next: RDP (Remote Desktop) to Windows 10 without passwords not possible anymore. Bug or feature?

≪ Previous: EDGE Browser in Windows Server 2016 RDS

Hi I ran into problem when my Windows 2012 R2 RD Virtualization Host server "Host-A" crashed and I had to rebuild the O/S again. Joined Domain, Installed Hyper-V Role then the RD Virtualization Host Role.

As this RDVH "Host-A" is hosting my Personal Managed Desktop collections of Win 10 VMs, I had to also register back the desktop VMs. It also hosts some server VMs, one of which is the RDS server VM that was managing this "Host-A".

Problem is in my all-in-one RDS server (Connection Broker, Web Access, RD Gateway roles in 1 VM) now cannot recognize the desktops in the RDHV and the collection shows as 0 desktop!

RDS also can't properly recognize the RDVH "Host-A", I believe some config is needed but I don't know what to do.

Appreciate if anyone can help give the instructions to recover the RDVH host and the RD Collection back to the RDS service. Thanks!

↧

RDP (Remote Desktop) to Windows 10 without passwords not possible anymore. Bug or feature?

August 27, 2015, 12:16 pm

≫ Next: Cannot connect to Remote apps over VPN from windows 8.1 or higher

≪ Previous: Add Back a rebuilt RD Virtualization Host server AND it's RD Desktop Collection to RDS service

After upgrading two of my machines to Windows 10 (Education N clean install and Pro N upgrade from Win8.1), I was not able to set up Remote Desktop as I was used to since Windows 7 (maybe this was possible before, too).

I am used to configure Windows to allow RDP connections as a user without password (home usage only). Apparently this is not working anymore after upgrading to Windows 10. (I have enabled this by modifying secpol.msc 's security policies. Further informations provided if needed).

With the "no password" setup i get immediatly disconnected by the local machine which seems to auto login by itself after connecting via RDP. The only solution I managed to find so far was to set up a password.

Is this a bug or a feature?

Cheers

↧

Cannot connect to Remote apps over VPN from windows 8.1 or higher

August 1, 2016, 8:42 am

≫ Next: ghost user on my PC.

≪ Previous: RDP (Remote Desktop) to Windows 10 without passwords not possible anymore. Bug or feature?

I am having trouble with any clients who have their RDP upgrade above version 7.1 connect to our remote apps.

I can see event on the event viewer from the connection broker that the client has been allowed to connect to one of the host but the connection cannot be established.

Anyone running RDP v 7.1 can connect without a problem.

This seems to only effect anyone who is not within our office.

They would be on a different subnet

Ex:

Office 10.0.40.*

Remote Office 10.0.129.*

We do not have this issue with regular remote desktop connection only connections to our remote apps.

The servers running the Hosts and the connection broker are all server 2012 r2

Client computers range from windows 7 to windows 10

↧

ghost user on my PC.

July 29, 2016, 1:45 am

≫ Next: RDS shared printer best practice

≪ Previous: Cannot connect to Remote apps over VPN from windows 8.1 or higher

Well this is strange because i don't remember adding anyone into the domain of my computer.

this user can't be seen by active directory users and computers and i find that strange, although i checked

the option 'Advanced Features'. I just can see him in the CMD using the 'net users' command.

Anyone has any idea how i can find this user through the active directory users?

also i can't access group manager due to being in a domain and not in a local computer.

How can i unhide this user?

↧

RDS shared printer best practice

August 2, 2016, 9:54 am

≫ Next: Problem with connect to RDS2012R2 from external network without gateway role.

≪ Previous: ghost user on my PC.

Hi all,

We are experiencing printer spooler crashes, printers randomly disappearing and not working.

We have a 2012 R2 TS for approximately 30 users on an internal domain network.

Printers are deployed via print management which pushes out shared printers that are installed on our DC.

Is this the correct way to install printers on the terminal server or is there a better way?

↧

Problem with connect to RDS2012R2 from external network without gateway role.

July 28, 2016, 11:43 pm

≫ Next: Click apps in the RDWEB page does not open the application directly.

≪ Previous: RDS shared printer best practice

Hello everybody!

I have some problem with my terminal farm based on rds2012r2 but WITHOUT gateway role.
My environment is described below:
All servers are virtual machines on vmware.
- AD DC - test-ad-01 - 192.168.2.241
- Broker - test-br-01 - 192.168.2.242
- Session Host - test-rdsh-01 - 192.168.2.243

Also below I described rules for port forwarding:
ext.ip:3387 - 192.168.2.242:3389
ext.ip:3389 - 192.168.2.243

And I modifyed the RDP file for change port for brocker:
full address:s:TEST-BR-01.TEST.LOCAL:3387

So, when users connecting from internal network all is OK. But when I try to connect from external network it don't work.
Server with broker role has this record in Event Viewer:

RD Connection Broker successfully processed the connection request for user TEST\user. Redirection info:
Target Name = TEST-RDSH-01
Target IP Address = 192.168.2.243
Target Netbios = TEST-RDSH-01
Target FQDN = test-rdsh-01.test.local
Disconnected Session Found = 0x1

Can I change the Target IP Address to external IP, because I think it will solve my problem.

↧

Click apps in the RDWEB page does not open the application directly.

August 4, 2016, 8:14 am

≫ Next: File Association issue

≪ Previous: Problem with connect to RDS2012R2 from external network without gateway role.

I open up my RD WEB page and click on a published apps. The RDP file is downloaded and I have to doubleclick the RDP to open.

With that said, everytime when I click the apps, a copy of the RDP file is in my download folder.

Is there a way I can just click on the published app in my RD WEB page and the apps is opened on the fly?

↧

File Association issue

September 3, 2009, 3:34 am

≫ Next: Server 2012 (NOT R2) RDSH server UPD setup Questions

≪ Previous: Click apps in the RDWEB page does not open the application directly.

I am using Microsoft Dynamics AX as a Remote App, the file association used with the Dynamics client is .axc.
I have added a folder as an icon in TS Web Access which contains numerous .axc file for access to different AX environments.

The problem I have is that these AXC files do not show any association with a program when the folder is opened through TS Web Access. If I create the file association then it works fine. Yet when someone else logs in the file assocation is gone again for them. It's almost like its individual to profiles, but I didn't think this was supposed to be the case with file extensions?

When I log onto the server locally the file assocation is correct. Is there something in the registry that wipes this association for new users? Once the file association is made for a user, it stays. Problem is we restrict the programs users can run using GP and they are unable to run the 'Open With...' wizard, rightly so.

I have checked the file extension into the registry in HKCR\.axc and everything seems in order.

Any suggestions?

↧

Server 2012 (NOT R2) RDSH server UPD setup Questions

August 9, 2016, 9:20 am

≫ Next: How do I set up RDS on server 2012 R2?

≪ Previous: File Association issue

I am about to setup windows server 2012 (not r2) RDSH server

currently single server handling 35 users

I am looking at deploying UPD in this environment as the company will take on more users in the coming year so a second RDSH server will be added.

my question is when I come to setup the UPD's what is the max file setting?

default is 20gb does that mean that its set at 20gb and I will have 35 20gb vhdx files on my server or does it mean that it will start at 0 and grow as the profile grows if so I can set this to a lower amount as exchange will be limited to 2gb mailbox size so .ost files will be minimal on each profile

thanks in advance

simon

↧

How do I set up RDS on server 2012 R2?

August 10, 2016, 10:17 am

≫ Next: SSL cert needed for Windows 2012 RDS environment.

≪ Previous: Server 2012 (NOT R2) RDSH server UPD setup Questions

In what is fast becoming a trend, it appears the "guide" for setting up RDS is a trip down a rabbit hole that leads everywhere apart from where I want to go.

I have Server 2012 R2 installed, the machine needs to be used to allow multiple users to connect to it concurrently for testing purposes. I have installed RDS (Connection broker, gateway and licensing options) but I can find no instructions for actually installing/enabling the licenses we have for RDS.

How do I do this?

↧

SSL cert needed for Windows 2012 RDS environment.

August 9, 2016, 2:02 pm

≫ Next: 3rd Party Load Balancer with Windows 2012 R2 RDS

≪ Previous: How do I set up RDS on server 2012 R2?

I am trying to create a seamless login experience for my Windows 2012 RDS environment.

Currently, in my collection broker security settings, I am using "Negotiate" under security layer, and I have "Allow connections only from computers running Remote Desktop with Network Level Authentication" checked.

When I purchase a SSL certificate for the RD Connection Broker Enable Single Sign On and Publishing role services, can I just use a single cert such as mybrokerserver.mydomain.com?

As for the RD Web Access role service and RD Gateway, can I use another single cert such as remote.mydomain.com?

Using a wildcard probably makes more sense here, but we want to use an already existed Go Daddy UCC and add additional websites.

Please advise if you have an idea of what I should get.

Thanks.

↧

3rd Party Load Balancer with Windows 2012 R2 RDS

August 4, 2016, 7:04 pm

≫ Next: Client Licenses

≪ Previous: SSL cert needed for Windows 2012 RDS environment.

We have a small farm of 3 RDS servers and one separate RDCB server using Windows 2012 R2. We have decided not to use the RDCB server to handle to load balancing due to limitations and complexity, but instead work with a 3rd party load balancer(Snapt) that is agentless.

When someone first logs onto an RDS server, session is balanced across the farm appropriately. Things change though when a session becomes disconnected and the user wants to re-logon. At this point the user enters their credentials for the RDS session, the RDP screen goes black and then the logon screen appears again. I believe this is due to the second RDP session hitting a different server, CB realizing an active session exists on a different server, and moving the user to the appropriate server.

I believe the issue lies in our load balancer and not the connection broker but I wanted to see if I could get some feedback on this as my team and I might be missing something entirely.

Thanks,

Joe

↧

Client Licenses

August 8, 2016, 12:13 am

≫ Next: No Active Session from User but Stayed as Disconnected. - Pooled Collection

≪ Previous: 3rd Party Load Balancer with Windows 2012 R2 RDS

Hi!

We have two kind of licenses in our Windows 2008 Terminal Server. Device and User licenses. Our users are facing problem with connecting to the server and getting a message that says "There is no client access license available for this computer". Then we have to delete mslicence registry key to connect again.

Any Suggestions?

Thanks.

↧

No Active Session from User but Stayed as Disconnected. - Pooled Collection

August 9, 2016, 5:43 pm

≫ Next: user from one trusted domain not logon

≪ Previous: Client Licenses

Hi,

1. I have a user tim.holland that remotes into a Pooled VM. I believe he turned off his physical computer with this Remote Session active so now the status is "Disconnected" and VM is OFF. I couldn't start the Pooled VM so I restored to its checkpoint but Disconnected status remains. Tim cannot log back into one of these pooled VMs.

2. I tried to LOG OFF user from the Connections windows in Server Manager-->Remote Desktop Services-->Collection but error.

3. I do not have Cluster. Usually, migrate the VM to another Node will work but unfortunately this is only 1 server.

Any help is appreciated.

Thank you