Hi,

We are having an issue with redirected printers. Our RDS host is running Windows Server 2012 x64, our clients; Windows 10 x64 & Windows 7 x64.

For testing purposes we have shared WordPad through RDS, which is working fine. Our client printers (Brother MFC-9120CN and a DYMO LabelWriter 450 Turbo) are correctly showing on the host (Devices and Printers) and clients (Print Dialog) with the "(redirected X)" suffix, where X is a number.

The Brother is a network printer. The DYMO is connected via USB on a client.

When we try and print to any of the redirected printers nothing happens on the client, there are no messages or event logs. On the host there is the following Error in the PrintService event log:

"The document Print Document, owned by rdstest, failed to print on printer Brother MFC-9120CN Printer (redirected 2). Try to print the document again, or restart the print spooler.
Data type: RAW. Size of the spool file in bytes: 97316. Number of bytes printed: 76398. Total number of pages in the document: 1. Number of pages printed: 0. Client computer: \\SERVER Win32 error code returned by the print processor: 5. Access is denied."

We receive the same error with the DYMO printer which is more important to us. Additionally we get the same error using an admin account, with both printers.

We do not receive this issue using Microsoft XPS Document Writer (redirected X).

Things we have tried without success:

• Logging into RDS using an admin account
• Installing identical printer drivers on host and clients for each printer
• Restarting the spooler service on the host and clients
• Checking the System32/Spool/PRINTERS folder on host and clients - no files to delete
  
• Adding 'Everyone' (including write and modify access) to the System32/Spool folder (including sub-folders)
• Adding the RDS user (including write and modify access) to the System32/Spool folder (including sub-folders)
• Using the "CD\Windows\System32\Spool Cacls.exe PRINTERS /e /g users:C" command via command line (run as admin)
• Disabling "Use Remote Desktop Easy Print printer driver first" in the Group Policy Management Editor
• Disabling various other settings in the "Printer Redirection" section of the GPME
  
• Restarting the server
• Restarting the clients

We still receive the access denied error.

Furthermore, on the host, if we go to devices and printers and select a redirected printer and print a test page, the same error appears in the event log.

We've exhausted all of the solutions we could find. Could someone please offer us any other solutions?

Hi guys, 

RDS server is based on Windows Server 2012 R2 Standard. Not on all virtual machines with the same role but just on some of them I can see sporadically this issue.

User closes all apps and disconnects from the server but numerous Microsoft Word still run on the background which slows down the server performance. 

Is there any solution to resolve this issue? 

Regards

Hello all,

I'm trying to remove Remote Desktop Services from Server 2016. When trying Add Roles and Features, the options to uncheck are greyed out. I'm the only user connecting to this Server 2016 system with RDP.

Any ideas to remove?

Thanks,

Ok guys, I have been chasing some weird issues with RemoteApp deployment.  I had abandoned the GUI to deploy RemoteApp as the session collection would fail every time when deploying the apps.  I have it narrowed down to a specific program that has an issue.  When trying to setup the new RemoteApp via Powershell without specifying an -IconPath this app fails with this error:"New-RDRemoteApp : Could not find the specified icon:"

 If I try to deploy this app with the -IconPath parameter the process will complete.  However, as soon as this hits the RDweb, IIS crashes out with a generic runtime error.  I have tried to place the icon in the same root folder as the executable, no luck.  I have even opened the exe with Resource Hacker and created a new Icon and exe.  Same problem every time.  I can use powershell to remove the app from the collection and IIS immediately gives me the working RDweb interface after a refresh.  I am at a loss as to why this one application refuses to allow a successful deployment.  Any help is greatly appreciated.

Windows Server 2016 Datacenter

Running on VMware ESXi6.5

****-License01.corp.contoso.com = RD License, Broker, Gateway and Web Access (Also handles application licensing)

****-APPS01.corp.contoso.com = RD Session Host (houses the applications and data)

i am trying to disable Hyper V (its not going well if anyone could help id appreciate that). So i tried to install Hyper v and then delete it, but when i deleted it i had to restart and it must have deleted the GUI with it. So my VPS is blank with only Administratoron the top of the box. I need to find a way to get back into the server. Now i did find a solution to it using "SConfig" and that method (heres the link to it https://www.howtogeek.com/111967/how-to-turn-the-gui-off-and-on-in-windows-server-2012/ ) . However with mine number 12 says "Log Off User". It doesnt say anything to do with GUI. I know or i think i deleted it but i need it back to get back into my vps. Thanks .

Hello,

Because we are going to migrate from hypervisors i need to add an extra rd gateway, rd connection broker and rd web access server to an existing deployment.

Can someone point in to some documentation about adding extra servers? Or is it as easy as adding these server in server manager --> remote desktop services --> overview --> deployment servers --> tasks --> add

Thanks!

LEVD

I'm using RDS/Remoteapp on generally windows 10 clients to fully patched server 2016 hosts. 

I'm getting Disconnected due to a protocol error and it's sometimes fixed by rebooting the host. Each host has 8GB of ram and max one user at a time. Even after a reboot it'll often stop working a few minutes later. 

Google seems to have no results on this platform and issue over RDS

hi all,

we change from 2008R2 to 2016 1607, use Wyse Terminals and have slow Performance? I we click anything we have a delay from 1-2 seconds. Does anybody have same problem?

Chris

Hello, 

I have three servers.

Server-1-AD

Server-2-RDP

Server-3-RDP

I have to set up Remote desktop services role to provide office licenses to users connecting on the Server-2-RDP and Server-3-RDP servers.

Server-1-AD will be the licensing server.

Can you give me details about the following services

RD CONNECTION BROKER
RD SESSION HOST
RD WEB ACCESS

Which servers i have to install these?

My setup is simple

My active directory will be a terminal server to distribute license to the RDP servers.

Do i have to install office on the AD servers and then access it from RDP servers or i have to install office on both RDP servers?


Please help me to implement the scenario

Including which roles should be installed on which server.

I have tried to deploy RDS but i can only have web access and i cannot get start menu item automatically.

How do i do it?

Thank you for your help

I have searched for the information for a length of time but cannot locate any details on the official MS "Maximum Supported Simultaneous Connections" that is an option in RD Gateway for Server 2016.

We have encountered issues with performance in the past that we believe may be related to this limit being reached and breached, however there appears to be very little documentation in respect of the above.

We have 3 collections that are served by this single RD Gateway, with between 250-270 users attaching to these collections each day.

We are in the early stages of planning the migration to Azure for the RDS environment, however with the lack of availability of RDMI, we need to plan for building our RDS environment from the ground up and need confirmation ahead of commencement to ensure that we don't need to rip it all out and start again.

Appreciate some official confirmation of the "supported" number of connections. 

Client has a three server Remote Desktop Services environment running on Server 2016 (3 Session Hosts, 1 License Server/Connection Broker/Gateway). Server 1 runs all services, Servers 2 & 3 run only Session Host. Also running on Server 1 is a SQL Server 2012 instance. Logins currently disallowed on Server 1; Servers 2 and 3 service user logins currently. User Profile disks are enabled, pointing to a common share mountpoint on Server 2.

Client requested installation of a second SQL Server 2012 instance, Reporting Service Native mode only, to host another reporting services site.

Things I noticed right off hand:

mstsc /admin /v:server1   logs me in with a temporary profile.  I figure I'll tackle this problem later, since getting the new RS instance is the "priority". I go through a typical SQL 2012 RS installation, apply service pack 4, and then go through the configuration process. New RS instance use a different host header to direct traffic to, server1alias.mydomain.com, rather than server1. All of this seems to work as expected.

All this appears to work as I expect... until I attempt to connect to http://server1alias.mydomain.com/Reports or http://server1alias.mydomain.com/ReportServer, I am repeatedly prompted to login credentials (yes, I am supplying the correct username and password ;) when I attempt this).

Upon further investigation, it appears the "NT SERVICE\ReportServer$INSTANCENAME" account, when the Reporting Services instance is started, like the Administrator account, "logs in" with a temporary profile. I see a "Temp.NT Service.001" directory under c:\users. Also, if I attempt to restore a encryption key through the RS configuration utility, I receive an error message telling me the profile is "temporary".

If I go into the user profile list (Control Panel -> System and Security -> System -> Advanced -> User Profiles) I can see "NT Service\ReportServer$INSTANCENAME" is listed as a "Local" "Temporary" profile.

I am assuming this has something to do w/ this server also being a Remote Desktop Services Session Host, since I have installed dozens of MSRS instances over the years and have never seen this issue before. This is the first time I've been asked to establish a new MSRS instance on a server which also serves in a RDS capacity.

Short of uninstalling the session host service, does anyone have a suggestion on how I can go about fixing this problem?

Hi,

we host multiple clients with highly standardized environments but on the servers of a single customer i have the following behaviour:

• a User logs on to the RDS Server
• the User Profile Service (profsvc) writes the assigned FTAs (in this case protocols) into the user registry (observed in procmon)
• the User gets promted for which application to use for opening assigned type

The associations xml is right since it works with every other customer. The only FTAs (or protocols) included are http and https.

The values get written to the correct reg key: HKU\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http(s)\UserChoice

There ProgID and Hash are also written but it seems like the Hash is wrong.

If i set the default Program in the dialog (OpenWith), another Hash is written and this Hash seems to be correct since opening Hyperlinks works then. But since UsrClass.dat doesn't roam after a logoff the settings are gone.

If I take a hash value that has been set through the OpenWith dialog that is working and replace it with the hash set from profsvc it also works.

I read that the generation of the hash also includes the timestamp of the reg key. If this is true replacing the hash with an older version should not work right?

Since this behaviour only occurs on one of our clients i do not rule out the possibility of customizations made by the customer but i can not find any further clues to pin down the culprit. 

Said Server is a 2012 R2 with latest patches, Citrix VDA 7.6, Citrix UPM 5.5. The issue occurs on all tested clients (Win7, Win10, IGEL ThinClients)

What are other areas i could look or tools i could use to do any further analysis? My traces so far involved monitoring the activity on said registry keys and the mentioned associations.xml in procmon. In both cases only svchost with UserProfileService on the Stack accessed said items.

Thanks in advance!

associations.xml:

<?xml version="1.0" encoding="UTF-8"?><DefaultAssociations><Association ApplicationName="Internet Explorer" ProgId="IE.HTTP" Identifier="http"/><Association ApplicationName="Internet Explorer" ProgId="IE.HTTPS" Identifier="https"/></DefaultAssociations>

Stack of the RegSetValue Operation on the hash on User login:
0	ntoskrnl.exe	RtlEqualUnicodeString + 0x1f00	0xfffff8033d425d80	C:\WINDOWS\system32\ntoskrnl.exe
1	ntoskrnl.exe	SeAssignSecurity + 0x2d77	0xfffff8033d45d5cf	C:\WINDOWS\system32\ntoskrnl.exe
2	ntoskrnl.exe	setjmpex + 0x6523	0xfffff8033d1d51a3	C:\WINDOWS\system32\ntoskrnl.exe
3	ntdll.dll	NtSetValueKey + 0xa	0x7ffaead70d5a	C:\WINDOWS\SYSTEM32\ntdll.dll
4	KERNELBASE.dll	RegCreateKeyExW + 0x187	0x7ffae8161477	C:\WINDOWS\system32\KERNELBASE.dll
5	KERNELBASE.dll	RegSetValueExW + 0x141	0x7ffae8161601	C:\WINDOWS\system32\KERNELBASE.dll
6	SHELL32.dll	OpenRegStream + 0x2daf	0x7ffae97924df	C:\WINDOWS\system32\SHELL32.dll
7	SHELL32.dll	Ordinal714 + 0x32ad	0x7ffae9840f2d	C:\WINDOWS\system32\SHELL32.dll
8	SHELL32.dll	SHGetFolderPathAWorker + 0x74b	0x7ffae98568fb	C:\WINDOWS\system32\SHELL32.dll
9	SHELL32.dll	SHGetFolderPathAWorker + 0xa5c	0x7ffae9856c0c	C:\WINDOWS\system32\SHELL32.dll
10	SHELL32.dll	SHGetFolderPathAWorker + 0x904	0x7ffae9856ab4	C:\WINDOWS\system32\SHELL32.dll
11	SHELL32.dll	SHGetFolderPathAWorker + 0x148a	0x7ffae985763a	C:\WINDOWS\system32\SHELL32.dll
12	SHELL32.dll	SHGetFolderPathAWorker + 0xdde	0x7ffae9856f8e	C:\WINDOWS\system32\SHELL32.dll
13	SHELL32.dll	Ordinal891 + 0x17a36	0x7ffae98c6ae6	C:\WINDOWS\system32\SHELL32.dll
14	profsvc.dll	profsvc.dll + 0x4ad8	0x7ffae59b4ad8	c:\windows\system32\profsvc.dll
15	profsvc.dll	profsvc.dll + 0x499b	0x7ffae59b499b	c:\windows\system32\profsvc.dll
16	profsvc.dll	UserProfileServiceMain + 0xe69	0x7ffae59c2079	c:\windows\system32\profsvc.dll
17	profsvc.dll	UserProfileServiceMain + 0x16f1	0x7ffae59c2901	c:\windows\system32\profsvc.dll
18	profsvc.dll	profsvc.dll + 0x7d3d	0x7ffae59b7d3d	c:\windows\system32\profsvc.dll
19	profsvc.dll	profsvc.dll + 0x68da	0x7ffae59b68da	c:\windows\system32\profsvc.dll
20	ntdll.dll	TpSimpleTryPost + 0x1be	0x7ffaeacf679e	C:\WINDOWS\SYSTEM32\ntdll.dll
21	ntdll.dll	RtlFreeUnicodeString + 0x17ed	0x7ffaead18e8d	C:\WINDOWS\SYSTEM32\ntdll.dll
22	KERNEL32.DLL	BaseThreadInitThunk + 0x22	0x7ffae8c213d2	C:\WINDOWS\system32\KERNEL32.DLL
23	ntdll.dll	RtlUserThreadStart + 0x34	0x7ffaeacf54f4	C:\WINDOWS\SYSTEM32\ntdll.dll

正規ライセンスをもって、ドメイン参加したWindows 2016サーバマシンに、

RDS ライセンスサーバをインストールし、アクティベートを成功し、

CAL (user)ライセンスをインストールし、診断ツールでチェックしていても、正常。

ライセンス数が１０個に対して、ユーザ２つにそれぞれアサインされていて、残りのライセンスは８個。

RemoteAppの配布も、リモートPC接続も、同じドメインにある他のマシンから接続できている。

ライセンスの状態もアクティブとなっていて、有効期限は「期限切れなし」となっている。

しかし、CALライセンス情報は、有効期限として、発行日から6０日後となっている。

エラーも何も発生していないのですが、なぜ、CALライセンスの有効期限が「期限切れなし」とならないでしょうか？

I am having a very strange issue while I login via Remote desktop on my Domain Controller.  I didn't do any Windows updates or any changes at all.  I just walked in one morning and it started doing this.  I have since updated the domain controller and my VM Host with all the latest windows updates as of October 2018, rebooted and still having issues.  Nothing seems to work.

Sometimes, but not all of the time I can't login as it will just hang with the message

"Please wait for the User Profile Service....".

I have rebooted my server that the User profiles are located on and I have rebooted the Domain controller and I can login at first but at logout it will lock up and I don't know why.

There is plenty of space where the User Profile information is stored and I can get to it via UNC paths when it's working fine.

\\server\Profile$\

Event Logs are saying on the Domain Controller:

I am getting an EVENT ID: 6005 which is "The winlogon notification subscriber <Profiles> is taking long time to handle the notification event (Logon).

So basically I am getting Event ID error 6001 to 6006 and I don't understand why I am getting this, it doesn't make a lot of sense.

Hi,

Is it possible to refresh a windows 2012 server remotely by using rdc but don't lose Remote Desktop connection after windows is reinstalled if we run windows setup within the currently installed windows 2012?

thanks.

I have a windows 10 operating system (amazing one) ..Let me tell u exactly what is happening. In order to connect the clients network we connect to one of the SSN SSL Gateways Service touch points - select any region , from there we get connected to windows secure application manager so it looks like this

from there we open another url which has got dedicated farms or jumpstations . we select the customer and we open the ica file

when i try connecting to the customer environment i get the below error message

the version which i have on my client machine is the following 4.12  any help would be greatly appreciated

the devil

 I have  setup 2016 R2 RD Gateway in DMZ in a work-group environment.

I have a Windows AD in the inside network. Is there a way to enable the authentication on RD gateway using AD DC as external/LDAP authentication? As a policy I cannot join DMZ systems to inside domain.

Hi,

AWS Windows Server 2016 Datacenter, a production Server for my client is impaired. The client has computers and printers at their office location, users RDS into AWS Cloud Server and print using RDS print redirection.

Since a few days ago the RDS print redirection stopped working reliably. No error message after hitting "Print a Test page", the print job shows up in the queue and disappears after a couple of seconds.

Print redirection often works and some other times doesn't work for everyone in that location. The only time I know for a fact it works is after rebooting the server. It takes either one or few times of disconnect/reconnect from RDS that the RDS print redirection stops working.

I did everything I can on a local machine and network. They all work fine 100% of the time. I restarted Win Server 2016 Spooler and it still doesn't work. One other condition the RDS printing worked is when I reinstalled the printer driver on local machine newly but it stops working after one or few RDS disconnects and reconnects.

It is so frustrating, I bought a brand new hp laserjet pro-MFP m447fdw printer it didn't help. I bought a new Cisco SMB router, it didn't help. Apparently, it only has something to do with Windows Server 2016.