Hi,

How can we change the remote desktop web access URL in Windows 2016 so that the applications can work from the internet. We have already installed a third party certificate. When we are trying to use the below command

"Set-RDPublishedName "remote.ourdomain.com"

It says "The RD Connection Broker server is not configured for high availability".

We don't want to use HA now.

Thanks.

RDP users are getting connections refused/dropped and a black screen. WIinver: 1607 (Build 14393.32.74). This is  terminal services on Windows Server 2016. On the server seeing these messages:

LogName:Microsoft-Windows-TerminalServices-LocalSessionManager/OperationalSource:Microsoft-Windows-TerminalServices-LocalSessionManagerEvent ID:36TaskCategory:NoneLevel:ErrorKeywords:User:          SYSTEMDescription:An error occurred when transitioning fromCsrConnectedin response to EvCsrInitialized.(ErrorCode0x80004005)LogName:ApplicationSource:Microsoft-Windows-WinlogonEvent ID:4005TaskCategory:NoneLevel:ErrorKeywords:ClassicUser:          N/ADescription:TheWindows logon process has unexpectedly terminated.

Hello, 

I am having trouble with communication between my fingerprint scanner and terminal server. I use the M2SYS fingerprint scanner as it works well with Visual FoxPro, however TS doesn't recognize it. 

Please assist :) 

Thanks 

Shamina

I have a RDS farm consisting of several Server 2012 R2 session hosts. I'm utilizing user profile disks and folder redirection.

The problem is as follows:

When a user logs off a session on one of the RDS session hosts, an eventID 1530 is logged, followed by an eventID 1533. The user's locally cached profile remains on C:\User of the session host with only the links to the folders that are specified in the user profile disk configuration (everything checked in "store only the following folders on the user profile disk").

Running process monitor (on the RDS session host) after the user has logged off the session host shows that svshost.exe still had open handles to the top level folders in the user's temporary profile:

So, the result of this behavior is that the next time the user connects to that RDS session host, a new local profile directory is created "c:\users\username.000", "c:\users\username.001", etc.

This is quite problematic because we are utilizing Google's G-Suite Outlook Sync connector and it would appear that at least some of the configuration for that points to hard-coded paths starting with "c:\users\username\", so if the cached profile is mounted in another folder, like "c:\users\username.000" Outlook cannot load the G-Suite profile.

I don't understand what is causing these handles to remain open after the user logs out of the session. The handles that remain open include:

c:\users\username\Appdata\Local

c:\users\username\Appdata\Roaming

c:\users\username\Desktop

c:\users\username\Documents

The only way to actually delete the local cached profile folder is to either force these handles closed (via process explorer) or reboot the RDS session host server, after which the locked folder can be deleted.

Has anybody else encountered this behaviour? It makes the setup with user profile disks unusable.

Hello,

I have two Windows Server 2016 servers (RDS-01 and RDS-02) on one client, each with RDS in standalone mode.

The RDS-01 server has the roles:
- Remote desktop access via the web The server
- Remote Desktop Services License Manager
- Remote desktop session host
- Service Broker for Remote Desktop Connections

RDS-02 has the role of "Remote Desktop Session Host". There is no automatic load balancing configured.

RDS-01 publishes RemoteApp programs, on which RDS-02 comes to connect.

The problem I have is this:
- The RDS-01 server is randomly crashed. That is, you can not open new TSE sessions (black screen, then server kick)

When this happens, I systematically have such errors in the event viewer: "An error occurred during the transition of CsrConnected in response to EvCsrInitialized. (Error code 0x80070057)"

Although we search the net, many people encounter this problem but no resolution was found.

The RDS-02 server does not present any problems with RDS session connection, like the one described above.

The updates installed on both servers are identical.

Has anyone ever encountered such crashes?
Thank you in advance for your help :)

PS : Sorry for my english

Side note. this all works fine using the legacy reweb and rds client.

When trying to connect using the web client, we get the usual "Oops, we couldnt connect".

When i look in the dev view, I see websocket connection to the gateway failed, 404:

WebSocket connection to 'wss://gateway.testcloud.co.uk/remoteDesktopGateway?CorId=%7B334da63a-1571-428b-903f-b23d4a860000%7D&ConId=%7B32369577-63bd-4dee-a4bc-dd8f08495d4e%7D&ClGen=HTML%3D1&ClBld=Type%3DRdClient%3B%20Build%3Dprivate&AuthS=SSPI_NTLM' failed: Error during WebSocket handshake: Unexpected response code: 404

Any ideas?

Hello,

I've set for my client a big RDS Farm, on two distincts locations. All of the users are using Wyses to connect to the farm. On the internal network everything is fine, but when trying to connect from outside, after login in, I get this message

"Your Computer can't connect to the remote computer because the Remote Desktop Gateway server is temporarily unavailable."

In the logs, I get those errors :

• Microsoft-Windows-TerminalServices-RDPClient/Operational : EventID 1033 :"CAAClientAdapter, :: 'm_spHelper->ReadCreds failed' in CAAClientAdapter::CreateTunnel at 380 err=[0xffffffff],"
• Microsoft-Windows-TerminalServices-RDPClient/Operational : EventID 1033 : "CClientProxyTransport, :: 'm_ClientAdapter->CreateTunnel failed' in CProxyRawTrans::CreateProxyConnection at 2116 err=[0x800759d9], "
• Microsoft-Windows-TerminalServices-RDPClient/Operational : EventID 1033 : "CClientProxyTransport, :: 'Gateway connection time out is 90' in CClientHTTPProxyTransport::Connect at 1099 err=[0x800759d9], "
• Microsoft-Windows-TerminalServices-RDPClient/Operational : EventID 1033 : "CClientProxyTransport, :: 'CreateConnection failed' in CClientHTTPProxyTransport::Connect at 1108 err=[0x800759d9], "
• Microsoft-Windows-TerminalServices-RDPClient/Operational : EventID 1033 : "CClientProxyTransport, :: 'Gateway Error' in CClientProxyTransport::SetErrorStatus at 2818 err=[0x800759d9],"
• Microsoft-Windows-TerminalServices-RDPClient/Operational : EventID 1033 : ":CClientProxyTransport, :: 'Gateway Error' in CClientProxyTransport::SetErrorStatus at 2818 err=[0x800706ba], "

The farm consists of 2 RDBroker in HA (with 2 SQL Servers AlwaysOn for the database), 2 RDGateway (HA), 2 RDWebAccess (HA), 1 RDlicence Server, an 10+ RDSH. A wildcard Certificate is set on the external name for all roles.

• rds.external.com : RR DNS name for the RD Brokers
• rdsweb.external.com : RR DNS name for the RDWebAccess

When connecting to the RDWebAccess FQDN (rdsweb.external.com) from external network, i can connect to the website, use my credential to view the collection of session I can connect to. But when I use one of them, I get this error message. If I download the rdp file, I can see that all the correct adress are in use:

full address:s:rds.external.com
gatewayhostname:s:rdsweb.external.com
workspace id:s:rds.external.com
use redirection server name:i:1
loadbalanceinfo:s:tsv://MS Terminal Services Plugin.1.CollectionName
use multimon:i:1
alternate full address:s:rds.external.com

As we use KEMP GeoLoadbalancing, I have in the public DNS a CNAME for rdsweb.extrernal.com, redirecting to rdsweb.geo.external.com, and the NS for this zone are set to the public IP of the distant site, with our internal DNS resolving all this to the correct farm member, for geo loadbalancing purpose.

Also the RAP and CAP policies are set in the 2 RD WebGateway.

Any hints on what to check or do to allow connection the farm from outise their network ?

Regards

my code is here:

CMsRdpClientShell m_MsRdpClientShell = m_rdp.get_MsRdpClientShell();

VARIANT font_val;
font_val.vt = VT_BOOL;
font_val.lVal = TRUE;
m_MsRdpClientShell.SetRdpProperty(_T("allow font smoothing"), font_val);

Hi

I was under the impression that CALs were backwards compatible. We are in the process of upgrading all Windows Server 2008R2 machines to Windows server 2016. Our citrix target devices are 2008R2 with about 1200 users connecting to Citrix and therefore each consuming a per user CAL. Our CALs were split half and half up to now, one half 2008R2 and the other half 2012 R2 per user CALs. On the remote desktop licensing manager i noticed that the 2008R2 sessions were not able to use the 2012 R2 CALs, instead a 2008R2 CAL was assigned and therefore showed as under licensed by twice the amount (the 2012R2 licenses remained unallocated)

Today I began the upgrade and installed 2016 CALs onto a new Windows Server 2016 machine. RDP sessions to 2016 machines consume these CALs fine but the 2008R2/2012R2 connections don't seem to pick it up, instead it installs a new license onto the licensing manager but no licenses are installed and total licenses are set at 0 with a few allocated.

Has anyone came across this before?

Hi All,

I have a Server 2008 R2 server that is a RDS Licensing Server and Connection Broker to 5x 2008 R2 RDS Session Hosts.

I understand the key to migrating is move the Connection Broker role to Server 2016 first, then add the Server 2016 Session Hosts to the farm

However I cannot use High Availability cluster to add a Server 2016 Connection Broker as my 2008 R2 server is Standard Edition, which does not support Failover Clustering.

Can I extract the Connection Broker settings (farm name etc.) and import them into a new replacement Connection Broker running on Server 2016 so I have the same farm name?

Or is the only way, to create a new RDS farm, with a new name, on Server 2016 running the Connection Broker role and then move the 2008 R2 Session Hosts to this broker? But then off course I'll have to update all my thin clients with the new name.

Thanks in advance.

Hello,

recently we want to move from redirect folders on our RDS enviroment to UPD.

We created new Collection, new RDSH. Everything works fine except that every time system create new folder for the user ex.

user.001

user.002

What's more we have in GPO rule to delete user folder on the server during logout. It wont happened.

I've searched Event log and every time i see errors like:

1533 - Windows cannot delete the profile directory C: \ Users \ Administrator.000.The cause of the error may be that the files in this directory are being used by another program.

20491 - Remote Desktop Services cannot disconnect the user disk for a user account with SID S-1-5-21-4205589905-739050087-1798985181-500.Error code: 0x91.38

I've found that in 2016 was a hotfix but we have updated system up 11.2019 year and problem still exists

What can we do?

Dear all,

1. Initial data:
   RD Gateway deployment (let assume that it is single instance, win2019server). Exposed to Internet
2. Windows workstations with allowed remote connections option enabled

Currently access to workstations can be obtained via RD Gateway

Target goal:

Get users possibility to connect to their workstations from browser interface.

Preliminary investigations:

Need to add RD Web access service + Remote Desktop web client.

Could someone please advise is this scenario possible or not?

I want to make a stress on that I need to access from browser not to a published via remote apps applications but to workstations via full RDP session.

Thanks in advance!

Hi,

I have a Windows Server 2012 R2 there i have installed:

RD Web Access

RD Connection Broker

RD Session Host

But RD Connection Broker service will not starta I get this 3 errors:

Event ID: 833 Source: TerminalServices-SessionBroker

The VMResource plugin failed to load. Error: VMResource is not a valid Win32 application. 

Event ID: 833 Source: TerminalServices-SessionBroker

The MS Default Provisioning Plugin plugin failed to load. Error: The group or resource is not in the correct state to perform the requested operation. 

Event ID: 898 Source: TerminalServices-SessionBroker

RD Connection Broker service failed to start. HRESULT = 0x8007139F.

I have checked VMResource in register in it´s look fine.

Regards Pierre

A few users are experiencing this problem.

Event ID: 5973

Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: The remote procedure call failed. See the Microsoft-Windows-TWinUI/Operational log for additional information.

And event ID: 1000

Faulting application name: ShellExperienceHost.exe, version: 10.0.14393.2125, time stamp: 0x5a990817
Faulting module name: Windows.UI.Xaml.dll, version: 10.0.14393.2125, time stamp: 0x5a9909e5
Exception code: 0xc000027b
Fault offset: 0x00000000006d710b
Faulting process id: 0x6b78
Faulting application start time: 0x01d3c1fbf1890ced
Faulting application path: C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
Faulting module path: C:\Windows\System32\Windows.UI.Xaml.dll
Report Id: 7c1dae0b-eec7-416c-b5c9-5148b1bc7ba6
Faulting package full name: Microsoft.Windows.ShellExperienceHost_10.0.14393.2068_neutral_neutral_cw5n1h2txyewy
Faulting package-relative application ID: App

When this happens the start menu will not work. This corresponds with me enabling the roaming of C:\Users\user\AppData\Local

I'm wondering if there is a folder I should exclude from roaming.

If it's not being caused by roaming the local folder then it may be caused by some GPO settings I also changed. I did this because windows search was out of control and consuming too many resources. Unfortunately I cannot disable search completely because of Outlook. My discussion on Outlook and search I had to re enable indexing outlook.

Any guidance on this is appreciated.

So far the only fix I've come up with is temporary, which is to delete the local profile and on the next login the start menu works. After a day or 2 it stops working again. I haven't totally recreated the user profile and I'm hoping this is not the ultimate fix because that would be a PITA to have to do that for all the users that have this happen.

We have recently faced many problems with our infrastructure based on the rds 2016 system. The most common problems are:

• login issues (when attempting to login, users are thrown back to the login screen)

• problems with redirecting usb devices

• connecting to CB in server manager takes a good few minutes.

How can I investigate what is the reason of this issue? Which logs and which CB / SQL / GW / WA servers are best to check? T hank you in advance for your response.

Hi All,

I have created a DC and I have 5 servers which have to be using RDS User CAL Licensing. DC is one of the 5 Servers that I have.

Now I have added all the machines to the Domain that I have created and also configured the Licensing Role as required, but now the servers are disconnected stating that it has passed the grace period. I have a User CAL License available with me. Below details are configured as per the requirement on of them

RD Licensing / RD Session Host / RD Gateway - All Servers

RD Connection Broker / RD Web Access - only on one server which is not a DC

I want to activate the license and make sure I have access to all the 5 Servers which are configured in the same domain.

Kindly suggest if any changes with the gpedit.msc is required or with the regedit which I presume shouldn't be done as I have a proper license available.

I would like to configure the existing mis-configuration to be corrected. Let me know what kind of details you need in order for me to get this fixed.

I am trying to apply a third-party wildcard cert to a RDS server farm.  The .pfx is imported successfully for the RD Connection Broker roles, but gives an error "Could not configure the certificate on one or more servers..." when I apply it to RD Web Access.  In the Event log, this generates event ID 20480 "Property page: Manage certificates update failed: due to Exception Failed to enumerate server SSL certificate information."

This is an internal farm, with no RD Gateway server, 1 Connection broker/Licensing/Web Access server, and three additional session hosts.

Hi. We have a new WS2016 RDS deployment (VMs on Hyper-V):

 - 2x WS2016 RDGW in NLB

 - 2x RDCB in HA configuration

 - couple RDSH servers

The problem is that in 30-50% of the connection attempts via these gateways, the connection is stuck at the "Configuring remote session" message. The connection is never successfully estabilished when this happens and it is closed without any error couple minutes later. When you try again (or just immediatelly cancel the connection and reconnect), the connection may or may not go through.

When this problem happens, I can see there's single HTTP connection on the RDGW that accepted the connection with 0 bytes transferred in either direction. There are no related errors at this time.

Can anyone help? Btw. this problem also happens when connecting to a different single-host RDS deployment through these gateways.

I suspected the problem might be in the NLB, but removing either of the gateways from the NLB configuration (and from RDS farm) doesn't help, the issue is still there.

Rebooting the gateways helps for a short while (hours), but then the issue is back.

There are some other errors on the gateways, but these don't correlate to the connection attempts (event 210, source terminalservices-gateway: "Http transport: IN channel could not find a corresponding OUT channel" with no other details).

RDP clients are various ... W8.1, W10, Mac...