I don't find an documented answer to this question, but when using RDS through Azure Web Proxy, you are tied to legacy RPC-HTTP, right? UDP is not supported?

Hi Team,

I am facing the RDP session issues as you can find in my attachments.

 In our environment we take RDP to a  Windows Server 2012 R2 (Jump Server) - connected to our environment Via VPN Tunnel or with Public IP.

The Jump server is connected to another 3 Servers in different location (datacenter) via VPN Tunnel. So first we take remote to Jump server and from there we take remote to other 3 Servers in different location.

But right now we are having issues with RDP when we take from Jump Servers to Other 3 servers. I am getting the errors as per the attachment.

Steps Taken:

ON JUMP Server

1. Check Telnet to other 3 servers for 3389 - Working
2. Tried to take remote with Others Users - Didn't connect
3. Updated some windows patches and Restarted the Server.
4. Even created a new User on 3 servers and tried to take remote from JUMP - Not working.
5. Tried to take remote to other local servers(Same Jump server environment)  - Working.
6. Verified VPN Tunnel Connectivity also from firewall level.

ON 3 Remote servers

1. Server Still working.
2. They can able to Login with same users from local .

Please help me to resolve this issue .

Thanks in Advance

Regards,

Aravind S

I'm having an issue on a single RDS 2016 server at the moment where the start menu doesn't open.  

I've gone though lots of steps including sfc /scannow  (No errors)   DISM with all the options (No Errors)

I've cleared the Registry in firewall policy\restricted services\configurable\system.

I believe the issue is that I don't have any applications registered in the get-appxpackage at all, it just comes back blanks where as on working machines I get a list of about 15.

I've tried to install the packages by hand using variations of 

Add-AppxPackage -DisableDevelopmentMode -Register C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\AppxManifest.xml -Verbose 

This returns the following;

Add-AppxPackage : Deployment failed with HRESULT: 0x80073CF6, Package could not be registered.
An internal error occurred with error 0x800705AA. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
NOTE: For additional information, look for [ActivityId] 5597e571-c93a-001c-e6eb-97553ac9d401 in the Event Log or use the command line Get-AppxLog -ActivityID
5597e571-c93a-001c-e6eb-97553ac9d401
At line:1 char:1
+ Add-AppxPackage -DisableDevelopmentMode -Register C:\Windows\SystemAp ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : WriteError: (C:\Windows\Syst...ppxManifest.xml:String) [Add-AppxPackage], IOException
    + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand

If I then use Get-AppxLog -ActivityID5597e571-c93a-001c-e6eb-97553ac9d401

Time                      ID           Message
----                      --           -------
20/02/2019 17:22:29       301          The calling process is powershell.exe
20/02/2019 17:22:29       603          Started deployment Register operation on a package with main parameter: AppxManifest.xml and Options: 0. See
                                       http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       10002        Creating Resiliency File
                                       C:\ProgramData\Microsoft\Windows\AppRepository\75f29027-c919-4974-89c9-f53bb4413b5f_S-1-5-21-1787921346-3847137862-2124306101-500_1.rslc for
                                       Register Operation on Package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy.
20/02/2019 17:22:29       607          Deployment Register operation on package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy has been de-queued and is running
                                       for user FISRDS1\Administrator.
20/02/2019 17:22:29       613          Adding uri to the list of Uris: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\AppxManifest.xml.
20/02/2019 17:22:29       447          GetFullyQualifiedReference from the String Resource Map for package full name:
                                       Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy and reference string: Microsoft Corporation failed.
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.visualElements windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.search windows.fileOpenPicker windows.fileSavePicker windows.cachedFileUpdater
                                       windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch windows.fileTypeAssociation windows.protocol
                                       windows.appointmentsProvider windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks
                                       windows.webAccountProvider windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService
                                       windows.appointmentDataProvider windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience
                                       windows.dialProtocol windows.restrictedLaunch windows.accountPictureProvider windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.activatableClass.collector .
20/02/2019 17:22:29       10000        About to service package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy. Setting the package state to disabled returned
                                       with 0x80070490.
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.stateExtension windows.applyDataExtension windows.repositoryExtension
                                       windows.capability windows.MRT windows.visualElements windows.alarm windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.gameExplorer windows.search windows.fileOpenPicker windows.fileSavePicker
                                       windows.cachedFileUpdater windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch
                                       windows.fileTypeAssociation windows.contentType windows.protocol windows.appointmentsProvider windows.defaultPrograms
                                       windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks windows.webAccountProvider
                                       windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService windows.appointmentDataProvider
                                       windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience windows.dialProtocol windows.restrictedLaunch
                                       windows.integrityExtension windows.licensing windows.accountPictureProvider AppSync windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.DeviceSetupManager windows.activatableClass.collector windows.certificates windows.preCompilationExtension
                                       windows.ntServices windows.wmiProviders windows.iisModules windows.performanceProviders windows.eventProviders windows.runTime
                                       windows.DeviceAccess windows.indexedDB windows.MicrosoftAccountClient.SignOut windows.searchIndexer windows.geolocation windows.userDataAccess
                                       windows.repositoryExtension.remove windows.stateExtension.remove .
20/02/2019 17:22:29       827          Capability parsing started for the package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy
20/02/2019 17:22:29       5252         An internal error occurred with error 0x800705AA. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       306          error 0x800705AA: While processing the request, the system failed to register the windows.stateExtension extension due to the following error:
                                       Insufficient system resources exist to complete the requested service.
                                       .
20/02/2019 17:22:29       316          error 0x800705AA: Cannot register the request because the following error was encountered during the registration of the windows.stateExtension
                                       extension: Insufficient system resources exist to complete the requested service.
                                       .
20/02/2019 17:22:29       5252         An internal error occurred with error 0x80070002. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       331          error 0x80070002: While reverting the request, the system failed to de-register the windows.stateExtension extension due to the following
                                       error: The system cannot find the file specified.
                                       .
20/02/2019 17:22:29       300          error 0x80073CF6: Cannot register the Microsoft.Windows.Cortana_cw5n1h2txyewy package due to the following error: Package could not be
                                       registered.
                                       .
20/02/2019 17:22:29       605          The last successful state reached was ResolvedDeferredRegistrations. Failure occurred before reaching the next state RegistrationChanged. hr:
                                       0x80073CF6
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.stateExtension windows.applyDataExtension windows.repositoryExtension
                                       windows.capability windows.MRT windows.visualElements windows.alarm windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.gameExplorer windows.search windows.fileOpenPicker windows.fileSavePicker
                                       windows.cachedFileUpdater windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch
                                       windows.fileTypeAssociation windows.contentType windows.protocol windows.appointmentsProvider windows.defaultPrograms
                                       windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks windows.webAccountProvider
                                       windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService windows.appointmentDataProvider
                                       windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience windows.dialProtocol windows.restrictedLaunch
                                       windows.integrityExtension windows.licensing windows.accountPictureProvider AppSync windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.DeviceSetupManager windows.activatableClass.collector windows.certificates windows.preCompilationExtension
                                       windows.ntServices windows.wmiProviders windows.iisModules windows.performanceProviders windows.eventProviders windows.runTime
                                       windows.DeviceAccess windows.indexedDB windows.MicrosoftAccountClient.SignOut windows.searchIndexer windows.geolocation windows.userDataAccess
                                       windows.repositoryExtension.remove windows.stateExtension.remove .
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.visualElements windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.search windows.fileOpenPicker windows.fileSavePicker windows.cachedFileUpdater
                                       windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch windows.fileTypeAssociation windows.protocol
                                       windows.appointmentsProvider windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks
                                       windows.webAccountProvider windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService
                                       windows.appointmentDataProvider windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience
                                       windows.dialProtocol windows.restrictedLaunch windows.accountPictureProvider windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.activatableClass.collector .
20/02/2019 17:22:29       10001        Finished servicing package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy. Setting the package state to enabled returned
                                       with 0x0.
20/02/2019 17:22:29       401          Deployment Register operation with target volume C: on Package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy from:
                                       (AppxManifest.xml)  failed with error 0x80073CF6. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       404          AppX Deployment operation failed for package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy with error 0x80073CF6. The
                                       specific error text for this failure is: An internal error occurred with error 0x800705AA. See http://go.microsoft.com/fwlink/?LinkId=235160
                                       for help diagnosing app deployment issues.

I can't seem to get the system to re-register those applications!

Open to any suggestions?  (Please no, have you restarted the server!)

This happens on all users including local admin and new accounts.  Happens in Safe and Clean Boot.

Thanks.

Hello guys.

From unknown time on production farm creating a pool collection start failed with no error.
https://prnt.sc/pwddy1

Hosts Hyper-v servers in Failover Cluster with CSV. HA configured with database on remote mssql server. Error comes out right after exporting template.Howeverthe template appears in the selectedfor exporting directory.

CB,Hosts - windows server 2016 with last updates.

Template - i tryied several, even with templated which works in another pool.Windows10pro1806,Windows10pro1903

On CB rdms-ui-operational says, that collection created successfully https://prnt.sc/pwfv57

rdms-ui-admin says, that collection creation failed https://prnt.sc/pwfvqa

on vm-host export was successfull https://prnt.sc/pwfxkn

C:\Windows\System32\tssesdir\*.xml there is no job associated with this task

https://support.microsoft.com/en-sg/help/2747656/introduction-to-log-files-that-are-useful-for-troubleshooting-rds-issu

doesnt not help, no such file on connection broker even after add reg params

IN CB Databases i have some more interesting picture:

SELECT *
  FROM [DBCBSRV].[rds].[Pool]

gives https://prnt.sc/pwg294 , where vdi3 is pool, but it works normally.

SELECT *
  FROM [DBCBSRV].[rds].[ErrorLog]
  WHERE DATEADD(dd, 0, DATEDIFF(dd, 0, TimeStamp)) = DATEADD(dd, 0, DATEDIFF(dd, 0, GETDATE()))

gives https://prnt.sc/pwg48n

any suggestions?

Hi,

So nothing like being on the cutting edge......

I have been testing Server 2019 RDS and so-far-so-good apart from an issue with the Windows Search Service.

It appears that in Server 2019 each user gets their own search database EDB file in their profile path (appdata\roaming). e.g.

C:\Users\username\AppData\Roaming\Microsoft\Search\Data\Applications\S-1-5-21-3901271148-1553943383-1671037523-1629\S-1-5-21-3901271148-1553943383-1671037523-1629.edb

When they log on and log off; this is connected to the search service and the following event log is generated

Source:ESENT
EventID: 326
SearchIndexer (10896,D,50) S-1-5-21-3901271148-1553943383-1671037523-1629: The database engine attached a database (3, C:\Users\username\AppData\Roaming\Microsoft\Search\Data\Applications\S-1-5-21-3901271148-1553943383-1671037523-1629\S-1-5-21-3901271148-1553943383-1671037523-1629.edb). (Time=0 seconds)

Unfortunately it appears that this process is not very stable and on some logons the database in the users profile does not attach and the following error is generated

Source:Search
EventID: 3057
The plug-in manager <Search.TripoliIndexer> cannot be initialized.
Context: S-1-5-21-3901271148-1553943383-1671037523-1629 Application

Source:Search
EventID: 3028
The gatherer object cannot be initialized.
Context: S-1-5-21-3901271148-1553943383-1671037523-1629 Application, SystemIndex Catalog
Details: The specified object cannot be found. Specify the name of an existing object.  (HRESULT : 0x80040d06) (0x80040d06)

And a few more similar but related errors....

No subsequent logon/off will succeed in attaching the database until the Windows Search service is restarted

I am not testing with User Profile Disks or Roaming Profiles
There is no AV on the server

Any ideas?

Andy

Andrew

Hi,

ive been experiencing an issue on a setup ive configured in Azure:

1x Windows Server 2019 (RDweb + RDGateway)

1x Windows Server 2019 (Connection Broker/License Manager)

1x Windows Server 2019 (Session Host)

I have used Self Signed certificates for testing and have applied the same certificate for the RDWeb and Gateway role, pointing to the public FQDN (<VM>.uksouth.cloudapp.com) of the VM, and another self signed certificate for the Connection Broker pointing to the local DNS of the COnnection Broker server (VM.contoso.com).

I have published the rdweb client following the microsoft documentation with a few remoteapps (Calculator, Wordpad and Chrome).

The security settings for this collection is set to "Negotiate" with Encryption set to "Client Compatible".

When i connect to the RDweb client from my browser i can log in successfully and can see the published remoteapp programs, If i select to launch the appication by 'downloading RDP file', i can connect to these applications no problem. However, when i choose to launch via browser, the mesage i get is:

Oops, Could not connect to calculator

there was a security error - contact admin .... etc.

i have recorded the log and this is the log that i have captured:

2019-12-11T11:13:00.826Z Exception: Possibly unhandled rejection: backdrop click Cause: undefined

at Object.Logger.a.error (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/client.194eecb6.js:1:3067),at https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/client.194eecb6.js:5:6851,at j (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/components.35fcac4e.js:6:289),at n.$digest (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/components.35fcac4e.js:6:6299),at https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/components.35fcac4e.js:6:8087,at Uc.b [as completeTask] (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/components.35fcac4e.js:6:14224),at https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/components.35fcac4e.js:4:16482

2019-12-11T11:13:03.666Z Exception: Possibly unhandled rejection: backdrop click Cause: undefined

at Object.Logger.a.error (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/client.194eecb6.js:1:3067),at https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/client.194eecb6.js:5:6851,at j (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/components.35fcac4e.js:6:289),at n.$digest (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/components.35fcac4e.js:6:6299),at https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/components.35fcac4e.js:6:8087,at Uc.b [as completeTask] (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/components.35fcac4e.js:6:14224),at https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/components.35fcac4e.js:4:16482

2019-12-11T11:13:06.169Z RdpFileParser(NORM): Setting "redirectclipboard" = "1"

2019-12-11T11:13:06.191Z RdpFileParser(NORM): Setting "redirectprinters" = "1"

2019-12-11T11:13:06.192Z RdpFileParser(NORM): Setting "redirectcomports" = "1"

2019-12-11T11:13:06.192Z RdpFileParser(NORM): Setting "redirectsmartcards" = "1"

2019-12-11T11:13:06.192Z RdpFileParser(NORM): Setting "devicestoredirect" = "*"

2019-12-11T11:13:06.192Z RdpFileParser(NORM): Setting "drivestoredirect" = "*"

2019-12-11T11:13:06.192Z RdpFileParser(NORM): Setting "redirectdrives" = "1"

2019-12-11T11:13:06.193Z RdpFileParser(NORM): Setting "session bpp" = "32"

2019-12-11T11:13:06.193Z RdpFileParser(NORM): Setting "prompt for credentials on client" = "1"

2019-12-11T11:13:06.193Z RdpFileParser(NORM): Setting "span monitors" = "1"

2019-12-11T11:13:06.193Z RdpFileParser(NORM): Setting "use multimon" = "1"

2019-12-11T11:13:06.193Z RdpFileParser(NORM): Setting "remoteapplicationmode" = "1"

2019-12-11T11:13:06.193Z RdpFileParser(NORM): Setting "server port" = "3389"

2019-12-11T11:13:06.194Z RdpFileParser(NORM): Setting "allow font smoothing" = "1"

2019-12-11T11:13:06.194Z RdpFileParser(NORM): Setting "promptcredentialonce" = "1"

2019-12-11T11:13:06.194Z RdpFileParser(NORM): Setting "gatewayusagemethod" = "2"

2019-12-11T11:13:06.194Z RdpFileParser(NORM): Setting "gatewayprofileusagemethod" = "1"

2019-12-11T11:13:06.194Z RdpFileParser(NORM): Setting "gatewaycredentialssource" = "0"

2019-12-11T11:13:06.194Z RdpFileParser(NORM): Setting "full address" = "VM-UKS-RDSBLM01.CONTOSO.COM"

2019-12-11T11:13:06.195Z RdpFileParser(NORM): Setting "alternate shell" = "||win32calc"

2019-12-11T11:13:06.195Z RdpFileParser(NORM): Setting "remoteapplicationprogram" = "||win32calc"

2019-12-11T11:13:06.195Z RdpFileParser(NORM): Setting "gatewayhostname" = "<VM>.uksouth.cloudapp.azure.com"

2019-12-11T11:13:06.195Z RdpFileParser(NORM): Setting "remoteapplicationname" = "Calculator"

2019-12-11T11:13:06.195Z RdpFileParser(NORM): Setting "remoteapplicationcmdline" = ""

2019-12-11T11:13:06.195Z RdpFileParser(NORM): Setting "workspace id" = "VM-UKS-RDSBLM01.contoso.com"

2019-12-11T11:13:06.195Z RdpFileParser(NORM): Setting "use redirection server name" = "1"

2019-12-11T11:13:06.196Z RdpFileParser(NORM): Setting "loadbalanceinfo" = "tsv://MS Terminal Services Plugin.1.Baseline_Bywater"

2019-12-11T11:13:06.196Z RdpFileParser(NORM): Setting "alternate full address" = "VM-UKS-RDSBLM01.CONTOSO.COM"

2019-12-11T11:13:06.196Z RdpFileParser(NORM): Setting "signscope" = "Full Address,Alternate Full Address,Use Redirection Server Name,Server Port,GatewayHostname,GatewayUsageMethod,GatewayProfileUsageMethod,GatewayCredentialsSource,PromptCredentialOnce,Alternate Shell,RemoteApplicationProgram,RemoteApplicationMode,RemoteApplicationName,RemoteApplicationCmdLine,RedirectDrives,RedirectPrinters,RedirectCOMPorts,RedirectSmartCards,RedirectClipboard,DevicesToRedirect,DrivesToRedirect,LoadBalanceInfo"

2019-12-11T11:13:06.196Z RdpFileParser(NORM): Setting "signature" = "AQABAAEAAAADBQAAMIIE/wYJKoZIhvcNAQcCoIIE8DCCBOwCAQExDzANBglghkgB ZQMEAgEFADALBgkqhkiG9w0BBwGgggNbMIIDVzCCAj+gAwIBAgIQGUWEaSod/rFL FmlfakV0hDANBgkqhkiG9w0BAQsFADApMScwJQYDVQQDDB5WTS1VS1MtUkRTQkxN MDEuYnl3YXRlcnMuY28udWswHhcNMTkxMjAzMTA1MDUxWhcNMjAxMjAzMTExMDUx WjApMScwJQYDVQQDDB5WTS1VS1MtUkRTQkxNMDEuYnl3YXRlcnMuY28udWswggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxsJuQ7kepqc2UJspEW7sjW4ri ZLW0v9qj9ru/NGJt8uMEFDBj0qeQWq0Li//bLZegY/y4Xa5ygSeflwz5eRw1d6oa 8O5/vywXNrloBFZ3pCCA23Ts3I+viwjqyXeA2WyXN3s/Kxi2UjK9vJVm97pVoKCf aJjzEdmC/z7FlK16gjFkoAf5vYP7kbcXn8kB3bTDe/JTeEkYqNAy9JrqLtDvCm+t pHlpCe34Z1WNOtRSr/FwcAqu4JnfK1qAmXfpwMwKH+QTJD2Ybj4L9Hqg8CKU1rVe B/tZSHeN5ffR1kdnFnRay+82mo75ATG9CFhBtceM9ZAvVEZaWO5dsyfLilFBAgMB AAGjezB5MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYB BQUHAwEwKQYDVR0RBCIwIIIeVk0tVUtTLVJEU0JMTTAxLmJ5d2F0ZXJzLmNvLnVr MB0GA1UdDgQWBBQy3yrr5JM19k9C8pXiFvtgVdo0tjANBgkqhkiG9w0BAQsFAAOC AQEACjGr4/YAR34jR8Zbh9cWCT9G6RdXkJUP73ug6eWbHbuPMXbD3ifC1cC3jdc7 eRZ8DLAZsW04ZOSBgslkSnc6xnIB+fflQGAjGD69GQw4yUeqAR1pl855quT+Oebn nTNNhZfH4cR6z57+dYxpl0pv7E0j9fBLbvM7AsvtjfMqDNLa7yGCtgdf/FIT1mA8 ZMgdD2atrwKHZ54t93KoJTrHDWLh4dZ/xtRQ2OkVCODs7KYtbrF83KaymZ37gl3E aagGhMtb28YlF6nKhVydewrIL2aaVbiiCcIUbXZSW8MfHwa2xDMs1357KZawXjjM 5ub15ZrNPpHpoOYIVpMekmsNOTGCAWgwggFkAgEBMD0wKTEnMCUGA1UEAwweVk0t VUtTLVJEU0JMTTAxLmJ5d2F0ZXJzLmNvLnVrAhAZRYRpKh3+sUsWaV9qRXSEMA0G CWCGSAFlAwQCAQUAMA0GCSqGSIb3DQEBAQUABIIBAH8PVTY9ZWJbD0B3a7OhzgiR I86b9oqcxcxA6ZBDoqANPVn68u3LlzaHmEaIpJckRfTkRBu3n4rLSljwYi0XHspf 3fFRy6i59QXLhF1fAwfBgcpiFO8uBo94GVCWgpqhb+HeSlWGztQ/aS+pP5pBDWTq UDOb5VOKKovb23k60878FhP3Lpg8wrCx4K/CZbTx5EaEXNenREsuWQTY155tnFDi whujhkzjVBnRtVFj66pn9CUfuyd1kNT4PXplwoCTHB0687WnqBNRQrXotZLK/6FF L73ShmVZWwLUB+mLc2mWlSSeGRVbsPkTLctF9MSiKtIZWJes1n3Fbdhc9fMIlcw= "

2019-12-11T11:13:06.243Z [SessionFactory] Redirections request

2019-12-11T11:13:10.113Z [ConnectionFactory] Creating connection to:

2019-12-11T11:13:10.114Z [object Object]

2019-12-11T11:13:10.219Z RdClientConnectionProxy::Create(NORM): loading webworkers from path: https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js

2019-12-11T11:13:10.243Z WebWorker(NORM): Created Webworker with path: https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js onMessage: HandleConnectionMessage

2019-12-11T11:13:10.425Z TLS::EnsureOSSLSeeded(NORM): A seed of 256 bytes has been provided for OSSL

2019-12-11T11:13:10.926Z [SessionProvider] Connection created event received.

2019-12-11T11:13:10.927Z [SessionFactory] Trusting collection

2019-12-11T11:13:10.927Z [SessionFactory] Launching remote app: ||win32calc

2019-12-11T11:13:10.927Z [Connection] Rail is not active adding application to pending list: ||win32calc

2019-12-11T11:13:10.928Z [SessionProvider] Session created received in provider

2019-12-11T11:13:10.929Z [SessionViewModel] Session created event received for: 23500f78-d716-4b84-9c09-bd13ebacb601

2019-12-11T11:13:10.930Z [Connection] Connection.connect called

2019-12-11T11:13:10.930Z [SessionViewModel] Received monitorBound event on UI layer

2019-12-11T11:13:11.003Z [Session] Session focus changed to true id:23500f78-d716-4b84-9c09-bd13ebacb601 window id:null

2019-12-11T11:13:11.003Z [SessionViewModel] Session focused event received in view model session id: 23500f78-d716-4b84-9c09-bd13ebacb601

2019-12-11T11:13:17.260Z Connection(NORM): Connection created with correlation ID={ea26097e-67c6-4274-959f-f47a16fa0000}

2019-12-11T11:13:17.386Z DVCManager(NORM): Registered plugin DisplayControlGraphicsPlugin

2019-12-11T11:13:17.390Z DVCManager(NORM): Registered plugin InputPlugin

2019-12-11T11:13:17.410Z DVCManager(NORM): Registered plugin GfxChannelGraphicsPlugin

2019-12-11T11:13:17.679Z DVCManager(NORM): Creating plugin DisplayControlGraphicsPlugin

2019-12-11T11:13:17.690Z DVCManager(NORM): Registering a listener for DVC Microsoft::Windows::RDS::DisplayControl

2019-12-11T11:13:17.691Z DVCManager(NORM): Creating plugin GfxChannelGraphicsPlugin

2019-12-11T11:13:17.778Z DVCManager(NORM): Registering a listener for DVC Microsoft::Windows::RDS::Graphics

2019-12-11T11:13:17.793Z DVCManager(NORM): Creating plugin InputPlugin

2019-12-11T11:13:17.802Z DVCManager(NORM): Registering a listener for DVC Microsoft::Windows::RDS::Input

2019-12-11T11:13:17.809Z GatewayTransport(NORM): Using the Gateway protocol variation for RD Gateway (on-prem)...

2019-12-11T11:13:17.824Z BaseTransportConnectState(NORM): Entering Gateway connection state BaseTransportConnectState

2019-12-11T11:13:17.859Z WebSocketTransport(NORM): Connection process begun for url=wss://<VM>.uksouth.cloudapp.azure.com:443/remoteDesktopGateway?CorId=%7Bea26097e-67c6-4274-959f-f47a16fa0000%7D&ConId=%7B1c857bd6-7280-4362-ad53-edb8a6629af9%7D&ClGen=HTML%3D1&ClBld=Type%3DRdClient%3B%20Build%3Dprivate&AuthS=SSPI_NTLM

2019-12-11T11:13:17.860Z GatewayTransport(NORM): GatewayTransport connecting...

2019-12-11T11:13:17.866Z [Connection] Connection state changed to: Opening remote port

2019-12-11T11:13:17.867Z [SessionViewModel] Session 23500f78-d716-4b84-9c09-bd13ebacb601 changed canvas display to none

2019-12-11T11:13:18.137Z GatewayHandshakeState(NORM): Entering Gateway connection state GatewayHandshakeState

2019-12-11T11:13:18.290Z ExtendedAuthenticationState(NORM): Entering Gateway connection state ExtendedAuthenticationState

2019-12-11T11:13:18.293Z ExtendedAuthenticationState(NORM): Prompting for Gateway credentials.

2019-12-11T11:13:18.320Z [Connection] Auth challenge

2019-12-11T11:13:18.328Z [SessionViewModel] Credentials requested (username/password)

2019-12-11T11:13:18.577Z TunnelInitiationState(NORM): Entering Gateway connection state TunnelInitiationState

2019-12-11T11:13:18.605Z TunnelAuthorizationState(NORM): Entering Gateway connection state TunnelAuthorizationState

2019-12-11T11:13:18.673Z ChannelInitiationState(NORM): Entering Gateway connection state ChannelInitiationState

2019-12-11T11:13:18.808Z GatewayConnectedState(NORM): Entering Gateway connection state GatewayConnectedState

2019-12-11T11:13:18.989Z Connection(NORM): The transport has connected

2019-12-11T11:13:19.041Z SessionSelectionState(NORM): Entering RDP state SessionSelection

2019-12-11T11:13:19.052Z ConnectionInitiationState(NORM): Entering RDP state ConnectionInitiation

2019-12-11T11:13:19.053Z [Connection] Connection state changed to: Configuring remote connection

2019-12-11T11:13:19.053Z ConnectionInitiationState(NORM): There is not sufficient authentication information to use the RDSTLS protocol. Disabling...

2019-12-11T11:13:49.081Z Connection(ERR): The connection generated an internal exception with disconnect code=GenericSecurityError(16), extended code=<null>, reason=During RDP connection initiation, the remote server reported negotiation failure , error=2

 Thrown in thread 399776 at:

    connectioninitiationstate.cpp(155)

Call Stack:

        at _lb

        at Xlb

        at Tp

        at ujd

    connection.cpp(1333): OnException()

at Object.Logger.a.errorWithoutTimestamp (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/client.194eecb6.js:1:2855),at Function.<anonymous> (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/client.194eecb6.js:5:7952),at methodCaller_emscripten$$val_$emscripten$$val_emscripten$$val$ (eval at new_ (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js:86:1499616), <anonymous>:4:26),at __emval_call_method (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js:86:1521150),at I$a (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js:95:713702),at ujd (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js:99:283347),at invoke_viiiii (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js:86:1572907),at H$a (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js:95:712115),at sjd (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js:99:283181),at invoke_viii (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js:86:1572497),at x0a (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js:95:751280),at Hfb (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js:97:365174),at qjd (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js:99:283050),at invoke_vii (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js:86:1572108),at s1a (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js:95:788476),at qjd (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js:99:283050),at invoke_vii (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js:86:1572108),at t1a (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js:95:789288),at sjd (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js:99:283181),at dynCall_viii_471 (eval at makeDynCaller (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js:86:1495763), <anonymous>:2:12),at OnMessageCallback$Invoke [as Invoke] (eval at new_ (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js:86:1499616),<anonymous>:7:1),at Worker.<anonymous> (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/rdcore.2d28f0f1.js:86:106254)

2019-12-11T11:13:49.125Z [Connection] Disconnecting

2019-12-11T11:13:49.140Z WebSocketTransport(NORM): Connection close initiated for url=wss://<VM>.uksouth.cloudapp.azure.com:443/remoteDesktopGateway?CorId=%7Bea26097e-67c6-4274-959f-f47a16fa0000%7D&ConId=%7B1c857bd6-7280-4362-ad53-edb8a6629af9%7D&ClGen=HTML%3D1&ClBld=Type%3DRdClient%3B%20Build%3Dprivate&AuthS=SSPI_NTLM, code=1000, reason="NormalClosure(1000)"

2019-12-11T11:13:49.141Z GatewayTransport(NORM): GatewayTransport closed.

2019-12-11T11:13:49.145Z [Connection] Disconnected

2019-12-11T11:13:49.148Z [SessionViewModel] Received retireCanvas event on UI layer, connectionID=ea26097e-67c6-4274-959f-f47a16fa0000

2019-12-11T11:13:49.148Z [SessionProvider] Session disconnect received in provider

2019-12-11T11:13:49.148Z [SessionViewModel] Received didDisconnect event on UI layer

2019-12-11T11:13:49.152Z [Connection] Cleaning up connection

2019-12-11T11:13:49.152Z [SessionProvider] Connection destroyed event received.

2019-12-11T11:13:49.152Z [SessionProvider] Session disconnect received in provider

2019-12-11T11:13:49.152Z [SessionViewModel] Received didDisconnect event on UI layer

2019-12-11T11:13:49.157Z WebWorker(NORM): Destroying Webworker

2019-12-11T11:13:49.220Z [SessionViewModel] Canvas lost focus

2019-12-11T11:14:00.485Z Exception: Possibly unhandled rejection: backdrop click Cause: undefined

at Object.Logger.a.error (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/client.194eecb6.js:1:3067),at https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/client.194eecb6.js:5:6851,at j (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/components.35fcac4e.js:6:289),at n.$digest (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/components.35fcac4e.js:6:6299),at https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/components.35fcac4e.js:6:8087,at Uc.b [as completeTask] (https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/components.35fcac4e.js:6:14224),at https://<VM>.uksouth.cloudapp.azure.com/RDWeb/webclient/js/components.35fcac4e.js:4:16482

Im having trouble getting this working and have been unable to find a solution.

does anyone have any idea on why this would not allow launching of apps in the browser?

Kind Regards

Hi,

I get an error Remote session will end in 60 minutes

It's clean install of Win 2019 server standard.

RDP services are installed, Licensing Server has assigned RDP licenses per User, Licenses are active and valid.

Server is connected to AD and assigned as a licensing server.

Licensing Diagnoser does not show up any problems with licenses, but after logon to remote user is beeing disconnected after 60 minues from RDP

How can check what needs to be repaired ? 

Hi,

As per this Google bug page: here

We cannot use the legacy browser extension in our session host environment.

It seems the work around is to exclude the temp and tmp directories of a user profile, from their user profile disk.

Can someone advise the appropriate syntax to use in the Remote Desktop deployment properties section of server manager to exclude these folders? Everything I have tried thus far has not worked, and my only working way of doing this is to change their environment variables at login via a script deployed using group policy. This is not ideal, as this does not complete before the user's session is initialised, meaning it is not effective until their second login.

Excluding the folder via deployment properties would be far neater, and more effective from the get go.

Thanks

Eds

When I try to connect using RDP the host screen turns black and remains black after remote client disconnects.  If I then try to reconnect, the remote shows the same black screen as the host.    If I disconnect the remote and retry connection I continue to get black screen unless I delete credentials and manually enter the same password as was previously saved.  The connection is then shows the actual screen.

However, when remote client is disconnected the host remains stuck on black screen and unresponsive to any keyboard input.   Cntl+Alt+Delete does nothing.  The monitor power light is blue which indicates the monitor is not in a sleep mode, but display is hung on black.  The only way I have found to bring it back is to hold the power off button for 10 seconds, then restart.

I have tried:

-reverting back to the Microsoft generic driver by deleting display driver
 -booting in safe mode
 -doing a clean boot with all services disabled except Microsoft, Intel and Acer, plus all startup programs except for core essential
 -disabling persistent bitmap caching on client machine in RDP experience tab
 -changing colors to 24 bit
 -changing Local Policy on host machine [Use WDDM graphics display driver for Remote Desktop Connections] to Disabled.

I have also tried all the suggestions at this link
https://www.kapilarya.com/fix-black-screen-with-remote-desktop-in-windows-10

...except for installing the suggested patch because that patch seems to be for 1903

I had the same problem with an earlier build but there was a patch that fixed it.  But with the latest update, it's back.

Any assistance would be greatly appreciated.

djroller

Setup: Virtualization Host - Physical Dell PowerEdge R540 w 192gb RAM, 2x Xeon procs (cant remember the model, 16 cores total) running Win Server 2016 + Hyper-V Service RD Gateway, RD Broker, RD Web Access, RD Licencing - One VM running on the Virtualization Host. Windows Server 2016, 16gb RAM, 4CPU cores.

Right now I have only have 10 Windows 10 VMs spun up.

Problem #1: At seemingly random intervals, users are unable to connect to their VM via their physical Wyse thin client terminal. After logging in, the client contacts the broker, attempts to sign into the machine and then says "RD Failed". After rebooting the broker server things go back to normal for a few hours, then the "RD Failed" messages return again.

The weird thing: everything works fine if they try to connect from RD Web Access.

Problem #2: Again, at seemingly random intervals, users are receiving messages when logging into their terminals saying: "The requested session access is denied."

The weird thing: this is only sometimes, and usually goes away if they either a) leave the error message on their screen or b) exit and try again.

I'm honestly not sure where to go from here. I thought it could be a policy or permission issue but it only does it sometimes?

Event Viewer messages collected when experiencing problem #1:

The user "DOMAIN\USER", on client computer "10.10.12.41", met connection authorization policy and resource authorization policy requirements, but could not connect to resource "COMPUTERNAME.DOMAIN.COM". Connection protocol used: "HTTP". The following error occurred: "23005".

The user "DOMAIN\USER", on client computer "192.168.4.231", met RD resource authorization policy (RD RAP) requirements but the network resource "10.25.20.197;10.25.20.197" did not meet the requirements, so the connection was not authorized. Try connection to another network resource or possibly lower RD Gateway security by modifying the RD RAP requirements for the connection to be authorized.

RD Connection Broker failed to process the connection request for user DOMAIN\USER. Error: Element not found.

RD Connection Broker failed to process the connection request for user DOMAIN\USER. Load Balancing failed OR Specified endpoint could not be found. Error: Element not found.

Again, after a reboot of the broker/gateway server, everything is back to normal for a few hours.

I'm so lost.

Hey RDS techies,

I have a license server with 30 Per device CALs installed on it. I've got another 45 Per user CALs now but by mistake I have installed them as Per Device CALs on same license server which created another keypack ID in licensing manager for these 45 CALs. All these 30+45 CALs are issued now, however, I would like to remove these 45 Per deivce CALs keypack now and want to install them as Per User CALs.

Is it possible ? I'm not sure if the "Convert partial/full licenses" option that is shown in licensing manager works here!

Also, I have come across below commands to uninstall particular keypacks from licensing manager,

Get-WmiObjectWin32_TSLicenseKeyPack

wmic /namespace:\\root\CIMV2 PATH Win32_TSLicenseKeyPack CALL UninstallLicenseKeyPackWithId X

So, do these commands give our RDS CALs back once it uninstalls them from particular keypack ???

I was thinking that, this only removes the entries from licensing manager but doesn't give our CALs back to re-use them!

Any help in clarifying these would be much helpful. Thanks in advance!

hello all,

I appreciate any feedback on this question. we are trying to have six users work remotely from outside the office. We have an server 2012 r2 in a workgroup environment. No RDS licenses.

are we able to set up VPN through the router for six users to log in to the server at same time if there are no RDS licenses? Or can we set up VPN directly to six computers desktops using the router.

Thank you

Hi everyone

We have recently renewed our SSL wildcard (GoDaddy) certificate and have successfully installed it.  However we now have a problem where some users are unable to connect and I suspect its an issue with SSL and possibly something I've not done correctly.  Below is a brief overview of the RDS deployment

7 Servers - 1xGateway/web access, 1xConnection broker/licensing, 4xdesktop hosts and 1xapplication host.
SSL Wildcard purchased from GoDaddy and assigned to each server.  CN *.abcd.co.uk

Server FQDN (as seen from connection broker) is server.ad.domain.com (I think this has changed since adding the new SSL from server.abcd.co.uk but can't be certain).
Forward looking DNS A record abcd.co.uk set to private IP for gateway and connection broker servers.

We have a mixture of W7 & W10 Pro clients, a large number of HP thin clients and a few Apple Mac's.

Connecting internal seems to work for Windows user and some thin clients but the Apple users and some of the HP clients cannot get on.  If we change the Gateway settings from defined to automatically detect on on the connection broker, the Apple clients work but not some of the thin clients.

I am convinced the root cause is the way we have configured our Wildcard SSL which has effected the gateway and other settings.

Unfortunately, I cannot find any literature which gives in depth instructions on how to configure and assign SSL certificates from start to finish for an RDS deployment.  

Prior to us renewing the certificates, everything was working fine.

If there is anyone who can advise, then I would be grateful.

Regards

Thackers

We have a single forest, single domain AD environment. A password policy has been set through 'Default Domain Policy'. 

We would like to implement second password policy with different complexity requirements. As per the official Microsoft document thus can be achieved through Fine Grain Password policy. 

Please confirm that there is no such system limitations and another password policy can be configured for application administrator's.

Kindly respond at your earliest.

Hi Guys,

My Remote Desktop Connection Broker service (Windows server 2016) is unable to start, when I try to start it this is what appears:

I than go and take a look at the dependencies tab and it says that, This service depends on the following system components

Remote Procedure Call (PRC)
Windows Internal Database

I can see that the “Remote Procedure Call (RPC)” services is Running fine but “Windows Internal Database” is not.

Here is where my problem is:

When I try to start “Windows Internal Database” services this is what it comes back with:

I then go to the “Log On” tab and the user that is trying to logon to start this service is

NT SERVICE\MSSQL$MICROSOFT##WID

So the problem is clearly with this user and/or password.

My Question is:

1. How can I confirm that this user is created? Where can I find it?
2. If this user is not created or has been removed, can I re-create this user again? If so, how?
3. How did this happen?

Kind Regards

GMSS

Atradius

Hi,

I'm new to RDWeb and have just inherited a 2012 setup which is working internally but have run into some problems trying to get it working externally.

We have 1 server running RD Gateway, RD Licensing, RD Connection Broker and 2 servers running the RD Session Host.

When run externally users are able to log into RD Web but when the try and run a Remoteapp it keeps requesting the user's credentials and will never accept them.

Has anyone experienced this issue before? Any help would be greatly appreciated. 

cheers

Hi all, just curious if there is something obvious -- 

We have 3 similar systems and this is only an issue on 1 of them.

All 3 systems are configured with 2 domain controllers and 30ish vms

We have one machine we (a crew of 2) can connect to via RDP in each system. (All kinds of ACLs, firewalls, ect since we are in a process environment)

The system in question always drops my RDP session before connecting to it.

Example - 

I can be in my RDP session at my desk, walk across the room and attempt to connect back to my session and I can see Windows stating "Signing Out" and then my RDP session is dropped.

I have to reconnect to get back into my session.

This is a pain since sometimes I have files and applications open I am trying to access from the other PC I am attempting to connect to.

I have reviewed all the GPO options for Remote Services and they are all set to default in all 3 systems, although the one system is giving me troubles.

Anyone have a quick tip for something obvious I should look at?

Any input helps

Edit-

Hi. We have a new WS2016 RDS deployment (VMs on Hyper-V):

 - 2x WS2016 RDGW in NLB

 - 2x RDCB in HA configuration

 - couple RDSH servers

The problem is that in 30-50% of the connection attempts via these gateways, the connection is stuck at the "Configuring remote session" message. The connection is never successfully estabilished when this happens and it is closed without any error couple minutes later. When you try again (or just immediatelly cancel the connection and reconnect), the connection may or may not go through.

When this problem happens, I can see there's single HTTP connection on the RDGW that accepted the connection with 0 bytes transferred in either direction. There are no related errors at this time.

Can anyone help? Btw. this problem also happens when connecting to a different single-host RDS deployment through these gateways.

I suspected the problem might be in the NLB, but removing either of the gateways from the NLB configuration (and from RDS farm) doesn't help, the issue is still there.

Rebooting the gateways helps for a short while (hours), but then the issue is back.

There are some other errors on the gateways, but these don't correlate to the connection attempts (event 210, source terminalservices-gateway: "Http transport: IN channel could not find a corresponding OUT channel" with no other details).

RDP clients are various ... W8.1, W10, Mac...

I got a call from the client saying they logged into the server and now it only shows a black screen. I then RDP into it and sure enough, after login there is just a black screen. I searched around and found thread that had a link to a hotfix that will stop this from happening. I applied the fix and restarted and thought all was well until this morning when I got a call that the server was acting weird.

I RDP in again and black screen. I RDP into the VM and then into the main server and still black screen. On top of that 2 windows 7 workstations were getting the black screen after logging in. 1 user had it then after 5 or 10 min the desktop just appeared. The then logged into a workstation at their office to try and RDP into the server and I get this black screen after logging in, 5min later the desktop shows up. Not sure what is going on but it is very frustrating. Also when this happens on the server Nothing can be done besides a hard shutdown which I don't like doing every other week. 

Any ideas? Is it somehow related to the workstations also having the same issues???