Single RDS gateway 2016.  Both RDweb and RDC point to same Gateway. We have NPS extention configured. 

When we login on to RDweb we get the MFA prompt from Ms Auth

When we log on to the same GW via RDC the logon never gets to NPS for MFA. 

I am trying to ID the issue. RDweb is aware and looks to the NPS CAP store. But RDC seem oblivious. How do these two authenticate differently? Any ideas on how to troubleshoot to ID and resolve? 

I have even remove NPS completely and rebuilt but same issue. So I am convinced the issue is w. RDC/RDGW and not the NPS/MFA side of things. 

Thanks,

SJMP

We started using Hyper-V a few months ago. Until a few days ago, everything is working great. We have 2 physical hosts running Windows Server 2012. Each physical host has been running one VM (Windows Server 2008 R2) which is replicating to the other host.

We have added another virtual machine. It works great except Remote Desktop Connection cannot connect to it. When I try, I get the standard message:

Remote Desktop can't connect to the remote computer for one of these reasons:
1) Remote access to the server is not enabled
2) The remote computer is turned off
3) The remote computer is not available on the network

I've checked everything I can think of including:

• VM is allowing remote access. To be sure, I even turned it off and back on.
• There is no firewall blocking anything. To be sure, Windows firewall is turned off.
• Remote Desktop CAN connect to the other VMs including the one running on the same physical host.
• Everything else on the VM seems to be working. IIS is running there and web pages come up nicely. File access is good too.

There are 2 differences between this new VM and the other ones:

• This OS is Windows Server 2008 (not R2). The other VMs are R2.
• This VM was not created from scratch. I used Sysinternals Disk2vhd to generate a VHD from an existing physical machine and then configured a new VM to use that VHD.

I'd be very grateful for advice on how to get RDC working.

Cam

Hi.

We are rolling out RDS 2019 in our environment. We've got a lot of complaints about the DPI settings not being able to set in the session anymore like in 2008R2, but it has to be done on the local client, which is really cumbersome. However, when done so, we still have some applications with issues.

Now, for most of them I can fix it by setting the compatibility settings:



On a Server 2019 test machine, when set to Application, the application actually shows up fine. On RDS2019 though, it doesn't. I've been working on this for a while, until I installed a machine from scratch, do one step of our installation script at a time, and see where it started failing. It turn out as soon as we enable the RDS role, the DPI settings don't have any effect anymore, and the app is all blurry.

When I remove the RDS role, they start working again. Would anyone know how to fix this?

Hello

I´ve installed Windows 2019 Server to our RDS environment, and for some time it worked well. We´re using 6 RDS servers and every day one of that freeze and needs to be restarted. Users who is logged to server works normally, but user who need to login just got black screen and freeze on that. In event viewer i found error 4005 The Windows logon process has unexpectedly terminated.

If im trying to connect to server via console (on dell servers) as server admin i cant do anything because login screen is freezed too. Only way is to restart server. Remote powershell looks like working, but cant log off user. There wasnt installed any updates when it start freezing :(

Any idea how to fix it ?

In a very simple windows 2012 r2 RDS server there are two setting which seem almost the same. If someone could explain the difference that would be helpful.

Both are accessible from the RDS Overview panel.

#1 is found in the Deployment Overview panel where there is a RD Licensing icon. If one adds a RD License Server via that icon, the server will appear in the adjacent Deployment Servers list.

#2 is exposed via Tasks list when you choose Edit Deployment Properties. The four deployment properties that are exposed there include an entry for RD Licensing, which allows you to again specify the FQDN for a RD License Server and to choose between licensing per device or per user.

Hello

Can a Windows Server 2012 (R2) sessionhost be added to a Windows Server 2019 Gateway, and is this supported?

The Microsoft documentation has not yet been updated for Server 2019.
(https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds-supported-config)

I would like to migrate existing SH's to a newer Gateway to make use of a broader set of security ciphers.

Kind Regards

D.

Hello,

We currently have a setup where we have a server with the web access and RD gateway roles installed.  They point back to a broker that has multiple applications defined that users can use through a browser (using the web access URL.)  The issue we are having is that the user will click the application, it will establish a connection, but hang until you click show details.  Once that has happened it will show the domain page and load the application.  Does anyone know how to make the application automatically display instead of having to click show details?

Thanks

Hello 

I am using windows server 2008 R2 with multiple users (5 users accounts). I facing a problem where a 'pop up' warning message appears saying * you have 120 days left ......* every time when I or other users logged in to this server. I tried to check through the remote desktop licencing server and add the license server's name and its credentials (Remote Desktop Services > Remote Desktop Session Host Configuration) in the configuration. Then there is no error and green tick appears in the License diagnosis tab under 'Remote Desktop Session Host Configuration' seem every thing fine. However, when log off and log in again I need to supply the credentials again and again for every time and for every user who log in. Also, the days are reducing meaning , I am left with 118 days more for remote desktop sessions .  

Q: Why every time the user logged in to the server , still getting this warning popup, although a valid license server name and its credentials were supplied ?? 

Q How can I fix this problem . I need complete solution for multiple users ? 

I hope you understand the problem. 

Thanks 

Faisal

Looking for some help concerning the RDS Gateway Role and load balancing.

I have an pre-production RDS environment that contains 3x Gateway Servers. I have tested the environment by connecting through each one of the individual Gateways and everything works just fine.

I'm now at the point where I want to use my hardware load balancer (F5) to receive the connections and distribute them between the 3 Gateways. I would also like to use the UDP Transport on 3391 as well.

The part that I don't completely understand is that I'm assuming that each individual connection, which will be coming in on both TCP 443 and UDP 3391 would need to be routed to the same gateway?

It would make sense and be easy to set the LB up to balance both ports to the 3 Gateways, but without any specific load balancer magic, connection "A" might go to one gateway for 443 and a different gateway for 3391.

Jay Schwegler

We are getting intermittent errors only when connecting to one of our Remote App servers. When users attempt to connect using an RDP file we provided them they occasionally get,

"RemoteApp Disconnected"
"Remote Desktop can't connect to the remote computer "MACHINE.DOMAIN.COM" for one of these reasons:

1) Your user account is not authorized to access the RD Gateway "RD-GATEWAY-DEV.DOMAIN.COM"

2) Your computer is not authorized to access the RD Gateway "RD-GATEWAY-DEV.DOMAIN.COM"

3) You are using an incompatible authentication method (for example, the RD Gateway might be expecting a smart card but you provided a password)

Contact your network administrator for assistance.

If they trying logging in with the same RDP file a couple of times, it eventually works. Not sure how to track this issue down.

We know that the RDP is ok, because it works much of the time.

Any ideas on what logs to look at on the server?

I'm having an issue on a single RDS 2016 server at the moment where the start menu doesn't open.  

I've gone though lots of steps including sfc /scannow  (No errors)   DISM with all the options (No Errors)

I've cleared the Registry in firewall policy\restricted services\configurable\system.

I believe the issue is that I don't have any applications registered in the get-appxpackage at all, it just comes back blanks where as on working machines I get a list of about 15.

I've tried to install the packages by hand using variations of 

Add-AppxPackage -DisableDevelopmentMode -Register C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\AppxManifest.xml -Verbose 

This returns the following;

Add-AppxPackage : Deployment failed with HRESULT: 0x80073CF6, Package could not be registered.
An internal error occurred with error 0x800705AA. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
NOTE: For additional information, look for [ActivityId] 5597e571-c93a-001c-e6eb-97553ac9d401 in the Event Log or use the command line Get-AppxLog -ActivityID
5597e571-c93a-001c-e6eb-97553ac9d401
At line:1 char:1
+ Add-AppxPackage -DisableDevelopmentMode -Register C:\Windows\SystemAp ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : WriteError: (C:\Windows\Syst...ppxManifest.xml:String) [Add-AppxPackage], IOException
    + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand

If I then use Get-AppxLog -ActivityID5597e571-c93a-001c-e6eb-97553ac9d401

Time                      ID           Message
----                      --           -------
20/02/2019 17:22:29       301          The calling process is powershell.exe
20/02/2019 17:22:29       603          Started deployment Register operation on a package with main parameter: AppxManifest.xml and Options: 0. See
                                       http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       10002        Creating Resiliency File
                                       C:\ProgramData\Microsoft\Windows\AppRepository\75f29027-c919-4974-89c9-f53bb4413b5f_S-1-5-21-1787921346-3847137862-2124306101-500_1.rslc for
                                       Register Operation on Package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy.
20/02/2019 17:22:29       607          Deployment Register operation on package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy has been de-queued and is running
                                       for user FISRDS1\Administrator.
20/02/2019 17:22:29       613          Adding uri to the list of Uris: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\AppxManifest.xml.
20/02/2019 17:22:29       447          GetFullyQualifiedReference from the String Resource Map for package full name:
                                       Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy and reference string: Microsoft Corporation failed.
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.visualElements windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.search windows.fileOpenPicker windows.fileSavePicker windows.cachedFileUpdater
                                       windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch windows.fileTypeAssociation windows.protocol
                                       windows.appointmentsProvider windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks
                                       windows.webAccountProvider windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService
                                       windows.appointmentDataProvider windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience
                                       windows.dialProtocol windows.restrictedLaunch windows.accountPictureProvider windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.activatableClass.collector .
20/02/2019 17:22:29       10000        About to service package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy. Setting the package state to disabled returned
                                       with 0x80070490.
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.stateExtension windows.applyDataExtension windows.repositoryExtension
                                       windows.capability windows.MRT windows.visualElements windows.alarm windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.gameExplorer windows.search windows.fileOpenPicker windows.fileSavePicker
                                       windows.cachedFileUpdater windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch
                                       windows.fileTypeAssociation windows.contentType windows.protocol windows.appointmentsProvider windows.defaultPrograms
                                       windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks windows.webAccountProvider
                                       windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService windows.appointmentDataProvider
                                       windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience windows.dialProtocol windows.restrictedLaunch
                                       windows.integrityExtension windows.licensing windows.accountPictureProvider AppSync windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.DeviceSetupManager windows.activatableClass.collector windows.certificates windows.preCompilationExtension
                                       windows.ntServices windows.wmiProviders windows.iisModules windows.performanceProviders windows.eventProviders windows.runTime
                                       windows.DeviceAccess windows.indexedDB windows.MicrosoftAccountClient.SignOut windows.searchIndexer windows.geolocation windows.userDataAccess
                                       windows.repositoryExtension.remove windows.stateExtension.remove .
20/02/2019 17:22:29       827          Capability parsing started for the package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy
20/02/2019 17:22:29       5252         An internal error occurred with error 0x800705AA. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       306          error 0x800705AA: While processing the request, the system failed to register the windows.stateExtension extension due to the following error:
                                       Insufficient system resources exist to complete the requested service.
                                       .
20/02/2019 17:22:29       316          error 0x800705AA: Cannot register the request because the following error was encountered during the registration of the windows.stateExtension
                                       extension: Insufficient system resources exist to complete the requested service.
                                       .
20/02/2019 17:22:29       5252         An internal error occurred with error 0x80070002. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       331          error 0x80070002: While reverting the request, the system failed to de-register the windows.stateExtension extension due to the following
                                       error: The system cannot find the file specified.
                                       .
20/02/2019 17:22:29       300          error 0x80073CF6: Cannot register the Microsoft.Windows.Cortana_cw5n1h2txyewy package due to the following error: Package could not be
                                       registered.
                                       .
20/02/2019 17:22:29       605          The last successful state reached was ResolvedDeferredRegistrations. Failure occurred before reaching the next state RegistrationChanged. hr:
                                       0x80073CF6
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.stateExtension windows.applyDataExtension windows.repositoryExtension
                                       windows.capability windows.MRT windows.visualElements windows.alarm windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.gameExplorer windows.search windows.fileOpenPicker windows.fileSavePicker
                                       windows.cachedFileUpdater windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch
                                       windows.fileTypeAssociation windows.contentType windows.protocol windows.appointmentsProvider windows.defaultPrograms
                                       windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks windows.webAccountProvider
                                       windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService windows.appointmentDataProvider
                                       windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience windows.dialProtocol windows.restrictedLaunch
                                       windows.integrityExtension windows.licensing windows.accountPictureProvider AppSync windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.DeviceSetupManager windows.activatableClass.collector windows.certificates windows.preCompilationExtension
                                       windows.ntServices windows.wmiProviders windows.iisModules windows.performanceProviders windows.eventProviders windows.runTime
                                       windows.DeviceAccess windows.indexedDB windows.MicrosoftAccountClient.SignOut windows.searchIndexer windows.geolocation windows.userDataAccess
                                       windows.repositoryExtension.remove windows.stateExtension.remove .
20/02/2019 17:22:29       339          Registration will process the extensions in the following order: windows.visualElements windows.autoPlayContent windows.autoPlayDevice
                                       windows.activatableClass.inProcessServer windows.activatableClass.outOfProcessServer windows.activatableClass.proxyStub
                                       windows.activatableClass.downloadUpload windows.search windows.fileOpenPicker windows.fileSavePicker windows.cachedFileUpdater
                                       windows.appUriHandler windows.shareTarget windows.lockScreenCall windows.personalAssistantLaunch windows.fileTypeAssociation windows.protocol
                                       windows.appointmentsProvider windows.activatableClass.backgroundPlaybackClass windows.backgroundTasks windows.DefaultBackgroundTasks
                                       windows.webAccountProvider windows.userDataAccountsProvider windows.preInstalledConfigTask windows.updateTask windows.appService
                                       windows.appointmentDataProvider windows.contactDataProvider windows.emailDataProvider windows.internal.filePickerExperience
                                       windows.dialProtocol windows.restrictedLaunch windows.accountPictureProvider windows.cameraSettings windows.printTaskSettings
                                       windows.print3DWorkflow windows.activatableClass.collector .
20/02/2019 17:22:29       10001        Finished servicing package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy. Setting the package state to enabled returned
                                       with 0x0.
20/02/2019 17:22:29       401          Deployment Register operation with target volume C: on Package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy from:
                                       (AppxManifest.xml)  failed with error 0x80073CF6. See http://go.microsoft.com/fwlink/?LinkId=235160 for help diagnosing app deployment issues.
20/02/2019 17:22:29       404          AppX Deployment operation failed for package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy with error 0x80073CF6. The
                                       specific error text for this failure is: An internal error occurred with error 0x800705AA. See http://go.microsoft.com/fwlink/?LinkId=235160
                                       for help diagnosing app deployment issues.

I can't seem to get the system to re-register those applications!

Open to any suggestions?  (Please no, have you restarted the server!)

This happens on all users including local admin and new accounts.  Happens in Safe and Clean Boot.

Thanks.

Hello guys,

I'm building a new RDS farm on Windows Server 2016. 2 servers with connection broker, gateway, web server and licensing role (ha mode) installed and 4 session hosts - all on WS2016Standard.

I wanted to customize the Start menu on the session hosts for each user - For Windows Server 2016 there isn't much guidance to be found, so i assumed the articles from Jeanie Decker on https://technet.microsoft.com/en-us/itpro/windows/manage/customize-and-export-start-layout about customizing, exporting en re-deploying the Start menu on the session hosts with GPO's for Windows 10. ADMX files are imported in AD GPO store.

I created a Start menu with a test user, exported with Export-StartLayout, put it in a share and tested if the test user had access to the share and file: all tests ok. Created the GPO, tested the GPO with gpresult /r, and the GPO is applied: all ok.

The customized Start menu is not applied however. I've noticed that the User Config GPO states:

There are no errors in Event Log - Administrative Events, Application and/or System logs regarding applying or failing this. A gpresult /v gives me this output:

Anyone has any ideas why this is not applying? Or any other way to troubleshoot this issue further?

Scope of this is that out of dozens of accounts that work fine for rdwc sessions, there are two that do not.  The connection starts but within a few seconds fails with, user facing side, 'we couldn't connect to gateway because of an error.'  When running a capture, the key error appears to be:

Any pointers in the right direction, or if anyone else has seen these errors, would be much appreciated!

OS in question Server 2016 and Server 2019

I have an odd issue whereby I have configured an RDS Collection (1 CB/Gaetweay/RDWeb and 3 RDS Session Hosts) where when a user connects and uses Webcam Redirection, it works perfectly for admins, but non privileged users even though the device is passed through, it doesn't work in any app.

I have used GPO to force enabled the camera redirection feature and force enable the camera for all apps too.

In the Camera settings app, everything is set to On as forced by organisation.

The camera is detected and availible to apps, the Windows Camera Frame Server service starts when the user attempts to load the camera in any app, but nothing is displayed and the camera doesn't kick in.

I have users wanting to use Teams inside the RDS (company policy allows only for company stuff to be inside the RDS) and cannot get them access other than granting Admin rights!

Any ideas?

Hello,

I have password change enabled on RDWeb running on Server 2016.  Internally on the LAN I expire a user's AD password and on RDWeb get prompted and successfully change the password.

If I move this server to the DMZ with an AD RODC then the password change attempt ends in an error message "Your password cannot be changed.  Please contact your system administrator"      From the same server that is running RDWeb in the DMZ I can successfully change that user's password at login to the console.  So this is only an issue from the RDWeb change password mechanism.

I have taken a wireshark trace and I see the communication coming back from the RWDC to the RODC saying the user's password has expired and the RODC acknowledging it but I don't see any other error.

Does anyone have any ideas?

I've got a RDS environment that is using Windows Server 2016. The thin clients we use are Wyse 3040. I am wanting to use UDP instead of TCP for the connection. I've not been able to figure out how to use UDP. I can see on my wyse client that a few packets use UDP but 99% use TCP.

We connect using a VPN so we don't have a gateway setup. Is there a group policy I can add or what is the best way to do that?

Thank you

Platform

• Server 2016 Session Host
• Office 365 Pro Plus 2016

Hello

We successfully installed Office 2016 Prop Plus on to the session host some months ago. We have a random problem that has occurred twice now, where a user is prompted toactivate the product when they open a document first thing in the morning. The user can successfully activate the product by signing in. But if they close all products, they are promoted to  activate again when opening any of the products. The only way I could fix this for the first user a few months ago was to delete the profile  including the UPD.  The issue has begun again for anther user, and I'm trying to find a solution. There are other people having this issue out there in tech land, but with no firm answers that I can find. 

Many Thanks 

MIS5000