Terminal Services Forum

Group policy Environment preference item not processed starting a remote app

Mon, 23 Nov 2009 14:37:18 Z

I have created a registrykey, a file copy to the user profile and a path update in group policy preference item in u user policy.

The policies are loaded correcty when I run them from the desktop on the terminal server but not when I start the applications using remote apps.

Is there something that I have to configure or are these policies not processed?

Error saving onto redirected local drives

Wed, 25 Nov 2009 19:24:37 Z

When connecting to a Windows Server 2008 R2 RDS host (Terminal Server) and redirecting local drives I cannot save to any of the local drives from the RDS session. I always get this error and I am an administrator on the system:
*************************************************************
\\tsclient\path\filename
You don't have permission to save to this location.
Contact the administrator to obtain permission.

Would you like to save to the My Documents folder instead?
*************************************************************

If I try to drag a file onto the redirected drive I also get an error saying I need permission to perform the action. I am also an administrator on the system with the local resources in question.

So, currently users are unable to save to local resources like USB drives.

This doesn't have to do with Group policies applying to the system as I tested by installing a fresh copy of Windows Server 2008 R2 on a VM and then the RDS Role. This VM had no group policies applying to it but still had the error when I remoted to it and tried to save/write onto a redirected drive.

It doesn't seem to be related to the version of the RDP client as a user on a Windows XPe thinclient (RDP 6.0) got the error and I get it myself when connecting from my Windows 7 workstation.

My question is, how do you configure an RDS host to allow users to write to redirected drives?

2008 TS/RemoteApp invisible or disappearing dialog box and default printer issues with Dynamics/GP 10

Tue, 17 Nov 2009 18:00:15 Z

I have two major issues that are severely delaying a mass deployment of a TS farm.
Two Servers, we will call them ts1 and ts2 with a farm name of ts.domain.com. All users when they connect to these terminal servers connect to ts.domain.com and the session broker is handling what server they log into. ts1 for right now is the session broker for this farm. This will change and i have already begun moving it to the pdc which holds the license server role.
Both are the exact same hardware and software.
dual nehalem procs
8gb of ram
3x 15k rpm drives in raid 5
load balanced/failover NIC's
Windows server 2008 SP2 completely up to date at the time of writing.

First issue is with dialog boxes randomly disappearing while using GP in remote app. When a user is working and they do anything that pops up a dialog or prompt that requires them to hit OK or Yes/No the dialog will randomly only show as an outline. I say randomly because it doesnt always happen, and there does not appear to be any rhyme or reason behind it. You might get 2, you might get 50 of these dialog boxes to show up normally doing the EXACT same steps, then all the sudden one will appear as an outline. You cannot read the text or tell what the box says nor can you see if its an OK or Yes/No prompt. I have noticed if i remote control the users session i can see/read what they say and can even click the correct button for them but this is obviously not a solution in a large environment. I cannot narrow it down any further as it does not seem to matter what machine the user is on, it appears to be happening across the board.

The second issue deals with printing with easyprint while using remoteapp. The situation is this, the users connect, i redirect ALL of their printers with easyprint as there are confidential documents they frequently need to print out in their offices while there are large batches that require them to use the 70page/min MFP. I have GPO to set the users default printer as the default printer in their remoteapp. The majority of the time this fails, and the default printer is set to the locally installed PDF maker which is installed on both terminal servers. This is an annoyance as 90% of the time they have to change their printer in the remoteapp when they open it.

I have no problem getting more descriptive if it will help me solve this problem.

Winlogon Terminating Unexpectedly - Windows Server 2008 TS

Wed, 18 Nov 2009 23:11:03 Z

I have a Windows Server 2008 SP2 terminal server. I receive the following error at least 60 to 70 times per day:

_____

Log Name:      Application
Source:        Microsoft-Windows-Winlogon
Date:          11/18/2009 12:49:48 PM
Event ID:      4005
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      PCTS02.pindlercorp.network
Description:
The Windows logon process has unexpectedly terminated.
______

Microsoft states this issue is caused by insufficient system resources, a corrupt registry, or a service that failed to start. I have plenty of system resources. Before restoring the registry, I wanted to check into the services. The Netlogon service lists "Workstation" as a dependant system component.  The Workstation service has the following dependancies:

1. Backup Excec Remote Agent for Windows Systems
2. Computer Browser
3. Netlogon
4. Terminal Services Configuration

All of these services are started with the exception of the Computer Browser. The Computer Browser service is stopped and disabled. The Computer Browser service on all my Windows Server 2008 machines is stopped. However, the Computer Browser service on all my Windows Server 2003 machines is started. Is there a reason why this service needs to be stopped on Windows Server 2008? Would I be doing any harm by starting the Computer Browser service? Would this be one of the reason why I am receiving Event ID 4005? Any advice is much appreciated.

Slow printing with Easy Print

Wed, 25 Nov 2009 14:09:43 Z

Has faced such problem.
Operation occurs in a terminal session. If it is necessary print the document it can occupy a lot of time. The interval can reach about several minutes if the user, for example, sits in other city.
I understand that the new technology of press Easy Print is inserted. And now print process occurs a little on another.
However, probably somebody knows, what ways of rise of speed of this process are.
Somebody can knows links to articles with the description of a problem and its solution.
I could not find such information except for one forum where the person complained of the slow press and wished to refuse from Easy Print.
But I do not accept a refusal variant as I have received in this schedule considerable advancement concerning version 2003 TS in respect of drivers.

Michael

RemoteApp crashes out with Sage

Wed, 25 Nov 2009 17:42:11 Z

Hi! This is my first time posting to TechNet so go easy!!

I'm having an issue with RemoteApp on Server 2008. I'm running Sage Accounts 2010 as a remote app for terminal server users, and it works fine, except during one particular operation (clicking on the "Write-off customer" option from within Sage). The odd thing is, there is no record of a crash out from within Sage on the server. The client screen will freeze, any clicking within the remote app window will result in a nasty beep, and the only way of getting rid of it is to kill the Sage process. The client machine will then reports MSTSC.exe has encountered a problem and needs to close. Weird part is, when going back into the session (ie reconnecting to a disconnected session), Sage displays exactly what it should have done originally, before it crashed. This makes me think the problem is definitely not with Sage, and definitely IS with RemoteApp.

I've tried several things to test, and I've noticed that this crash does not happen when running Sage in a normal remote desktop window, only over Remote App. I've also tried a number of things suggested on this thread over on Experts Exchange: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Remote_Desktop-Terminal_Services/Q_24871309.html. My entire progress is in that thread, so I won't replicate it here.

Has anyone else had similar problems with Remote App? And is there anything I can do to fix it?

Thanks!

Sam

Gatewayed terminalserver is signed with the wrong certificate

Wed, 25 Nov 2009 17:25:06 Z

Hi everybody,

I'm using a 2008 server and behind is a 2008 terminalserver. The problem I'm experiencing applies to both full-desktop connections as well as remote apps.

All certs I'm using have been signed by my own CA (let's call it "localdomainname"). Its root cert is trusted by ALL computers involved. In the remote app manager I chose the computer cert with "terminalserver.localdomainname", signed by "localdomainname".

But when I connect I get an error message that's complaining about a cert signed by a non-trusted CA. And that's true because the cert says:
hostname: "terminalserver.localdomainname"
signer: "terminalserver.localdomainname"

What's that supposed to mean? It's definitely not the cert I chose, the validity dates also differ. I have no idea where that cert came from.

I'm already created a new cert for the TS and had that signed by the CA and chose it. But nothing changed.

Anybody got an idea on that? And yes, I'm pretty sure there's no man in the middle ;-)

Best regards,
Jens

Making webapps visible in web access

Wed, 04 Nov 2009 11:27:51 Z

Hi everybody,

I have two 2008 Enterprise servers, both patched to the latest level.

One is already the regular webserver. As I have only 1 public IP I'd like to make webapps available via this server although the actual terminal server is another machine in the lan. To do that I've installed gateway and webaccess roles.

I followed the instructions given in the windows help. But if I go to the gateway's webpage (xxx/TS) as admin I can't set the terminalserver. I get an error message that says the webserver wasn't in the "terminalservices webaccess computers" group of the terminal server. The management console tells also tells that local group was empty. But I've put the webserver in it and it's definitely in there.

Anyone got an idea what I could do?

Best regards,
Jens

Unable to connect to the Remote app at first time.

Wed, 25 Nov 2009 15:03:27 Z

I cann't able to establish a connection to Remote App at first time, Gateway server and session broker all are on same server, When I open the Details it is openingn the application and immediately logging off the session. I don't understand why.

and I was able to connect and open the remote app through RDWeb Access after couple of tries , but it is not opening up the application at the first try, I was trying to fix this problem from last two days , please suggest me what am I doing wrong here?

please help me

UD

Remote Desktop Services Farm Setup

Tue, 24 Nov 2009 21:51:44 Z

Hello,

I have been trying to setup a Remote Desktop services farm on my domain which is currently running on Windows 2000 native functional level. My Farm consists of 5 servers. A web acces server, and Connection Broker server, and 3 Remote Desktop Host servers. My problem is coming down to security which im starting to think is due to our domain controller being windows server 2003 and the operations level of Windows 2000 native / not having windows server 2008 group policy objects.

I am having two security issues, the first one being when trying to configure my Web access server source to use my connection broker server it is giving me the following error " RD Web Access was not able to access the RD Connection Broker server specified. Ensure that the computer account of the RD Web Access server is a member of the TS Web Access Computers security group on the RD Connection Broker server " i have verified that my Web acccess server is in the local group "TS Web access computers" on my connection broker server.

My second issue is very similar when trying to add my 3 Terminal servers to my farm in Remote Desktop host configuration tool i get the following error "The RD Connection Broker denied access to the Remote Desktop Session Host Server" I have verifed that all three of my terminal servers are in the "Session Broker Computers" local group on the Connection Broker server and i have also verified that my Connection broker server is in the local group "TS Web Access Computers" of all three of my terminal servers.

What could be causing this and where do i need to look to fix this?

Thanks,

Marc

RDP audio issues with Windows Server 2008

Mon, 27 Apr 2009 16:42:55 Z

I have a server with an M-Audio 1010LT audio card installed, running audio playback software. This software needs to stay running and playing at all times.

We were previously running Windows Server 2003 and when we RDPed into the box for maintenance, we simply made sure that 'Leave at remote computer" was selected under Remote Desktop's sound settings. This allowed us to control the console of the server while the audio continued to play through the server's audio card.

Now, with Windows Server 2008, even with this option selected when we remote into this server all audio stops and Windows shows no available audio devices. If I end my RDP session and phyically go to the server, I see the audio devices and am able to re-start the audio playback.

Is this a bug, or something that has changed in 2008? Any workarounds?

Thanks

Windows 2008 R2 stop RD Gateway direct access, force users to use Remote Apps

Wed, 25 Nov 2009 11:13:28 Z

Hello

In Windows 2008 Terminal Services you could enter the following to force users to use Remote Apps and stop direct Gateway access.

pre-authentication server address: s: https://URL/ts

require pre-authentication:i:1

I have tried this with R2 and it didnt work, I changed it to the following
pre-authentication server address: s: https://URL/RDWeb

require pre-authentication:i:1
authentication level:i:2 (already there)

and it didnt work. I am now using the Form bit of RDWeb and not ISA, is there away of stopping the use of gateway without logging in to Remoteapps. I can still use ISA if required but the SSO doesnt work when I use ISA, so I have taken it out of the equation.

cheers

Ian

Message dialog boxes not resizing properly to fit handheld screen running TS client

Thu, 16 Apr 2009 21:38:57 Z

Background: I'm using a Symbol MC50 handheld computer (typical 240x320 form factor). I run the Terminal Services client from the handheld to connect to our Windows Server 2008 Standard server, where our applications are located. When connecting, we always have the "Limit server desktop to fit screen" checkbox checked. When logging in from handhelds, we have the usernames set up to run the specific application at login so the user does not have to navigate around to launch the app.

Problem. On Windows Server 2003, any dialog messages that were from either Windows, or the app itself, were always resized/wrapped so the entire message box was visible within the handheld screen size. But now on Windows Server 2008, the message box runs outside of visible screen size for lengthy messages that were completely visible in 2003 TS. So the user must drag the messagebox through the window to view it, and get to the action buttons that are now in the lower-right corner of the message box, instead of centered as before in 2003.

Is there some type of setting on Windows Server 2008 to get this functionality back, or is this a Terminal Services integration thing with 2008? This is a highly visible bug to our users, as the applications interact with them a lot through dialog boxes. Like I said, we're using the same technologies/applications/hardware to do this... the only thing that's changed is the server we are terminal servicing into, which is now Windows Server 2008, so that's why I'm putting my chips on this to be the culprit somehow.

thanks in advance for any info/suggestions.

bob

Software Programmer

2008 R2 Webfeed no longer updating on Windows 7

Wed, 25 Nov 2009 14:07:23 Z

I setup a web feed to my apps on my Windows 7 client but now when I try and update it I get this error 'The remote computer cannot be authenticated due to problems with its security certificate. Security certificate problems might indicate an attempt to fool or intercept data. Error code : 0x80072f8f, 0x10'

Any ideas as my webpage works fine with SSL...? I can also see a valid cert in the computer certs store for the fully qualified name that I am using that is expiring in 2011.

Amit MCSA 2003, VCP, CCA, MCTS:2008 AD

HP DL360/G5 RDC issues

Wed, 25 Nov 2009 14:06:22 Z

We have a slew of Hewlett Packard DL360/G5 servers running Windows 2003 STD with service pack 2. One consistent bug as been ocaisonal lockouts both locally and via RDC. Locally we are recieving the following message: "Error connecting to existing session for Administrator (ID 0)"

I googled this message and found several people with similar problems. Our engineers are telling me that this problem is specific to HP G5 servers and that the problem doesn't occur on our older DL360/G4 units. so far our only solutions has been to power cycle the server since the shutdown option is not available. This is a poor solution since these servers are on live networks. I was wondering if anybody knew of a patch or registry fix that solves the issue.

2003 SP2 Terminal Server Stop Error 0x000000ba

Fri, 30 Oct 2009 15:24:41 Z

My 2003 SP2 Terminal Server has had the BSOD starting on 7/17/09. It then crashed on 8/25, 9/29/ 10/7, 10/8, 10/11, 10/21, and 10/29. I have not made any driver/hardware/antivirus changes. Prior to the system crashed I had not installed any windows updates since April 09. Since the crashes began I installed the hotfix 961974. I also installed all other windows updates for the server. This did not solve my problem. While searching on the internet I saw someone was able to fix this by uninstalling MS08-061 Q954211. My server did not have this update installed on it. I looked in add/remove programs and C:/Windows. I have checked for updates for the following drivers: win32k.sys, rdpdd.dll and video drivers. The server does not have Adobe Acrobat Typewriter so the atmfd.dll does not apply. Here is the memory dump analysis.

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [P:\My Documents\Memory Dump TRMSRV\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (4 procs) Free x86 compatible
Product: Server, suite: TerminalServer
Built by: 3790.srv03_sp2_gdr.090319-1204
Machine Name:
Kernel base = 0x80800000 PsLoadedModuleList = 0x808af9c8
Debug session time: Thu Oct 29 17:08:03.005 2009 (GMT-4)
System Uptime: 8 days 0:17:14.156
Loading Kernel Symbols
...............................................................
..................................................Unable to add module at bfa3e000
.
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffdb00c). Type ".hh dbgerr001" for details
Loading unloaded module list
.................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck BA, {1e, 3, e15ab670, 1f}

PEB is paged out (Peb.Ldr = 7ffdb00c). Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 7ffdb00c). Type ".hh dbgerr001" for details
Probably caused by : memory_corruption ( nt!MiFreeSessionSpaceMap+2c )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SESSION_HAS_VALID_VIEWS_ON_EXIT (ba)
Caused by a session driver not unmapping its mapped views prior to a
session unload. This indicates a bug in win32k.sys, atmfd.dll,
rdpdd.dll or a video driver.
Arguments:
Arg1: 0000001e, session ID
Arg2: 00000003, number of mapped views that are leaking
Arg3: e15ab670, address of this session's mapped views table
Arg4: 0000001f, size of this session's mapped views table.

Debugging Details:
------------------

PEB is paged out (Peb.Ldr = 7ffdb00c). Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 7ffdb00c). Type ".hh dbgerr001" for details

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xBA

PROCESS_NAME: csrss.exe

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 8095f5ae to 8087c4a0

STACK_TEXT:
97771c4c 8095f5ae 000000ba 0000001e 00000003 nt!KeBugCheckEx+0x1b
97771c68 809c63e1 88ddb7a8 88ddb7a8 00000000 nt!MiFreeSessionSpaceMap+0x2c
97771ce8 8082a2e6 88ddb7a8 00000000 88ec3db0 nt!MiDereferenceSessionFinal+0x23f
97771d04 8090e54d 88ddb7a8 88ec3db0 88ec3ff0 nt!MmCleanProcessAddressSpace+0x6b
97771d8c 809206e4 00000000 00000000 88ec3db0 nt!PspExitThread+0x5f1
97771da4 80920841 88ec3db0 00000000 00000001 nt!PspTerminateThreadByPointer+0x4b
97771ddc 8083fe9f bf91990f 89ca11e0 00000000 nt!PspSystemThreadStartup+0x3c
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16

STACK_COMMAND: kb

FOLLOWUP_IP:
nt!MiFreeSessionSpaceMap+2c
8095f5ae cc int 3

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!MiFreeSessionSpaceMap+2c

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP: 49c22f72

IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: 0xBA_nt!MiFreeSessionSpaceMap+2c

BUCKET_ID: 0xBA_nt!MiFreeSessionSpaceMap+2c

Followup: MachineOwner
---------

What is my next step? Do I have to start a support case with Microsoft?

Thanks,

2008 R2 remote desktop services in a 2000 AD

Wed, 25 Nov 2009 08:17:14 Z

I have a Windows 2000 AD network with a pile of Windows 2000 Terminal Servers that are pretty well identical. Could I plug in a 2008 R2 server running Remote Desktop Services and have that be a 'Terminal Server' for my existing network e.g. replace let's say current Terminal Server B running the same mix of apps as as it? What limitations would I face? What about at the client end - would I need to upgrade Remote Desktop client/dotnet, etc.?

Bilgisayarınızın desteklemediği ağ düzeyi kimlik doğrulaması gerektiriyor.Yardım için sistem yöneticinize başvurun.

Wed, 25 Nov 2009 12:57:57 Z

Merhaba,

Windows Xp Professional Sp3 işletim sistemlerinden Server 2008 yüklü server'a uzak masaüstü bağlantısı yapmaya çalıştığımda bu hatayı almaktayım.Server2003 te de aynı hata vardı ;ama Xp clientlerde sp3 yükleyince sorunu çözmüştük.Yardımcı olabilir misiniz?

"Thin clients" and the terminal profile of the user

Wed, 25 Nov 2009 12:26:54 Z

There are specialised "thin clients". Windows Server 2008 R2 it is customised as a terminal server.
The domain on Windows Server 2003.How correctly to customise the profile in properties of the terminal user if roaming profile it is not necessary. How to make, that the profile of the user was not on a disk C, and formed on other section. And at a login of the user through RDP booted therefrom. If the profile of the service of terminals is customised - \\server\terminalprofiles $\test there is a profile test.v2 in terminalprofiles $.I know that it is profile version 2. Also there is a local profile on C.How to make that at a login "the thin client" through RDP the profile from the specified place booted, and on a disk C profiles was not.
I tried to copy the profile of the user with С:/Users/test on G:/terminalprofiles $/test. V2 having come under the manager through handle of profiles of users in Server 2008 R2, but the tab to "copy" is not active.
Help!

Substituted Drive Not Always Visible in Windows Explorer

Wed, 25 Nov 2009 11:42:42 Z

We have a 2008 server with terminal services enabled and the login script is used to subst I: to a folder on a local hard disk eg. SUBST I: D:\FOLDER

When the domain administrator is logged in via an RDP session they have an entry for I: shown in windows explorer. If a user logs in while the domain administrator is logged in they also see I: in explorer but if a user logs in when the administrator is not logged in they don't. Attempts to access I: from the command line are always successful and the substitution can be seen by typing SUBST at the command line.

Any idea what's going on?

RDP session authenticate from RADIUS Server

Wed, 25 Nov 2009 11:03:07 Z

Hello:

Is it possible that when we take a remote session of a Windows Server machine and put the credentials in the logon screen, it authenticate us via the external third party RADIUS Server ?

We don’t want to log in through VPN just want to use RDP(terminal service) . Kindly help us in this regard

Regards,
Saquib

Saquib

Printer Sharing - TS Terminal Services Server Windows 2008

Tue, 24 Nov 2009 15:52:01 Z

Any one know WHY Microsoft has SO ANNOYINGLY disabled the facility to SHARE the default redirected printers within different remote TS sessions?
Even the option to make the printer 'share-able' is GREYED OUT in the ts session. People only see their own redirected printers.
Then you say ... OK add your own printer in the TS Session, and make it sharable. Sure ! That works fine, and the new added printer is then visible to all other TS users, but as soon as the user logs off, the TS-ID changes, and so does the vital port number, and I AM BACK TO SQUARE ONE !!!

Session (redirected) printers are not visible to administrator on terminal server 2008

Tue, 17 Mar 2009 22:12:11 Z

Hello,

I am currently running windows 2008 enterprise 32bit server with terminal services role installed.

I have several users connecting to the terminal server using redirected printers.

I need the ability to view these printers as the user administrator from a remote desktop 6.1 connection.

While typing this message, I have figured out my problem. For those of you who may be expieriencing this issue, it is caused by using the /admin switch on the remote desktop connection. If you do not use /admin then you will be able to see all of the redirected printers!

This is opposite of what happens with previous version of windows terminal server.

Hope this helps someone.....

Shared Redirected Printers - TS Windows Server 2008

Tue, 24 Nov 2009 16:42:50 Z

Has anyone got a bunch of remote TS users who can see each other's redirected printers and able to print to them ?
(like the good old days of win2k3)
If yes, HOW DID YOU DO IT ?

Unable to share remote printers connected to different terminal sessions in win2k8 Terminal Services

Fri, 20 Mar 2009 17:44:51 Z

Problem Description: Unable to share remote printers connected to different terminal sessions.
Server Spec: Win 2k8, .Net 3.5, SP1 - With Terminal Services Role
Client Spec: Vista SP1, .NET 3.5
User: Administratior

Hi

I have successfully managed to get the the local PC printers display as the default session printers, but it only works per session which as I understand is a new feature of win2k8.
Meaning user (a) is unable to see user (b)'s printer and can not print to it. (Both Admin users)

1) have set the GPO to show only the default printers in the TS sessions which works, the client PC's are Vista SP1 with .Net 3.5
2) also set up a printer server role on the Terminal server and all users are members of 'print operators'.
3) The printers connected to the client PC's are all configured as 'shared' in Vista.
4) I can created shared printers from within the terminal sessions, but when the user loggs off, obviously the session ID changes, and the shared printers no longer work.
5) When I try to configure the printer from within the TS session, I can not make it a 'shared' printer, although in Vista, it says it is 'Shared'. Within the TS, the option is greyed out.

Please tell me what I am missing here.

Thanks,
Allen

Edit the RDS (TSweb) page

Wed, 25 Nov 2009 07:37:38 Z

Hi.

Don't know if this is the right forum, please point me in the right direction if not.

I have a Windows Server 2008 R2 server set up with remote desktop services.

I have two questions regarding "skinning" :

1.
Is it possible (how) to skin the welcome page (http://server/rdweb) with my own text, logos etc..?

2.
When I log on to the welcome page with a XP client, I get to an errorpage (http://server/rdweb/pages/en-us/default.aspx) saying that activeX control is not installed etc etc... Is it possible for me to edit this page? I want it to be in my own language and with a quick link to RDP 6.1 for XP.

Thanks for your help.

/frank

Frank Nilsen Logica Norge AS Microsoft Gold Partner

Insanely annoying TS problem. Ease of Access turned on and cannot turn off

Sun, 22 Nov 2009 02:26:48 Z

We serve Quickbooks as a published app via TS/RDP. Its Quickbooks 2009 and SVR08 R2 64 bit.

Somehow Ease of Access turned on. When you launch Quickbooks as a remote app most keys you push give some type of ease of access reponse. It starts to read everything on the screen, most keys do not do what they are supposed to do.

If I login in directly as the user, none of the options are turned on and EOA is not turned on. It is only when launching the application as a remote app. Of course launched a remote app, can't get to anything else, just Quickbooks itself.

Can I just remove or shut off the EOA stuff? I didn't see it as a service or anyplace where I could remove it.

We're getting around it by logging in directly to the server via RDP.

Add custom icons to RDS (TSweb) page

Wed, 25 Nov 2009 07:36:08 Z

Hi.

Is it possible (how?) to add customized icons, i.e an Internet Explorer shortcut or an RDP icon to another computer to the RemoteApp (ts-web) page?

/frank

Frank Nilsen Logica Norge AS Microsoft Gold Partner

Some users cannot launch TS applications

Mon, 23 Nov 2009 14:19:47 Z

Hi there we have an odd situation.

We have about 500 XP clients. Domain at Server 2008 R2 level. Multiple Terminal Servers running various of Server 2003 32 & 64 bit, Server 2008 32 bit and Server 2008 R2. We run apps that are on the terminal servers using a connection broker but for some users those apps never run. We can re-create the issue by the following:

* log in as the user with the problem

* Start run "mstsc"

* enter in the name of the Terminal Server

* Click "options"

* Go to the "programs" tab and enable "start the following..."

* enter in "%windir%\notepad.exe"

* hit "connect"

For most users, they will have to enter their domain credentials at the TS logon screen and the log on and notepad successfully launches full screen with no access to the desktop. For a certain proportion of users they log on and notepad does not launch and they get left at the desktop. There are no error messages, and nothing interesting that I've seen in the event logs.This happens for regular users, domain admins, restricted users, just a certain random proportion.

Here is what we've done so far:

* Moved the user and the Terminal Server into an OU of no inheritance to rule out policies.

* Removed any mandatory profiles

* removed all group membership apart from "domain users"

* Tried to completely mimic as user that works - i.e. give them the same policies/profiles/group memberships.

None of that makes any difference.

Here is another oddity. If we copy a user that is failing, the newly created copy "always" works - in our tests so far at least.

Where should we take it from here?

Thanks for any help/suggestions that anyone can come up with.

Remote Desktop Gateway - redundancy issues

Tue, 17 Nov 2009 19:50:07 Z

Right now I have a situation where I have about 30 remote sites which connect to about a half dozen Terminal Servers at head office. At each site, each computer has two icons - a main Terminal Server icon and a backup one that is used if for some reason there is a problem with the main one. The sites are grouped such that site group A has TS1 as their main and TS2 as their backup; site group B might maybe has TS3 as their main and TS4 as the backup. This way it's pretty hard for any one TS down situation to have much impact on user access. As computers are in my view cheap this solution ensures a lot of up time. We've actually been down less than our ISP, our Telecom provider, Microsoft, Yahoo and Google over the last few years. When I see the Gateway compoent I admire the features but I can't help but think what happens if it goes down? One box out of commission and no Terminal Services? Do I have to start getting into clustering technologies to make it so that I have a pool of a dozen gateways the way I did with Terminal Servers so if one goes down the others one kick in? If that's the case it seems like I'm managing twice the number of computers - they're not that cheap.

TS Web Access, Remoteapp & RDP 7 on Windows XP SP3

Sat, 21 Nov 2009 12:17:28 Z

Hi all,

I have the following setup: Windows ISA server 2006, Windows Server 2008 Terminal Services Gateway & Windows Terminal Server.

On my client computers i have Windows XP Prof. SP3 installed.

When I upgraded the MS terminal Server client software with the new RDP 7.0 client, i receive the following error (translated from dutch):

The connection is disconnected because an unexpected certificate for serververification from the external computer is received. Try to connect again. If the problems continues, contact the owner of the remote computer or system administrator.

I haven't got this error when i used the ms ts client installed with XP SP 3 (= 6.1 i believe). I have looked on google for this error but i can't find any pages on it?

I looked at the certificates and they all look fine. I also have an internal certificate authority issued computer certificates for the TS gateway and TS server (named tsgateway.domain.local & ts01.domain.local: they match the FQDN of the servers). The external certificate (https://ts.domain.nl/) for connecting via the isa server i installed on the isa server via weblistener... On all the servers and clients the certificate authority is trusted.

Hope that somebody can put me on the right track.

Best regards,

Robert.

2008 Terminal Services - Having to login twice?

Wed, 27 Feb 2008 19:31:57 Z

Hey ya'll!

I have 3 servers (two physical and one virtual) running as a TS cluster on 2008 Standard. I'm using NLB and Session Broker for them. Here is how I reproduce the problem:

1. I login to the terminal server via the NLB cluster address.

2. It presents me with the UN/PW screen and I oblige.

3. It looks like it's logging in and then kicks me back to the login screen. This time showing my user icon and name.

4. I click the user icon and type my password again.

5. It logins to the desktop successfully.

Why am I having to login twice? Thanks ya'll in advance.

Sincerely,

Joshua

From External: Cannot RDP or finalize a RD Web access connection

Tue, 24 Nov 2009 22:53:13 Z

When I try to access our RDS server from the internet (external) I get the following errors.

When I try to connect via RD Web Access, the error I get is...
"Remote Desktop Connection could not find the destination computer. This can happen if the computer name is incorrect or the comptuer is not yet registered with Session Broker. Try connection again, or contact tour network administrator."

When I try to conenct via RDP (remote desktop protocol) I get in but when I click the app, it starts to use port 3389 and I get the following error...
"Remote Desktop Connection could not find the destination computer. This can happen if the comptuer name is incorrect or the computer is not yet registed with Session Broker. Try connection again, or contact your network administrator."

I am assuming the Session Broker it is trying to use the self signed certificate. Which is why I can only RDP in locally. What did I not setup correctly?

***
FIX FOUND

Within the RD Session Host Configuration - I changed the setting for RD Sessin Broker to the following...
Member of Farm in RD Connection Broker: No

local webcam via remote desktop

Tue, 24 Nov 2009 22:41:46 Z

Is there a way to use my local webcam on a remote desktop I'm connecting to via win 2008 remote desktop?

2008 Terminal Server Beep

Thu, 18 Sep 2008 21:57:29 Z

We recently migrated to 2008 for alot of our production servers, and now when users connect to them thru RDP dialog boxes generat a system board beep. I know you can stop the beep service on the client end, but this is far from ideal. Is there a way to stop it on the server end so clients don;t get the beeps?

RDP Login of domain user on vista and 2k8 fails in domain with one way trust

Tue, 24 Nov 2009 16:31:41 Z

I had originally posted this over on the group policy forum but the thought is that it is not a GP, since a share on the client machines is accessible vie credentials from the domain we have the trust with.
Here are the contents of that discussion.
I have a 2K8 domain setup with 4 DC's with a one way trust to the corp domain. (see nltest results below)

Servers are server 2008 ent x64 SP2 clients that I am trying to connect to are Vista 32 sp2 and server 2008 std 32 sp1

The machine I am trying to connect from is server 2008 ent sp1 64 bit (although I have tried other systems as well. )mstsc version is 6.0.6001

So far every vista and 2008 client that I have tried to RDP into fails with.

"The security database on the server does not have a computer account for this workstation trust relationship."

So far I have added domain users (from the domain we trust) to the remote desktop group and insured they had terminal services logon right. I have also tried adding them to the administrators group.
I have also created groups on the DC with the domain user names. Added them with FULL privledges on the computer account in the domain and then added that group to both the remote desktop users and administrators group and still RDP fails. when using the domain\user information

At this point I have had my fingers in almost every GP I can find dealing with terminal services etc so If you need me to pull additional information just let me know

I did see this FAQ
http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/26455b36-26bd-4a44-b594-5a9f67bcd8df#_Q1:_Windows_Server
However Deleting and rejoin the domain have had no affect on any of the machines. Also running nltest /domain_trusts shows
0: XXXROOT xxxcorp.net (NT 5) (Direct Outbound) ( Attr: 0x8 )
1: ESCE.adapps.XX.com (NT 5) ( Forest Tree Root ) (Primary Domain) (Native)

NLA has been turned off and I have added both users and groups to the security tab on the computer account as well as on the client system with no luck..
What are we missing here?

Thanks for looking,
Chris

Terminal Services is not working.

Fri, 20 Nov 2009 12:38:27 Z

First, Terminal Services is working properly. Remote users connect to the server, but after a while, there is a disconnection.
Helps only - restart the Terminal Services. It happens once a day.
In the logfiles only complaints about the inability to initiate remote printers: not specified printer. Install the printer driver is not possible, because the drivers for Win 2008 Server (for this printer) does not exist. But I'm not sure that the problem in the printer. What can I do?

Varning after TS server joined a TS Session Broker farm

Thu, 24 May 2007 20:49:26 Z

First the server gets this:

Log Name:      System
Source:        Microsoft-Windows-TerminalServices-SessionBroker-Client
Date:          2007-05-24 22:22:46
Event ID:      1009
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      sto-lab-long03.longhorn.test
Description:
The server failed to join TS Session Broker. The RpcBindingSetOption function call failed with Win32 error code 0x6A5.

Then the server joins:

Log Name:      System
Source:        Microsoft-Windows-TerminalServices-SessionBroker-Client
Date:          2007-05-24 22:22:47
Event ID:      1005
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      sto-lab-long03.longhorn.test
Description:
The server successfully joined a farm on the TS Session Broker server sto-lab-long01.longhorn.test.

And then it gets:

Log Name:      System
Source:        Microsoft-Windows-TerminalServices-SessionBroker-Client
Date:          2007-05-24 22:22:47
Event ID:      1014
Task Category: None
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      sto-lab-long03.longhorn.test
Description:
The server failed to retrieve the security identifier (SID) of the TS Session Broker server.
Win32 error code: 0x534.

The load balancing is working but what about the error messages?

Synchronizing Roaming Profiles Between a V1 & V2 Profile

Tue, 24 Nov 2009 13:53:47 Z

In the following document: Managing Roaming User Data Deployment Guide.doc it says:

The user profile namespace used in Windows XP is identical to the one used in Windows 2000, making interoperability between the operating systems transparent. However, the significant changes in the Windows Vista profile namespace create a challenge. These significant changes prevent Windows Vista from loading user profiles from previous versions of Windows. Also, previous versions of Windows do not load Windows Vista user profiles. Therefore, Windows Vista roaming user profiles will add "v2" to the end of the profile folder. The "v2" is to used isolate Windows Vista roaming user profiles from roaming user profiles created by previous operating systems.

Unfortunately there is no way to migrate a V1 profile to a V2 profile. The two types of profile are incompatible, and trying to move anything between the two will render the V2 profile unusable, and cause serious problems for you (often requiring manual registry editing to fix).

Basically, we are trying to migrate our TS users from a 2003 Server and 2000 Client, to a Windows 7 Client and 2008 R2 Server. The problem is we cannot find a way to synchronize their remote profiles so that the "V1" profiles would get synchronized (even partially) with the "V2" profile. We wanted to migrate the users gradually, first migrating the TS side from 2000 to 2008, and then the client, to ease them in. Is there any way to do this?

RD Gateway: "User not allowed to logon at this computer" error

Tue, 24 Nov 2009 11:59:37 Z

Hi,
Probably a silly misconfiguration on my side, but I'm going to ask anyway :)

I have a Win 2008R2 server configured as an RD Gateway.
I have created two new users, Agent1 and Agent2. They are members of the Domain Users group.
I have also created a Global Security group called "Agents" and added the users Agent1 and Agent2
Agent1 and Agent2 are members of the Remote Desktop Users and Power Users groups on the target server TARGET (Windows 2003) and can both RDP in locally without any issues

I have a single RDCAP which allows Domain Users and Domain Admins access.
I have an RDRAP which grants members of "Agents" access to an RD Gateway Managed Group "Agent Servers" which has the TARGET server in it (both as short and full dns name)

Now the problem.

Domain admin users can log in through the Gateway
Agent1&2 can both log in locally using RDP but not through the Gateway
I get the error message on the gateway: User not allowed to logon at this computer.

Any ideas what I have forgotten to configure?

Thanks,
Adam