HI
1 can you enter winver in command prompt on problematical computers and look the os version and os version number ?[for example windows 10 enterprise 1809 (os build 17763.316)]
If the client machine is running Windows 7, it must have the RDC 8.0 update installed in order to use TLS 1.2. Without the RDC 8.0 update, the Windows 7 client can only use TLS 1.0.
2 can you enter gpresult /h c:\tls.html on problematical client then look if you have set below policy ?
Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security set Require use of specific security layer for remote (RDP) connections to ssl
Incorrect TLS is displayed when you use RDP with SSL encryption
https://support.microsoft.com/en-us/help/3097192/incorrect-tls-is-displayed-when-you-use-rdp-with-ssl-encryption
3 is there RD connection broker role install in your RDS environment ?
if there is ,did you configure RDCB HA in your environment ?
RDS Connection Broker or RDMS fails after you disable TLS 1.0 in Windows Server
https://support.microsoft.com/en-ca/help/4036954/disabling-tls1-0-can-cause-rds-connection-broker-or-rdms-to-fail
Best Regards
Andy YOU
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact
tnmff@microsoft.com.
