Hi Experts,
We have 10-12 terminal servers hosted on public cloud (Windows server 2008-R2) where users keep logging (8-10) very frequently and spend their complete office hours. We observed that Terminal Servers performance is degraded and they start complaining.
Memory : 32 GB
CPUs: 8ECPUS
Please tell if I can get Performance back of those severs. Do We need to do some weekly/monthly maintenance to maintain performance.
Regards Suman B. Singh
Windows 2008 terminal server.
I configured and distributed a RemoteApp RDP file to our workstations, but on the first day, one Windows XP user, not realizing that the logon format needed to be domain\username, instead of calling me for clarification, just went manually to Remote Desktop Connection, entered the server name, and gracefully bypassed all my hard work in configuring RemoteApp, ending up with a full deskto on the server.
I know I can also set tthe Environment tab in ActiveDirectory users and computers to limit users to one application should they again bypass the RemoteApp. However, it seems to me that there should be some setting that limits users to using RemoteApp RDP connections on a particular server and not a generic RDP logon, but I can find nothing. Is there any such setting.
This is particularly important because we may use multiple RemoteApp connections and the occasional user may need regular RDP access (with desktop) to one of our other servers.
Team,
I am facing some issues in my terminal server.
Its suddenly getting hang then i have to hard-reboot the server.
I have gone through the event viewer and got one error.
here is the error
Log Name: System
Source: Microsoft-Windows-Kernel-General
Date: 5/25/2011 4:17:11 PM
Event ID: 6
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: test.Tally.Tallysolutions.com
Description:
An I/O operation initiated by the Registry failed unrecoverably.The Registry could not flush hive (file): '\??\D:\Documents and Settings\rajani.b\AppData\Local\Microsoft\Windows\UsrClass.dat'.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-General" Guid="{a68ca8b7-004f-d7b6-a698-07e2de0f1f5d}" />
<EventID>6</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2011-05-25T10:47:11.488Z" />
<EventRecordID>24753</EventRecordID>
<Correlation />
<Execution ProcessID="1012" ThreadID="50384" />
<Channel>System</Channel>
<Computer></Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="FinalStatus">0xc000014d</Data>
<Data Name="ExtraStringLength">83</Data>
<Data Name="ExtraString">\??\D:\Documents and Settings\rajani.b\AppData\Local\Microsoft\Windows\UsrClass.dat</Data>
</EventData>
</Event>
any one can help me on this ????
Hi,
I have a 2008 R2 Server with the Terminal Services Role working fine, all the users can connect, but I have a problem, I have installed on the same server the Microsoft Dynamics Navision software, and when any try to use the mail function, it opens Outlook (I have installed the Microsoft Office and configured with exchange for every user) but every time says that Outlook is not the default mail client, and asks to put as default mail client, there is not any other mail client installed, and I don't know for what reason the option of the default mail client do not remain fixed, any idea? Thanks.
I have install Office 2010 and Remoteapp Program on One of windows 2012 server. I can open the word from rdweb without problem. However, I have these questions.
Bob Lin, MVP, MCSE & CNE Networking, Internet, Routing, VPN Troubleshooting on
How to Setup Windows, Network, VPN & Remote Access onhttp://www.howtonetworking.com
Trying to setup a HA RDCB in server 2012 but it keeps failing with the message:
Database migration - Failed: Could not add the RD Connection Broker server MASWINVDI-03.JR.LOCAL to the cluster and migrate the existing Windows Internal Database to the SQL Server database.
It successfully created the database but will not continue. I followed the following tutorial: Installing and Configuring RD Connection Broker High Availability in Windows Server 2012
any ideas?
I need to publish an application using 2008 R2 RDS for vendor specific reasons. I also want the feature of 2012 in RDWeb where I can use other Internet Explorers.
Q: Can I have all the roles on 2012 and publish an application installed on 2008 R2 RDS?
I want to use RDWEB to connect to personal and pooled desktops inside domain and seems that SSO not working in this case. Is it possible to connect to RDWEB site in domain environment without credentials prompt?
Hi,
I need to know how can i find the redirection setting in RDCB Windows Server 2012 VDI, cause I need to connect my personal VM from Wyse client app in ipad.
The Wyse client app just can connect the server address, so in Windows Server 2008 R2, I always set the RDCB as the link address, and the RDCB will redirect my request to the personal VM.
Now in Windows Server 2012, I find there is no way to set the redirection.
Asuka from ITECN
We have a windows server 2008 R2 machine. How many "free" licenses are we allowed before we are required to purchase the RD CALs? I was informed that it was 2 but would like to get some confirmation. The connecting machines are running windows 7 and pretty soon we will be outside the grace period.
The licensing mode for the Remote Desktop Session Host server is currently not configured.
Hello.
Server 2008 R2 SP1, all updates
RDweb, RD Gateway Roles installed
Server has two network adapters: LAN (local IP) and WAN (DMZ IP)
Installing TMG 2010 with all updates (ver 7.0.9193.500) as Back Firewall
TMG has rule in Firewall Policy "Allow from Internal\Localhost\Perimeter to Internal\Localhost\Perimeter any"
I configure RD Web Access to provide users access to RemoteApp and Desktop Connection: go to RDweb site, Configuration tab, enter RD Session Host server name (FQDN).
After pressing "OK" i see error message:
"RD Web Access was not able to access server3.domain.local. Verify that the RD Session Host server name was entered correctly, that the server is running and connected to the network, and then try again."
In System log i see event 10009
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 12/6/2012 9:44:26 AM
Event ID: 10009
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: WWW.domain.local
Description:
DCOM was unable to communicate with the computer server3.domain.local using any of the configured protocols.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10009</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-12-06T05:44:26.000000000Z" />
<EventRecordID>8921</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>WWW.domain.local</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">server3.domain.local</Data>
<Binary>3C5265636F726423313A20436F6D70757465723D286E756C6C293B5069643D3732343B31322F362F3230313220353A34343A32363A3531333B5374617475733D313732323B47656E636F6D703D323B4465746C6F633D313731303B466C6167733D303B506172616D733D313B7B506172616D23303A307D3E3C5265636F726423323A20436F6D70757465723D286E756C6C293B5069643D3732343B31322F362F3230313220353A34343A32363A3531333B5374617475733D313732323B47656E636F6D703D31383B4465746C6F633D313434323B466C6167733D303B506172616D733D313B7B506172616D23303A736572766572332E636C69656E74732E736D6F66662E72757D3E3C5265636F726423333A20436F6D70757465723D286E756C6C293B5069643D3732343B31322F362F3230313220353A34343A32363A3531333B5374617475733D313732323B47656E636F6D703D31383B4465746C6F633D3332333B466C6167733D303B506172616D733D303B3E3C5265636F726423343A20436F6D70757465723D286E756C6C293B5069643D3732343B31322F362F3230313220353A34343A32363A3531333B5374617475733D313233373B47656E636F6D703D31383B4465746C6F633D3331333B466C6167733D303B506172616D733D303B3E3C5265636F726423353A20436F6D70757465723D286E756C6C293B5069643D3732343B31322F362F3230313220353A34343A32363A3531333B5374617475733D31303036303B47656E636F6D703D31383B4465746C6F633D3331313B466C6167733D303B506172616D733D333B7B506172616D23303A3133357D7B506172616D23313A307D7B506172616D23323A3078376131343030306130303030303030307D3E3C5265636F726423363A20436F6D70757465723D286E756C6C293B5069643D3732343B31322F362F3230313220353A34343A32363A3531333B5374617475733D31303036303B47656E636F6D703D31383B4465746C6F633D3331383B466C6167733D303B506172616D733D303B3E</Binary>
</EventData>
</Event>
At the RD Session Host server i see two events in Security log:
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 06.12.2012 9:53:26
Event ID: 4625
Task Category: Logon
Level: Information
Keywords: Audit Failure
User: N/A
Computer: Server3.domain.local
Description:
An account failed to log on.
Subject:
Security ID: NULL SID
Account Name: -
Account Domain: -
Logon ID: 0x0
Logon Type: 3
Account For Which Logon Failed:
Security ID: NULL SID
Account Name: WWW$
Account Domain: DOMAIN
Failure Information:
Failure Reason: An Error occured during Logon.
Status: 0xc00002ee
Sub Status: 0x0
Process Information:
Caller Process ID: 0x0
Caller Process Name: -
Network Information:
Workstation Name: -
Source Network Address: -
Source Port: -
Detailed Authentication Information:
Logon Process: Kerberos
Authentication Package: Kerberos
Transited Services: -
Package Name (NTLM only): -
Key Length: 0
This event is generated when a logon request fails. It is generated on the computer where access was attempted.
The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.
The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).
The Process Information fields indicate which account and process on the system requested the logon.
The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.
The authentication information fields provide detailed information about this specific logon request.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />
<EventID>4625</EventID>
<Version>0</Version>
<Level>0</Level>
<Task>12544</Task>
<Opcode>0</Opcode>
<Keywords>0x8010000000000000</Keywords>
<TimeCreated SystemTime="2012-12-06T05:53:26.074824300Z" />
<EventRecordID>54591</EventRecordID>
<Correlation />
<Execution ProcessID="540" ThreadID="1104" />
<Channel>Security</Channel>
<Computer>Server3.domain.local</Computer>
<Security />
</System>
<EventData>
<Data Name="SubjectUserSid">S-1-0-0</Data>
<Data Name="SubjectUserName">-</Data>
<Data Name="SubjectDomainName">-</Data>
<Data Name="SubjectLogonId">0x0</Data>
<Data Name="TargetUserSid">S-1-0-0</Data>
<Data Name="TargetUserName">WWW$</Data>
<Data Name="TargetDomainName">DOMAIN</Data>
<Data Name="Status">0xc00002ee</Data>
<Data Name="FailureReason">%%2304</Data>
<Data Name="SubStatus">0x0</Data>
<Data Name="LogonType">3</Data>
<Data Name="LogonProcessName">Kerberos</Data>
<Data Name="AuthenticationPackageName">Kerberos</Data>
<Data Name="WorkstationName">-</Data>
<Data Name="TransmittedServices">-</Data>
<Data Name="LmPackageName">-</Data>
<Data Name="KeyLength">0</Data>
<Data Name="ProcessId">0x0</Data>
<Data Name="ProcessName">-</Data>
<Data Name="IpAddress">-</Data>
<Data Name="IpPort">-</Data>
</EventData>
</Event>
AND
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 06.12.2012 9:53:26
Event ID: 4634
Task Category: Logoff
Level: Information
Keywords: Audit Success
User: N/A
Computer: Server3.domain.local
Description:
An account was logged off.
Subject:
Security ID: DOMAIN\WWW$
Account Name: WWW$
Account Domain: DOMAIN
Logon ID: 0x325a4cf
Logon Type: 3
This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />
<EventID>4634</EventID>
<Version>0</Version>
<Level>0</Level>
<Task>12545</Task>
<Opcode>0</Opcode>
<Keywords>0x8020000000000000</Keywords>
<TimeCreated SystemTime="2012-12-06T05:53:26.074824300Z" />
<EventRecordID>54592</EventRecordID>
<Correlation />
<Execution ProcessID="540" ThreadID="1104" />
<Channel>Security</Channel>
<Computer>Server3.domain.local</Computer>
<Security />
</System>
<EventData>
<Data Name="TargetUserSid">S-1-5-21-3882217896-3255031834-2471755480-1945</Data>
<Data Name="TargetUserName">WWW$</Data>
<Data Name="TargetDomainName">DOMAIN</Data>
<Data Name="TargetLogonId">0x325a4cf</Data>
<Data Name="LogonType">3</Data>
</EventData>
</Event>
Help, please!
Hi,
TS/Citrix Environment:
MS Windows 2008 Server Enterprise
MS Office 2007
We were trying to configure the "Programmatic Access Security" via group policy.
But the group policy does not switch the setting cause Outlook cannot detect the status of the antivirus.
(the value is changed in the registry, but it is ignored)
Some articles say, that Outlook must detect the machines antivirus status from the "Action Center".... but 2008 Server does not have one.
Any ideas?
regards
Hi,
I have a server in my DMZ that I want to run RemoteApp on. I don't want to open up port 3389 to everyone and I've read that it's possible to runnel RDP into the HTTPS connection to the RemoteApp website. I just can't get it to work properly! Can anyone guide me? The simple way? :-)
Regards, Allan Kjær. Microsoft MCP, MCSA + Cisco CCENT, CCNA + Check Point CCSA NGX R65, CCSE NGX R65.
It seems out of the blue, I can no longer RDP into any server. The setup is AD 2008 R2, one physical host, with 3 VM's. RDP has been fine for a couple of years, then just stopped.
No updates were done as I run WSUS and haven't had tmie to log in to approve anything in maybe 3 weeks. This issue occurs regardless of what system I am coming from (all Win7 systems). Also i I am at the server and RDP to one of the VM's, no go tghere either. However I can use Hyper-V manager to open standard console sessions to the VM's no problem, for what that's worth. All clients are Win7 systems and also haven't been updated in 3 weeks.
Interestingly, I also cannot pcAnywhere to the Hyper-V host. I have this in place as a backup in case RDP has issues.
So one would think something 3rd party is blocking this stuff. I have SEP 11 running with a nearly default firewall, allowing all traffic from server to server. Just the same I turned off this firewall, no change. Oddly, Windows Firewall was started. I generally disable the WFW service itself as that seems to be the only way to truely tuen if off, since having that plus a 3rd party firewall product is generally not recommended (two FW's on one system). I've followed this practice for years and in various environments without problem. I know you need WFW running to enable RDS, so I do that, then disable WFW.
So I am lost as to how to troubleshoot this since it apepars Symantec isn't the issue, and WFW shoulnd't be since I switch off the service itself, and yet I am getting nowhere. Event logs didn't log any errors at all during the times when I was testing this.
From the client end, in the mstsc window when I click Connect, within 2 secons I get the standard "remote machine isn't RDP enabled, machine is turned off, or machine isn't on the netowrk" kind of error. This happens the same if i use hostname or IP.
Event Logs on both the client and the server(s) contain no entries in Systme or Application hat are timestamped around when I do my logging in attempts.
I'm not sure if I can get anything from the Security event logs, it just has constant Succcess Audits for mydomain admin doing something or NULL SID doing something.
I understand Remote Desktop Services has undergo some drastric changes.
How do you configure a farm name in RDS 2012? Or is the concept around farm name changed in another concept?
Although I have imported a certificate on the RDCH withe the farm name I want to use. When I click on a RemoteApp on the RD Web Access portal, it does not connect to the right farm name.
Boudewijn Plomp, BPMi Infrastructure & Security
Hi,
to set correct locale and activate desktop guest Windows before rollback snapshot, I issued an unattended sysprep file.
It basically has settings for all Windows welcome screens, key, and commands to use KMS and activate.
Sysprep itself runs correctly using this file. If I power up template then, it will do all the configurations and start working.
But when I create collection off it (I don't use unattend.xml at this step!), creation halts displaying "press ctrl-alt-del" on the VDI's console.
Logging in, out, rebooting didn't help. Desktop creation doesn't continue.
If I don't use sysprep file, then it works, but I get wrong system-wide locale for non-unicode programs for all desktops, which is not acceptable.
Can anyone please help!
Also, is there any unattended sysprep file on RDCB, which is used during desktop creation (where it is located)?
What settings are required by desktop creation service?
Thank you!
I am using windows 7.
Since I prefer to place the task bar on the top of the screen, I want to move the connection bar to the bottom of the screen when using remote desktop connection.
Otherwise, it gets quite annoying, because when I attempt to click a button on the task bar, and if the mouse pointer happens to hit the top of the screen, it keeps bringing down the connection bar. So, I want to place it to the bottom.
Is it possible?
I created Client/Server software that samples the audio input line on the Server side, and plays the audio wave data on the client side. The audio sounds great when the client and server software are physically running on two separate machines. However, when I run the server software on Windows Server 2008 R2 and then Remote Desktop into the Windows Server 2008 R2 and run the client software, the audio is choppy. I'm taking advantage of the RDP audio feature in Windows Server 2008 R2 and I know that the RDP audio traffic is limited in bandwidth. I am more concerned about response time than I am bandwidth. Is there a way to bypass limits set on RDP audio traffic? I have maximize the audio experience by “Enabling” the “Limit audio playback quality” and setting “Audio Quality” to “High” on the server side and setting the “audioqualitymode:i:2” on the client side.