Certifcate no valid on RDS server

Hi,
i have the following setup :
Windows Server 2012 R2 Essentials as main server, and a Windows Server 2012 R2 standard as Remote Desktop Services Server.
The main server was installed quit default, nothing special. I created a selfsigned certificate for the remote.domainname.com. Then let the DNS hoster add a A-record for that name.
For the RDS server i did a default setup of the Server 2012R2 and then i added the RDS role "Remote Desktop Services Installation", and then selected "Quick start", and "Session-based desktop deployment", confirmation and reboot.
I also changed the listening port on that server to 3390 in Windows and in the RD session host server.
Internally and externaly everything works for the first server (Essentials). If i go to https://remote.companyname.com, i see the landing page, and can login. All works fine.
For the second server, i have a problem, i cannot acces the page (https://remote.companyname.com:3390/rdweb). I land on the page, and it states that it has a certificate that is not valid or correct (the certificate is : "servername.domain.local").
So my problem is the certificate (i"m 95% sure). Instead of "servername.domain.local" it should state "remote.domainname.com".
But i can't seem to find in SRV 2012 where i have to change. (in 2008, under "TS remoteApp Manager", you could select the "terminal Server Settings" and the "Digital Signature Settings")
Any help, tips or tricks, are welcome
Regards,
Jo

Hi,
Some suggestion, you should have TCP port 443 and UDP port 3391 forwarded to your RD Gateway server for RD Server. We need to add an external DNS A record for server name that points to your public IP so that users can connect. You can use below cmdlet to change
published name.
Change published FQDN for Server 2012 or 2012 R2 RDS Deployment
http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80
Apart you can go through beneath article for certificate requirement.
Certificate Requirements for Windows 2008 R2 and Windows 2012 Remote Desktop Services
http://blogs.technet.com/b/askperf/archive/2014/01/24/certificate-requirements-for-windows-2008-r2-and-windows-2012-remote-desktop-services.aspx
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Similar Messages

Backup RDS server and licensing

Hello, I have a client that we implemented RDS with 2012 server. Sessions not Virtual Desktops. Everything is working fine but now we want to implement a disaster recover site for the RDS server amongst other things. My concern for this
will be licensing.
So ive been reading up and I want to confirm some things.
So my plan is to bring up another RDS server in the disaster site. Make that server a license server, but I will not be installing any valid RDS license Cals on there.
So the idea is, if they have a disaster where they can no longer access there main RDS server, they can connect to the RDS server in the disaster site. The License server does not have any valid license cals but my understanding is it will give out
temp licenses in the meantime.
Then I can transfer my licenses over to the Disaster RDS server.
Just FYI, we are using User cals not Device, not sure if that makes a difference
I guess what I need to confirm is if this will work? Im told even though I don't install valid licenses the licensing server will give out Temp licenses so users can access the RDS server?
On a side note, im I breaking the law with the licensing at all, im assuming im not as long as I transfer the RDS licenses over to the Disaster site.
On another side note, at some point I would be transferring the licensing back to the Main location, is there a limit to how many times you can transfer licensing?
Thanks for the help
Mike

Hi Mike,
Thank you for posting in Windows Server Forum.
Yes, the solution can work for you. You need to configure RD License High availability in your network. As you are using Per User mode license you need the setup can be easily deployed. Please refer following part.
When terminal servers are in per-user mode, the solution is simple. Deploy two activated license servers, placing all license tokens on one license server, and ensure both license servers are discoverable. In fact, it isn’t even functionally required that license
tokens be installed on either of the license servers. By placing all license tokens on a single license server, you simplify backup and recovery of the licensing infrastructure.
Per-User Mode, two license servers are deployed on the network. In the case of either one failing, the other is available so clients can continue to connect uninterrupted. If the terminal server deployment involved multiple sites, it’s best to place an enterprise
license server in each site that contains terminal servers to keep licensing-related WAN traffic to a minimum.
More information.
Terminal Services License Server High-Availability and Recovery (Part 1)
In addition, also check beneath thread (answered by TP) for detail regarding Per Device CAL.
RDS license server failover
Hope it helps!
Thanks.
Dharmesh Solanki

Possible workaround for: Launch Debugger Error "Unable to connect to the RDS server"

I do not yet have a reproducible case for this. *Sometimes* ColdFusion Builder throws the "Unable to connect to the RDS server" error, when attempting to start a debug session against a remote server. However, "RDS Dataview" and "RDS Fileview" views correctly list the servers and their related data/file, and testing RDS connection result is "Test connection was successful". The workaround is:
1. Login to the ColdFusion Administrator
2. Navigate to "Debugger Settings" page (beneath "Debugging & Logging")
3. Click on "Stop Debugger Server" -or- "Restart Debugger Server"
4. Restart ColdFusion Application Server
Notes:
a) Step #3 must be done via ColdFusion Administrator, not via ColdFusion Admin API (stopLineDebugger()|restartLineDebugger())
b) Step #4 can be done via ColdFusion Administrator -or- ColdFusion Builder
c) Note that there is a CF9 Release Note for Bug #78488: "When a server having "Windows service option" ENABLED is added as a remote server, then Start-Stop-Restart operation cannot be done on it." However, I've found that "Restarting" a remote server, that is running as a Windows service, is possible in ColdFusion Builder (at least this is so on standalone developer edition). Like Bug #78488 says, I am unable to "Stop|Start" a remote server that is running as a Windows service. I'm just mentioning all of this, due to my suggestion in "b", that CF can also be restarted via ColdFusion Builder.
It is interesting that attempts to stop|restart the debugger server, via CF Admin API, do not resolve the issue. So, it seems that the "Stop Debugger Server" and "Restart Debugger Server" buttons, in CF Admin, are doing more than calling the corresponding CF Admin API methods.
Attached is an image of the error.
Just posting all of this as an FYI, in case it helps anyone.
Thanks!,
-Aaron Neff
(OH.. I'm unable to attach images at this time *DOH!* ..well, I'll try to remember to update this post w/ the image, once I see that attachments are allowed.)
I'll try to describe the error message window:
- It is 494x452 pixels
- Title of the window is "Error occurred while launching the Debugger"
- Body content of the window is as follows:
Unable to connect to the RDS server 'ServerNameHere'
Ensure that the server is currently running and that line debugging and RDS are enabled. You may also need to check your RDS connection settings in Eclipse to ensure that they are correct.
Error Message:
-1:Error connecting to JVM for debugging at localhost:5005. Could not attach to the VM at port 5005. You must specify this debugger port in the JVM settings of your application server, for example: -Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=5005. You will also need to make sure that another debugger is not currently connected to the CF JVM at the same port (5005).
Root cause ->
Connect refused: connect

hi,
I have been facing the same problems while connecting to Oracle Web Conferencing and is getting error message :Unable to connect to the server. The Web COnferencing Console will now close. Please try again later. If the problem persist, contact your system administrator.
Diagnostic report shows failed on the connectivity part
Connectivity
mx-direct Failed
0:00:00.719 Connecting to web331.oracle.com:1025
0:00:00.922 Name resolved to 148.87.108.234
0:00:21.906 connect() failed (0x8007274C)
0:00:21.906 Connection failed (0x8007274C)
Pl help me to fix the problem.
Regards
Gobind Ahuja

Exchange 2013 with Outlook on RDS Server is extremely slow

Exchange 2013 CU5 on Server 2012 R2 fresh install/new to domain; Outlook 2010 or 2013 on Remote Desktop server not in cached mode is slow to open, search and send messages with attachments. Opening messages and opening attachments runs quickly.
My test mailbox has 300kb worth of mail in it and sending a message with a 5Mb attachment locks up Outlook for close to 1 minute and takes another 30 to 90 seconds to disappear from the outbox and and move to sent items. This issue does not present
itself in OWA. My current testing RDS environment is a fresh install of Server 2008 R2 with Outlook 2013. No additional add-ins or AV running on the Exchange server or the test RDS server.
When cached mode is enabled, Outlook runs better as shown in Outlook 2010 (+ Exchange 2013) works extremely slow; however, I don't consider this an option because there isn't enough drive space on the RDS server to cache all of the user profiles.
Other Exchange environments - Outlook 2010 or 2013 in an RDS environment (non-cached) with Exchange 2007 or 2010 - don't show the same performance issues. Moving within Outlook and sending large attachments runs quickly.
I have checked Exchange throttling settings and monitored logs, but have not found cases where my test user is being throttled. I have also looked at turning off IPv6 based on another post's suggestion; however, I have seen conflicting information
about disabling IPv6 for Server 2012 R2, so I have not yet gone down this path.
The Exchange server is a VM on a new VMware host and has assigned 8 cores from Intel Xeon E5-2640 procs and 16GB RAM; 1TB thick provisioned database volume on a RAID 5 array with 6 x 10k RPM SAS drives. Disk queues are low on the Exchange server (in
the .20 to .70 range). My test RDS server is on the same VMware host on the same vSwitch. Another test system is on a different system, but exhibiting the same behavior.

Hi,
How about the suggestion from Festivalman?
Feel free to contact me if there is any update.
Thanks
Mavis
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Mavis Huang
TechNet Community Support

RDS Server timed out in CF Report Builder

I am so frustrated I could scream!!! For some reason, CF
Report Builder is timing out on ALL reports - even ones that I have
previusly created. Whenever I try to access the Report Query, it
times out. Whether I'm trying to edit a previously created query,
or create a new query. I have stopped and started both IIS and RDS
Server numerous times already, and that has not helped at all.
HELP!!! How can I fix this?

Found the answer in one of the old discussions.
Correct syntax is report.functionname(). I was using report.functionname.
Thanks anyway!

Remove Powershell Pinned Item from taskbar for all users in 2008 R2 RDS server

Im trying to remove the Powershell Pinned Item from the taskbar on a 2008 RDS server. I have setup a mandatory porfile from a 2008 SP2 server (because you cannot do this in R2 any more), Check the default user pinned items folder, check the registry for powershell.exe, loaded up the NTUSER.DAT file for default to see if any thing obious was there, tried some logon scripts that are suppose to remove pinned items and posted on several forums. This has to be one of the simplest dumb things i have ever worked on , and its been about a week. So how do i remove it?
P.S.
having the user click un pinn is not a solution
yes i have checked C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch

Hi Jeramy,
The default pinned items are created the first time a user logs in. Modifying the default user profile won’t help here.
The easiest option is to set the “Remove pinned programs from the Taskbar” to disable taskbar pinned items altogether. The default pinned items won’t show up, but the user won’t be able to pin anything else either.
If you don't want to disable pinning altogether the solution is a little more complicated. One option is to remove the shortcuts “Accessories\Windows PowerShell\Windows PowerShell.lnk” and “Administrative Tools\Server Manager.lnk” from the common start menu folder. These shortcuts are copied to create the pinned items. If they aren’t present they can’t be pinned. This is not a supported option but it may work.
Another option is to use IStartMenuPinnedList::RemoveFromList in a first run script to remove the pinned items. Not sure how reliable this would be due to the timing of when the default items are added compared to when the script would run.
One other option is to use shell scripting to invoke the pin & unpin verbs on items:
http://blogs.technet.com/deploymentguys/archive/2009/04/08/pin-items-to-the-start-menu-or-windows-7-taskbar-via-script.aspx
This would need to be done when the user first logs in (since unpinning default items in the default user profile won't affect each new user account), but it also need to be timed after Explorer sets up the default pinned items as explained above.
Hope one of these options work for you!
~Olga

An error occurred validating your storage server credentials

an error occurred validating your storage server credentials

I found the answer of my issue was in a .NET Agent installed by NewRelic on the server. I found a connection trouble with Fiddler, then I end up figuring this out:
This can be the result of Real User Monitoring so the first step in troubleshooting would be to disable it and see how it affects the application. The .Net Agent injects snippets of javascript into the header of pages sent to the users browser to measure the
page load time on the user's end.
You can disable RUM by editing newrelic.config and changing this line:
<browserMonitoring autoInstrument="true"/>
to this:
<browserMonitoring autoInstrument="false"/>

Load Balancing Microsoft RDS server

Hi there, we have two servers hosting remote desktop service roles, is there any way to setup load balancing on these two?
Say setup a pointer "xxx.rdsfarm.com"? The pointer points to two servers with round robin? We have third party LB doing load-balance work for Citrix Xenapp.
Thanks
Regards
Ying Liu
Ying Liu MCSE, CCNAV

Hi Ying,
Thank you for your posting in Windows Server Forum.
Can you please let me know the OS Version of RDS Server?
Yeah, you can load balance the two RDS Server and can combine with RDCB server for setting up RDS load balancing environment. Please check below article for information.
1. Remote Desktop Server farms explained (Part 1)
2. 2012 R2 Load-Balanced RDS farm
To load balance sessions in an RD Session Host server farm, you can use the RD Connection Broker Load Balancing feature together with Domain Name System (DNS) round robin. To configure DNS, you must create a DNS host resource record for each RD Session Host
server in the farm that maps the RD Session Host server’s IP address to the RD Session Host server farm name in DNS.
Checklist: Create a Load-Balanced RD Session Host Server Farm by Using RD Connection Broker
Hope it helps!
Thanks,
Dharmesh

Question concerning the state of licenses of a Windows 2008 R2 RDS server after disolving the Domain, the DC, and the AD.

Background: - several months back a Windows 2008 r2 domain existed with a DC, and an AD. Windows servers where apart of this domain. One of the servers being a Windows 2008 R2 server with Remote Desktop Services loaded. The server was properly
licensed for 8 User CALS. All was operating correctly. Since that time the domain has been removed, the DC removed and the AD removed. What is left are Windows 2008 R2 servers in a workgroup. Again, one being the Remote Desktop Server.
Q1. Can the functioning Per User CALs (totaling 8) remain as Per User CALs?
Q2. Am I required to switch them to 8 Per Device CALs?
Referencing: "Best practices for setting up Remote Desktop Licensing...." - Article 2473823
In the above article it states under "RDS HOST and RDS Licensing servers are in the same Workgroup" that "We can use ONLY Per Device CALs in a workgroup environment. So, you should install only Per Device CALs on RDS licensing server."
( Which in my case they are both the same server.
Any information regarding what licensing options that can be used on a workgroup RDS server would be appreciated.

Hi,
Yes, agree with the supporting article which you have commented. We can only use per device CAL under workgroup environment and if you want to use per user CAL then server need to be member of domain.
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Trying to log into a RDS server using cached credentials

I have a Windows Server 2012 R2 with Remote Desktop Services installed and it is a member server in my domain.   As a test, I have cut the network connection between the RDS server and the domain controller.   I can log into the
RDS server at the console with my cached domain account, but I can't RDP into the server with my cached domain accout.   It is telling me the specified domain either does not exist or could not be contacted.   Does RDS sessions not
use cached credentials ?    I have set the Group Policy Option: Interactive logon: Number of previous logons to cache (in case domain controller is not available) to 30.   That didn't seem to make any difference. Thanks for any
help with this problem.

Hi,
By default Network Level Authentication (NLA) will be used for RDP connections, and this requires the domain controller to be available. If you needed to you could disable the requirement to use NLA in the collection properties and set a custom rdp
property so that clients would not attempt to use NLA when they connect. The downside of this approach is clients will never use NLA when connecting and instead will see a server-side log on screen, and may get multiple prompts for credentials.
It is preferred to use NLA where possible, which in most cases it is since modern clients support it.
-TP

Cannot install or manage Server 2012 R2 RDS server locally but works remotely

I am working with a Server 2012 R2 standard machine and attempting to get Remote Desktop Services installed and configured on it. Using the Add Roles and Features wizard while logged on locally to the server in question resulted in the error
“Unable to connect to the server by using Windows PowerShell remoting.” However, if I use a different Server 2012 R2 machine to run the Add Roles and Features wizard remotely targeted
at the original server then I can successfully get RDS installed.
Also, after the installation has completed I cannot manage RDS locally on the server but can successfully manage it remotely from another Server 2012 R2 box. When attempting to use Server Manager locally and choose the Remote Desktop Services menu the error
message "A Remote Desktop Services deployment does not exist in the server pool."
The server appears to be functioning correctly and can be managed remotely just not locally. I can reproduce the behavior on other Server 2012 boxes in the environment.
What would cause local install and management to fail but remote management work?

Hi,
Have you added the RDS server under server manager ADD server? Does it show the server in server list?
Check whether there is any wrong IP address\hostname entry occurs under DNS record which looks\points the DNS entry successfully.
Add Servers to Server Manager
https://technet.microsoft.com/en-in/library/hh831453.aspx
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

RDS server message: could not initialize class com.adobe.rds.core.services.Messages

I just moved to a new host with my own dedicated cloud server. Using CF9. Everything seems to be working fine with the server, but i get the following error when connecting to it via RDS through CF Builder 2.
RDS server message: could not initialize class com.adobe.rds.core.services.Messages
I get it when i first connect to the server, then if i try to access it again, it will let me in. I also get an error when i try to open the first file. Then its ok.
I have no idea what it can be, i have not run into this on any other server that I have connected to.

Hello,
After 2 months of it not working for love or money. I got a new machine and ColdFusion Builder 2 and started over. It worked for a while. Then when the trial version timed out a few days ago it killed it again. With the same error. So it is definitely something that gets “switched” within the code or configuration settings. Rebooting about 3x seemed to fix it this time after entering the license number.
Yes to answer your questions below. Yes, I did all those things below. Re-checked and checked numerous times. Keep in mind the installation there worked for over a year then all of a sudden stopped. I hadn’t changed anything at all. And it just stopped dead, started throwing up that error.
I asked all the experts in my office. One guy knows CF and Java inside and out and could not figure it out. I searched the web and the issue is listed many times but with no real answers.
Thanks for getting back to me. I am up and running with new machine. But since I’ve seen the error on this machine now, I live in fear it will reappear and stop working. So if you come up with any thoughts I would appreciate it.
Thanks,
-Lyle

CF Report Builder RDS Server

I am trying to connec tto my local RDS server but keep
getting teh following error message. Any ideas?
A connection to the RDS Server could not be established because
the webserver was unreachable."

Another developer on my team sent me a report that worked and
I noticed that I had set the Print Order to horizontal when I was
trying to fix another issue. Changed it back to vertical and it
works fine. Not sure why that should have mattered, but it works.

Cannot get Folder Redirect to work on RDS Server

OK here is what I am trying to do..
Windows Server 2008 R2 Remote Desktop Services
I want to redirect all user profile folders (Desktop, Music, etc...) to a remote share
\\server\share to which the share is actually only giving Read-Only rights. Except for Documents to which they can save there on the RDS Server itself.
I had a server drives hidden (A:, B:, C:, D:) hidden so they could only save to network shares and their local computers. However, the people in the UK complain that saving to their local computers is just painfully slow (the RDS Server is in
the US).
So, Now I'm only blocking the Server C: drive. I have a SUBST going on pointing B: to the user profile folders (needed for a different application anyway). I need to have the "B:\Documents" open for these guys to save to however, I
want to block saving to any of the other profile folders.
What I tried to do was to set a GPO up like below:
Computer\Admin Templates\RDS\Session Host\Profiles
Set path for RDS Roaming User Profile Enabled (pointing to
\\Server\Share)
User\Windows Settings\Folder Redirection\Desktop
Basic (Redirect everyone's folder to the same location)
Path \\Server\Share
Grant Exclusive rights to Desktop - Disabled
Move contents to the new location - Disabled
Apply to older systems - Disabled
First, is what I am trying to do even workable?
Next why can't I get it working.

Hi,
>>I want to redirect all user profile folders (Desktop, Music, etc...) to a remote share
\\server\share to which the share is actually only giving Read-Only rights.
To redirect user’s folders to a network share, the minimum NTFS permissions of the root folder required by the users is
List Folder/Read Data, Create Folders/Append Data - This Folder Only.
Regarding security recommendations for Folder Redirection, the following article can be referred to for more information.
Security Recommendations for Folder Redirection
http://msdn.microsoft.com/en-us/library/cc736916(v=ws.10).aspx
>>Move contents to the new location - Disabled
For disabling this setting, the existing data in the folders will not automatically follow the folders when they are redirected to the network location.
>>I need to have the "B:\Documents" open for these guys to save to however, I want to block saving to any of the other profile folders.
After redirecting the folders, if we really want to do this, as an administrator, we can take ownership of the user folders to where user’s profile folders are redirected,
and then edit the corresponding NTFS permissions.
TechNet Subscriber Support
If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here
Best regards,
Frank Shen

Coonect RDS server issue

I tried to connect RDS server using ColdFusion Report Builder.
I got HTTP/1.1 404 Not Found.
I contacted Web Server Administrator that they said they created my ID and password.
I would like to know are there any way to check client side issue to connect to RDS server.
I have a ColdFusion developer version on my local machine and I am able to connect local developer version ColdFusion Server.
My local version is ColdFusion 10, remote server is ColdFusion 9.
Your help and information is great appreciated,
Regards,
Iccsi,

Hi,
Thank you for posting in Windows Server Forum.
As per my research, sorry to inform that there is no such ways to let the folders always on top.
Hope it helps!
Thanks.
Dharmesh Solanki

Certifcate no valid on RDS server

Similar Messages

Maybe you are looking for