Change published FQDN for 2012 R2 RDS

I have Windows Server 2012 R2 (single server hosting all the roles for RDS). I'm using RDS for publishing RemoteApps for both internal and external users. External users connect to remote.company.com and I have certificate from public ca (issued to remote.company.com).
Active Directory is company.local.
When external users connect through the rds gateway and run remoteapp they receive this warning message that is caused by fqdn mismatch
I tried to use this script to change fqdn to match remote.company.com and it does that but after that external users cannot open remoteapps anymore. Internally they work.
https://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80
I get this error in eventlog:
The user "COMPANY\username", on client computer "xx.xx.xx.xx", did not meet resource authorization policy requirements and was therefore not authorized to resource "remote.company.com". The following error occurred: "23002".
If I change the published fqdn back to rds.company.local remoteapps starts to work again but with certificate error.
How can I fix this?

Hi,
In RD Gateway Manager, please edit the properties of the RD RAP. On the Network Resource tab, please select Allow users to connect to any network resource. After modifying the RD RAP please use Set-RDPublishedName cmdlet to change the published
name to the correct FQDN as you did before.
Once you verify it is working you could go back in (if you want to) and create a RDG-managed group with all of the required names.
Thanks.
-TP

Similar Messages

Changing the FQDN for receive connectors on Edge servers

Hi everyone,
I need to make a change to the default receive connector on our edge servers. Currently they have mx1.internaldomain.intra and mx2.internaldomain.intra, I need to change this to mx1.publicdomain.com and mx2.publicdomain.com. This is primarily in order to
get TLS to work, checktls.com shows that it cannot resolve the current names, for obvious reasons.
These receive connectors are for receiving inbound mail from the internet only.
The question I wanted to ask was - if I make this change, will I have to redo the edge subscription for these servers?
Some people here seem to think edgesync will be broken if this is changed, I personally think it'll be fine. As we don't have a test environment I can't check on that, and also our DR site was configured correctly (as I configured this myself ;) )
Does anyone have any concrete information regarding this? I have tried so many searches but they haven't produced anything definitive.
Thanks in advance
Andoni

I changed this and TLS starts OK now. checktls.com produces the expected results (OK). There is no need to redo the edgesync as that's only used to pass credentials between edge and CAS/HT servers.
Closing this post.

Providing external url for the fqdn for webfeed returns error in eventlog that shows internal url is being used - how to change to the external url?

I've got my Rdweb accessible on both my internal and external network by using split dns locally to resolve the external url (remote.domain.com/rdweb) to resolve and everything works fine. However users don't want to use the rdweb interface (as it is slower
than just clicking on a rdp shortcut.
Following the notes at http://social.technet.microsoft.com/wiki/contents/articles/14488.distribution-of-remote-apps-and-desktops-in-windows-server-2012.aspx - I've tried to set up the webfeed on a Win7+ machine but when I enter the external url that
is protected by an SSL cert the eventlog shows that the internal address is being used and it doesn't match the certificate. - "There is a problem with this connection's security certificate.
The remote computer cannot be authenticated due to problems with its security certificate.
Security certificate problems might indicate an attempt to fool you or intercept data you send to the remote computer.
Windows cannot continue setting up this connection. Contact your workplace administrator for assistance.
Connection name:
Connection URL: https://internalservername/rdweb/feed/webfeed.aspx
How do I set the servers to use the external address rather than the internal one - i'm assuming it's similar to exchange's
Set-webservicesvirtualdirectory command but I can't find the equivalent command documented anywhere.
http://absoblogginlutely.net

Hi,
Thank you for posting in Windows Server Forum.
Please check below mention point.
• Create a relevant DNS entry in the mentioned zone to point to the RDS environment’s internal IP address
• Create a relevant DNS entry in external DNS to point to the firewall which is publishing RDS’s external IP address
• You can use the below mention script to change the FQDN of the RDP files provided by RD Web Access / RemoteApp and Desktop connection feed.
Change published FQDN for Server 2012 or 2012 R2 RDS Deployment
http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80
In addition please check below mention thread.
How do I change the URL to the Remote Web Access server in Windows Server 2012?
http://social.technet.microsoft.com/Forums/windowsserver/en-US/67dfab70-7e10-4e0b-a3c8-63ce776f2355/how-do-i-change-the-url-to-the-remote-web-access-server-in-windows-server-2012?forum=winserverTS
Apart from this, also check the settings under; IIS in RDWeb Server as per below mention path.
Expand the default Website >Pages >Application Settings >DefaultTSGateway >
Enter the external address (FQDN) of the RD Gateway in the Value Field.
Hope it helps!
Thanks,
Dharmesh

Single fqdn for rds?

I have server 2012 r2 that has all rds roles. It's hosting few apps that are published as remoteapp for both internal and external users.
Is there going to be problems that I should be aware of if I configure everything with single fqdn remoteapp.company.com? I'm buying certificate from public ca and I have problem because there is .local in servers internal name and I cannot append
that to certificate. I'm planning to configure internal dns so that remoteapp.company.com resolves to rds server private ip and external dns server resolves to public ip.
How does client determine when to connect via rd gateway? Will they always connect through the rd gateway if internal server name and rdgateway names are the same?

Hi,
There is no problem with using a single name since you have everything on one server. You will need to change the published FQDN using this cmdlet:
Change published FQDN for Server 2012 or 2012 R2 RDS Deployment
https://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80
In RD Gateway Manager, please edit the Properties of the RD RAP. On the Network Resource tab, please select Allow users to connect to any network resource. Alternatively you could create a RDG-managed local group that has the required names and
select that option instead.
In your firewall you need to allow TCP port 443 and UDP port 3391. Using the default setting internal users will not use RD Gateway whereas external users will use RDG since they will be blocked by your firewall from connecting directly on TCP/UDP
3389.
If you would rate the above cmdlet (hopefully 4-5 stars) I would appreciate it.
Thanks.
-TP

Adding alternative FQDN for local domain.

Hi,
I'm trying to configure RDS for my standalone Windows Server 2012 Essentials and it's almost done.
(Probablly) last thing i need to do is to change FQDN for my local domain to .com to use RDS externaly.
So, like i said, i've done dyndns config, added ssl cert, configured RDWeb, RD Gateway, RD License and RD Broker.
Now, when i'm logging into remote.mydomain.com/RDWeb , i can login with Active Directory credentials, get rdp i try login into server. But i can only try, becuase there is an error about wrong FQDN for server (know and not new error for anyone). So, what I
had done was changing FQDN for my domain by this powershell script http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80 (if anyone had problems with digitally unsigned script, google for "Set-ExecutionPolicy Unrestricted"), in
theory, this script changed FQDN, but in reality, i still have same problem trying to connect externally.
I also read that i should add new DNS Zone for my .com domain and there add (A) record for my subdomain for remote desktop, that points to internal IP adress of my server. When i tried that, it was even worse because i couldn't even open RDWeb site. When that
dns zone was deleted, everything came back to previous state.
And now i'm here, out of ideas. Any suggestion what I did wrong? Maybe it was something with this DNS Zone for .com ? Maybe there should be Zone, but not normal one but "stub zone"?
I would be happy for any suggestion.

" suspect we may have a basic mis-understanding of what each of us is trying to say. Let me try again.
There are (at least) three ways to reach a LAN computer from the internet with Essentials. Remote Web Access, direct RDP and VPN. There are also third party solutions, such as Go To My PC and Log Me In. The third party type
usually involve a subscription model with recurring charges, the others may involve a fee for SSL certificates, but they are (usually) much less expensive and do not rely on a third party."
Yes, i can agree we difinitelly had problem with mis-uderstanding so, sorry for that. I was talking about direct RDP to my server because Anywhere Access is already configured (but remote desktop from there to server opened only Essential Dashboard, that's
why i left this solution). Also, like i said, i'm aware of risks and i'll
take responsibility for that.
"Direct RDP is configured at the router and points the port (3389, but it can be changed) to the IP of the device you want to contact. then, simply opening the RDP applet on your remote computer and typing in the public IP of the router/firewall
will automatically connect you to the chosen computer. This is a very high security risk and should be avoided when ever possible."
Here is double facapalm for me - when you wrote about 3389 TCP port, i got enlightenment that i didn't do that (because i ealier tried to work on 443 with Anywhere Access and forgot about it), also information i got after tries to connect weren't usefull neither
- because Windows gave me back information about wrong FQDN, i was strictly focused on that problem, but like we know now, problem was in much different place. When i opened that port, everything started to be like i wanted (i also find out, after testing
RDP client from remoteapp in web menu that why i'm using this when i want to used direct RDP anyway). So much facepalm.
Next thing for now will be different port then 3389 and in future, VPN instead of direct RDP.
Anyway, really, thanks for help!

Users Cannot Change Passwords on a Server 2012 R2 RDS Farm

Hello I have a Server 2012 R2 RDS Farm consisting of 1 server that has connection broker and gateway configured and 4 RDS Session Hosts. The works great I even have a separate remote app farm to distribute the apps to the servers, my main issue is passwords
and the lack of the EU ability to change these, listed below are my symptoms.
Users password has expired denied logon instantly with no ability to change password.
User tries to change password whilst in 30 day warning period using ctrl alt end the user is advised the password does not meet complexity requirements I have checked this and they do meet them.
Expired passwords can be changed via the RDWeb site however this is not an option for us.
Chris

Hi,
Firstly, based on my knowledge, remote users may have to change their passwords before expired. If not, they have to use OWA or logon on locally to change their passwords.
Regarding the issue, please let us know if the following policies are enabled in your domain.
Enforce password history
Minimum password age
Also, does a local domain user have the same issue?
Thanks.
Jeremy Wu
TechNet Community Support

SQL Server 2012 Change Data Capture for Oracle by Attunity support for Oracle 12

I would like to know if there are any plans for SQL Server 2012 Change Data Capture for Oracle by Attunity to support versions of Oracle 12 and if by when.

I have asked from the author of
http://blogs.msdn.com/b/mattm/archive/2012/03/26/cdc-for-oracle-in-sql-server-2012.aspx about this.
I will either ask him to answer here or I would be a messenger.
Balmukund Lakhani | Please mark solved if I've answered your question, vote for it as helpful to help other users find a solution quicker
This posting is provided "AS IS" with no warranties, and confers no rights.
My Blog |
Team Blog | @Twitter
Author: SQL Server 2012 AlwaysOn -
Paperback, Kindle

Trying to activate serial number after entering redemption code and continues to say invalid serial number. Installing on Server 2012 R2 for client using RDS. HELP.....

trying to activate serial number after entering redemption code and continues to say invalid serial number. Installing on Server 2012 R2 for client using RDS. HELP.....

Thank you guys for the quick answer! Muche appreciated
I've tried all suggested solutions, but no luck :-(
- tried http://support.microsoft.com/kb/2765260 > no help and by the way the hotfix provided is not applicable for 2012 R2.
also tried "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_regii -enable -i" and got this :
Microsoft (R) ASP.NET RegIIS version 4.0.30319.33440Administration utility to install and uninstall ASP.NET on the local machine.Copyright (C) Microsoft Corporation. All rights reserved.Start installing ASP.NET (4.0.30319.33440).This option is not supported on this version of the operating system. Administrators should instead install/uninstall ASP.NET 4.5 with IIS8 using the "Turn Windows Features On/Off" dialog, the Server Manager management tool, or the dism.exe command line tool. For more details please see http://go.microsoft.com/fwlink/?LinkID=216771.Finished installing ASP.NET (4.0.30319.33440).
http://social.technet.microsoft.com/wiki/contents/articles/14582.sharepoint-2013-install-prerequisites-offline-or-manually-on-windows-server-2012-a-comprehensive-guide.aspx
> is not for 2012 R2.
For the automated install script (http://gallery.technet.microsoft.com/office/DownloadInstall-SharePoint-e6df9eb8) Craig mentions that the script are not yet compatible
"SharePoint 2013 SP1 and Windows Server 2012 R2 support coming soon
I will be updating this script with support for SharePoint 2013 Service Pack 1 installations along with support for Windows Server 2012 R2 in the near future. Thank you to everyone for the interest in my scripts - it is much appreciated! "

Change Published Replenishment Order

Hi,
I'm implementing SMI scenario with SAP SNC 5.1. I was traying to change a Published Replenishment Order, to do this i have:
Created and published a Replenishment Order in SNC Web UI -> The Purchase Order is correctly created in customer Backend system (ECC).
Allowed supplier to change published ROs
Changed and re-published the Replenishment Order in SNC Web UI -> The idoc incoming in Customer Backend system, to change the PO, is in error:
The material number for item 000001 could not be identified
For the PO changes, SNC send to PI the VendorGeneratedOrderNotification.XML, PI converts it in to the ORDRCHG.ORDERS05.
In customer backend system (ECC) I've set the Inbound parameters as follow:
Message type: ORDCHG
Message Code: SMI
Process Code: ORDC
I've tried also with Message Code "EF" or blank but these cases the error will be:
EDI: Partner profile inbound not available
Am I doing wrong something? Where I did a mistake?
Thank you in advance for your support.
Edited by: PTP Team Consultants on Jan 24, 2012 11:42 AM

Hi PTP
First of all Process Code: ORDC is to change sales order
Secondly, Why the business allows supplier to change published RO?
If there is a change that is always performed by supplier, then please do not publish VGON xml to customer system. Wait for confirmation of Sales order from Supplier and then trigger VGON xml to customer system, that would be the best practise to follow
I do not know how this works, have you tried not maintaining any ORDCHG MESSAGE TYPE
Like you were saying
Created and published a Replenishment Order in SNC Web UI -> The Purchase Order is correctly created in customer Backend system (ECC).
This is taken care by inbound parameter
Message type: ORDRSP
Message Code: SMI
Process Code: ORDS
Is it not taking care for the changed xml?
Regards
Vinod

Changing Domain Controller for Exchange 2013

Folks
I have an Exchange 2013 running on Server 2012.
Old DC on Server 2008.
I want to decommission the 2008 server. I have build a 2012 DC and for the life of can not work out how to change the DC that my exchange box uses????
Using Set-ADServerSettings cmdlet only seems to change the server for that current session?? reboot and back to the old DC...
When I use the Se-ExchangeServer cmdlet, I get domain controller cant be found. I have set the execution policy on the dc to unrestricted and still Domain controlleer cant be found..
New dc is a GC..
Any ideas would be good.
-graham

First, the behavior observed for the cmdlet Set-ADServerSettings is normal. The values for the domain controllers
designated are " per session". For example:
The PreferredServer parameter
specifies the FQDN of the domain controller to be used for this session.
http://technet.microsoft.com/en-us/library/dd298063(v=exchg.150).aspx
+++
What parameters, exactly, did you use for Set-ExchangeServer? What was the entire command?
If the domain controller(s) were found for "Set-ADServerSettings"
and... if Exchange is functioning OK in general, the domain controllers should be accessible.
+++
Are you in a position where you could shut down the older server (during off hours for example) and see if Exchange can
find - and use - the newer DC?
Will you only have one DC after decommission of the old one?
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.

Publishing App Controller (2012 SP1) to Internet Located Users via TMG2010

Hi All,
I'm trying to publish a demo environment hosted on our internal App Controller via TMG, to some colleagues working from home via non domain joined PC's.
I've configured a publishing rule on TMG 2010 that allows my remote user to login. They connect using a name like
https://vmm.company.com and this all works fine. But if they try to initiate a connection to the Hyper-V Guest machines Console they get a DNS error
Virtual Machine Manager failed to connect to the virtual machine because the hostname (xxx.yyy.com) could not be resolved by Domain Name System
Looking at the URL although it is using the vmm.company.com, in the path xxx.internal.com is being used and this is the internal Hyper-V Host machines internal FQDN.
So I thought i'd be clever and use link translation in the rule, so that the TMG replaces any traces of xxx.internal.com with vmm.company.com, now I don't get the DNS error any more but I get a socket error, asking me to check my firewall.
Sure enough I check the logs in TMG and there are access denied entries on that port, coming from external to the TMG's perimeter IP address
So I create an access rule to allow 2179 from external to the ip address, and a non web server publishing rule for the internal Hyper-v host listening on 2179, but I now get this error in the TMG logs, access is initially allowed
A connection was abortively closed after one of the peers sent an RST packet
the same Socket Error is received on the client.
Anyone ever done anything like this, or have a clue what i'm doing wrong?
Cheers
Darren

Hi Darren,
To show the console of a virtual machine it is necessary to create a connection from the client computer to the Hyper-V server. An alternative to opening a port on your Hyper-V servers to the Internet is to publish App Controller as a RemoteApp. In this
situation, colleagues working from home will connect to the Remote Desktop Gateway and App Controller will be running on the gateway. When a console connection is made the connection is then from the Gateway to the Hyper-V server.
You could also consider the Remote Console feature in System Center 2012 R2
http://technet.microsoft.com/en-us/library/dn469415.aspx. This feature is designed to allow console connections from clients that are outside of the corporate network.
Kind Regards
Richard
This posting is provided "AS IS" with no warranties, and confers no rights.

Windows Server 2012 R2 RDS: RDS Users are unable to delete files from their desktop

Hello,
We are working with Windows Server 2012 R2 RDS. We also implemented User Profile Disks. This is all working fine without problems. The only issue I have is that normal users are unable to delete files from their desktop. They are getting a message:
you'll need administrator permission to delete this file, with the prompt for administrator access.
They can edit, copy, rename, cut and paste files. But they cannot delete a file from their desktop.
I checked the security permissions of the files on the desktop (for example a normal self-created PDF file) and the users are owner and have "Full Control" over the files.
I checked the file permissions and took a look under "Advanced", selecting the specific domain user and checked the "Advanced Permissions" and the user has the "Delete" option checked. So he should be able to delete the
file.
I am guessing this is UPD related issue, or something in GPO. But I already unlinked the GPO objects, that I felt could be the source of this problem, but without results.
Could someone give me a hint on where to look? It's kinda annoying to users, that they can't delete their own files.

Hello Bria,
What you should check first, is the NTFS permissions on the User Profile Disk to begin with. See if the user has full control over the items that are in the UPD.
Also check the GPO's that are enabled for the user and computer account. You can check that by running: gpresult /h <path>\gpresult.html
There are two GPO settings that could prevent the user from deleting his/her own items:
User
Configuration\\Policies\\Administrative Templates\\Windows Components\\Windows Explorer\
Hide these specified drives in My Computer
Prevent access to specified drives in My
Computer
There might be other GPO settings, that block deleting items on the UPD, but can't think of any out of my head.
I can only think NTFS and GPO settings that might prevent the user from deleting items. In my case it was a GPO setting, that I didn't suspect.

Unable to find the published output for this request - problem

Hi ,
In the invoice Payables module i modified a report to be open in xml and not text as it was. The program name of this report iis Print Invoice Notice. I did same thing we normally do to register a xml report in ebs.
The problem is that when i run the report from the invoice form and from the button wich call this raport i get this error:
Unable to find the published output for this request.
No output file exist for the request
and if i see the log file i get this message :
Arguments
P_INVOICE_ID='10243'
APPLLCSP Environment Variable set to :
XML_REPORTS_XENVIRONMENT is :
+/oracle/prodora/8.0.6/guicommon6/tk60/admin/Tk2Motif_UTF8.rgb+
XENVIRONMENT is set to /oracle/prodora/8.0.6/guicommon6/tk60/admin/Tk2Motif_UTF8.rgb
Current NLS_LANG and NLS_NUMERIC_CHARACTERS Environment Variables are :
AMERICAN_ALBANIA.UTF8
+' '+
REP-3000: Internal error starting Oracle Toolkit.
Report Builder: Release 6.0.8.27.0 - Production on Fri Mar 27 02:30:46 2009
+(c) Copyright 1999 Oracle Corporation. All rights reserved.+
The thing is that if i run this report from Other ->Request -> Run of the same module this raport runs correctly
And if i change the output of my report (From concurrent manager) to text its open correctly even from there where i want to open it.
Can anyone give me any sugestion why i get this error while i try to open this xml publisher report from a button in a form in application?
PS: i am using ebs 11.5 version
Thanks in advance,
Best regards

Hi,
REP-3000: Internal error starting Oracle ToolkitThis errors was discussed many times before in this thread, so please search for REP-3000 and fix this error first ( [REP-3000|http://forums.oracle.com/forums/search.jspa?threadID=&q=REP-3000&objID=c84&dateRange=all&userID=&numResults=15] )
Regards,
Hussein

Server 2012 R2 RDS, User Profile Disks are created but local profiles are created as well. The UPDs aren't mounting correctly.

2012 R2 RDS Deployment with RDCB HA and UPDs enabled. Everything was working fine with no issues until users started getting temporary profiles. Around the same time UPDs were being created but at the same time a user profile was created in C:\Users.
I actually rebuilt the entire RDS configuration except the SQL Server. It took about 5 hours and was not that big a deal but.... we still have the same issue!
Does anybody have the solution for this?

Hi,
In most cases, the issue is caused by locked UPD. And the workaround is to log off the user. Please check if it is the case.
For example:
RDS user profile disks - getting error temporary profile are being used as UPD are not accessible
http://social.technet.microsoft.com/Forums/windowsserver/en-US/0d4b66fc-b53f-435e-b036-142b6ed15d0b/rds-user-profile-disks-getting-error-temporary-profile-are-being-used-as-upd-are-not-accesible?forum=winserverTS
Also, please check if you will get the temporary profile when logging on with a local account of the session host server.
If issue persists, please check if there is any related error in Event Viewer and provide us for further research.
Hope this helps.
Jeremy Wu
TechNet Community Support

Change Tracking in SQL 2012 - Behavior Change

Hi,
We observed some change in behavior for Change Tracking feature in SQL 2012 Express. Sequence is as follows,
CT is not enabled at DB level. (Of course at table level too)
Created and populated table CTTEST with some rows, say 10 rows
Enabled CT at DB level
Enable CT for table CTTEST
Queried change tracking data, using change table function (select CT.* from CHANGETABLE(changes CTTEST, 0) CT). No rows returned. Perfect.
Updated few existing rows
Queried change tracking data using CHANGETABLE function as above. Now it returns the modified records. But SYS_CHANGE_OPERATION column shows as 'U', indicating update. Same scenario was tested in SQL 2008 Express, and we got SYS_CHANGE_OPERATION column
as 'I', indicating as Insert.
Is this a change in behavior? Can somebody clarify this?
Note: SQL Version is, "Microsoft SQL Server 2012 - 11.0.2100.60 (X64) Express Edition (Build 7601: Service Pack 1)"

Please note that I am not talking about CDC, but CT - Change Tracking and that too in Express edition.
Yes, I know, when we update primary key value, we will get a delete and insert transactions in CT. But my scenario is different. I am updating the rows, which are already available prior to enabling Change Tracking in that table. In that case only, I am
observing this.

Change published FQDN for 2012 R2 RDS

Similar Messages

Maybe you are looking for