Clipboard redirection gpo server 2012r2

HI ,
I am in the process of testing server2012 in our domain .
And i got a small issue with the clipboard redirection computer GPO .
We currently allow copy /paste via RDP for some server .
Everything working fine for server 2008r2 , forest level 2008r2 all with all 2012 template up to date .
This gpo setting as been working for year without a itch under 2008r2 .
But i cannot get it to work under server 2012 or 2012 r2 .
my gpresult , rsop, and regkey setting show the the proper setting on my server2012 test server and properly applied .
All my other TS config are looking fine . Even my ts clipboard monitor running fine .
But my copy paste either in or out off the server is always gray out .
Anyone have a hint how i can debug this .
I have reset user profile even new account got this issue.
i am talking about
Windows Components/Remote Desktop Services/Remote Desktop Session Host/Device and Resource Redirection
Do not allow Clipboard redirection set to -> Disabled

it really a gpo thing ... same account as soon as i joint the domain i lost the functionality
local admin or domain admin ...
but it funny it allow copy paste for like notepad to notepad .
but i cannot copy a file anymore , like desktop to desktop , and it what i am trying to debug
Is there a new setting for 2012 a miss cause under 2008 it working fine.
Here a gpresult and it cleary show the proper setting
ill get back tommorow.
GPO: Default Domain Policy
Policy: @wsecedit.dll,-59058
ValueName: MACHINE\System\CurrentControlSet\Control\Lsa\NoLMHash
Computer Setting: 1
N/A
Event Log Settings
N/A
Restricted Groups
GPO: DEV_ADMIN_SERVER
Groupname: Administrators
Members: TINK\DEV_ADMIN_SRV_L
TINK\Domain Admins
TINK\Enterprise Admins
System Services
N/A
Registry Settings
N/A
File System Settings
N/A
Public Key Policies
N/A
Administrative Templates
GPO: TS_SETTING_DEV
Folder Id: SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\fDisablePNPRedir
Value: 1, 0, 0, 0
State: Enabled
GPO: IE_Security
Folder Id: Software\Policies\Microsoft\Internet Explorer\Control Panel\History
Value: 1, 0, 0, 0
State: Enabled
GPO: TS_SETTING_DEV
Folder Id: SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\fDisableCam
Value: 1, 0, 0, 0
State: Enabled
GPO: WSUS_INT_SRV
Folder Id: Software\Policies\Microsoft\Windows\WindowsUpdate\AU\DetectionFrequencyEnabled
Value: 1, 0, 0, 0
State: Enabled
GPO: ALL_DNS_SETTING
Folder Id: Software\Policies\Microsoft\Windows NT\DNSClient\RegistrationEnabled
Value: 1, 0, 0, 0
State: Enabled
GPO: ALL_DNS_SETTING
Folder Id: Software\Policies\Microsoft\Windows NT\DNSClient\RegisterReverseLookup
Value: 2, 0, 0, 0
State: Enabled
GPO: Default Domain Policy
Folder Id: Software\Policies\Microsoft\Windows\System\GroupPolicyRefreshTime
Value: 15, 0, 0, 0
State: Enabled
GPO: TS_SETTING_DEV
Folder Id: SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\DeleteTempDirsOnExit
Value: 1, 0, 0, 0
State: Enabled
GPO: ALL_POWERSHELL_ALLOW
Folder Id: Software\Policies\Microsoft\Windows\PowerShell\EnableScripts
Value: 1, 0, 0, 0
State: Enabled
GPO: WSUS_INT_SRV
Folder Id: Software\Policies\Microsoft\Windows\WindowsUpdate\AU\RebootWarningTimeoutEnabled
Value: 1, 0, 0, 0
State: Enabled
GPO: ALL_FIREWALL
Folder Id: SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\EnableFirewall
Value: 0, 0, 0, 0
State: Enabled
GPO: TS_SETTING_DEV
Folder Id: SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\fDisableClip
Value: 0, 0, 0, 0
State: Enabled
GPO: ALL_DNS_SETTING
Folder Id: Software\Policies\Microsoft\Windows NT\DNSClient\AppendToMultiLabelName
Value: 1, 0, 0, 0
State: Enabled
GPO: Default Domain Policy
Folder Id: Software\Policies\Microsoft\Windows\System\GroupPolicyRefreshTimeOffsetDC
Value: 0, 0, 0, 0
State: Enabled
GPO: ALL_DNS_SETTING
Folder Id: Software\Policies\Microsoft\Windows NT\DNSClient\RegistrationRefreshInterval
Value: 16, 14, 0, 0
State: Enabled
GPO: WSUS_INT_SRV
Folder Id: Software\Policies\Microsoft\Windows\WindowsUpdate\AU\AUPowerManagement
Value: 1, 0, 0, 0
State: Enabled
GPO: TS_SETTING_DEV
Folder Id: SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\MaxIdleTime
Value: 0, 112, 153, 20
State: Enabled
GPO: ALL_POWERSHELL_ALLOW
Folder Id: Software\Policies\Microsoft\Windows\PowerShell\ExecutionPolicy
Value: 85, 0, 110, 0, 114, 0, 101, 0, 115, 0, 116, 0, 114, 0, 105, 0, 99, 0, 116, 0, 101, 0, 100, 0, 0, 0
State: Enabled
GPO: IE_Security
Folder Id: Software\Policies\Microsoft\Windows\System\UserPolicyMode
Value: 2, 0, 0, 0
State: Enabled
GPO: Default Domain Policy
Folder Id: Software\Policies\Microsoft\Windows\System\GroupPolicyRefreshTimeOffset
Value: 5, 0, 0, 0
State: Enabled
GPO: WSUS_INT_SRV
Folder Id: Software\Policies\Microsoft\Windows\WindowsUpdate\AU\RescheduleWaitTime
Value: 5, 0, 0, 0
State: Enabled
GPO: WSUS_INT_SRV
Folder Id: Software\Policies\Microsoft\Windows\WindowsUpdate\AU\UseWUServer
Value: 1, 0, 0, 0
State: Enabled
GPO: TS_SETTING_DEV
Folder Id: SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\fEnableSmartCard
Value: 0, 0, 0, 0
State: Enabled
GPO: WSUS_INT_SRV
Folder Id: Software\Policies\Microsoft\Windows\WindowsUpdate\TargetGroupEnabled
Value: 1, 0, 0, 0
State: Enabled
GPO: TS_SETTING_DEV
Folder Id: SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\fDisableAudioCapture
Value: 1, 0, 0, 0
State: Enabled
GPO: ALL_FIREWALL
Folder Id: SOFTWARE\Policies\Microsoft\WindowsFirewall\PolicyVersion
Value: 10, 2, 0, 0
State: Enabled
GPO: WSUS_INT_SRV
Folder Id: Software\Policies\Microsoft\Windows\WindowsUpdate\AU\RescheduleWaitTimeEnabled
Value: 1, 0, 0, 0
State: Enabled
GPO: TS_SETTING_DEV
Folder Id: SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\fResetBroken
Value: 1, 0, 0, 0
State: Enabled
GPO: ALL_FIREWALL
Folder Id: SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\EnableFirewall
Value: 0, 0, 0, 0
State: Enabled
GPO: IE_Security
Folder Id: Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Persistent
Value: 0, 0, 0, 0
State: Enabled
GPO: WSUS_INT_SRV
Folder Id: Software\Policies\Microsoft\Windows\WindowsUpdate\TargetGroup
Value: 83, 0, 82, 0, 86, 0, 95, 0, 73, 0, 78, 0, 84, 0, 0, 0
State: Enabled
GPO: TS_SETTING_DEV
Folder Id: SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\fDisableCpm
Value: 1, 0, 0, 0
State: Enabled
GPO: ALL_FIREWALL
Folder Id: SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\EnableFirewall
Value: 0, 0, 0, 0
State: Enabled
GPO: IE_Security
Folder Id: Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect
Value: 0, 0, 0, 0
State: Enabled
GPO: TS_SETTING_DEV
Folder Id: SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\MaxDisconnectionTime
Value: 0, 20, 115, 15
State: Enabled
GPO: WSUS_INT_SRV
Folder Id: Software\Policies\Microsoft\Windows\WindowsUpdate\WUServer
Value: 104, 0, 116, 0, 116, 0, 112, 0, 58, 0, 47, 0, 47, 0, 98, 0, 117, 0, 114, 0, 116, 0, 105, 0, 110, 0, 107, 0, 119, 0, 115, 0, 117, 0, 115, 0, 48, 0, 50, 0, 46, 0, 116, 0, 105,
0, 110, 0, 107, 0, 46, 0, 108, 0, 111, 0, 99, 0, 97, 0, 108, 0, 0, 0
State: Enabled
GPO: ALL_NO_IE_WIZARD
Folder Id: Software\Policies\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize
Value: 1, 0, 0, 0
State: Enabled
GPO: WSUS_INT_SRV
Folder Id: Software\Policies\Microsoft\Windows\WindowsUpdate\AU\AUOptions
Value: 4, 0, 0, 0
State: Enabled
GPO: ALL_Power_Options
Folder Id: Software\Policies\Microsoft\Power\PowerSettings\ActivePowerScheme
Value: 56, 0, 99, 0, 53, 0, 101, 0, 55, 0, 102, 0, 100, 0, 97, 0, 45, 0, 101, 0, 56, 0, 98, 0, 102, 0, 45, 0, 52, 0, 97, 0, 57, 0, 54, 0, 45, 0, 57, 0, 97, 0, 56, 0, 53, 0, 45, 0,
97, 0, 54, 0, 101, 0, 50, 0, 51, 0, 97, 0, 56, 0, 99, 0, 54, 0, 51, 0, 53, 0, 99, 0, 0, 0
State: Enabled
GPO: SRV_NO_ICT
Folder Id: Software\Policies\Microsoft\Windows\Server\InitialConfigurationTasks\DoNotOpenAtLogon
Value: 1, 0, 0, 0
State: Enabled
GPO: TS_SETTING_DEV
Folder Id: SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\fDisableCcm
Value: 1, 0, 0, 0
State: Enabled
GPO: WSUS_INT_SRV
Folder Id: Software\Policies\Microsoft\Windows\WindowsUpdate\AU\NoAutoUpdate
Value: 0, 0, 0, 0
State: Enabled
GPO: ALL_POWERSHELL_ALLOW
Folder Id: Software\Policies\Microsoft\Windows\PowerShell\EnableScripts
Value: 1, 0, 0, 0
State: Enabled
GPO: SRV_NO_ICT
Folder Id: Software\Policies\Microsoft\Windows\Server\ServerManager\DoNotOpenAtLogon
Value: 1, 0, 0, 0
State: Enabled
GPO: Default Domain Policy
Folder Id: Software\Policies\Microsoft\Windows\System\GroupPolicyRefreshTimeDC
Value: 5, 0, 0, 0
State: Enabled
GPO: TS_SETTING_DEV
Folder Id: SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\fDenyTSConnections
Value: 0, 0, 0, 0
State: Enabled
GPO: TS_SETTING_DEV
Folder Id: SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\PerSessionTempDir
Value: 0, 0, 0, 0
State: Enabled
GPO: WSUS_INT_SRV
Folder Id: Software\Policies\Microsoft\Windows\WindowsUpdate\AU\AutoInstallMinorUpdates
Value: 1, 0, 0, 0
State: Enabled
GPO: WSUS_INT_SRV
Folder Id: Software\Policies\Microsoft\Windows\WindowsUpdate\AU\DetectionFrequency
Value: 20, 0, 0, 0
State: Enabled
GPO: WSUS_INT_SRV
Folder Id: Software\Policies\Microsoft\Windows\WindowsUpdate\AU\RebootWarningTimeout
Value: 5, 0, 0, 0
State: Enabled
GPO: IE_Security
Folder Id: Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History\DaysToKeep
Value: 180, 0, 0, 0
State: Enabled
GPO: ALL_DNS_SETTING
Folder Id: Software\Policies\Microsoft\Windows NT\DNSClient\SearchList
Value: 116, 0, 105, 0, 110, 0, 107, 0, 46, 0, 108, 0, 111, 0, 99, 0, 97, 0, 108, 0, 44, 0, 116, 0, 105, 0, 110, 0, 107, 0, 113, 0, 97, 0, 46, 0, 116, 0, 105, 0, 110, 0, 107, 0, 46,
0, 108, 0, 111, 0, 99, 0, 97, 0, 108, 0, 44, 0, 116, 0, 105, 0, 110, 0, 107, 0, 116, 0, 97, 0, 99, 0, 46, 0, 116, 0, 105, 0, 110, 0, 107, 0, 46, 0, 108, 0, 111, 0, 99, 0, 97, 0, 108, 0, 44, 0, 116, 0, 105, 0, 110, 0, 107, 0, 112, 0, 114, 0, 111, 0, 100, 0,
46, 0, 99, 0, 116, 0, 105, 0, 46, 0, 108, 0, 111, 0, 99, 0, 97, 0, 108, 0, 44, 0, 115, 0, 50, 0, 105, 0, 46, 0, 99, 0, 111, 0, 109, 0, 44, 0, 115, 0, 50, 0, 105, 0, 119, 0, 101, 0, 98, 0, 46, 0, 99, 0, 111, 0, 109, 0, 44, 0, 116, 0, 105, 0, 110, 0, 107, 0,
110, 0, 101, 0, 116, 0, 46, 0, 99, 0, 97, 0, 0, 0
State: Enabled
GPO: WSUS_INT_SRV
Folder Id: Software\Policies\Microsoft\Windows\WindowsUpdate\WUStatusServer
Value: 104, 0, 116, 0, 116, 0, 112, 0, 58, 0, 47, 0, 47, 0, 98, 0, 117, 0, 114, 0, 116, 0, 105, 0, 110, 0, 107, 0, 119, 0, 115, 0, 117, 0, 115, 0, 48, 0, 50, 0, 46, 0, 116, 0, 105,
0, 110, 0, 107, 0, 46, 0, 108, 0, 111, 0, 99, 0, 97, 0, 108, 0, 0, 0
State: Enabled
GPO: IE_Security
Folder Id: Software\Policies\Microsoft\Internet Explorer\Control Panel\AdvancedTab
State: disabled
GPO: TS_SETTING_DEV
Folder Id: SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\fDisableCdm
Value: 1, 0, 0, 0
State: Enabled
GPO: Default Domain Policy
Folder Id: Software\Policies\Microsoft\Windows\System\AllowX-ForestPolicy-and-RUP
Value: 1, 0, 0, 0
State: Enabled
GPO: TS_SETTING_DEV
Folder Id: SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\fDisableLPT
Value: 1, 0, 0, 0
State: Enabled
GPO: WSUS_INT_SRV
Folder Id: Software\Policies\Microsoft\Windows\WindowsUpdate\AU\ScheduledInstallTime
Value: 1, 0, 0, 0
State: Enabled
GPO: WSUS_INT_SRV
Folder Id: Software\Policies\Microsoft\Windows\WindowsUpdate\AU\ScheduledInstallDay
Value: 1, 0, 0, 0
State: Enabled
GPO: ALL_POWERSHELL_ALLOW
Folder Id: Software\Policies\Microsoft\Windows\PowerShell\ExecutionPolicy
Value: 85, 0, 110, 0, 114, 0, 101, 0, 115, 0, 116, 0, 114, 0, 105, 0, 99, 0, 116, 0, 101, 0, 100, 0, 0, 0
State: Enabled
USER SETTINGS
Last time Group Policy was applied: 8/27/2014 at 4:44:06 PM
Group Policy was applied from: N/A
Group Policy slow link threshold: 500 kbps
Domain Name: TMPBLEMAYW2K12
Domain Type: Windows 2008 or later
Applied Group Policy Objects
N/A
The following GPOs were not applied because they were filtered out
Local Group Policy
Filtering: Not Applied (Empty)
The user is a part of the following security groups
None
Everyone
Local account and member of Administrators group
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
CONSOLE LOGON
NT AUTHORITY\Authenticated Users
This Organization
Local account
LOCAL
NTLM Authentication
High Mandatory Level
The user has the following security privileges
Bypass traverse checking
Manage auditing and security log
Back up files and directories
Restore files and directories
Change the system time
Shut down the system
Force shutdown from a remote system
Take ownership of files or other objects
Debug programs
Modify firmware environment values
Profile system performance
Profile single process
Increase scheduling priority
Load and unload device drivers
Create a pagefile
Adjust memory quotas for a process
Remove computer from docking station
Perform volume maintenance tasks
Impersonate a client after authentication
Create global objects
Change the time zone
Create symbolic links
Increase a process working set

Similar Messages

Questions in regards to server 2012R2 Remote desktop Service deployment and GPO

Hi Everyone
We have a business requirement moving to 2012R2 RDSH server. I have installed a 2012R2 member servers and enabled Remote desktop licensing role. I have activated the licenses. the servers is in operational
I have deployed 3 windows 2012R2 member server "RDS1" , "RDS2" and "RDS3".
on RDS1 I ran Add roles and Feature Wizard > Remote Desktop Services installation > Quick Start >Session based desktop deployment to complete the installation.
On RDS1 Server Manage Dashboard Page Select Remote Desktop Services > Overview. Under RD Licensing I added my 2012R2 license server "2012r2-tslic". Go to task. Edit deployment properties RD license mode to per device and click OK.
Reboot RDS1
Check RD Licensing Diagnoser everything is clear
On RDS2 I did the exact same thing ran Add roles and Feature Wizard > Remote Desktop Services installation > Quick Start >Session based desktop deployment to complete the installation.
But With RDS2 I move this server to an OU that link to a GPO with RD licensing details. after reboot the servers check RD Licensing Diagnoser I can see 2012r2-tslic specified as the license servers.
Based on this document
http://blogs.technet.com/b/askperf/archive/2013/09/20/rd-licensing-configuration-on-windows-server-2012.aspx Are you suppose to configure RD license server via Remote desktop Service deployment ? Not GPO ?
Here are my questions
We currently have ten 2008r2 terminal servers in a NLB cluster. each RDSH server have in house application installed on each one of them. User connect to the 2008R2 RDSH servers via RDP connection. we have a restricted GPO apply to those
RDSH servers. user cannot do anything on RDSH servers apart from running the application and use excel. On the remote desktop session host configuration we have enable settings like end a disconnected session , Active session limit ,
remote control users session , LPT port redirection.
We push out RD license server detail via GPO to the terminal servers
Can I use our existing GPO apply the licensing server settings , desktop restriction setting to the 2012R2 RDHS servers or we should be using Remote desktop Service deployment to do the job ? If that is the case how would you transfer the
current 2008r2 environment to 2012 using Remote desktop Service deployment. is that mean I have to manually configure 1 by 1.
Please help
Many thanks

Hi,
Please see my response to you in the other thread. Please contact me via email and I will go over the basic planning and deployment steps with you which will help clear things up and get you started off on the right foot.
You should only run through the wizard and create a RDS deployment once. Then you add the various servers (RDSH, RD Licensing, RD Gateway, etc), set Deployment properties, etc.
Thanks.
-TP

Windows Server 2012R2 RDS sound and smartcard redirection issues

We are using RDS collection with two Windows Server 2012R2 session hosts. Both hosts are virtual servers (clean installation) and are used as session hosts (terminals) with 10 to 25 users each. RDS Connection Broker is also virtual machine with
Windows Server 2012 R2. Our users are using Windows 7 Embedded thin clients with MSTSC RDP 8.0.
Our terminals are running correctly after fresh boot, but in 12 to 48 hours after boot we encounter problem with sound and smardcards redirection in RDP. Remote sound stops working and users cannot login with their smardcards.
Relogging users doesnt help, deleting profiles doesnt help, restarting sound service doesnt help, only viable way to solve issue is server restart. There is not any event in event log about this issue.

Hi,
Thank you for posting in Windows Server Forum.
Sound Redirection:
Please check the following GP setting as well.
Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection
Limit audio playback quality: Enabled
Audio Quality: High
On the Client PC, in the .rdp file that you use to connect to the server, make sure you have the following line:
audioqualitymode:i:2
In addition check that the Windows Audio and Windows Audio Endpoint Builder services must be running for audio to work.
Smartcard redirection:
Kindly try to update the patch for Smartcard redirection and check the result.
Smart card redirection in remote sessions fails in a Windows 7 SP1-based RDP 8.1 client
http://support.microsoft.com/kb/2913751
Hope it helps!
Thanks,
Dharmesh

Do not allow clipboard redirection - enable/disable per user

I have a requirement to for all users, by default, to enable the following GPO on a Windows 2008 R2 RDS server:
"Do not allow clipboard redirection"
This policy is configurable in both the computer and user policies.
When I enable the policy for the computer only it disables the use of clipboard redirection for all users.
When I enable the policy for the user only (enabling loopback processing on the computer policy as the user is in a different OU to the server) it does not disable the use of clipboard redirection, the setting is grayed out in the RDP settings but it remains
enabled (un-checked).
So it would appear that the setting is only configurable (or will only work) as a computer policy. Can anyone confirm if this is an expected behavior as I have tested in both a lab and live environment with the same result?
Cheers,
Phil

Hi Phil,
Thank you for post in Windows Server Forum.
If you disable redirection of the Clipboard, for example, users connecting remotely to the RD Session Host server on this connection will not be able to redirect their Clipboard in their remote session, even if they select the Clipboard check box on the Local
Resources tab under Options in Remote Desktop Connection.
If you enable redirection of a local device or resource on the RD Session Host server, users will still have to specify that they want to redirect that type of local device or resource by making the appropriate selection on the Local Resources tab under Options
in Remote Desktop Connection.
Note: These Group Policy settings will take precedence over the settings configured in Remote Desktop Session Host Configuration and over the settings specified by the user in Remote Desktop Connection. If both the Computer Configuration and the User Configuration
policy settings are configured, the Computer Configuration policy settings take precedence.
More information:
Make Local Devices and Resources Available in a Remote Session
http://technet.microsoft.com/en-us/library/cc770631.aspx
Hope it helps!
Thanks,
Dharmesh

Remote Desktop local printer redirection problem - Server 2012 Foundation

Hi,
I am trying to print from Windows Server 2012 Foundation to my local printer hosted on Windows 7.
When I enable local resources in the RDP client, I can see my printers on the server like redirected. All seems like no problem occured. But only print does not work. ;-)
I can see the document name in the queue with Error status.
I tried set up GP with disabling Easy print, the drivers are identical on both machines, event logs are clear.
The server is freshly installed, running only File server role. No Domain controller role is set. No Terminal Service is set (i think in Foundation is it not possible), only allowed RDP.
RDP client is the newest. I have not any problem to print from other servers (WS2003, WS2008R2) using this printer. Everytime is the printer automatically redirected to TS*** port and works.
I spent few hours searching solution with no effect.
Any idea? Many thanks!

Hi,
Did you find any error message during this issue?
Please check you have enabled necessary port for printer redirection on server side. You can check “Do not allow client print redirection” is disable under GPO setting. Also the user must have enough permission to print the document. Please check below link
for more information.
1. Terminal Server and Printer Redirection
2. Five reasons printer redirection causes Windows printing problems in RDS
Hope it helps!
Thanks,
Dharmesh

Windows Server 2012R2 fails to get update from WSUS with error code 80072ee6

Hi all,
I've deployed WSUS role on a Windows Server 2012R2 machine. WSUS listen on port 8530. Now I'm trying a test server (this machine runs WIndows Server 2012R2 too). I've configured a GPO but when I try to check for updates I get the errore in the subject.
I've checked windowsupdate.log and theese are the settings of the client:
AIR Mode is disabled
2014-02-05 12:59:00:357
776 fe0
AU # Policy Driven Provider: http://MyWSUS.MyDomain.local:8530
2014-02-05 12:59:00:357
776 fe0
AU # Detection frequency: 22
2014-02-05 12:59:00:357
776 fe0
AU # Target group: CSM Servers
2014-02-05 12:59:00:357
776 fe0
AU # Approval type: Pre-install notify (Policy)
2014-02-05 12:59:00:357
776 fe0
AU # Auto-install minor updates: No (User preference)
2014-02-05 12:59:00:357
776 fe0
AU # Will interact with non-admins (Non-admins are elevated (User preference))
I confirm that from the test server I can telnet to my wsus server on TCP port 8530

Hi,
This issue occurs if the URL under the Group Policy setting 'Specify intranet Microsoft update service location' is invalid.
You receive a "80072EE6" error code when you download an update from Windows Server Update Services in Windows 7-based or Windows Server 2008 R2-based
computer
http://support.microsoft.com/kb/2724184
Make sure that the URL is correct and the name can be resolved.
Hope this helps.

Multi users on server 2012r2?

You have to install RDS on any server that needs to have more than two admins connected at anytime.

I am trying to allow more than 2 admin's to be connected to one server 2012r2 machine, but I am failing on how to do this on 2012.
I have a 50 pack Cal license for 2012.
I have a 2012r2 RD Licensing server with Cals installed.
I added the server to our TS server GPO.
How do I get other 2012 servers to see these and use them? I haven't been able to find any documentation on how to do this, yet I can setup clustered 2012r2 servers for sql. Just not this, so called, simple thing... UGH.
This topic first appeared in the Spiceworks Community

Clipboard Redirection - product development

Hello,
Are you able to advise if clipboard redirection is coming in a future update for the Mac Microsoft Remote Desktop Connection App? Text appears to copy across from the Mac documents to the remote server (not in the same format but that is ok), however
what I am looking for is the ability to take a screenshot on the Mac Desktop (using Ctrl+Cmd+Shift+4) and then be able to paste into a document in the Remote server.
While the folder redirection option is available, this creates quite a few more steps into the process.
Given that the windows remote desktop connection has this ability; can you advise estimated date this option will be available in the mac version?
Thanks very much.

Hi Julie,
Thanks for your feedback, I will submit to product group.
But sorry to say still there is no any specific announcement for this and no estimated date.
Thanks for your understanding and Support!
Regards.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Migrating from SBS 2011 to Windows Server 2012R2 Standard with 365

Im looking to move SBS 2011 to Server 2012R2 standard and with a 365 migration as well.
Im thinking
BPA for AD (health check)
Add the Server2012R2 as a DC
Ensure replication
Move DHCP
Change DNS
Now this is where I get lost, now Im lost to use either dirsync or add essentials service, I have gone for standard and 30 cals with the option as I have 28 users and the essentials service would make everything quite nice for remote access and backups
etc.... however I don't know whether to just use dirsync with password replication instead ?
Currently Im aiming towards getting the dc up and running then enabling essentials on the dc but I dont know how it will effect SBS and having essentials on the same network and sync'ing people to the cloud ? So Should I use DirSync on a different server
instead to sync up to azure ?
Finally with 365 I have only ever done a migration involving an export of pst's from an exchange box and then on a new domain with new pc's and reimport the pst's on the user accounts in outlook.
However I have read when migrating to 365 was using exchange 2010 there was a application
to move everything across however you needed an ssl cert iirc ? so I dont know how it works now since the nice new dashboard upgrade (assuming the tool has been updated like dirsync)
along with the above how does AD now know where exahcnge if you use the migration app with an ssl cert and is it a case of still running the 365 config tool to configure each user to look at their mail in the
cloud ? Also is it a good idea to enable essentials from the start of the 2012r2 dc for replication top 365 or to use dirsync ?
then finally when replications is all good start transferring the FSMO roles over to the new DC and demote and remove the SBS server
I have seen (below) but i dont think it covers this scenario and I cant be the only person in this situation =\ ?
http://blogs.technet.com/b/infratalks/archive/2012/09/07/transition-from-small-business-server-to-standard-windows-server.aspx
http://social.technet.microsoft.com/Forums/en-US/f552ef12-07a9-4f7a-bf5e-24500c3e1dc3/migrate-sbs-2011-to-server-2012-standard?forum=smallbusinessserver
http://social.technet.microsoft.com/Forums/en-US/e1d4b09f-8857-4ef6-9a80-6a906e76b688/how-to-migrate-sbs-2011-to-standard-2012-server?forum=smallbusinessserver

Hi,
Would you please let us know current situation of this issue? If any update, please feel free to let us know.
à
Currently Im aiming towards getting the dc up and running then enabling essentials on the dc but I dont know how it will effect SBS and having essentials on the same network
and sync'ing people to the cloud?
I’m a little confused with the description. Did you mean that set up DC (Windows Server 2012 Standard) and
then install the Windows Server Essentials Experience role? If so, when you migrate, please refer to the article:
Migrate from Previous Versions to Windows Server 2012 R2 Essentials or Windows Server Essentials Experience
Regarding to migrate Exchange to Office 365, please refer to following articles.
Migrate
All Mailboxes to the Cloud with a Cutover Exchange Migration
Step-By-Step:
Migrating from Exchange 2007 to Office 365
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft
does not guarantee the accuracy of this information.
Meanwhile, there is an additional article that you can refer to:
Manage Office 365 in Windows Server Essentials. It may help us to understand Office 365 in Server Essentials clearly.
If anything I misunderstand, please don’t hesitate to let me know.
Hope this helps.
Best regards,
Justin Gu

Server 2012R2 -- RDS Farm with XP and Windows Vista Clients

Hi There,
My team has been having some fun in getting our Server 2012R2 farm operational, annoyingly MS documentation is severely lacking on how to correctly configure a 2012R2 Farm correctly.
We have an RDG1-TCC server, which is the RDGateway, RDConnection Broker and RDWeb Server. We have two session host servers RDS1-TCC and RDS2-TCC.
It took us some time and much online research to figure out exactly how we needed to configure the RDS server as a lot of information online for 2012R2 was apparently incorrect(was based on 2008R2 practices). We started off with using a DNS Round Robin for
the RDS Session hosts servers and after a number of certificate issues, we later found this was incorrect. We're now using RDWeb exclusively, which appears to be the correct way to have the Connection Broker working?
We've ran into a number of issues with certificates too, we have an external certificate for remote.domain.com. Installing this on all 4 options in the certificate manager has made internally work correctly via RDWeb, however externally we are getting a
certificate mismatch as it's trying to connected to RDG1-TCC with a certificate for remote.domain.com. I'm pretty sure I can resolve this with a replacement remote.domain.com certificate that includes a SAN for *.domain.internal. Testing with a self signed
certificate seemed to resolve this issue.
Now providing i've configured everything the correct way, we have an issue where RDWEb RDP files do not work internally or externally for XP, Vista or Windows 7 (With RDP7.1). Windows 8/8.1 and Windows 7 with RDP 8/8.1 updates work perfectly fine. Unfortunately
this new client has a few XP machines that they are not willing to update just yet.
Is there a known fix/workaround to get these older clients working correctly?
Sorry for the extremely long post, but I'm sick of banging my head against the wall trying to get something that we assumed would have been fairly simple to get up and running.
Cheers,
Ben

Thanks for the assistance so fat, now I have all clients connecting, I need to tackle the certificate issues.
The UC SAN certificate is going to cost much more than the current certificate, currently that idea is on the back burner as the client does not wish to pay a few hundred extra.
To quickly sum things up:
AD DNS(internal DNS) override in place for remote.domain.com.au pointing it to the internal IP of the gateway/connection broker/RDWeb server.
Connecting Internally its working perfectly fine under all circumstances (I'm guessing this is because of Kerberos Auth)
When users connect externally via RDWeb they get a certificate missmatch as the cert is for remote.domain.com.au and the server is RDG1-TCC.domain.com.net
When users connect externally via MSTSC using the Gateway option, they get a certificate missmatch as per the above, however they also receive a second "certificate is not trusted" error for whatever RDS server they hit.
I have tried the below previously and they broke other things:
"Change published FQDN for Server 2012 or 2012 R2 RDS Deployment."
This resolved the external certificate issue. However then internal connections stopped working. When connecting via RDWeb, you would get asked for credentials instantly and no matter what you entered, it just asked for credentials again.
There did not seem to be ANY event logs for this connection.
"Changing RDP-Tcp listener on RDSH to use external certificate."
I can't recall the exact error we had when we did this, but I know we had to roll back the change. I have a feeling we then started getting certificate missmatch errors on the Session Hosts.
I'm half thinking that when the farm is free(Currently being used for application UAT), I'm going to try and reconfigure the RDP-Tcp listener on the RDSH servers again and see if that resolves one or more of our issues.
Do you have any suggestions on how I can use the correct published FQDN name without breaking internal access? Or any other ideas on getting this entire thing working both internally and externally?
Also, Dharmesh, I've tried clearing out the certificate cache as suggested, but to no avail.

Best practices for installing Win 10 under Hyper-V on Server 2012R2 host

Yeah, yeah, I know I could probably get my answers after spending 10 hours reading hundreds of isolated threads here. I've already put in about 2 hours, and I'm exhausted. Plus, this site does not have a very sophisticated search function.
I want to install Win10 as a VM on my Server 2012R2 machine. I am not currently hosting any other VMs, so my first decision was whether to try it using Hyper-V or VirtualBox. I started with VirtualBox, but I ran into two problems: networking
and video. Also, VirtualBox itself seems to have some issues with failing to install the extension pack. So now I think I'll give Hyper-V a shot.
I found some blog posts from last year providing guidance on setting up Hyper-V for Win10, but given the rate of change of this beta OS, I expect there are many new "features" that can be mitigated against by specific settings on the VM.
Some specific questions:
1. Generation 1 or Generation 2 in the Hyper-V setup? The blogs I've seen say to use Gen1, but provide no justification. Perhaps because they are using Win8 as the host? I am using 2012R2.
2. Does the Win10 ISO file need to be continually available to the VM, or is it only used in the initial installation?
3. How do I get the VM to access the GPU card, which has lots of memory, over the useless onboard video chip which only has 8MB and no 3D instruction set? This was a dealbreaker with VirtualBox.
4. I anticipate many issues with networking, but I'll start with this: I have dual onboard NICs going into a managed switch. Should I just give one physical NIC to the VM and let the host have the other? I think I'm going to have some issues
with DHCP IP address assignment, but we'll see. Any best practices here would be helpful.
Thanks.

>1.
I'd use Gen 1, that is a BIOS type boot, but that's just because I've had
less trouble than with Gen2 VM's.
>2.
Only during install, refresh, reset, or sfc.
>3.
No virtualization solution does it easily, but there is RemoteFX if you can
get a Windows 10 client to use it. I've never tried.
http://social.technet.microsoft.com/wiki/contents/articles/16652.remotefx-vgpu-setup-and-configuration-guide-for-windows-server-2012.aspx
>4.
That's what I would do (assigning one NIC to the VM, and one the host). If
both are receiving an IP address right now from DHCP, they will continue to
do so the new way unless you have a managed switch that would prevent more
IP addresses. It's hard to tell...
Bob Comer

Can't create ODBC connection in Windows Server 2012R2

I just finished installing the instant client & odbc connection on Windows Server 2008R2. I then attempted to perform the same installation on a new Windows Server 2012R2 instance and encountered the following issue.
After extracting the contents of the 64bit instant client & odbc files into c:\oracle\instantclient_12_1, adding this to the path statement, and adding a TNS_ADMIN environmental variable, I successfully ran odbc_install.exe from an admin cmd window. I then opened the 64bit ODBC Data Source Administrator, clicked add, selected the Oracle in instantclient_12_1, and clicked finish. As soon as I did so, I received the following error: "The setup routines for the Oracle in instantclient_12_1 ODBC driver could not be loaded due to system error code 126: The specified module could not be found. (c:\oracle\instantclient_12_1\SQORAS32.dll)"
I uninstalled the odbc client (odbc_uninstall.exe) and attempted again with the 32bit version & 32bit odbc configuration screen. I get the exact same result with 32bit as I do with 64bit.
Any help would be appreciated.
EDIT: Nevermind. Apparently I needed the Microsoft Visual C++ 2010 SP1 Redistributable Package for the correct DLLs

Hi,
I am running Netweaver 7 and ERP2005.
J2EE support pack is 9. The sap note that you mentioned is for NW2004 and our system is running on NW2004s.
Now I am trying to reconfigure the sld. In case if you can suggest me another solution, I will be very happy to try that out...
Thanks for your reply
Edited by: Rakesh Bothra on Apr 20, 2011 4:23 AM

Unable to Enable User Profile Disks in RDP server 2012R2

I am setting up a new Windows server that will act as an RDP server. The server has been built with Windows Server 2012R2.
I have the following roles and services working on the server: RD Web Access, RD Gateway, RD Licencing (with 30 user cal licences), the RD Connection broker, and the RD session host.
I have a SSL certificate configured and installed on the site, and both external and internal DNS are configured and working.
I have created and published an application collection and this is working. That is, when you go to https://remote.<servername>.org you are presented with a log in screen, users can log in with their domain accounts and then can connect to the published
applications, this is working both on our internal network and from the general internet.
So all the roles on the server are working and the collection itself is also working. However, what I cannot do is set it up so that we can use user profile disks with that collection. When I go through the Session Collection Wizard and I get to "User
Profile Disks" I can click on "Enable user profile disks" and then you can enter the options below.
I am entering the share location under location \\<servername>\<sharename>
I am using the default "store all user settings and data on the user profile disk"
Then I go to create the profile disks and I get the following error:
"Could not create the template VHD. Error Message: -2147024809
This has happened multiple times, I have done the following:
- installed all windows updates and rebooted the server, same error
- checked the share permissions AND the folder permission for that share, for testing purposes I have set permissions on both the folder and the share to allow full control to "everyone" (I also tried it with only "domain users") but
same error message.
- I have checked to see that no quotas are imposed on the disk where I am attempting to create the profile disks - this was because this was the closest thing I could find on Technet was this post:
https://social.technet.microsoft.com/Forums/windowsserver/ru-RU/aec30527-d742-42b9-950e-85c709c4cb45/vdi-problem-creating-user-profile-disks?forum=winserverhyperv
And that was a quota issue that I am not having.
The UPD wizard says the following "the servers in the collection must have full control permission on the user profile disk share and the current user must be a member of the local Administrators group on that server"
Both of those things are true.
I have attempted to search for that specific error message (-2147024809) and have found nothing on Technet or any other site.
I am hoping someone here has some thoughts. Thanks in advance.

I was looking at both the technet article for setting up UPD as well as this walk-through:
http://thewolfblog.com/2014/02/24/user-profile-disks-for-rds-2012-2012-r2/
The step after the creation of the disk in this walk-through is to look at who has permission on the .vhdx file, now obviously I am not at that step, but that is what led me down the trail of looking at user permissions, hence my attempts to set up shares
where 'everyone' has full permissions on both the share and the folder.
I have tried to set up multiple shares for the collection, I have tried on two different disks (volumes) on the RDP server itself, I also tried setting up a share on our fileserver (which has all kinds of shares working fine) and the same error occurred
in all cases.
I also found this Technet article:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/d6469d31-6540-4075-a85f-a6e8f7c11e89/user-profile-disk-template-cannot-be-created-when-setting-up-session-collection?forum=winserverTS
So that seems close to what I am looking for, but I have checked and the exact group policy that was causing the above linked issue is not defined in our group policies, but maybe there are other group policies that are causing the issue?

Error While installing Visual Studio 2005 in windows server 2012R2

Hi Team
One Help
I am using windows server 2012R2.I want to install visual studio 2005.
i downloaded VS 2005 from :
http://www.microsoft.com/en-us/download/details.aspx?id=804
while installin i am getting this error :
"the upgrade patch cannot be installed by the windows installer service because the program to be upgraded or missing or upgrade patch may update a different version of the program.Verify that progam to be upgraded on exiting computer that you have
the correct upgrade patch"
PLease help us.
Thanks,
Bob

Hi Gopi,
Are you trying to add the hosts to your OEM 12c, and then choosing "Deploy Agent"?
Please check this error message about the image file..
The image file C:\oracle\core\12.1.0.2.0\jdk\bin\java.exe is valid, but is for a
machine type other than the current machine.
"Validating OMS_HOST & EM_UPLOAD_PORT failed."
If the agents are deployed earlier from another OEM12c server, please undeploy them and then try.
Thanks,
Rajiv.

Hyper-V Role deployement with MDT2013 on a Server 2012R2 Trial Version

Hello,
when i deploy a custom image that i add the roles install Hyper-V, everything works fine, added the SkipRoles=Yes,
and the role Hyper-V is installed at the end of my new server 2012R2 Trial version, HOWEVER,
there's no icon that appears on the desktop, on the manager, the Hyper-V Manager option is not there,
all the Hyper-V related services are installed.
Seems there's a GUI issue, however in server manager the roles appear on the left side
I reboot, and yet nothing appears, i uninstall the Hyper-V role manually, reboot, re-install manually and the missing shortcuts appear.
Can someone provide me a hint to fix this, i've tested other roles and they also don't appear (DNS).
Thanks in advance for your replys

You are talking about two different things here. The Hyper-V Core, and the Hyper-V Tools. It appears that you want both. Run the following command:
dism.exe /online /get-features
and verify that all hyper-v components are installed:
Feature Name : Microsoft-Hyper-V
State : Enabled
Feature Name : Microsoft-Hyper-V-Offline
State : Enabled
Feature Name : Microsoft-Hyper-V-Online
State : Enabled
Feature Name : RSAT-Hyper-V-Tools-Feature
State : Enabled
Feature Name : Microsoft-Hyper-V-Management-Clients
State : Enabled
Feature Name : Microsoft-Hyper-V-Management-PowerShell
State : Enabled
Keith Garner - Principal Consultant [owner] -
http://DeploymentLive.com

Clipboard redirection gpo server 2012r2

Similar Messages

Maybe you are looking for