Creating Kerberos Identity for RD Session Host Farms for w 2012 r2

anyone knows how Creating Kerberos Identity for RD Session Host Farms for w 2012 r2.
I tried what they said the post
to w 2008, With
powershell I find the possibility and the
script indicates the error class is not
valid

Hi,
Referring to your comment, here providing you article for Kerberos authentication in server 2012. Please refer to the below article.
What's New in Kerberos Authentication (You can refer for Server 2012 R2)
http://technet.microsoft.com/en-us/library/hh831747.aspx
Hope it helps!
Regards.

Similar Messages

Renaming computers in Win2012R2 Session Host Farm

We have Windows 2012 R2 RDS Session Host farm setup with the following numbers of servers
2 x RDWA in Win NLB
1 x RDLic Server
4 x RDSH Servers configured in two collections with each collection having 2 RDSH servers
1 x RDCB server
1 x File share cluster for UPD storage
All the above mentioned RDS servers are VM's on a HyperV 2012R2 3 Node Cluster.
We wish to achieve the following
Rename ALL the above mentioned RDS computers retaining the AD Domain name. e.g. server1.domain.com will become host1.domain.com
Is there a set procedure to rename computers those are part of RDS session host farm?

Hi,
There is no rename functionality for servers in a RDS deployment. What this means in general is that you need to remove the servers from the deployment, rename them, then add them back to the deployment.
The biggest "catch" is probably the RD Connection Broker. You cannot rename it since it is the heart of the RDS deployment which means you essentially need to wipe out your deployment (remove RDS Role Services from the broker), rename the server, then
install the deployment again.
I have not tested it but I think it would be possible to remove/rename/re-add a RDCB server if you had an HA deployment with at least one other RDCB server that you could leave in service while renaming the other broker.
It should not take too long to redo the deployment from scratch since you only have 2 collections, unless you have lots of published RemoteApps. Usually the longest part is installing all of the applications on the RDSH servers and configuring
custom settings, security, etc., which most likely you will not need to do. Some applications may have a problem if the server they are on gets renamed but that is specific to certain applications.
I would recommend you test the various steps of your rename so that you know what to expect.
So in general the steps would be:
Write down any customizations/settings/etc. for the deployment and the collections
Unpublish all RemoteApps from the collections
Remove all RDS servers from the RDS deployment except the broker (the various Role Services will remain installed on each server)
Delete all collections
Uninstall RD Connection Broker Role Service from the broker
Rename the broker server
Rename the other RDS servers
Install a fresh RDS deployment on the broker, verify there are no remnants of old deployment
Add the other RDS servers to deployment, create collections, configure, publish RemoteApps, etc.
Test everything, verify there are no "phantom" RemoteApps showing in RDWeb, etc.
I'm probably forgetting some details but the above should give you enough to figure it out.
-TP

Relation between RD Connection broker and RD session host farm in 2012 R2

Good Day
I have configured standard RDS session based deployment recently on 2012 R2 servers
Everything is working as expected
The setup has TWO RD Session host, 1 Session Broker, one RD Web access and one RD Gateway
I have created 2 DNS records named Rdsfarm.domain.com for my RDS1 and RDS2 session host servers and if I connect to this
rdsfarm.domain.com with RDP from TS clients, i am able to connect to any one of TWO rds servers without any problem
However some part is not clear to me
I have not added rdsfarm.domain.com any where except my RD Gateway server RAP policy
Also I have added my RD Broker server in RAP allowed group above.
I don't see any config where this farm name is associated with my RD Broker server
I have tried to connect to RD broker server from client, but it didn't redirect me to RD session host servers
If I try to connect to my RDS servers with their FQDN , it gives me error that I must connect thru farm name
Can you please help me to understand relation between RD session host servers farm and RD broker server ?
Also I would like to know what exactly happens in background when user start RDP session by entering RDS farm name
Note that RDS farm name is generic DNS Host(A) record pointing to my both RD session host servers
I wanted to know is there any command or configuration I missed out as I don't see any config where Generic RD Session Host Farm name (DNS Host(A) record) is associated with my RD Broker server ?
Thanks
Best Regards
Mahesh

Hi,
If you are opening Remote Desktop Connection and manually connecting to the broker then it will not work properly because you have no way of specifying the target collection in the user interface. If manually using the RD Client to connect is a requirement
what you can do is set the default collection in the RD Connection Broker server's registry.
To specify the default collection, please create the registry setting below in the broker's registry:
HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\ClusterSettings
DefaultTsvUrl REG_SZ tsv://vmresource.1.<VDI pool ID>
To determine the correct value for DefaultTsvUrl please open RDWeb in a non-IE web browser and click on the icon for the collection you would like to be the default, then edit the downloaded rdp file with Notepad and copy the portion of the loadbalanceinfo
setting that is similar to the above.
An alternative would be to download the .rdp file from RD Web Access and double-click it to connect.
As I mentioned above it is generally intended to have users connect via RD Web Access or RemoteApp and Desktop Connections feed or Remote Resources (uses the feed) so that the client will obtain the proper .rdp file from the server.
To configure the FQDN that is published in the .rdp files you can use the cmdlet below:
Change published FQDN for Server 2012 or 2012 R2 RDS Deployment
http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80
Below is a sample configuration based on what you have written:
1. Published FQDN (using cmdlet above): rdsfarm.domain.com --> points to ip address of RDCB server. When launching a RemoteApp or Full Desktop connection from RD Web Access, the prompt window will show this FQDN next to Remote computer.
2. Gateway FQDN: gateway.domain.com --> externally points to public ip address of your RD Gateway server. TCP port 443 and UDP port 3391 need to be forwarded to the RDG's internal ip address. When launching a RemoteApp or Full Desktop
connection from RD Web Access, the prompt window will show this FQDN next to Gateway server. This FQDN is set in Server Manager -- RDS -- Overview -- Deployment Properties -- RD Gateway tab.
In RD Gateway Manager -- Properties of RD RAP -- Network Resources tab you should select Allow user to connect to any network resource or define a RD Gateway-managed group that has all of the FQDNs that the user will need to connect to.
3. RD Web Access FQDN: remote.domain.com --> internally points to the ip address of your RDWeb server, externally points to the public ip address of your RDWeb server. This is the name you give users if they want to use RD Web, for example,
https://remote.domain.com/rdweb
If you want users to manually connect using Remote Desktop Client as well as use RDWeb it will be a bit confusing to them since they will need to use one FQDN when manually using the client and a different FQDN when using RDWeb. You could fix this
by having them only use one method or run RDWeb directly on the RDCB server, that way users would only need to know a single FQDN for both RDWeb and manual connections.
4. You should have a wildcard certificate with subject of *.domain.com set for all RDS purposes in Deployment Properties.
Thanks.
-TP

How to specify RD USER cal for particular session host server on a licensing server.

Hello,
I have 25 user cal license which I want to deploy to my 5 session host servers (5 user cal for each host)
I got 1 licensing server, where I have installed these licenses and pointed all other servers to it.
but I dont see any option to reserve 5 for each host. (4 win 2008R2, 1 win 2003 separate to each other no session host)
Thanks

I would always have two licence servers for resilience.
Regards,
Denis Cooper
MCITP EA - MCT
Help keep the forums tidy, if this has helped please mark it as an answer
Blog: http://www.windows-support.co.uk
Twitter: LinkedIn:

Changing RemoteApp Session Host connection name in 2012

I am looking for a way to change the server name you connect to (on the Session Host), like you could in 2008 R2. Pictures a worth a thousand words, so I've attached a picture of exactly what I am looking for:
The servers are setup so their names are servername.domain.local, but since they will be facing outwards (with a RD Gateway between them, of course) and non-domain members will be accessing them, we need a way to change the "server name" to servername.domain.com
(.dk actually, but you get the point), so the certificate applies to it.
Currently, connecting looks like this:
We don't want our customers getting this dialog box. Any help is appreciated.

Hi,
The architecture is changed.We don't use the DNS RR or NLB to redirect the initial connection any more.We just need the RDCB database to redirect the connection.The process is simplified.In short, there is no need to change the server name like the above.All
the changeable settings are on the RDCB.To get dialog box disappeared,you need to change the cert name to match the destination computer.
Regards,
Clarence
TechNet Subscriber Support
If you are
TechNet Subscription user and have any feedback on our support quality, please send your feedback
here.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Windows 2012 RDS - Session Host servers High Availability

Hello Windows/Terminal server Champs,
I am new middle of implementing RDS environment for one of my customer, Hope you could help me out.
My customer has asked for HA for RDS session host where applications are published, and i have prepared below plan for server point of view.
2 Session Host server, 1 webaccess, 1 License/connection
Broker & 1 Gateway (DMZ).
In first Phase, we are planning to target internal user
who connect to Session host HA where these 2 servers will have application installed and internal user will use RDP to access these application.
In second Phase we will be dealing with external Party who connect from external network where we are planning to integrate with NetIQ => gateway
=> Webaccess/Session host
I have successfully installed and configured 2 Session
Host, 1 license/Broker. 1 webAccess & 1 Gateway. But my main concern to have session Host High Available as it is hosting the application and most of the internal user going to use it. to configure it i am following http://technet.microsoft.com/en-us/library/cc753891.aspx
However most of the Architecture is change in RDS 2012. can you please help me out to setup the Session Host HA.
Note: we can have only 1 Connection broker /Licensing server , 1 webacess server & 1 Gateway server, we cannot increase more server due to cost
factor.
thanks in advance.

Yes, absolutely no problem in just using one connection broker in your environment as long as your customer understands the SPOF.
the session hosts however aren't really what you would class HA - but to set them up so youhave reduancy you would use either Windows NLB, an external NLB device or windows dns round robin. My preferred option when using the connection broker is DNS round
robin - where you give each server in the farm the same farm name dns entry - the connection broker then decides which server to allocate the session too.
You must ensure your session host servers are identical in terms of software though - same software installed in the same paths on all the session host servers.
if you use the 2012 deployment wizard through server manager roles the majority of the config is done for you.
Regards,
Denis Cooper
MCITP EA - MCT
Help keep the forums tidy, if this has helped please mark it as an answer
My Blog
LinkedIn:

RDS Connection Broker does not distribute the load among Session Hosts

Hello Folks,
I have a three server RDS setup in which the roles are distributed as follows:
S1 -> RD Web Acc / RD Gateway / RD Connection Broker /Session Host
S2 -> Licensing Server / Session Host
S3 -> Session Host (and most powerful server)
I would like the load to be distributed among the session hosts, depending on the resources of the servers. But in my setup, all the apps launched by the users are ran on S1 for some reason.
Also, when I disable S1 from the list of session hosts that accept new connections, and start a new app from the conseole, I get an error saying: " An authentication error has occurred (Code0x607)"
Any tips?
Edit: I had a workaround for Code 0x607 but I still get an error saying that "Couldn't open this program or file. Either there was a problem with <appname> or the file you're trying to open couldn't be accessed"

Hi,
Thanks for your comment.
Yes, we can deploy RDSH on all 3 servers and use as session host and that is a normal scenario for RDS Farm. You can refer following article for reference.
Checklist: Create a Load-Balanced RD Session Host Server Farm by Using RD Connection Broker
http://technet.microsoft.com/en-in/library/cc753891.aspx
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support

Using Windows Server 2012 per-User RDS CAL on Server 2008 R2 Session Host

I have a Remote Desktop Licensing Server setup on my domain controller running Windows Server 2012 R2. I have installed a
’Windows Server 2012 Remote Desktop Services per-User CAL’ there and activated the licensing server already.
Currently I use ONLY Windows Server 2008 R2 machines as RDS Session Hosts (in the future I plan to transition them to 2012 R2, hence the CAL I bought is
already in the newest version).
I have already configured my WS 2008 RDS Session Hosts: set
Per-User licensing mode and specified license server address. The connectivity between my Session Host(s) and my License Server seems to be ok as the
Remote Desktop Session Host Configuration window on the Session Host correctly lists the 2012 per-user
license (CAL installed on server) from the license server.
On the License Server I can also see event logs entries (in
Microsoft-Windows-TerminalServices-Licensing/Admin), indicating that the user has been issued a license.
The issue I am having is that the license being issued is
2008 Per User CAL license (Build-in OverUsed - temporary) and not the 2012 Per User CAL license which is the only license installed on the server. According to the RDS CAL interoperability matrix at
social.technet.microsoft.com/wiki/contents/articles/14988.rds-and-ts-cal-interoperability-matrix.aspx, I was expecting the 2012 license to be backward-compatible with 2008 client (and that
in the absence of legacy licenses, the (only) 2012 license would be used for all clients connecting to the licensing server)
Before I bought my license, I found this document:
download.microsoft.com/download/3/D/4/3D42BDC2-6725-4B29-B75A-A5B04179958B/WindowsServerRDS_VLBrief.pdf
which says that - "newer version RDS CALs can be used with an older version of the server software" (In section FAQ, Q4), which means to me that
the 2012 license would work as-is for the 2008 Server and gives me flexibility when upgrading to the new server version.
How can I make this CAL work in my environment?
Note:
I have already explicitly disabled
Prevent license upgrade Group Policy setting which I assumed would fix the issue but nothing has changed.
Then I have enabled License server security group Group Polity setting
and added computers from my domain to RDS Endpoint Servers AD group. I have also created new AD group called
Terminal Server Computers and added the computer accounts there, but it changes
nothing. Reference - technet.microsoft.com/en-us/library/ee791761.aspx , technet.microsoft.com/en-us/library/cc725704.aspx and blogs.msdn.com/b/rds/archive/2009/09/17/control-the-issuance-of-rds-cals.aspx.
I found one potential ‘workaround’ which involved manually downgrading my CAL license by calling
Microsoft Clearinghouse. I am very reluctant do to so because, as I upgrade parts of my infrastructure to Server 2012, I’d need to then ask Microsoft to manually upgrade a part of my license back as well.
Am I missing something? What should I do to get my 2012 CAL to be issued to 2008 R2 server

Hi, I have tried several other possibilities.
I change expire date for my temporary assigned license (2008 CAL overused). It can be done, by changing Active Directory user properties – msTSExpireDate. When I restart my Session Host server and logged again, my license was renewed
for next 60 days (event ID - 4145).
I also delete information about license for this user (clear msTSExpireDate and msTSLicenseVersion). And the license was successfully removed from License Manager. After another SH restart it gets the same – 2008 overused – license
(event ID 4143 - license server has successfully issued …)
I now, that changing info in AD attributes is a little trick, and this is not a real value - only a reference, but it was useful to delete or change expiration date of license. But it didn’t change type of license as I expected.
Reference -
http://discussions.citrix.com/topic/243320-windows-2008-licensing-questions/
To TP:
I have found your post with information:
If you have a Server 2012 RD Licensing server you may install your 2012 RDS CALs on it (no downgrade necessary) and then set your Server 2008 R2 RDSH to
use the 2012 RDL server. The 2012 RD Licensing server will automatically issue the CALs as 2008. -
https://social.technet.microsoft.com/Forums/windowsserver/en-US/6046ded1-96bf-4d79-89ce-38aac2a6694e/can-we-use-windows-server-2012-rds-cal-license-in-rds-2008-r2-server?forum=winserverTS
And it showing my situation in brief. I also found
similar problems, but the solutions don’t meet my expectations.
https://social.technet.microsoft.com/Forums/windowsserver/en-US/dcfb1966-89a8-4b5d-bf5a-ff03ac0b7a66/rds-cal-licenses-not-recognized?forum=winserverTS
– “sudden all of the CALS were available”
https://social.technet.microsoft.com/Forums/windowsserver/en-US/f1228599-8452-4a3e-a263-061de14bfcfe/server-2012-rds-builtin-overused-cals-issue?forum=winserverTS
– “this should go away after a while”
Is there a way to determine this time you mentioned before? Or should I just wait patiently…

Configure which IP Win2012 R2 RD Session Host listens on

I have Windows 2012 R2 RD Session Host servers that are multihomed. One of the NICs is connected to an isolated management network. The management IP is NOT in DNS at all. However the RD Connection broker attempts to redirect sessions to
the management IP address of the session hosts - which is not available to users. This results in the connection failing. I found event log entries that showed that the broker is sending session requests to the management IP's of the hosts.
If I disable the management NIC then everything works just fine.
My question is: How can I either configure the Session Hosts to only listen for RDP connections on a specific IP/NIC, OR how can I accomplish this in the Connection broker by specifying an IP for each session host server that it will be redirecting to?

Hi,
You can use WMI to set the redirection ip, however, I have not tested to see if Server 2012 R2 will honor what you set. I do not have the WMI command handy so it would be faster if you change the registry or use RD Session Host Configuration from
Server 2008 R2. As a test please make the following change to one of the RDSH server's registry:
HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\ClusterSettings
SessionDirectoryRedirectionIps REG_MULTI_SZ 192.168.1.100
Replace the ip address above with the ip address that should be used for redirection for that RDSH server. After making the registry change please restart the server and then test to see if only the correct ip address is used.
As an alternative to the above you may use RD Session Host Configuration (tsconfig.msc) from a Server 2008 R2 box and connect over to the Server 2012 R2 RDSH. Before connecting the 2012 R2 RDSH should already be a member of a collection. Once
connected, double-click on Member of farm in RD Connection Broker and then select the ip address at the bottom. Since tsconfig is using WMI to make the change there is no need to restart the RDSH in order for the change to take effect.
If the test is successful then you would make a similar change to all of the RDSH servers.
Thanks.
-TP

URGENT PLEASE HELP-Session State Provider for 8i.

We are looking for a SESSION STATE PROVIDER for .NET 2.0 for Oracle 8i. Please help to find a solution. The current installation on the Oracle website does not work for 8i.
Thanks a BILLION in advance.

You'll need to install the ODP 11 beta...

Recomended free hosting service for iWeb

Hi,
I feel the title is self explanitory. I would like recomendations for free web hosting services for iWeb/ that work with iWeb

Hi, I appreiate the recomendation, but I tried to sign up for the free web hosting, and once I put in all my info. it says "Address Not Found Firefox can't find the server at securesignup.net."
Can you see if this happens for you so I know it's either my computer or the web site
Thanks

Server 2012R2- RDS Farm Certificate Miss-Match on Session Hosts

Hi Guys,
I've another RDS2012R2 issue. Internal and external domains do not match. External: domain.com.au; Internal: domain.com.net.
I'm getting certificate miss-match errors when connecting to the Farm/RemoteApps.
I have performed the follow fixes:
Change published FQDN for Server 2012 or 2012 R2 RDS Deployment (http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80). This resolved the original issue where I was getting a certificate miss-match error externally
for the FQDN of the server.
Updated the RDP-Tcp certificate used on the Session Host Servers. This was to resolve an issue where using mstsc to RDP to the farm externally(via gateway) would give a Certificate is not trusted error on the RDSH side.
Now whenever RDWeb is used to launch a RemoteApp or the farm, I get a certificate miss match error as the RDSH server is called RDS1-TCC.domain.com.net and the certificate is for remote.domain.com.au.
I rolled back the last change so that RemoteApps and the Farm would work successfully internally without certificate issues. How do I go about resolving the certificate errors?
For extra background details see my orignal thread, It was marked as answered when only 1 out of 2 issues was resolved. http://social.technet.microsoft.com/Forums/windowsserver/en-US/b664ddaf-6c11-49e2-8a69-0df3b8ef13a1/server-2012r2-rds-farm-with-xp-and-windows-vista-clients?forum=winserverTS
Cheers,
Ben

Hi Ben,
Thank you for posting in Windows Server Forum.
In your case, I can suggest you to check that the certificate must match the FQDN of the server. If you are creating SSL certificate then it must be signed by trusted authority and also the certificate must be stored under “local computer/personal store“.
Also you can buy the certificate from 3rd party which is wild card certificate and only 1 certificate can be used for your network. Please check below links for more information regarding certificate issue.
1. Certificate Requirements for Windows 2008 R2 and Windows 2012 Remote Desktop Services
2. Configuring RDS 2012 Certificates and SSO
3. Windows 2012 RDS Certificate mismatch
Hope it helps!
Thanks,
Dharmesh

The grace period for the Remote Desktop Session Host server has expired

<p>I'm running Windows Server 2012, we only have 1 server and it's a DC. I'm trying to RD to the server from my Windows 7 laptop. It was working fine on Friday but when I came in on Monday I got message saying that 'The remote session was disconnnected
because there are no Remote Desktop License Servers available to provide a license'
So after a bit of digging I found out my 'grace period' had expired, so ordered a new license which I got today, installed this all ok but still i cannot connect via RD I get the same message....went into the RD License Diagnoser and it said the problem
was as follows
'The grace period for the Remote Desktop Session Host server has expired, but the RD Session Host server has not been configured with any license servers. Connections to the RD Session Host server will be denied unless a license server is configured for
the RD Session Host server.'
Suggested Resolution as follows
Configure a license server for the Remote Desktop Session Host server. If you have an existing license server, specify that license server for the RD Session Host Server. Otherwise, install RD Licensing on a computer on your network and Configure RD Session
Host Server to use it.'
I cannot figure out how to do this as I cannot find the RD Session Host Server tool.
Can any of you lovely people help me please

Hello,
Best option would be to assign the license server by using AD GPO. Youl will need to configure the following:
Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Licensing
and define the settings for:
Use the specified Remote Desktop License Server
Set the Remote Desktop Licensing mode
Then assign the policy tho your server.
regards Robert Maijen

My mail forms created by muse 2014.0.1.30 do not work. PHP 5.4 is enabled by hoster, so they should work. Can anyone help me, for these forms are crucial for my business.

My mail forms created by muse 2014.0.1.30 do not work. PHP 5.4 is enabled by my hoster, so they should work. Can anyone help me, for these forms are crucial for my business. The forms confirm delivery, but the mails are not recieved. No spam filters enabled.
Meanwhile, I was able to narrow the problem down: PHP seems not to accept a re-directed mail address as sender of the mail in some cases. So, it has nothing to do with the mail form itself.

Hi Ingo,
Please refer to this document, Troubleshooting Muse Form Widgets Used on Third-Party Servers
Last section, "I've uploaded my new Muse form, and tried submitting it in the browser, but I never receive an email with the form data. What's wrong?"
- Abhishek Maurya

Can I create a template in LR4 (for mini sessions, senior portraits, etc)

Hey All-
I am looking to create templates (for mini-sessions, senior portrait session, etc. to use on FB & Website.) Through a significant amount of research, it looks as though Photoshop and PS Elements seems to be the only places to do this? Is it not possible in LR4?
I appreciate any feedback! Thank you.

http://community.office365.com/en-us/f/154/t/61145.aspx
Are you meaning to create sites on SharePoint Online by invoking web services in your own program? SharePoint Online indeed provide some web services for custom programming, however, the web methods for creating a new site seems not included in them. Here
are some resources for the development of SharePoint Online for your reference:
SharePoint Online for developers
http://msdn.microsoft.com/en-us/sharepoint/gg153540.aspx
Code example for SharePoint Online: Accessing Web Services
http://code.msdn.microsoft.com/office/SharePoint-Online-0bdeb2ca
As to create a site collection, the parameter "Template" is the name of the template you want to use, as to find the name of the custom site template, you can use the powershell command "Get-SPOWebTemplate",
it will list all the templates with the names.
Note, The Template and LocaleId parameters must be a valid combination as returned from the Get-SPOWebTemplate cmdlet.
Also check
http://stackoverflow.com/questions/21268629/creating-new-site-collection-in-office-365-from-an-app
If this helped you resolve your issue, please mark it Answered

Creating Kerberos Identity for RD Session Host Farms for w 2012 r2

Similar Messages

Maybe you are looking for