Load Balancing 2012 R2 Session Host Collection with External Network Load Balancer

Hi,
We are moving from a 2008 R2 Remote Desktop session host deployment to 2012 R2. Previously, we used our Kemp hardware load balancer to distribute load between RDSH servers. We had a connection broker deployed so that if an existing disconnected session was
detected during the initial connection, the user was directed back to that session.  
In 2012 R2, we planned to again used the Kemp load balancer to main high availability for our RDSH collection, but are experiencing strange issues. It seems that the RD Connection Broker is also performing load balancing--the result being that initial connections
to the RDSH collection may go to one RDSH server with the least connections through the Kemp, but then be redirected to a different RDSH server by the broker, even when there is no existing session for the user on that second server.
Our question is: Should we not be using the Kemp balancer at all (how would this work)? Or should we disable load balancing by the connection broker (if so...how)?
Further complicating our redirection issue with that the RDSH servers have multiple interfaces--one with public addresses and others with private. The connection broker seems to abritrarily pick among the destination RDSH server's available IP addresses
for the redirection and trying to redirect to a private address will fail. We think we have worked around this by connecting to each RDSH server from a 2008 R2 server's RDSH Configuration console and choosing just the public adapter under the Network Adapters
tab--is there no way to access this setting in 2012 R2?
Thanks in advance!   
Matthew

Hi Matthew,
 As you are most likely already aware, inn Remote Desktop Services 2012 / R2 the Connection broker uses round robin DNS to load balance.
To simplify things I would recommend that you let the connection broker load balance the sessions and use the KEMP to Load balance the RDweb and Gateway servers.
Have a look at the following articles:
http://ryanmangansitblog.wordpress.com/2013/03/11/create-a-rdwa-farm-using-a-kemp-load-balancer/
http://ryanmangansitblog.wordpress.com/2013/03/31/rds-2012-configuring-a-rd-gateway-farm/
http://ryanmangansitblog.wordpress.com/2013/09/05/load-balance-rds2012-rdwa-and-rdgw-using-sub-interfaces-on-kemps-loadmaster/
As you have mentioned that you are migrating from a 2008R2 configuration, have a look at the following article:
http://ryanmangansitblog.wordpress.com/2014/01/05/publish-rds-2008r2-desktop-on-rds-2012/
Ryan Mangan | [email protected] | Help keep the forums tidy, if this has helped please mark it as an answer

Similar Messages

  • Windows 2012 RDS - Session Host servers High Availability

    Hello Windows/Terminal server Champs,
    I am new middle of implementing RDS environment for one of my customer, Hope you could help me out.
    My customer has asked for HA for RDS session host where applications are published, and i have prepared below plan for server point of view.
     2 Session Host server, 1 webaccess, 1 License/connection
    Broker & 1 Gateway (DMZ).
     In first Phase, we are planning to target internal user
    who connect to Session host HA where these 2 servers will have application installed and internal user will use RDP to access these application.
    In second Phase we will be dealing with external Party who connect from external network where we are planning to integrate with NetIQ => gateway
    => Webaccess/Session host
     I have successfully installed and configured 2 Session
    Host, 1 license/Broker. 1 webAccess & 1 Gateway. But my main concern to have session Host High Available as it is hosting the application and most of the internal user going to use it. to configure it i am following http://technet.microsoft.com/en-us/library/cc753891.aspx  
    However most of the Architecture is change in RDS 2012. can you please help me out to setup the Session Host HA.
    Note: we can have only 1 Connection broker /Licensing server , 1 webacess server & 1 Gateway server, we cannot increase more server due to cost
    factor.
     thanks in advance.

    Yes, absolutely no problem in just using one connection broker in your environment as long as your customer understands the SPOF.
    the session hosts however aren't really what you would class HA - but to set them up so youhave reduancy you would use either Windows NLB, an external NLB device or windows dns round robin. My preferred option when using the connection broker is DNS round
    robin - where you give each server in the farm the same farm name dns entry - the connection broker then decides which server to allocate the session too.
    You must ensure your session host servers are identical in terms of software though - same software installed in the same paths on all the session host servers.
    if you use the 2012 deployment wizard through server manager roles the majority of the config is done for you.
    Regards,
    Denis Cooper
    MCITP EA - MCT
    Help keep the forums tidy, if this has helped please mark it as an answer
    My Blog
    LinkedIn:

  • Windows Server 2012 R2 Session Host Server Temp Profile issue.

    HI,
    I successfully Deployed Windows server 2012 r2 Terminal services with High Availability.
    After Rebooting Session Host Server i am facing Temp Profile issue. After i Deleted registry and rebooting server and tried to login again but same popup message you have login with temp profile.
    Any suggestions or any hints would be GREATLY appreciated
    /HR

    how did you delete the profile?
    also are you using UPD disks?
    What errors are shown in the event log if any?
    Regards,
    Denis Cooper
    MCITP EA - MCT
    Help keep the forums tidy, if this has helped please mark it as an answer
    My Blog
    LinkedIn:

  • Multicast not working with Window2K Network Load Balancing.

    I'm using W2K Network Load Balancing (WBLB) for our cluster machines (2
              boxes) to load balance between IIS (one IIS instance on each box). Each IIS
              instance is a proxy to the weblogic cluster (one app server instance on each
              box). Currently I only have a single network card configured for each box,
              so I have had to enable multicast support for the WNLB. But if I do this
              I'm unable to get multicasting working correctly for the weblogic cluster.
              When I run the multicast tester (utils.MulticastTest) one box is able to
              receive multicast messages from both boxes, but the other box is only
              receiving multicast messages from itself (but not the other box). Does
              anyone have any experience with configuring weblogic clustering on machines
              with WNLB also configured?
              Thank you.
              Marko.
              

    Hi
    NLB return traffic for UDP would come from the node IPs.
    You could use NAT on your firewalls so they come from the same public IP.
    Otherwise you'd be looking at something other than MS NLB.
    Cheers
    GF

  • SCCM 2012 Query to populate collection with users of 3 similar characters

    Hi, 
    I'm trying to create a query to populate a collection for my QA users. I have 5 QA users and about 10,000 users on the domain. Those users are inside a "TQA" group so I just need to know a way to create a dynamic collection that will be populated
    automatically with this TQA users and because of more people will be joining the ranks of QA testing the collection will help to mitigate maintenance.
    At the moment we have a query that doesn't works at all so I had to manually update my collections every time we test a product. My query code does not seems to populate with the info I need.
    This is the code:
    select SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain from SMS_R_User where SMS_R_User.UserPrincipalName = "TQA%" order by SMS_R_User.UserPrincipalName
    Any thoughts ?
    Kind Regards.

    If you're using % in the value field the operator must be "Like" . In your case, the query should look like
    select SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain from SMS_R_User where SMS_R_User.UserPrincipalName Like
    "TQA%" order by SMS_R_User.UserPrincipalName
    Kindly mark as answer/Vote as helpful if a reply from anybody helped you in this forum. Delphin

  • Windows 2012 storage server and tier with external SSD disks

    Hi
    My query is in case I have one SAN storage with SSD and FC disks connected to Windows 2012 storage server, will Windows be able to manage Tier between two types of disks if the volumes are properly assigned and formated?
    Regards

    Hi
    My query is in case I have one SAN storage with SSD and FC disks connected to Windows 2012 storage server, will Windows be able to manage Tier between two types of disks if the volumes are properly assigned and formated?
    Regards
    Short answer: No, not automatically. Long answer: Yes, it can be done but with some tricks. First you'll have to make your SAN export LUs built from flash and from spindles. At least one of each (see URL below). Then you'll have to build storage spaces (even
    clustered but that's not officially supported for non-SAS disks) from them.
    See:
    Configure Tiering with Windows Server 2012 R2
    http://blogs.technet.com/b/askpfeplat/archive/2013/10/21/storage-spaces-how-to-configure-storage-tiers-with-windows-server-2012-r2.aspx
    Both LUs would have non-SSD type reported so you'll have manually assign types with PowerShell what's flash and what's spindle.
    "Notice that the SSD devices were detected as SSD media.  However, in this case the physical drives show as unknown.  
    If yours are not detected like in this example, they should be set correctly which can be done using PowerShell. "
    Hope this helped :)
    StarWind VSAN [Virtual SAN] clusters Hyper-V without SAS, Fibre Channel, SMB 3.0 or iSCSI, uses Ethernet to mirror internally mounted SATA disks between hosts.

  • Problem with Error 5005 and with external SWF loading

    I am creating a relatively simple 10-12 minute animation. I've broken the animation into 34 different movie clips that I control on the timeline by using a timer delay.
    When I try to export them all together I get the error:
    ",Line 1: Error 5005: Unknown Error optimizing byte code."
    However, when I split the presentation into two halves with the same exact frames and code I don't have the problem.
    I thought loading an external SWF at the end of the first movie would be a good way to connect everything. However, the SWF continuously loads and won't play through the way it looks when you open the actual SWF file.
    This is my code for the external loading:
    var xpos:Number = 0;
    var ypos:Number = 0;
    var swf:MovieClip;
    var myLoader:Loader = new Loader();// create a new instance of the Loader class
    var url:URLRequest = new URLRequest("aamc-2e-slide1.swf");// in this case both SWFs are in the same folder
    myLoader.contentLoaderInfo.addEventListener(Event.INIT, doneLoading);
    myLoader.load(url);
    function doneLoading(evt:Event):void
              trace("doneloading");
              swf = MovieClip(myLoader.content);
              stage.addChild(swf);
              swf.stop();

    I have the same/similar issue whether the stop is there or not.
    Yes, it is all on one frame.
    Without the stop, the SWF just continously loops on top of itself.

  • Problem with external swf loading

    this is the code I'm using that works
    onClipEvent(load){
    this.loadMovie ("2.swf", "b");}
    Text
    and when I use another swf to load, it won't work anymore.
    Any help would be apreciated

    you can't decrease the total time it takes for you external swfs to load.  you can start those swfs loading in the background (while on frame 1, for example) but you need to be careful to preload only 1 swf at a time and not restart its download if it's already been started.

  • June 2012 Macbook Pro not compatible with external display?

    I have been using an Acer X203H monitor with my old macbook pro (15" model) with the apple dvi-vga cable with no issues. But I have recently purchased the above mentioned macbook pro so I also bought a thunderbolt-dvi cable in order to use my external monitor. Basically, the monitor just keeps telling me that there is 'No Signal' and shuts down. Why is that? Is it a compatibility issue between my monitor and my new macbook pro? Or is it because (as I have just realized) I am doing a very roundabout way of connecting my computer to my monitor (thunderbolt-dvi-vga)? If I get a thunderbolt to vga cable will the monitor work properly?
    Any insight at all would be much appreciated. Thank you!

    btw, the old macbook pro is from 2008 and is pre-unibody

  • CIFS Log In issue with external network bluray

    I can't seem to get my LG Blu Ray player to connect to the shared folders on my Mac. It worked some while back, but various updates to the LG now means it prompts for my CIFS log in and password, which I naturally assumed would be the login and password for my Mac, but it rejects as wrong - I set up a separate user on the Mac, again, details wrong, depsite having just created them.
    What the heck am I doing wrong?
    It sees the Mac on the system, I just can't seem to get it to connect.

    I can't seem to get my LG Blu Ray player to connect to the shared folders on my Mac. It worked some while back, but various updates to the LG now means it prompts for my CIFS log in and password, which I naturally assumed would be the login and password for my Mac, but it rejects as wrong - I set up a separate user on the Mac, again, details wrong, depsite having just created them.
    What the heck am I doing wrong?
    It sees the Mac on the system, I just can't seem to get it to connect.

  • Windows Server 2012 R2 - ADFS/Windows Network Load Balancing Converging Issue

    Hello,
    My name is Brandon. We have started upgrading our servers to Windows Server 2012 R2. We have some powerful servers for running ESXI 5.5 as the OS with the Guest Operating Systems as Windows Server 2012 R2. As far of our migrations/upgrades we have configured
    ADFS 2012 R2 into a Server Farm with Windows Network Load Balancing to add redundancy in the event a server goes down.
    I have been having issues with a Node with the Cluster getting stuck in the Status of Converging. The only way I have been able to get it back up is to restart the virtual server completely and it is temporary. When I first configure the Cluster the two
    virtual servers get added to the Node with no problems and fully converge. However, after some time a node will end up in Converging and this takes Authentication for ADFS down as the nodes can not be contacted over Port 443.
    Error: Host: server.domain.com Unable to connect to "server name"
    System
    Provider
    [ Name]
    Microsoft-Windows-NLB
    [ Guid]
    {F22AF71F-C4C3-425D-9653-B2F47B85DD30}
    EventID
    21
    I have tried using 1 & 2 Virtual NICs on the machines and still end up with communication issues. Could someone assist me with why I am having this issue? This is not an issue with a firewall. If it was a firewall it would never communicate the first
    time. Has anyone had experience with a similar configuration and how were you able to make it work?
    Below is my configuration.
    Static ARP Entry for Cluster IP Address has been added to our Layer 3 switch.
    Physical Server 1:
    ESXI 5.5 HOST
    1 NIC CONNECTED (shared with virtual guest)
    IP ADDRESS: 192.168.0.5
    SUBNET: 255.255.255.0
    DGW: 192.168.0.1
    Virtual Server 1 (Guest OS)
    Physical Server 2:
    ESXI 5.5 HOST
    1 NIC CONNECTED (shared with virtual guest)
    IP ADDRESS: 192.168.0.6
    SUBNET: 255.255.255.0
    DGW: 192.168.0.1
    Virtual Server 2 (Guest OS)
    Virtual Servers
    Virtual Server 1
    MS SERVER 2012 R2 (VIRTUAL)
    NLB NODE 2 
    VIRTUAL NETWORK ADAPTERS
     VNIC1 IP ADDRESS 192.168.0.10
    SUBNET: 255.255.255.0
    DGW: 192.168.0.1
     VNIC 2 (NLB)
    IP ADDRESS: 192.168.0.11
    SUBNET: 255.255.255.0
    Virtual Server 2
    MS SERVER 2012 R2 (VIRTUAL)
    NLB NODE 2
    VIRTUAL NETWORK ADAPTERS
     VNIC1
    IP ADDRESS 192.168.0.20
    SUBNET: 255.255.255.0
    DGW: 192.168.0.1
     VNIC 2 (NLB)
    IP ADDRESS: 192.168.0.21
    SUBNET: 255.255.255.0
    Cluster Configuration/Properties
    CLUSTER PROPERTIES CLUSTER IP: 192.168.0.30
    CLUSTER SUBNET: 255.255.255.0
    FULL INTERNET NAME: FS.DOMAIN.COM
    CLUSTER OPERATION MODE: MULTICAST
    PORT RULES:
    CLUSTER IP ADDRESS
    START
    END
    PROTOCAL
    MODE
    PRIORITY
    LOAD
    AFFINITY
    ALL
    80
    80
    BOTH
    MULTIPLE
    EQUAL
    NONE
    ALL
    443
    443
    BOTH
    MULTIPLE
    EQUAL
    NONE
    CLUSTER NODES:
    1.) SERVER1.DOMAIN.COM
    a. IP: 192.168.0.11
    2.) SERVER2.DOMAIN.COM
    a. IP: 192.168.0.21

    Hi,
    According to your description, my understanding is that:2 ESXI 5.5 physical devices (192.168.0.5 and 192.168.0.6), each of them has a virtual WS 2012 R2(192.168.0.10 and 192.168.0.20). Cluster the 2 virtual servers successfully, but they corrupt with event
    ID 21, and a restart of virtual device will resolve this problem temporarily.
    Event ID 21 means that NLB failed to converge due to inconsistencies in the port rules between this host and cluster host. This will occur if the number of port rules or the type of port rules are different between hosts.
    Ensure that all NLB hosts have identical port rules. Detailed steps you may reference:
    Event ID 21 — NLB Port Rules Configuration
    https://technet.microsoft.com/en-us/library/dd364034%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396
    Best Regards,
    Eve Wang
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact
    [email protected]

  • Windows Server 2012 R2 - Windows Network Load Balancing Converging Issue

    Hello,
    My name is Brandon. We have started upgrading our servers to Windows Server 2012 R2. We have some powerful servers for running ESXI 5.5 as the OS with the Guest Operating Systems as Windows Server 2012 R2. As far of our migrations/upgrades we have configured
    ADFS 2012 R2 into a Server Farm with Windows Network Load Balancing to add redundancy in the event a server goes down.
    I have been having issues with a Node with the Cluster getting stuck in the Status of Converging. The only way I have been able to get it back up is to restart the virtual server completely and it is temporary. When I first configure the Cluster the two
    virtual servers get added to the Node with no problems and fully converge. However, after some time a node will end up in Converging and this takes Authentication for ADFS down as the nodes can not be contacted over Port 443.
    Error: Host: server.domain.com Unable to connect to "server name"
    System
    Provider
    Name]
    Microsoft-Windows-NLB
    Guid]
    {F22AF71F-C4C3-425D-9653-B2F47B85DD30}
    EventID
    21
    I have tried using 1 & 2 Virtual NICs on the machines and still receive this error even if only 1 VNIC is assigned to the virtual machine. Could someone assist me with why I am having this issue? Has anyone had experience with a similar configuration
    and how were you able to make it work?
    Below is my configuration.
    Static ARP Entry for Cluster IP Address has been added to our Layer 3 switch.
    Physical Server 1:
    ESXI 5.5 HOST
    1 NIC CONNECTED (shared with virtual guest)
    IP ADDRESS: 192.168.0.5
    SUBNET: 255.255.255.0
    DGW: 192.168.0.1
    Virtual Server 1
    Physical Server 2:
    ESXI 5.5 HOST
    1 NIC CONNECTED (shared with virtual guest)
    IP ADDRESS: 192.168.0.6
    SUBNET: 255.255.255.0
    DGW: 192.168.0.1
    Virtual Server 2
    Virtual Servers
    Virtual Server 1
    MS SERVER 2012 R2 (VIRTUAL)
    NLB NODE
    2 – VIRTUAL NETWORK ADAPTERS
     VNIC1
    IP ADDRESS 192.168.0.10
    SUBNET: 255.255.255.0
    DGW: 192.168.0.1
     VNIC 2 (NLB)
    IP ADDRESS: 192.168.0.11
    SUBNET: 255.255.255.0
    Virtual Server 2
    MS SERVER 2012 R2 (VIRTUAL)
    NLB NODE
    2 – VIRTUAL NETWORK ADAPTERS
     VNIC1
    IP ADDRESS 192.168.0.20
    SUBNET: 255.255.255.0
    DGW: 192.168.0.1
     VNIC 2 (NLB)
    IP ADDRESS: 192.168.0.21
    SUBNET: 255.255.255.0
    Cluster Configuration/Properties
    CLUSTER PROPERTIES
    CLUSTER IP: 192.168.0.30
    CLUSTER SUBNET: 255.255.255.0
    FULL INTERNET NAME: FS.DOMAIN.COM
    CLUSTER OPERATION MODE: MULTICAST
    PORT RULES:
    CLUSTER IP ADDRESS  START END  PROTOCAL MODE   PRIORITY LOAD  AFFINITY
    ALL    80 80 BOTH  MULTIPLE  ..  EQUAL  NONE
    ALL    443 443 BOTH  MULTIPLE  ..  EQUAL  NONE
    CLUSTER NODES:
    1.) SERVER1.DOMAIN.COM
    a. IP: 192.168.0.11
    2.) SERVER2.DOMAIN.COM
    a. IP: 192.168.0.21

    Thank you for your response. It took me a while to figure it out, but the whole issue was related to the type of Virtual Network Adapter I was selecting.
    I changed the network adapter from E1000 to VMXNET 3 and have not had a single error in the event logs or Windows NLB.
    I read somewhere that VMXNET 3 is preferred for Windows Server 2012 R2.
    https://communities.vmware.com/thread/433792
    Leyuka       May 23, 2013 6:14 AM
    "Just a help for everyone with this problem :
    After 10 days of research for our virtual datacenter behind a vcloud as iias ,  i found a solution .
    I only run windows 2012 server .
    Install vmware tools , remove e1000 network card after a vm stop, add a card same vswitch etc BUT with a vmxnet3 TYPE . DONT USE DEFAULT CARD
    Start and enjoy this solution . E1000 and E1000e are just unstable in windows8 / windows 2012 , the network card reset randomly with or without heavy IO. No log in windows , and as a vcloud user i don"t have esxi logs (damn i don't like cloud) and provider
    don"t know why ..."

  • 2012 R2 RD Session Host Domain Users Cannot Change Password

    I set up a Windows 2012 R2 Session Host as per
    http://support.microsoft.com/kb/2833839 and joined it to the domain.  Now, users are unable to change their password. When they log in to the RDSH and "ctrl-del-end", they are given the change password dialog, but they are told that
    their password "doesn't meet complexity requirements" even if it does.  I suspect the issue is related to the fact that there is no "session collection" per se and that the "connection broker" role is not installed. 
    Is there any way around this?  The end game would be to have them log into this RDSH and be able to change their password to conform with the domain password policy
    PaulK

    Hi Paulk,
    Did you mean that all users cannot change passwords? Based on my experience, this issue was not related ro the RD connection broker role.
    Please check the password policy in group policy of the domain to see if any password policy caused this issue:
    Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy
    For more information, you can refer to the link below:
    https://technet.microsoft.com/en-us/library/hh994572(v=ws.10).aspx
    Best regards,
    Susie
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • SQL*Loader problem with direct path load

    Hi all,
    Its on Oracle 9.2
    I have a sqlldr control file which has couple of columns like,
    my_column_1 ,
    my_column_2 "decode(:my_column_1,'ONE','AAA','TWO','BBB', :my_column_1)"
    The table I am loading to is in user X and I am running the load from
    user Y. Everything works fine with conventional path load (not direct
    path) as grants are made for the table to user Y.
    When I load the data with same control file with direct path, I get an
    error ,
    01031 - insufficient privileges
    Is this anything to do with the syntex I have used in the control file
    or its a privilege issue. If its a privilege issue which privilege is
    that ?
    I did following tests,
    1) Load is run with conventional path load, from user Y and the decode
    statement is in control file - Load works
    2) Load is run with direct path load, from user Y and decode statement
    is in control file - Load fails with above mentioned error
    3) Load is run with direct path load, from user Y and decode IS REMOVED
    from the control file - Load works (!!!)
    What can be the conclusion? Way out ?
    Thanks and Regards

    You need to grant
    grant lock any table to userY;
    For more information see MetaLink Note 1082550.6

  • Load balancing RD Session host servers & Certificate error

    I have three RD Session host servers  Named RDSH1, RDSH2 and RDSH3.
    Two servers RDSH1 and RDSH2, are user  in addition to RD SH as RD CB and RD WA.  I have deploy both in  HE deployment with Windows NLB. RD CB and RD WA use the same  url CBPub.domain.com.
    I have created  collection and add all three servers to that collection. I have published application, and it works. Users connect without warning to all three servers, when using RD WEB. But when  user try to connect to terminal
    server using mstsc and url of RCCB CBPub.domain.com, I get certificate warning  only when connecting to  RDSH3 server where warring is for RDSH3.domain.com. I’m probably missing something basic.
    RDSH3 has in private computer store same certificate, that is deployed on all three servers. It was deploy manual prior   RS SH deployment. It is the same certificate as it is installed on  RDSH1 & RDSH2 server.

    Hi,
    Thank you for posting in Windows Server Forum.
    What’s the certificate error which you are facing?
    The certificate which used for RDS server must be signed by trusted authority and placed under “local computer\personal store”. 
    If you are just connecting internally from clients in the same domain, you should be able to use an internal Enterprise CA to create a SAN or wildcard certificate which you can use on your servers.
    We need to install the certificates on all RDSH server manually. 
    • Open the MMC and open the Certificates snapin
    • Add the Local Computer
    • Import the certificate into Computer\Personal
    • Open the certificate and find      the thumbprint on the details tab. Copy the thumbprint to notepad and      delete all the spaces.
    • Open up an elevated PowerShell      prompt and write:
    • wmic /namespace:\\root\cimv2\TerminalServices PATH Win32_TSGeneralSetting Set      SSLCertificateSHA1Hash=”‎PASTE_THUMBPRINT_STRING”
    • You can check the certificate by running:
    • Get-WmiObject -class      “Win32_TSGeneralSetting” -Namespace root\cimv2\terminalservices -Filter  “TerminalName=’RDP-tcp'”
    More information.
    Certificate Requirements for Windows 2008 R2 and Windows 2012 Remote Desktop Services
    http://blogs.technet.com/b/askperf/archive/2014/01/24/certificate-requirements-for-windows-2008-r2-and-windows-2012-remote-desktop-services.aspx
    Hope it helps!
    Thanks.
    Dharmesh Solanki
    TechNet Community Support

Maybe you are looking for