RDS 2012 problem

Hi Guys,
I set up RDS 2012 in my computer and configured roaming profile for every user before. If a user use both windows 8 laptop and RDS 2012. Will the profile synchronized between  the local computer and the RDS? If it is synchronized, is there any impact
on this situation?

Hi,
Agree with words of samir, every time when changes made to a roaming user profile are synchronized with the server copy of the profile when the user logs off. And please let more as asked by samir.
In meantime you can refer following article for reference.
Deploy Roaming User Profiles
https://technet.microsoft.com/en-in/library/jj649079.aspx
User Profiles on Windows Server 2008 R2 Remote Desktop Services
http://blogs.msdn.com/b/rds/archive/2009/06/02/user-profiles-on-windows-server-2008-r2-remote-desktop-services.aspx
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Similar Messages

  • Installed the RDS 2012 Server License per user CAL (5pcs) after not allow over two users remote desktop connection problem

    I have successfully to installed the RDS 2012 Server R2 per user CAL (5pcs) Open License after is found not allow over two users to remote desktop connection on this Server problem, I try to uninstall the license and then (internet on-line & telephone
    call Microsoft Activate Center get the activate key) to reinstall is still same of the result on below problem.
    Select a user disconnect so that you can sign in.
    There are too many users signed in
    User1 Active
    User2 Active
    () Force disconnect of the user

    Hi,
    In addition you can also refer following article for RDL configuration.
    RD Licensing Configuration on Windows Server 2012
    http://blogs.technet.com/b/askperf/archive/2013/09/20/rd-licensing-configuration-on-windows-server-2012.aspx
    Hope it helps!
    Thanks.
    Dharmesh Solanki
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Users see all applications in RDS 2012 Web access in one-way trust domain environment

    Hello!
    We have RDS 2012 deployment in domainA.local. There is a one-way trust between domainA.local and domainB.local: A trusts B and B doesn't trust A.
    A user from domainB.local authenticates in Web-access interface (wa.domainA.local) and sees
    every published application in every collection in the deployment independently of UserGroups setting of collections and applications. This occurs for any domainB user.
    In the security log of wa.domainA.local we can find an event :
    An account failed to log on.
    Subject:
    Security ID:                IIS APPPOOL\RDWebAccess
    Account Name:                RDWebAccess
    Account Domain:                IIS APPPOOL
    Logon ID:                0x2C7B16
    Logon Type:                        3
    Account For Which Logon Failed:
    Security ID:                NULL SID
    Account Name:                
    Account Domain:                
    Failure Information:
    Failure Reason:                An error occurred during logon
    Status:                        0xC000005E
    Sub Status:                0x0
    Also in network trace on wa.domainA.local kerberos error could be found:
    On TGS-REQ for krbtgt/[email protected] there is an answer: KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN (7), server name krbtgt/domainB.
    How to deal with this issue? The aim is to show only specified applications to domainB users.
    Any help would be appreciated.

    Hi,
    Thank you for your posting in Windows Server Forum.
    Please check below links might useful for your case.
    “After adding the RDS server’s computer account to the Builtin Windows Authorization Access Group domain group, the RemoteApp icons displayed perfectly.” (Quoted from
    this article)
    1. Remote APP list empty
    2. RD
    Web Access unable to access Source (RD Server)
    In respect to Kerberos Error, refer this link for troubleshooting.
    1. Troubleshooting Kerberos Authentication problems – Name resolution issues
    2. Kerberos Authentication problems – Service Principal Name (SPN) issues - Part 2
    Hope it helps! 
    Thanks,
    Dharmesh

  • RDS 2012 R2 - RemoteApp Disconnected

    Hi RDS 2012 R2 Experts,
    I would like some guidance here if possible
    My setup is a follow.
    1x 2012r2 with the following role, Broker, Web access, Gateway and License called RDS01
    2x 2012r2 Session Host called RSH01 an RSH02
    1x wildcard cert
    I would like to my users to be able to either internal and external to use the same link, remote.mydomain.com since my internal domain is mydomain.local
    What i have done so far.
    Created a DNS Zone called remote.mydomain.com and added the following records there.
    REMOTE, it points to web access server IP 192.168.1.31 ( same server for Gateway and Broker )
    2x RDSFarm, one record points to RSH01 and the other to RSH02, 192.168.1.32 and 33
    Gateway, the record points to 192.168.1.31 ( same servers as broker and web access)
    Broker, the record points to 192.168.1.31 ( same servers as web access and gateway)
    i have set the gateway manager the following
    Edited the deployment RD Gateway to remote.mydomain.com
    Installed the wildcert for all the roles, *.mydomain.com in all 4 roles
    created Manage Local computer groups and added both RSH01 and 02, RDSFarm record, remote record, gateway record and broker record
    linked the allowed resources with the policy and users ( also tried allow users to connect to any resources )
    configure the gateway in the RD Gateway farm
    Configured the IIS to
    auto redirect
    and the DefaultTSGAteway under Pages to remote.mydomain.com
    Also I used the Set-PublishName (http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80) to change it to broker.mydomain.com
    Now, the issue I have is, when users either internally or externally try to launch a RemoteApp they get the error.
    RemoteApp Disconnected
    This computer cant connect to the remote computer.
    Try connecting again.
    To overcome this error I did the following:
    Set-PublishName to RDSFarm.mydomain.com ( it is using the round robin to get to the session host servers)
    There is two problem with this setup.
    I no longer can shadow the users under Connections in the broker ( it seems to be bypassed )
    I get certificate mismatch due the servers names
    What I would like to achieve is to fix both problems above.
    Thanks for any advice in advance.
    N0tl3_Bouya

    Hi,
    Thank you for posting in Windows Server Forum.
    Initially check that you have applied external used FQDN of server under Server name in RD Gateway Deployment properties and used Bypass RD Gateway for local address. 
    Please try to perform the steps 
    •  Create a new DNS zone, .COM to allow split-brain DNS (so that internal clients can resolve external names internally)
    •  Create a relevant DNS entry in the aforementioned zone to point to the RDS environment’s internal IP address
    •  Create a relevant DNS entry in external DNS to point to the firewall which is publishing RDS’s external IP address
    •  Use the following script to change the FQDN of the RDP files provided by RD Web Access / RemoteApp and Desktop connection feed 
    Change published FQDN for Server 2012 or 2012 R2 RDS Deployment
    http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80
    In addition, for shadow related issue you can use the server in administrative mode use mstsc /shadow command and check the result. 
    Detailed walkthrough on Remote Control (Shadowing), reintroduced in Windows Server 2012 R2  
    Hope it helps!
    Thanks.
    Dharmesh Solanki

  • RDS 2012 R2 RemoteApp Server Name Mismatch

    Hi All,
    I wonder if someone can scratch my head on this.
    Brand new RDS 2012 R2 deployment.
    RDS01 with Connection Broker and Session Host Roles installed
    RDS02 with Web Access and Gateway roles installed
    one ssl certificate with one domain remote.mycompany.com 
    the certificate have been imported to all the servers via the Edit Deployment
    the local domain is mycompany.local
    the problem that i am having is that when i launch RemoteApp after login in the remote.mycompany.com externally, i get Certificate mismatch, because it is contact the local name of the Session host server RDS01.
    What i tried so far.
    Used the Set-PublishName (http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80) without success
    Try to configure RDS01 certificate via (http://ryanmangansitblog.wordpress.com/2013/03/10/configuring-rds-2012-certificates-and-sso/)
    Check Any resources ( http://social.technet.microsoft.com/Forums/en-US/d1b0ebe4-9e53-47ff-8c75-43fd91ff538a/windows-2012-rds-certificate-mismatch?forum=winserverTS)
    Has anybody out there could shade me some knowledge in how to rectify the mismatch name warning.
    Thanks
    Elton

    Hi -TP,
    Answering your queries.
    1_the Set-RDPublishedName was successful, restarted the servers, refreshed the RDWeb page externally, tried to connect unsuccessfully.
    2_I am using externally windows 8 and internally 7 fully updated
    3_it had the green successful message.
    After, set-rdpublishedname command, i get an erro when try to connecting saying, RemoteApp Disconnected.
    Error:
    Remote desktop cant connect to the computer "remote.mycompany.com"
    1)Your user account is not listed in the RD Gateway Permission ( not true, it was set for domain users and my test user is under that group)
    2)you might have specified the remote computer in netbios format or ip
    Do you reckon i am having this problem because the RDS01 with Connection Broker and Session Host Roles installed?
    Cheers
    Elton

  • RDS 2012 Encrypted USB drives

    So we are about a week into our RDS 2012 VDI roll out. We have made 100% thin clients, in fact we have even replaced the shell. unencrypted flash drives work just fine. They mount up and redirect. However encrypted flash drives are giving us problems.
    It works if we drop back into the thin client and deencrypt but since we replaced the shell our end users can not do this. What options do i have here?

    Hi,
    Firstly please explain what you want to perform. Additionally are you using BitLocker Drive Encryption on your server? Have you used RemoteFX feature on your server?
    “Drive redirection does not provide low-level access to the redirected drive. As such, the following are not supported in the remote session: Managing BitLocker-encrypted USB storage “(Quoted from article).
    Meanwhile take a look at below article.
    Introducing Microsoft RemoteFX USB Redirection: Part 3
    http://blogs.msdn.com/b/rds/archive/2010/11/08/introducing-microsoft-remotefx-usb-redirection-part-3.aspx
    BitLocker: How to deploy on Windows Server 2012
    http://technet.microsoft.com/en-us/library/jj612864.aspx
    RemoteFX USB Redirection in Windows Server 2012 and Windows 8
    http://blogs.msdn.com/b/rds/archive/2012/09/11/remotefx-usb-redirection-in-windows-server-2012-and-windows-8.aspx
    Hope it helps!
    Thanks.

  • HP ThinPro T520 - RDS 2012 R2 USB Redircetions

    Dear Community, My Devices:
    HP T520 Flexible Series TC  T6X52011 with ThinPro Operation System (latest available). I'm trying to connect to a Windows 2012 R2 Remote Desktop Services Farm  - with Session Broker enabled. Connection Works without any issues, but the USB Redirection to the Members of the "Session Broker Farm" won't work. Connection to a RDS 2012 R2 Server, who is not member of a Farm/Session Broker , is working fine, USB Device (Stick) is displayed at the Terminal Surface. Connection to the same Farm with a Windows 8 Client works fine - also with usb redirection. I tried serveral settings at the RDP Connection Properations @ ThinPro, but no success. Does Anyone have similar issues ?
     brf1refox 

    Hi,
    Regarding the error Failed to create KVP sessions string, please refer to Microsoft Jim’s reply in this thread to see if it resolves the issue:
    Failed to create KVP sessions string. Error Code 0x8007007A
    https://social.technet.microsoft.com/Forums/en-US/2fd453ce-e018-4c1a-8424-c32fcb89b2ba/failed-to-create-kvp-sessions-string-error-code-0x8007007a?forum=winserverTS
    In addition, here are a few more links below regarding the licensing issue for you:
    TS CALs being picked up by our Terminal servers itself
    https://social.technet.microsoft.com/Forums/windowsserver/en-US/e929bd18-b4bd-4d55-98b3-d8d4f608f3f3/ts-cals-being-picked-up-by-our-terminal-servers-itself?forum=winserverTS
    Microsoft licensing changes: How do they apply to Remote Desktop Session Host?
    https://social.technet.microsoft.com/Forums/windowsserver/en-US/2366acda-7eb6-4fa1-9c5b-479717a63238/microsoft-licensing-changes-how-do-they-apply-to-remote-desktop-session-host?forum=winserverTS
    Licensing Diagnosis: Problems and Resolutions
    http://blogs.msdn.com/b/rds/archive/2008/02/01/licensing-diagnosis-problems-and-resolutions.aspx
    Best Regards,
    Amy
    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected]

  • RDS 2012 R2 HA - CustomRdpProperty gets overwritten by sync

    Hi,
    I am implementing an RDS 2012 R2 Farm at a customer site. The customer is using different DNS-names internally and externally so I have implemented a Custom RDP Property via PowerShell on the Farm.
    Set-RDSessionCollectionConfiguration -CollectionName "Collection" -CustomRdpProperty "use redirection server name:i:1 `n alternate full address:s:broker.external.com"
    I can see, the property is applied and synced to the other broker servers - perfect!
    I have verified via PowerShell and registry and I have tested that the 'redirection' actually Works - fantastic!
    The problem is, that when the farm is synchronized Again, my custom property gets overwritten/deleted.
    What am I missing? Permissions?
    Is the Custom Property supposed to get written to the SQL database that is used for Broker high availability?
    Hopefully someone can help med with this one :-).
    Thanks in advance!
    /Michael, Denmark

    Hi,
    Yes, they do get the files from the same source.  If using RemoteApp and Desktop Connections it stores a cached copy of the .rdp files in the user's profile and updates them periodically, so it is possible some of them could be using a rdp
    file with the old information.  For RDWeb a fresh copy is downloaded each time the page is refreshed.
    To keep things consistent I would recommend you undo the custom rdp property you made.  To do this you can run the command on
    both brokers with a just a space or newline (`n) for the customrdpproperty parameter, like this:
    Set-RDSessionCollectionConfiguration -CollectionName "collectionname" -CustomRdpProperty " "
    -TP

  • RDS 2012 R2 RemoteApp from NetShare

    Hello.
    We have a new RDS 2012 R2 Server.
    The Problem is our ERP Software has to be started from a network share. I find out that it is not possible to publish a Application with the Servermanager which is on a netShare
    So i want to try it with PowerShell, but evertime i try it i get the following error message
    New-RDRemoteApp -CollectionName COLL_NAME -DisplayName APPNAME -FilePath \\SERVER\APP.EXE -IconPath \\SERVER\APP.EXE
    New-RemoteApp : A Remote Desktop Services deployment does not exist on RDS2012SERVER This operation can be
    performed after creating a deployment. For information about creating a deployment, run "Get-Help Set-VDIDeployment" o
    r "Get-Help Set-RDSHDeployment".
    At line:1 char:1
    + New-RemoteApp
    + ~~~~~~~~~~~~~
    + CategoryInfo : NotSpecified: (:) [Write-Error], WriteErrorException
    + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,New-RemoteApp
    Same with
    get-rdremoteapp -collectionname "COLL_NAME" -connectionbroker RDS2012SERVER | Format-List
    We just used a default Deployment with a Single Server.
    Anyone an idea?
    Thanks for the Help!

    use 
    Import-Module remotedesktopservices 
    then try the commands again
    also, when using -connectionbroker parameter, use FQDN for broker, not netbios name.
    also ensure powershell is opened as administrator and the user you log onto the machine has admin permissions on the broker.
    MCITP:SA:EA:EMA2010:VA2008R2

  • RDS 2012 - unable to connect to SH via webgateway

    Dear all,
    we have setup a RDS 2012 system following this article;
    rds8-standard-3-node-remoteapp-deployment-on-windows-server-2012
    It all went ok as far is I could see but Im running into the following problem.
    If I use MSTSC to connect through the gateway directly things work, I get the desired SH desktop without a problem. (eg connect to SH001.domain.local using the web url for the gateway/webserver).
    If I go to the external website and try to setup a connection it goes into somekind of loop. It first gives me a security warning stating it wants to connect to the connection broker, then I get a certificate error from the connection broker, which is correct
    in this case, I choose to ignore the certificate warning and continue anyway. RDP then continues; Securing external connection, checking bandwith, starting the external connection. And there it hangs, it doesnt go any further and tries to connect for ever.
    The external adres of the gateway is xxx.xxxx.nl and internally it xxx.xxxx.local not sure if this could be related. I noticed an article with a powershell script that would change the .local into .nl
    Strange thing it worked before. I even went as far as  trashing all 3 machines, removing the roles and removing them from the domain to run the install again on fresh machines with new DNS names. Still no luck.
    Not sure on how to troubleshoot this any further. Eventlogs on the GW and CB show nothing special, no errors. One thing that I do notice is a recurring WMI 5605 ID - The root\cimv2\RDMS namespace is marked with the requiresEncryption flag. Access to this
    namespace might be denied if the script or application does not have the appropriate authentication level. Change the authentication level to Pkt_Privacy and run the script or application again.
    Thanks for any thoughts on this.
    Best regards,
    Louis

    HI,
    Can you confirm everything works internally and your problems occur when trying to access resources externally.
    Firstly check the certificates and ensure you have configured self signed or trusted.
    Try turning of certificate authentication for testing only - this will answer your authentication level question.
    Have a look at the following post:
    http://ryanmangansitblog.com/2013/03/10/configuring-rds-2012-certificates-and-sso/
    It does sound like you are experencing issues with the Internal and external nameing of the gateway. There are a few ways round this. TP has written a script which will assist with the change.
    http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80/file/103829/2/Set-RDPublishedName.ps1 If you have questions
    around the use of this, reply in this post.
    Ryan Mangan | Ryanmangansitblog.wordpress.com | Help keep the forums tidy, if this has helped please mark it as an answer

  • RDS 2012 - Connection issues when selecting "This is a private Computer"

    We recently cutover our corporate RDS system the Windows 2012 version and it was pretty smooth, only  few issue that where resolved quickly.  In the last 3 weeks I nave had 4 differnet users working from home on personal WIndows 7 system that
    they use to connect to their computer in the office using Windows 2012 RDS telling me that they can't connect any longer.  Doing some basic troubleshooting I discovered that if they select the option on the RDS Webaccess page "This is a private computer'
    they can't connect to their computer in the office.  If they select "This is a public or shared computer" It works fine.
    Anyone seen this before???
    Joe Gomez

    Hello,
    Thanks for your response.
    1. Windows Server 2012
    2. it appears that  it is connecting then it times out after about 30-40 second.
    3. "Remote Desktop can't connect to the remote computer for one of the these resons:"
    Remote access to the server is not enabled.
    The remote computer is turned off.
    The remote computer is not avalible on the network.
    Make sure the remote computer is turned on and is connected to the network and that remote access is enabled.
    4. I will try the a non customized RDWEB page.
    5. Our users have a range of RDP clinet version, I will make sure that these having the problem are on 6.3.9600
    6. Yes they use the Connect to Remote PC feature to connect to a physical PC in the office.
    This worked fine in the Windows 2008R2 RDS environment.  The new RDS 2012 we started to see this.
    Thanks
    Joe
    Joe Gomez

  • RDS 2012 + DirectAccess

    Hello
    I’m not able to start any RemoteApp from my new RDS 2012 test farm when using DirectAccess from outside.
    On the internal company network it just works without any problems.
    Here is my setup:
    RDS 2012 Farm:
    RDweb
    RD Connection Broker + Licensing server
    RD Session Host
    DirectAccess:
    Forefront UAG SP1 + latest rollup.
    Working and in production, where users access other internal company systems from outside without any problems.
    I can access and login to the RDweb server, but when I try to start a RemoteApp it times out with the error message below.
    Remote Desktop can't connect to the remote computer for one of these reasons:
    1) Remote access to the server is not enabled
    2) The remote computer is turned off
    3) The remote computer is not available on the network
    If I start mstsc and connect directly to the RD Session Host server I can connect and get a full desktop.
    So the problem must be DirectAccess and the RD Connection Broker
    Any help with this would be much appreciated
    Thanks,
    Jesper

    Hi Jesper,
    Please verify network connectivity between from the outside system to the RD Connection Broker server.  For example:
    Are you able to ping the RDCB by name and ip address?
    Are you able to telnet to port 3389 of the RDCB?
    Are you able to use Remote Desktop to make an administrative connection to the RDCB, using the /admin switch:
    mstsc /admin
    If necessary, please load Network monitor on your RDCB, start a capture, attempt to connect from the external system, then stop the capture and examine it.  Do you see the incoming packets from the external system in the capture?
    Please check Windows Firewal with Advanced Security (wf.msc) on the RDCB server to make sure it allows connections from external ip addresses for the Remote Desktop incoming rule.  You may check the Scope tab.
    Thanks.
    -TP

  • Open IE slow in RDS 2012

    Hi Guys,
    Today one of the users connected to the RDS 2012 server. And she found that it took about 5 minutes to open the IE explorer. We deployed the RDS 2012 with session mode and other users worked well in this RDS server except this user.

    Hi,
    Before deleting user profile, please try the following steps to see whether it can resolve your case.
    - Please make sure IE Enhanced security is disabled for Users in Server Manager
    - Try running following command in user account with add-ons disabled.
       iexplore.exe –extoff
       If this helps then perform additional troubleshooting to determine which addon is causing the problem.
    - Try resetting IE settings to default under the test user account through Tools--Internet Options--Advanced tab--Reset button.
    - See if turning off Smartscreen filtering makes any difference
    - You can also try using process monitor as administrator and see whether user session is trying to access iexplorer.exe to different folders/registry keys/etc. that the user does not have access to. 
    - Try lower version of IE and see whether it makes any difference.
    For more details, you can refer below article.
    Troubleshooting and Internet Explorer’s (No Add-ons) Mode
    http://blogs.msdn.com/b/ie/archive/2006/07/25/678113.aspx
    Hope it helps!
    Thanks.
    Dharmesh Solanki
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • How do you configure a farm name in RDS 2012?

    I understand Remote Desktop Services has undergo some drastric changes.
    How do you configure a farm name in RDS 2012? Or is the concept around farm name changed in another concept?
    Although I have imported a certificate on the RDCH withe the farm name I want to use. When I click on a RemoteApp on the RD Web Access portal, it does not connect to the right farm name.
    Boudewijn Plomp, BPMi Infrastructure & Security

    You don't.  You create a collection.  A client connects to the Connection Broker and then is redirected to the collection it is connecting to.  The collection name is embedded in the connection file that the client downloads from RDWeb or
    the RDWeb feed. 
    A collection is basically at least one RDSH server (for session based desktops) or one virtual machine (virtual machine based desktops). 
    Don Geddes - SR Support Escalation Engineer - Remote Desktop Services - Printing and Imaging

  • Best practice for RDGW placement in RDS 2012 R2 deployment

    Hi,
    I have been setting up a RDS 2012 R2 farm deployment and the time has come for setting up the RDGW servers. I have a farm with 4 SH servers, 2 WA servers, 2 CB servers and 1 LS.
    Farm works great for LAN and VPN users.
    Now i want to add two domain joined RDGW servers.
    The question is; I've read a lot on technet and different sites about how to set the thing up, but no one mentions any best practices for where to place them.
    Should i:
    - set up WAP in my DMZ with ADFS in LAN, then place the RDGW in the LAN and reverse proxy in
    - place RDGW in the DMZ, opening all those required ports into the LAN
    - place the RDGW in the LAN, then port forward port 443 into it from internet
    Any help is greatly appreciated.
    This posting is provided "AS IS" with no warranties or guarantees and confers no rights

    Hi,
    The deployment is totally depends on your & company requirements as many things to taken care such as Hardware, Network, Security and other related stuff. Personally to setup RD Gateway server I would not prefer you to select 1st option. But as per my research,
    for best result you can use option 2 (To place RDG server in DMZ and then allowed the required ports). Because by doing so outside network can’t directly connect to your internal server and it’s difficult to break the network by any attackers. A perimeter
    network (DMZ) is a small network that is set up separately from an organization's private network and the Internet. In a network, the hosts most vulnerable to attack are those that provide services to users outside of the LAN, such as e-mail, web, RD Gateway,
    RD Web Access and DNS servers. Because of the increased potential of these hosts being compromised, they are placed into their own sub-network called a perimeter network in order to protect the rest of the network if an intruder were to succeed. You can refer
    beneath article for more information.
    RD Gateway deployment in a perimeter network & Firewall rules
    http://blogs.msdn.com/b/rds/archive/2009/07/31/rd-gateway-deployment-in-a-perimeter-network-firewall-rules.aspx
    Hope it helps!
    Thanks.
    Dharmesh Solanki
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Maybe you are looking for