RDS 2012 R2 HA - CustomRdpProperty gets overwritten by sync

Hi,
I am implementing an RDS 2012 R2 Farm at a customer site. The customer is using different DNS-names internally and externally so I have implemented a Custom RDP Property via PowerShell on the Farm.
Set-RDSessionCollectionConfiguration -CollectionName "Collection" -CustomRdpProperty "use redirection server name:i:1 `n alternate full address:s:broker.external.com"
I can see, the property is applied and synced to the other broker servers - perfect!
I have verified via PowerShell and registry and I have tested that the 'redirection' actually Works - fantastic!
The problem is, that when the farm is synchronized Again, my custom property gets overwritten/deleted.
What am I missing? Permissions?
Is the Custom Property supposed to get written to the SQL database that is used for Broker high availability?
Hopefully someone can help med with this one :-).
Thanks in advance!
/Michael, Denmark

Hi,
Yes, they do get the files from the same source. If using RemoteApp and Desktop Connections it stores a cached copy of the .rdp files in the user's profile and updates them periodically, so it is possible some of them could be using a rdp
file with the old information. For RDWeb a fresh copy is downloaded each time the page is refreshed.
To keep things consistent I would recommend you undo the custom rdp property you made. To do this you can run the command on
both brokers with a just a space or newline (`n) for the customrdpproperty parameter, like this:
Set-RDSessionCollectionConfiguration -CollectionName "collectionname" -CustomRdpProperty " "
-TP

Similar Messages

Installed the RDS 2012 Server License per user CAL (5pcs) after not allow over two users remote desktop connection problem

I have successfully to installed the RDS 2012 Server R2 per user CAL (5pcs) Open License after is found not allow over two users to remote desktop connection on this Server problem, I try to uninstall the license and then (internet on-line & telephone
call Microsoft Activate Center get the activate key) to reinstall is still same of the result on below problem.
Select a user disconnect so that you can sign in.
There are too many users signed in
User1 Active
User2 Active
() Force disconnect of the user

Hi,
In addition you can also refer following article for RDL configuration.
RD Licensing Configuration on Windows Server 2012
http://blogs.technet.com/b/askperf/archive/2013/09/20/rd-licensing-configuration-on-windows-server-2012.aspx
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

RDS 2012 App-V 5 SP2, Applications are not pinned in the Metro Start Menu

Hey All,
I've been building a new App-V 5 Environment using server 2012 R2 for the App-V management\Publishing\Reporting servers.
I've installed app-v 5 SP2 on the RDS 2012 R2 servers and installed the App-V 5.1 SP1 Hotfix (KB2897087) for the 2012 R2 support.
I have run into the following issue; When triggering a app-v publishing sync the applications are only added in the classic start menu. The applications aren't pinned in the Metro Start menu like our App-V sp1 RDS 2012 clients.
I have checked the App-V client eventlogs (including the debug logs) and I haven't been able to find any errors that point out the cause of my issue.
Has anyone experienced the same issue or has anyone got any tips to get the app-v 5 sp2 client on RDS 2012 R2 to pin the sequences to the Metro Start Menu?
Thanks.

This is the default behaviour of Windows 8.1 and Windows Server 2012 R2 - there are no programmatic ways to pin shortcuts to the Start screen.
Here's a way to customise the Start screen layout: http://stealthpuppy.com/customizing-the-windows-8-1-start-screen-dont-follow-microsofts-guidance/
Here's how to go it with Group Policy: http://www.grouppolicy.biz/2013/06/customising-windows-8-1-start-screen-layout-with-group-policy/
Note that neither approach will help you pin shortcuts to the Start screen for users that have already logged on, without overwriting their existing preferences.
Please remember to click "Mark as Answer" or "Vote as Helpful" on the post that answers your question (or click "Unmark as Answer" if a marked post does not actually
answer your question). This can be beneficial to other community members reading the thread.
This forum post is my own opinion and does not necessarily reflect the opinion or view of my employer, Microsoft, its employees, or other MVPs.
Twitter:
@stealthpuppy | Blog:
stealthpuppy.com |
The Definitive Guide to Delivering Microsoft Office with App-V

RDS 2012 (An Authentication error has occurred 0x607) - WINDOWS 8 ONLY

Hi - please help. I've read many posts relating to this error, but none have fixed my issue.
We have an RDS 2012 setup. 2 Servers. Both session hosts. only 1 is the broker. Cert from official CA.
My authentication is set to ONLY allow devices with Network Level Authority. I don't want to remove this.
Windows XP and Windows 7 can connect both internally, and externally via the RDWeb address perfectly fine, but all Win8 machines get the error "An authentication error has occurred. Code 0x607.
Can anyone please advise why?
Many thanks

Hi,
I have seen other similar cases got resolved by setting the encryption level to low and security layer to Negotiate.
Here is a thread below:
An authentication error has occured (Code: 0x607)
https://social.technet.microsoft.com/Forums/windowsserver/en-US/94780a11-23ba-4a3c-b11a-734007c2d2fd/an-authentication-error-has-occured-code-0x607?forum=winserverTS
If it is not an option for you, I suggest you check whether the SSL certificate used by RDWeb access is trusted by the Windows 8 clients. There should be a corresponding root CA certificate installed in the Trusted Certification Authorities store.
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

RDS 2012 - Certificate Mistmatch

I am getting the most annoying error with my RDS 2012 Setup.
certificate mismatch and double password prompts when trying to connect to my RDS setup.
I have tried all that's out there and have got no positive results.
All roles are on identical on 2 servers. the RDCB is in HA Mode.
I keep getting the Certificate mismatch error.
Already have a public or external SAN certificate assigned to all roles.
Ran the powershell and wmi query to ensure the correct url is used when connected to gateway but I still get the double prompt when launching the remoteapps.
I even tried the approach by cleaning IE's history, data to get the RDPSHplugin and its not helped in my case.
All servers run 2012.
I need some urgent assistance, please and thank you
I have also checked and rebooted the RDS environment multiple times.
All certs show valid. the mismatch also goes to another cert in my environment which is utilized by OWA.
Please help me.

I downloaded the script to C:\ and tried running it - no luck
PS C:\> .\Set-RDPublishedName.ps1 "remote.domain.com"
Security warning
Run only scripts that you trust. While scripts from the internet can be useful, this script can potentially harm your
computer. Do you want to run C:\Set-RDPublishedName.ps1?
[D] Do not run [R] Run once [S] Suspend [?] Help (default is "D"): R
iwmi : Privilege not held.
At C:\Set-RDPublishedName.ps1:9 char:11
+ $return = iwmi -class "Win32_RDMSDeploymentSettings" -namespace "root\CIMV2\rdms ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidOperation: (:) [Invoke-WmiMethod], ManagementException
+ FullyQualifiedErrorId : InvokeWMIManagementException,Microsoft.PowerShell.Commands.InvokeWmiMethod
I also tried it from the other HA RDCB server.
PS C:\> .\Set-RDPublishedName.ps1 "remote.domain.com"
Security warning
Run only scripts that you trust. While scripts from the internet can be useful, this script can potentially harm
computer. Do you want to run C:\Set-RDPublishedName.ps1?
[D] Do not run [R] Run once [S] Suspend [?] Help (default is "D"): R
Set-RDClientAccessName : A valid fully qualified domain name (FQDN) for the server was not specified.
At C:\Set-RDPublishedName.ps1:22 char:1
+ Set-RDClientAccessName -ConnectionBroker $ConnectionBroker -ClientAccessName $Cl ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Write-Error], WriteErrorException
+ FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Set-RDClientAccessName
I also tried is this way-
PS C:\Users\administrator.TBCL\Downloads> .\Set-RDPublishedName.ps1
Security warning
Run only scripts that you trust. While scripts from the internet can be useful, this script can potentially harm your
computer. Do you want to run C:\Users\administrator.TBCL\Downloads\Set-RDPublishedName.ps1?
[D] Do not run [R] Run once [S] Suspend [?] Help (default is "D"): R
cmdlet Set-RDPublishedName.ps1 at command pipeline position 1
Supply values for the following parameters:
(Type !? for Help.)
ClientAccessName: remote.domain.com
iwmi : Invalid namespace
At C:\Users\administrator.TBCL\Downloads\Set-RDPublishedName.ps1:9 char:11
+ $return = iwmi -class "Win32_RDMSDeploymentSettings" -namespace "root\CIMV2\rdms ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidOperation: (:) [Invoke-WmiMethod], ManagementException
+ FullyQualifiedErrorId : InvokeWMIManagementException,Microsoft.PowerShell.Commands.InvokeWmiMethod

RDS 2012 Deployment guide

Hi,
I'm looking for a RDS 2012 Deployment Guide or best practices document but not finding it. Basically I'm looking for the equivalent of the document below but for Server 2012 R2 instead of 2008 R2
<won't let me add link to body yet>
We are planning a new RDS implementation and want to make sure we get the environment and resources right from the beginning. Initially I'm mainly curious about the recommendations on how many servers are needed and which roles can be combined
on single servers and which need to be broken out onto their own boxes. For example is it best to have the RD Gateway and the RD Web Access roles on their own individual servers or should/can they be combined on to one box in the DMZ?
If separate; can one of them also double as the connection broker? That sort of thing.
Any help is appreciated. Thanks

Hi Col,
Have a look at the following articles:
http://ryanmangansitblog.com/2013/09/27/rds-2012-deployment-and-configuration-guides/
I would recommend that you look at splitting the roles on a large environment or use a layer 7 load balancer so you can scale up the number of Gateway/RDweb servers if your connections grow.
I would advise against configuring the connection broker on a server which has a connection to the public interface (web and remote access via gateway). I would advise against exceeding 400 connections per RD Gateway server.
a example configuration:
Server 1 : connection broker and Licensing role
Server 2 : Session host
Server 3 : RDWeb and RD Gateway.
This may help you with regards to capacity planning:
http://ryanmangansitblog.com/2014/06/24/capacity-planning-for-a-rds-2012-pooled-2000-seat-vdi-collection/
Ryan Mangan | Ryanmangansitblog.wordpress.com | Help keep the forums tidy, if this has helped please mark it as an answer

RDS 2012 R2 - RemoteApp Disconnected

Hi RDS 2012 R2 Experts,
I would like some guidance here if possible
My setup is a follow.
1x 2012r2 with the following role, Broker, Web access, Gateway and License called RDS01
2x 2012r2 Session Host called RSH01 an RSH02
1x wildcard cert
I would like to my users to be able to either internal and external to use the same link, remote.mydomain.com since my internal domain is mydomain.local
What i have done so far.
Created a DNS Zone called remote.mydomain.com and added the following records there.
REMOTE, it points to web access server IP 192.168.1.31 ( same server for Gateway and Broker )
2x RDSFarm, one record points to RSH01 and the other to RSH02, 192.168.1.32 and 33
Gateway, the record points to 192.168.1.31 ( same servers as broker and web access)
Broker, the record points to 192.168.1.31 ( same servers as web access and gateway)
i have set the gateway manager the following
Edited the deployment RD Gateway to remote.mydomain.com
Installed the wildcert for all the roles, *.mydomain.com in all 4 roles
created Manage Local computer groups and added both RSH01 and 02, RDSFarm record, remote record, gateway record and broker record
linked the allowed resources with the policy and users ( also tried allow users to connect to any resources )
configure the gateway in the RD Gateway farm
Configured the IIS to
auto redirect
and the DefaultTSGAteway under Pages to remote.mydomain.com
Also I used the Set-PublishName (http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80) to change it to broker.mydomain.com
Now, the issue I have is, when users either internally or externally try to launch a RemoteApp they get the error.
RemoteApp Disconnected
This computer cant connect to the remote computer.
Try connecting again.
To overcome this error I did the following:
Set-PublishName to RDSFarm.mydomain.com ( it is using the round robin to get to the session host servers)
There is two problem with this setup.
I no longer can shadow the users under Connections in the broker ( it seems to be bypassed )
I get certificate mismatch due the servers names
What I would like to achieve is to fix both problems above.
Thanks for any advice in advance.
N0tl3_Bouya

Hi,
Thank you for posting in Windows Server Forum.
Initially check that you have applied external used FQDN of server under Server name in RD Gateway Deployment properties and used Bypass RD Gateway for local address.
Please try to perform the steps
• Create a new DNS zone, .COM to allow split-brain DNS (so that internal clients can resolve external names internally)
• Create a relevant DNS entry in the aforementioned zone to point to the RDS environment’s internal IP address
• Create a relevant DNS entry in external DNS to point to the firewall which is publishing RDS’s external IP address
• Use the following script to change the FQDN of the RDP files provided by RD Web Access / RemoteApp and Desktop connection feed
Change published FQDN for Server 2012 or 2012 R2 RDS Deployment
http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80
In addition, for shadow related issue you can use the server in administrative mode use mstsc /shadow command and check the result.
Detailed walkthrough on Remote Control (Shadowing), reintroduced in Windows Server 2012 R2
Hope it helps!
Thanks.
Dharmesh Solanki

RDS 2012 R2 RemoteApp Server Name Mismatch

Hi All,
I wonder if someone can scratch my head on this.
Brand new RDS 2012 R2 deployment.
RDS01 with Connection Broker and Session Host Roles installed
RDS02 with Web Access and Gateway roles installed
one ssl certificate with one domain remote.mycompany.com
the certificate have been imported to all the servers via the Edit Deployment
the local domain is mycompany.local
the problem that i am having is that when i launch RemoteApp after login in the remote.mycompany.com externally, i get Certificate mismatch, because it is contact the local name of the Session host server RDS01.
What i tried so far.
Used the Set-PublishName (http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80) without success
Try to configure RDS01 certificate via (http://ryanmangansitblog.wordpress.com/2013/03/10/configuring-rds-2012-certificates-and-sso/)
Check Any resources ( http://social.technet.microsoft.com/Forums/en-US/d1b0ebe4-9e53-47ff-8c75-43fd91ff538a/windows-2012-rds-certificate-mismatch?forum=winserverTS)
Has anybody out there could shade me some knowledge in how to rectify the mismatch name warning.
Thanks
Elton

Hi -TP,
Answering your queries.
1_the Set-RDPublishedName was successful, restarted the servers, refreshed the RDWeb page externally, tried to connect unsuccessfully.
2_I am using externally windows 8 and internally 7 fully updated
3_it had the green successful message.
After, set-rdpublishedname command, i get an erro when try to connecting saying, RemoteApp Disconnected.
Error:
Remote desktop cant connect to the computer "remote.mycompany.com"
1)Your user account is not listed in the RD Gateway Permission ( not true, it was set for domain users and my test user is under that group)
2)you might have specified the remote computer in netbios format or ip
Do you reckon i am having this problem because the RDS01 with Connection Broker and Session Host Roles installed?
Cheers
Elton

RDS 2012 R2 best design possible with wildcard certificate

Hi!
I am looking for some guidance for my RDS 2012 R2 design flaw.
What I would like to achieve?
*I would like my users either internal or external to be able to connect to RDWeb via one single webaddress ( remote.mydomain.com)
What I have in place?
1x Broker
1x WebAccess
1x Gateway (also license server)
1x SessionHost
1x Wildcard Certificate
my internal domain is mydomain.local and external is mydomain.com
I have tried ( http://msfreaks.wordpress.com/2013/12/23/windows-2012-r2-remote-desktop-services-part-2/) without success.
Any guidence here will be very helpfull.
cheers
Elton

Hi Elton
I have a similar configuration working with 2012 R2. However, my config is slightly different, namely:
2 x RDSH servers
1 x all other roles (web, gateway etc).
However, I am using a valid single URL cert on the gateway/web server, which is accessible using remote.domain.com. I did NOT replace the cert on the RDSH servers (using WMI), because you end up with 0x607authentication errors if the certificate is not fully
valid - corrrect name, trusted, and recovation information available. If you have purchased a commercial wildcard cert, this should work.
I did some testing and concluded the following, may be of interest:
If you are just using the farm for internal connections, you can use an internal CA, and create self signed certs for the gateway, and the RDSH servers. You could use individual
certificates for the servers, wildcard or SAN certificates. Then you will have no errors when connecting from internal clients. This will not work from external clients however, even if you trust your root or issuing CA manually on the external client,
because the revocation information will not be available to clients outside the domain or network, and you will get 0x607 authentication errors.
If you are connecting from outside your network, you have 3 options:
Use self signed certs created during the role installation, don't change any RDP certs on RDSH servers. Then manually place the gateway certificate in trusted root authorities on the external
client.
Purchase commercial certificates for the gateway, and optionally all of the RDSH servers. This will avoid any warnings. You could either use separate certs, wildcard or SAN. If you replace
the certificates on the RDSH servers, they must be valid and match the names.
Purchase just one certificate for the external URL for accessing the gateway, leaving the default self-signed certificates on the RDSH servers. This will mean that there is no warning
when connecting to RDWeb, but there may be warnings when the connection establishes. I use this option with one free StartSSL certificate.
To summarise, you can use either commercial or self signed for the RDWeb page. However, if you replace the certificate on the RDSH servers, this MUST be valid commercial for external clients to be able to connect. Otherwise
just leave it as self signed.
In my case, I can use remote.domain.com from either outside or inside the network. So, I configure the deployment to use the external URL, and that URL works from inside too. This is because it resolves to the external
address, so requests go out to the firewall and then back in again. This way you do not have to worry about the internal connections not using a matching URL as on the certs. Or, create an internal DNS record, so that remote.domain.com points to your internal
address of the RDweb server. This should work as well.

RDS 2012 two Gateway

I have RDS 2012 Setup with Two gateways in DNS RR and 2 Session Hosts and all woks fine
GW1 - Gateway 1
GW2 – Gateway 2
RDSH1 – Session Host 1
RDSH2 – Session Host 2
Connection Broker in HA
I need the Below to be setup
All Application hosted on RDSH1 should go via GW1 ( Gateway 1 )
And
All Application hosted on RDSH2 should go via GW2 ( Gateway 2 )

Hi,
Thank you for posting in Windows Server Forum.
Please read below for clarification.
When a user connects through the RD Gateway server, the gateway server will initially connect the user to one of the RD connection broker servers in order for the broker to determine what server or desktop the user will be connecting to. When HA is enabled
for the farm, the gateway server will try to connect the user to the brokers using the DNS Round Robin name when HA was configured for the farm. By default, the DNS name used is not on the gateway’s allowable resource list for users to connect to. So for any
user trying to connect to the farm through the RD Gateway, their access will be denied. To get around this, we will simply need to add a new resource authorization policy which will users to access resources through the gateway server using the designated
DNS round robin name.
We can do add the server\computer name under RD Gateway Managed Group. you can get ore information below.
Configuring the RD Gateway Server for a 2012 RDS farm with HA enabled for the RD Connection Brokers
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support

Listing RDS 2012 R2 collections from powershell remote fails

I'm trying to list different informations of a RDS server farm => from a remote client PC <=
I do following but when typing the last command - I get an error.
Knowing that that same command runs correctly when launched from an RDS server
enter-pssession RDS-SERVER-XYZ.contoso.net
import-module remotedesktop
get-command -module remotedesktop
Get-RDSessionCollection -ConnectionBroker RDS-BRK-1.contoso.net
=> fails with message :
Cannot index into a null array.
At C:\Windows\system32\WindowsPowerShell\v1.0\Modules\remotedesktop\Utility.psm1:54 char:9
+     if ($_script_resource[$Id])
+         ~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
    + FullyQualifiedErrorId : NullArray
Cannot index into a null array.
At C:\Windows\system32\WindowsPowerShell\v1.0\Modules\remotedesktop\Utility.psm1:54 char:9
+     if ($_script_resource[$Id])
+         ~~~~~~~~~~~~~~~~~~~~~~
     + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
     + FullyQualifiedErrorId : NullArray
Get-RDSessionCollection :
   + CategoryInfo          : NotSpecified: (:) [Write-Error], WriteErrorException
     + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Get-RDSessionCollection
Listing RDS 2012 R2 collections from powershell remote fails / same commandlet from local RDS serevr works fine
Am I missing something ?
MCTS Windows Server Virtualization, Configuration

Are the Windows Remote Management rules enabled on the inbound firewall of the RDSH server?
If you are running multiple roles on the RDSH server you may need to increase the size of the memory available for powershell remoting.
Run Set-Item WSMan:\localhost\Shell\MaxMemoryPerShellMB 1000 with powershell as an admin and reboot.
HTH,
JB

RDS 2012 RemoteApp - Passing Parameters

Windows 2012 R2, RDS 2012, Single server configuration trying to get an remote application to accept the additional parameters to run at desktops.
Here is the command line that is needed to be run:
C:\infor\facts78\pvx\pxplus.exe *plus\cs\client –arg 192.168.110.12;10000 IN4WDX
in the remote app I have entered the following:
General:
RemoteApp program location:
C:\infor\facts\pvx\pxplus.exe
Parameters:
Always use the following command-line parameters:
*plus\cs\client –arg 192.168.110.12;10000 IN4WDX
The program starts on the remote computers, but the parameters are not being passed properly. Am I missing something special to get these to pass through. I have tried putting quotes around the parameters,
but it made no difference.
The software vendor demo's the software via an rdp desktop. I was hoping to use the remote app feature instead of the virtual desktop.

Hi Benny,
Initially please confirm whether the software is compatible to use with RemoteApp. Also the provided command line seems to be little invalid, please provide with specified full location and verify. You can check the related article for information.
http://blogs.technet.com/b/infratalks/archive/2013/02/06/publishing-remoteapps-and-remote-session-in-remote-desktop-services-2012.aspx
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

RDS 2012 R2 RemoteApp from NetShare

Hello.
We have a new RDS 2012 R2 Server.
The Problem is our ERP Software has to be started from a network share. I find out that it is not possible to publish a Application with the Servermanager which is on a netShare
So i want to try it with PowerShell, but evertime i try it i get the following error message
New-RDRemoteApp -CollectionName COLL_NAME -DisplayName APPNAME -FilePath \\SERVER\APP.EXE -IconPath \\SERVER\APP.EXE
New-RemoteApp : A Remote Desktop Services deployment does not exist on RDS2012SERVER This operation can be
performed after creating a deployment. For information about creating a deployment, run "Get-Help Set-VDIDeployment" o
r "Get-Help Set-RDSHDeployment".
At line:1 char:1
+ New-RemoteApp
+ ~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Write-Error], WriteErrorException
+ FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,New-RemoteApp
Same with
get-rdremoteapp -collectionname "COLL_NAME" -connectionbroker RDS2012SERVER | Format-List
We just used a default Deployment with a Single Server.
Anyone an idea?
Thanks for the Help!

use
Import-Module remotedesktopservices
then try the commands again
also, when using -connectionbroker parameter, use FQDN for broker, not netbios name.
also ensure powershell is opened as administrator and the user you log onto the machine has admin permissions on the broker.
MCITP:SA:EA:EMA2010:VA2008R2

RDS 2012 - unable to connect to SH via webgateway

Dear all,
we have setup a RDS 2012 system following this article;
rds8-standard-3-node-remoteapp-deployment-on-windows-server-2012
It all went ok as far is I could see but Im running into the following problem.
If I use MSTSC to connect through the gateway directly things work, I get the desired SH desktop without a problem. (eg connect to SH001.domain.local using the web url for the gateway/webserver).
If I go to the external website and try to setup a connection it goes into somekind of loop. It first gives me a security warning stating it wants to connect to the connection broker, then I get a certificate error from the connection broker, which is correct
in this case, I choose to ignore the certificate warning and continue anyway. RDP then continues; Securing external connection, checking bandwith, starting the external connection. And there it hangs, it doesnt go any further and tries to connect for ever.
The external adres of the gateway is xxx.xxxx.nl and internally it xxx.xxxx.local not sure if this could be related. I noticed an article with a powershell script that would change the .local into .nl
Strange thing it worked before. I even went as far as trashing all 3 machines, removing the roles and removing them from the domain to run the install again on fresh machines with new DNS names. Still no luck.
Not sure on how to troubleshoot this any further. Eventlogs on the GW and CB show nothing special, no errors. One thing that I do notice is a recurring WMI 5605 ID - The root\cimv2\RDMS namespace is marked with the requiresEncryption flag. Access to this
namespace might be denied if the script or application does not have the appropriate authentication level. Change the authentication level to Pkt_Privacy and run the script or application again.
Thanks for any thoughts on this.
Best regards,
Louis

HI,
Can you confirm everything works internally and your problems occur when trying to access resources externally.
Firstly check the certificates and ensure you have configured self signed or trusted.
Try turning of certificate authentication for testing only - this will answer your authentication level question.
Have a look at the following post:
http://ryanmangansitblog.com/2013/03/10/configuring-rds-2012-certificates-and-sso/
It does sound like you are experencing issues with the Internal and external nameing of the gateway. There are a few ways round this. TP has written a script which will assist with the change.
http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80/file/103829/2/Set-RDPublishedName.ps1 If you have questions
around the use of this, reply in this post.
Ryan Mangan | Ryanmangansitblog.wordpress.com | Help keep the forums tidy, if this has helped please mark it as an answer

RDS 2012 The WinRM service failed to create the following SPNs: Additional Data The error received was 1355

Hi,
I have RDS 2012 session deployment in Azure with connection broker high availability.
The "Remote Desktop Management" service does not start automatically when the connection broker virtual machines are stopped and started.
I see the below error in event logs of both the connection broker VMs
Note: WHen i manually start the "Remote Desktop Management" service after this error, it all works without issues.
I get
Error ID 46 - Crash dump initialization failed!
Warning 10154 - in Microsoft-Windows-Windows Remote Management
The WinRM service failed to create the following SPNs:
Additional Data
The error received was 1355

Hi,
Thank you for posting in Windows Server Forum.
In respect to error 46, this issue may occur if the computer boots without a configured dump file. The default dump file is the pagefile. During a clean Windows OS installation, the very first boot will hit this condition as the pagefile has not been set up
yet.
To resolve this issue, you may want complete the paging file configuration.
More information:
Event ID 46 logged when you start a computer
http://support.microsoft.com/kb/2756313/EN-US
In regards to error 10154, you need to create the SPN specified in the event using the
setspn.exe utility and also need to grant the “Validated Write to Service Principal Name” permission to the NETWORK SERVICE.
For more information refer beneath articles.
Event ID 10154 — Configuration
http://technet.microsoft.com/en-us/library/dd348559(v=ws.10).aspx
Domain Controllers Warning Event ID: 10154
http://srvcore.wordpress.com/2010/01/02/domain-controllers-warning-event-id-10154/
Hope it helps!
Thanks,
Dharmesh

RDS 2012 R2 HA - CustomRdpProperty gets overwritten by sync

Similar Messages

Maybe you are looking for