Remote Event Viwer from Server 2012 R2 - Access Denied.

Dear Techpros,
Good Day,
I am having an issue while trying to view the event viewer of remote machines. Every remote snap-ins is working except the event viewer. I am using a Domain Administrator account and it is in the local admin group of the machine
Maybe there is a service to start or a local security policy to enable ?
I am stuck and cant find a solution to it. Grateful if you could help me find a solution to it.

Hi,
For this problem, it would be better to use Process Monitor to capture its process to find the reason of this problem.
Process Monitor:
http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx
In addition, have you tried to use other account to remote this system for test?
Roger Lu
TechNet Community Support

Similar Messages

  • RDP via remote web workspace from Server 2012 R2 Essentials on Win 8 Client unable to connect to local printer.

    Hi,
    Having an issue redirecting to a local printer when using a remote desktop session initiated through from a Essentials 2012 R2 server via remote web workspace on a Win 8.1 client, it doesn't pick up the Local printer, or even give the option of which
    local resources to use on connection, just goes straight through and displays the remote desktop on connection.
    I know its not a server global policy issue as it works fine on a Win 7 client with the same user being able to print locally whilst in a RD session
    Any idea's as to how I can resolve this issue and enable local redirected printing or at least give me the options of specifiying which resources to connect on the local machine at the start of a session.
    It's complicated I think as the essentials box is acting as the gateway so I cannot setup a session directly, the certificates are all working correctly so I am confused as to whats causing the issue.
    Any help would be appreciated.

    Hi,
    Thank you for posting in Windows Server Forum.
    Please try to connect the printer with IP address and check the result. You can go through beneath article might helpful in your case.
    Windows Server 2012 Essentials : Add a Network Printer
    Try to change the selected print drivers:
    1.  Return back to the Devices and Printers window
    2.  Double click on your printer, and then double click on Customize your printer
    3.  Click on the Advanced tab, and change the print driver to the one we just installed.
    4.  If you wish, you can also click on the Sharing tab, and make the printer available.
    More information.
    Installing Network Printer to Windows Server 2012 Essentials
    Hope it helps!
    Thanks,
    Dharmesh

  • NW 6.5.8 CIFS access from Server 2012 R2 (domain auth)

    Need to access (without installing client) NW 6.5.8 server from Server 2012 R2.
    Up to Server 2008 R2 Domain authentication works perfectly fine, on 2012 R2 I managed to get it working a couple of times, never again. Reverting to eDir authentication with SMB Signature disabled works (can access shares fine)
    Is that known issue? (not that I would expect any fix for an obsolete OS)
    Seb

    spgsitsupport,
    It appears that in the past few days you have not received a response to your
    posting. That concerns us, and has triggered this automated reply.
    Has your problem been resolved? If not, you might try one of the following options:
    - Visit http://www.novell.com/support and search the knowledgebase and/or check all
    the other self support options and support programs available.
    - You could also try posting your message again. Make sure it is posted in the
    correct newsgroup. (http://forums.novell.com)
    Be sure to read the forum FAQ about what to expect in the way of responses:
    http://forums.novell.com/faq.php
    If this is a reply to a duplicate posting, please ignore and accept our apologies
    and rest assured we will issue a stern reprimand to our posting bot.
    Good luck!
    Your Novell Forums Team
    http://forums.novell.com

  • Server 2012 X64 R2 DNS Server keeps shutting down after inplace upgrade from Server 2012 X64

    Hi,
    ever since upgrading from Server 2012 X64 to Server 2012 R2 X64 my dns server keeps shutting down every several minutes before having to do a restart.  When viewing the event log this is all I see..
    The DNS Server service terminated unexpectedly.  It has done this 497 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
    if I look in the Application Error Log,  I will also find the following:
    Faulting application name: dns.exe, version: 6.3.9600.17031, time stamp: 0x530871fb
    Faulting module name: dns.exe, version: 6.3.9600.17031, time stamp: 0x530871fb
    Exception code: 0xc0000005
    Fault offset: 0x000000000010b0e0
    Faulting process id: 0x1740
    Faulting application start time: 0x01cf531b2e3a7f5e
    Faulting application path: C:\Windows\system32\dns.exe
    Faulting module path: C:\Windows\system32\dns.exe
    Report Id: 90a4ab37-bf0e-11e3-9446-003048df3f03
    Faulting package full name:
    Faulting package-relative application ID:
    I have tried removing and then reinstalling the DNS Server role, but the same situation occurs..
    thanks,

    Hi,
    I'm going crazy,  I've upgraded my Server 2012 Standard to Server 2012 R2 Standard and now my DNS server keeps crashing since the in place upgrade.  I have finally narrowed it down to it only crashes after several minutes if I load the data from
    a file instead of the registry.  As a test I:
    -1- killed all my dns data,
    -2- uninstalled the dns server role
    -3- deleted the /windows/system32/dns directory
    -4- reinstalled the DNS server role
    -5- used the wizard to create a DNS server and a forward zone.
    everything works okay, no crashes,  then I change the advanced propertied of the DNS server to load from file, restart the DNS server and once again it crashes every 2 minutes..
    Please help,  this is killing me..
    thanks in advance..

  • Windows Server 2012 - Direct Access clients and the Windows 8 firewall

    Hi,
    We're running a simple proof-of-concept for Server 2012 Direct Access, we have a single DA server behind a firewall using NAT. We have a number of client devices setup for DA and running Windows 8.
    Our issue is that we can only get the Windows 8 direct access clients to connect (when outside the corporate network) and work with the windows firewall disabled (public network profile). 
    With the windows firewall disabled everything works exactly as expected. When outside the corporate network the client detects the network state (public network profile), connects via DA and all internal resources can be accessed successfully...fantastic.
    Is there some specific guidance on manually configuring the windows 8 firewall for Direct Access ? We've tried the obvious TCP:443 with edge traversal enabled but without success.
    Much of the information we have found relates to UAG rather than Windows 2012 DA.
    Any assistance is appreciated.

    Hi,
    There isn’t any specific configuration on the firewall.
    Just confirm that port 443 can be forwarded to DirectAccess server.
    Of course, make sure you are using IPsec first.
    Check the links:
    STEP 6: Test DirectAccess Client Connectivity from Behind a NAT Device
    http://technet.microsoft.com/en-us/library/hh831524.aspx#TeredoCLIENT1
    DirectAccess for Windows Server 2012 Installation & Configuration Guide
    http://syscomlab.blog.com/2012/09/directaccess-for-windows-server-2012-guide/
    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Can't download files on Android from Server 2012 Essentials Remote Web Access

    I have two servers, one with Windows Server 2012 Essentials, and the other SBS 2011.  Employees like using Remote Web Access to log in from anywhere and have access to shared folders.  It works perfect on a Desktop computer, but when they try to
    use their Android tablets or phones, and want to download a file (e.g. a PDF) from one of the shared folders on the server, the download fails.   When Microsoft was pushing 2012 they said RWA worked great on mobile devices, do I have to set up something
    separately to make this happen?
    I've completely disabled the firewall, and have ports 80,443,987, and 1723(just to be safe) all forwarded to the server.
    I can log into the RWA site on the android, browse files and folders, but when I select a PDF to download, the download shows as if it's starting, shows in my android notification as if its going to start downloading (Shows MobileDownload www.mydomain.com)
    but eventually after a few minutes, will time out and show "Download Unsuccessful".
    Network connectivity is fine as I can do this on a Windows Desktop PC using any browser (Chrome, Firefox, IE) and successfully download anything I want.
    UPDATE:  I found this in the event handler when I tried to download something from a mobile device...
    - System
    - Provider
    [ Name] ASP.NET 4.0.30319.0
    - EventID 1309
    [ Qualifiers] 32768
    Level 3
    Task 3
    Keywords 0x80000000000000
    - TimeCreated
    [ SystemTime] 2014-01-12T16:49:12.000000000Z
    EventRecordID 72818
    Channel Application
    Computer MYSERVER.MYDOMAIN.local
    Security
    - EventData
    3005
    An unhandled exception has occurred.
    1/12/2014 11:49:12 AM
    1/12/2014 4:49:12 PM
    953eedf1ad414391a193e5f98a281da5
    263
    3
    0
    /LM/W3SVC/1/ROOT/Remote-1-130340167702975633
    Full
    /Remote
    C:\Program Files\Windows Server\Bin\WebApps\RemoteAccess\
    MYSERVER
    2592
    w3wp.exe
    NT AUTHORITY\NETWORK SERVICE
    HttpException
    Server cannot set content type after HTTP headers have been sent. at System.Web.HttpResponse.set_ContentType(String value) at System.Web.UI.Page.SetIntrinsics(HttpContext context, Boolean allowAsync) at System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context) at System.Web.UI.Page.ProcessRequest(HttpContext context) at Microsoft.WindowsServerSolutions.Web.RemoteAccessSite.RealPageHandler.ProcessRequest(HttpContext context) at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
    https://remote.MYDOMAIN.com:443/Remote/fs/MobileDownload.aspx?path=\\MYSERVER\PICTURES\2013603.jpg
    /Remote/fs/MobileDownload.aspx
    MY.IP.ADDRESS.141
    MYDOMAIN\user
    True
    Forms
    NT AUTHORITY\NETWORK SERVICE
    31
    NT AUTHORITY\NETWORK SERVICE
    False
    at System.Web.HttpResponse.set_ContentType(String value) at System.Web.UI.Page.SetIntrinsics(HttpContext context, Boolean allowAsync) at System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context) at System.Web.UI.Page.ProcessRequest(HttpContext context) at Microsoft.WindowsServerSolutions.Web.RemoteAccessSite.RealPageHandler.ProcessRequest(HttpContext context) at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

    Hi,
    Before going further, would you please let me confirm something firstly?
    Would you please let me know if all Android devices
    encounter this same issue? If you download different type files, will still this issue persists? You can upload a small file (such as a text file) to the share folder, then check if Android device can’t download it.
    Based on your description, when logon a desktop computer, you will download files via RWA successfully. Please use the user account which logon computer to logon
    the Android device, will still fail to download?
    Please check if there has enough free space in Android devices that be used to save download.
    When this issue occurred, please check the state of Android device in Dashboard. Besides, I suggest you should run the Best Practices Analyzer (BPA) and fix all
    it can find. Then monitor the result.
    Run the Windows Server 2012 Essentials Best Practices Analyzer
    http://technet.microsoft.com/en-us/library/jj200181.aspx
    In addition, regarding to the Event ID 1309, please refer to the following articles.
    Event ID: 1309 Source: ASP.NET 4.0.30319.0
    http://www.eventid.net/display-eventid-1309-source-ASP.NET%204.0.30319.0-eventno-11022-phase-1.htm
    Hope this helps.
    Best regards,
    Justin Gu

  • Web Access for Remote Desktop on Windows Server 2012

    Hello,
    i've a Windows Server 2012 without a domain. So i installed the remote desktop session host, the remote desktop license server and the remote desktop gateway as a server role only. All is working fine. Without a domain, no management tools for remote
    desktop are available. So i configure the remote desktop via the registry. I define (via registry) some remoteapps, too. All values are copied from a running Windows Server 2008 R2. So the remoteapps are runing.
    Now i want to use the new Microsoft Remote Desktop client for Android. To use a remoteapp i must define a remote resource. To define a remote resource i need a url to the web access for remote desktop. So i installed the web access. But if i login to the
    web access, i don't see any remoteapp. What's wrong? I've set the ShowInTSWA to 1. What must i do to access an existing remoteapp via web access?
    Martin

    Hi Martin,
    Server 2012 RD Web Access is designed to retrieve published RemoteApps and Desktops from a Server 2012 RD Connection Broker and/or a Server 2008 R2 RD Session Host server.  From your description it doesn't appear that you are using either of the above.
    I know it is a more complicated set up, but you should consider having a domain, creating a RDS deployment, etc., so that you can use the full featureset as it was intended.  You can do it all on a single server if needed.  For Server 2012
    there is a hotfix that needs to be applied to permit RD Connection Broker to work on the same server instance as active directory.
    -TP

  • Lost window, using published application on server 2012, when access it via web remote.

    Hi,
    We use an edi software installed on a Server 2012.
    When we use this software accessing the server by Remote Desktop, everything works normal.
    When we use the same software accessing the server by web access, (...softname/RDWeb/Feed/webfeed.aspx) where was published this soft application, we lost some windows after different actions.
    For example if I do a modification for a value in one specific window, after I click save, that window disappear but can appear again only if I click again anywhere on my desktop.
    In other words that window lost the focus and probably is still open under another window. Clicking again anywhere, will reactivate it and that window appear again.
    Can you please help me to find a solution to this problem?
    Thank You!

    Hi,
    For example if I do a modification for a value in one specific window, after I click save, that window disappear but can appear again only if I click again anywhere on my desktop.
    Would you please tell us which window and what has been modified specifically?
    Best Regards,
    Amy
    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • Server 2012 R2 - "Access is denied." error

    so this has been happening ever since i've installed Windows updates on our accounting server(windows server 2012 r2), and upgraded the RAM on the VM server(all these Server 2012 R2's are hosted on a VMware 5.5, client & server) . Sometimes, when trying
    to log in as an Active Directory user via RDP, i'll get an "Access is denied" error. This occurs for 3 different users, all of whom are domain admins. When this done happen, I'm only able to log in as the local machine administrator. Our AD server
    is also a 2012 R2.
    Some things to note:
    1) I can ping to the AD server, and ping from AD to the accounting server in question- all traffic is allowed over a VPN connection, and no traffic is being blocked by the firewall. Windows Firewall is turned off completely for both servers. Tracert finds
    both servers in 3 hops, but times out on the 2nd hop. also, the preferred DNS server for the accounting is the IP address for the primary domain controller.
    2) The time is the same on both the AD and accounting servers(at least when logged in as a local admin on the accounting server). Most of the most recent Windows updates are installed on both.
    3) I've tried removing the accounting server from the domain, and adding it back to the domain, and removing the accounting computer object in AD- the computer object was never added back after rejoining the domain, automatically or manually.
    3) I can't run a gpupdate on this accounting server. It returns this error:
    Computer policy could not be updated successfully. The following errors were encountered:
    Windows was unable to determine whether new Group Policy settings defined by a network administrator should be enforced for this user or computer because this computer's clock is not synchronized with the clock of one of the domain controllers for the domain. Because of this issue, this computer system may not be in compliance with the network administrator's requirements, and users of this system may not be able to use some functionality on the network. Windows will periodically attempt to retry this operation, and it is possible that either this system or the domain controller will correct the time settings without intervention by an administrator, so the problem will be corrected.
    If this issue persists for more than an hour, checking the local system's clock settings to ensure they are accurate and are synchronized with the clocks on the network's domain controllers is one way to resolve this problem. A network administrator may be required to resolve the issue if correcting the local time settings does not address the problem. User Policy could not be updated successfully. The following errors were encountered:
    The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windowswill automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful. To diagnose thefailure, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.so this has been happening ever since i've installed Windows
    updates on our accounting server(windows server 2012 r2), and upgraded
    the RAM on the VM server(all these Server 2012 R2's are hosted on a
    VMware 5.5, client & server) . Sometimes, when trying to log in as
    an Active Directory user via RDP, i'll get an "Access is denied" error.
    This occurs for 3 different users, all of whom are domain admins. When
    this done happen, I'm only able to log in as the local machine
    administrator. Our AD server is also a 2012 R2.
    Some things to note:
    1) I can ping to the AD server, and ping from AD to the accounting
    server in question- all traffic is allowed over a VPN connection, and no
    traffic is being blocked by the firewall. Windows Firewall is turned
    off completely for both servers. Tracert finds both servers in 3 hops,
    but times out on the 2nd hop. also, the preferred DNS server for the
    accounting is the IP address for the primary domain controller.
    2) The time is the same on both the AD and accounting servers(at
    least when logged in as a local admin on the accounting server). Most of
    the most recent Windows updates are installed on both.
    3) I've tried removing the accounting server from the domain, and
    adding it back to the domain, and removing the accounting computer
    object in AD- the computer object was never added back after rejoining
    the domain, automatically or manually.
    3) I can't run a gpupdate on this accounting server. It returns this error:
    Computer policy could not be updated successfully. The following errors were encountered:
    Windows was unable to determine whether new Group Policy settings defined by a network administrator should be enforced for this user or computer because this computer's clock is not synchronized with the clock of one of the domain controllers for the domain. Because of this issue, this computer system may not be in compliance with the network administrator's requirements, and users of this system may not be able to use some functionality on the network. Windows will periodically attempt to retry this operation, and it is possible that either this system or the domain controller will correct the time settings without intervention by an administrator, so the problem will be corrected.
    If this issue persists for more than an hour, checking the local system's clock settings to ensure they are accurate and are synchronized with the clocks on the network's domain controllers is one way to resolve this problem. A network administrator may be required to resolve the issue if correcting the local time settings does not address the problem. User Policy could not be updated successfully. The following errors were encountered:
    The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windowswill automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful. To diagnose thefailure, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.
    so GPResults.html shows this(domain and AD user hidden just in case):
    DOMAIN\ADuser on ACCOUNTING2
    Data collected on: 12/16/2014 1:02:44 PM show all
    Summaryhide
      During last computer policy refresh on 12/16/2014 12:56:05 PM
       A fast link was detected More information...
      During last user policy refresh on 12/16/2014 12:56:05 PM
       A fast link was detected More information...
    Computer Detailshide
    Generalhide
    Computer name ACCOUNTING2
    Domain Local
    Site (None)
    Security Group Membership hide
    Mandatory Label\System Mandatory Level
    Everyone
    BUILTIN\Users
    NT AUTHORITY\SERVICE
    CONSOLE LOGON
    NT AUTHORITY\Authenticated Users
    NT AUTHORITY\This Organization
    NT SERVICE\BITS
    NT SERVICE\CertPropSvc
    NT SERVICE\DsmSvc
    NT SERVICE\Eaphost
    NT SERVICE\hkmsvc
    NT SERVICE\IKEEXT
    NT SERVICE\iphlpsvc
    NT SERVICE\LanmanServer
    NT SERVICE\MMCSS
    NT SERVICE\MSiSCSI
    NT SERVICE\NcaSvc
    NT SERVICE\RasAuto
    NT SERVICE\RasMan
    NT SERVICE\RemoteAccess
    NT SERVICE\Schedule
    NT SERVICE\SCPolicySvc
    NT SERVICE\SENS
    NT SERVICE\SessionEnv
    NT SERVICE\SharedAccess
    NT SERVICE\ShellHWDetection
    NT SERVICE\wercplsupport
    NT SERVICE\Winmgmt
    NT SERVICE\wuauserv
    LOCAL
    BUILTIN\Administrators
    Component Statushide
    Component Name Status Time Taken Last Process Time Event Log
    Group Policy Infrastructure Success   12/16/2014 12:56:05 PM   
    Registry Success   12/12/2014 8:05:55 AM   
    Security Success   12/12/2014 8:06:01 AM   
    Settingshide
    No settings defined.
    Group Policy Objectshide
    Applied GPOshide
    Denied GPOshide
    Local Group Policy [LocalGPO]show
    Link Location Local
    Extensions Configured   
    Enforced No
    Disabled None
    Security Filters   
    Revision AD (0), SYSVOL (0)
    WMI Filter   
    Reason Denied Empty
    WMI Filtershide
    Name Value Reference GPO(s)
    None
    User Detailshide
    Generalhide
    User name DOMAIN\ADuser
    Domain domainname.local
    Security Group Membership show
    DOMAINNAME\Domain Users
    Everyone
    BUILTIN\Users
    BUILTIN\Administrators
    NT AUTHORITY\REMOTE INTERACTIVE LOGON
    NT AUTHORITY\INTERACTIVE
    NT AUTHORITY\Authenticated Users
    NT AUTHORITY\This Organization
    LOCAL
    DOMAINNAME\Backup Admins
    DOMAINNAME\Scans FTP Users
    DOMAINNAME\Scans FTP Admin
    DOMAINNAME\Domain Admins
    Authentication authority asserted identity
    DOMAINNAME\Denied RODC Password Replication Group
    Mandatory Label\High Mandatory Level
    Component Statushide
    Component Name Status Time Taken Last Process Time Event Log
    Group Policy Infrastructure Success   12/16/2014 12:56:05 PM   
    Settingshide
    No settings defined.
    Group Policy Objectshide
    Applied GPOshide
    Denied GPOshide
    Local Group Policy [LocalGPO]hide
    Link Location Local
    Extensions Configured   
    Enforced No
    Disabled None
    Security Filters   
    Revision AD (0), SYSVOL (0)
    WMI Filter   
    Reason Denied Empty
    WMI Filtershide
    Name Value Reference GPO(s)
    None
    Also, in the accounting server, i get multiple Microsoft-Windows-Security-Kerberos (codes 4 & 5)
    and
    Microsoft-Windows-GroupPolicy (codes 1030 & 1126) in the All
    Servers > Events page. Where can i find the "Details" tab for the
    error code and description?
    any help would be greatly appreciated. thanks!

    So I believe that I've fixed the time issue, but it still sometimes kicks off users on this accounting server, and gpupdate doesn't work. I have 2 domain controllers, and it seems that when this server queries the secondary domain controller(which was "screwed
    up", i was told by the previous IT guy who set this environment up), i get the Event ID 1030[GroupPolicy (Microsoft-Windows-GroupPolicy)] error and error # 4(Security-Kerberos) after the gpupdate fails.
    and Vivian, i do have a problem with AD replication. i cannot replicate the secondary DC with the primary DC. i get several event id 4 codes on the secondary DC.
    when i try to force a replication via AD Sites & Services > Sites... Servers > NTDS Settings of primary DC > Right-click > Replicate Now, i get the error:
    "The follow error occured during the attempt to contact the Domain Controller DCPRIMARYNAME(actual domain name hidden for privacy): The target principal name is incorrect."
    which is interesting, because i've seen this "target principal name is incorrect" error in several event viewer error codes in different Servers(all 2012 R2).

  • Server 2012 Direct Access Single NIC cant get it to work

    Hi,
    I am having some real issues with setting up Direct Access with Server 2012 and a Windows 8 client, it simply won’t work at all.
    First of all I should describe my setup:
    I have an internet connection with a static IPv4 address on the external network adapter of the router
    The internal network address (the address of the router which has the internet connection) is 192.168.1.1
    Server1 (windows 2008 R2 Standard) has a static IPv4 address 192.168.1.2 and has some ports forwarded from the router (443, 25, 80) this server is a domain controller, email server, and has the DNS, DHCP and
    certificate services
    Server 2 (Windows 2008 R2 standard) has static IPv4 address 192.168.1.3 it has no ports forwarded from the router as it has no services accessed externally, it is used as a file server and print server, backup
    domain controller and backup DNS.
    Server 3 (Windows 2012) has static IPv4 address 192.168.1.4 and has the Remote Access server role installed along with all the other default features and roles it requires in the setup process.
    These servers have all got an IPv6 address which I assume the server has configured automatically, there has been no deliberate configurations made to disable IPv6
    I have no UAG or proxy server or anything else to route packets to internal servers. Just this router which has the option for port forwarding (I assume that’s NAT isn’t it?) sorry don’t know much about that
    area.
    I go through the setup wizard in remote access to configure direct access, in the external URL I have entered da.mydomain.com and created a host A record in my external domain name providers DNS which points
    the da record to my external IP address. The wizard creates all the GPO’s, scoped correctly, and applied to a Windows 8 client. The operational status shows its all working and I got green ticks. However, when I connect the client to the internal network it
    doesn’t seem to have correctly got the DA settings. I run the following in powershell
    Get-DnsClientNrptPolicy
    Nothing displays – at all
    Get-NCSIPolicyConfiguration
    Description                   
    : NCSI Configuration
    CorporateDNSProbeHostAddress  
    : fdd8:dd4a:ea42:7777::7f00:1
    CorporateDNSProbeHostName     
    : directaccess-corpConnectivityHost.mydomain.local
    CorporateSitePrefixList       
    : {fdd8:dd4a:ea42:1::/64, fdd8:dd4a:ea42:7777::/96, fdd8:dd4a:ea42:1000::1/128,
    fdd8:dd4a:ea42:1000::2/128}
    CorporateWebsiteProbeURL      
    : http://directaccess-WebProbeHost.mydomain.local
    DomainLocationDeterminationURL : https://DirectAccess-NLS.mydomain.local:62000/insideoutside
    Get-DAConnectionStatus
    Get-DAConnectionStatus : Network Connectivity Assistant service is stopped or not responding.
    At line:1 char:1
    + Get-DAConnectionStatus
    + ~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo         
    : NotSpecified: (MSFT_DAConnectionStatus:root/StandardCi...onnectionStatus) [Get-DAConnect
       ionStatus], CimException
    + FullyQualifiedErrorId : Windows System Error 1753,Get-DAConnectionStatus
    I go into services.msc and find that the network connectivity assistant is not started, it wont start either something must trigger it but I have no idea how to get it triggered to start… this might be my only
    source of problem perhaps but on a more network level question:
    If I have such ports as 80, and 443 (which I assume DA uses in some form with a public IPv4 internet address) directed at server 1, how does the DA connection get to server 3 which has the DA role installed?
    I could create another record on the server which also opens port 443 to server as well as for server 1, but then how would the router know which server to pass the DA connection to if the same port is open for two different servers?
    Either way, this first issue is that the client doesn’t seem to have the ability to connect internally correctly yet, so maybe this connectivity service is a good place to start? My understanding is that the
    networks icon in the system tray should show that there is a corporate connection, but it doesn’t. also, the client seems to have the NLS certificate in the computer certificate store, so the cert side of things is working and the GPO side is working.
    Many thanks
    Steve

    ahh i see, so just to enlighten me even further...
    If a company has two web servers that would mean they would need two different public facing IP addresses so they can route to each internal web server. If, like the big companies have, they
    may have many web servers (possibly more than 100) I’m assuming that simply buying more public IP addresses would have a limit, especially since the IPv4 address space is pretty much exhausted. So is this where proxy systems come into play like ISA and Forefront,
    is this what they do?
    I assume if such a product was implemented you could go down to just one or two public IP addresses, point all traffic to the ISA server and that in turn would do all the routing of packets
    to each server behind the NAT/router (probably based on some sort of domain name or sub domain namespace as it’s parameter for forwarding?)
    Secondly, what I have done is installed windows server 2012 and used that as a direct access client (I read on another forum that the windows 8 RP doesn’t have the enterprise bits to make this
    work). I have got much further with the 2012 server acting as a client (installed on laptop, installed desktop experience and wireless LAN), 
    but when I run the following command on my DA client I get the following status
    Get-DAConnectionStatus
    Status:                 
    connectedlocally
    Substatus:          
    none
    This appears to work fine, when im connected to the local network. But then I disconnect and run the command again and I get the following:
    Status:                 
    Error
    Substatus:          
    NameResolutionFailure
    On my router what I did is temporarily disable port 443 going to my original server and instead opened it up pointing to my other server, so 443 traffic should be going to my DA server now, but I don’t understand why its giving the name resolution failure
    status. I have a host A record called “da” with my domain hoster, and entered the full domain namespace in the DA wizard as da.mydomain.com (the Host A record has been up there for more than a week so it’s propagated through the net)
    So, a bit further but stuck again.

  • RemoteApp and Desktop Connections from server 2012 std

    Hi
    i am trying to deploy the RemoteApp and Desktop Connections to my win 7 from my app server (server 2012)
    and i am getting all the time this error
    what cert i have to add and where ???
    (on the server iis i have tried to add 2 cert but no success)\
    thanks

    Hi,
    Please import the RD Web Access server certificate to your clients and see how it works.
    Event ID 1012 — RemoteApp and Desktop Connection Configuration
    http://technet.microsoft.com/en-us/library/ee891358(v=ws.10).aspx
    Hope this helps.
    Jeremy Wu
    TechNet Community Support

  • Getting Client Name in Remote Desktop Manager for Server 2012 R2

    Remote Desktop Manager appears to have been replaced or moved in Server 2012 to Server Manager. It doesn't really matter to me where this is located, however I don't seem to have all of the features that were in Remote Desktop Manager (2008 R2). The biggest
    one that I need is to be able to tell what computer each RDS user is logged in from. We use this quite often so we can remote into that users computer for troubleshooting. 
    Does anybody know how to obtain this information in Server 2012 R2? If it's not possible in Server Manager, can it be done with Powershell? A 3rd party application? 
    So far the only way I have been able to do this is if there is still a 2008 R2 server on the network. I can log into it and use Remote Desktop Manager to connect to the 2012 R2 server. Since a 2008 server can still obtain this information for a 2012 server
    there must be a way to achieve this. 
    Thanks in advance! 
    Tom

    Hi Tom,
    In addition, the PSTerminalServices PowerShell Module might help.
    https://psterminalservices.codeplex.com/releases/view/65937
    You can run Get-TSSession in PowerShell.
    Thanks.
    Jeremy Wu
    TechNet Community Support

  • Unable to uninstall or remove ADFS Service Proxy and Web Agents from Server 2012

    I have a Server 2012 machine that's a primary host for company websites. An inexperienced developer (with FAR more access than he should've had; yes, epic fail) was able to install ADFS Service Proxy and ADFS 1.1 Web Agents (for SAML) on the server. He didn't
    complete the configuration, realizing he'd over stepped his boundaries. He did install the rollup update 3 to ADFS though. However, now I'm unable to uninstall the components. It's not listed in the updates and the option to remove from Roles/Features is grayed
    out.
    Any help would be awesome!

    Hi,
    Thank you for your sharing!
    Your post is very beneficial to other people who have similar issues.
    Please feel free to let us know if you encounter any issues in the future.
    In addition, here is a dedicated ADFS forum below:
    Claims based access platform (CBA), code-named Geneva Forum
    http://social.msdn.microsoft.com/Forums/vstudio/en-US/home?forum=Geneva
    Best Regards,
    Amy

  • How to allow more than two users on remote desktop on windows server 2012 foundation?

    i have a dell server power edge T300 with windows server 2012 foundation. I am unable to connect more than two remote desktop at once.

    Hi,
    Add to Brain, you cannot have more than 15 user accounts in Windows Server 2012 Foundation.
    In order to access a hosted application, such as Microsoft® Office, a license for Windows Server 2012 Remote Desktop Services is required for each user account (not to exceed 15 user
    accounts) that directly or indirectly uses RD Gateway to host a graphical user interface, including using Remote Desktop Connection (RDC) client. When using Remote Desktop Services, you may not install or use Remote Desktop Connection Broker or Remote
    Desktop Virtualization Host role services. For more information about Remote Desktop CALs , see http://go.microsoft.com/fwlink/?LinkId=140238.
    http://technet.microsoft.com/en-us/library/jj679892.aspx
    Hope this helps.
    Jeremy Wu
    TechNet Community Support

  • Trouble connecting to RAS from Server 2012

    http://devlibrary.businessobjects.com/businessobjectsxi/en/en/RAS_SDK/rassdk_net_doc/doc/rassdk_net_doc/html/BindingScenarios16.htmlHello
    Hello All,
    I have been migrating a web application from Server 2003 to Server 2012.  The only part that does not seem to work correctly is the Crystal Reports.  I have Crystal Reports 10.  When I try to create a session and pull down a report, the web application crashes and does not give me an error.  I have tried stepping through the debugger and looking at the event logs and I am not gleaning any useful information.  Oddly enough when I pull a report from our RAS and put it on the new web server and make a web form that loads it from locally (embedded) it works, but point it to RAS and it crashes every time.  The code that pulled from RAS worked just fine on our 2003 server.  The original developer appears to have used the code at above link to load reports from RAS.
    Is connecting to RAS supported in Crystal 10, IIS 8, and Sever 2012?
    Is there a special permission that needs to be set up on the RAS server or in the Server 2012 web server?
    Is there any reason I should change the code or anything else I need to install on the Server 2012 web server beyond installing Crystal 10?
    Any tips for fixing or troubleshooting this?  I am getting close to scrapping the RAS server though I really don't want to do that.

    Hi Robert,
    Crystal Reports 10 and it's SDK packaging is NOT supported on Windows 2012. OS is new, CR 10 is about 5 years old and had no concept of that OS.
    The link is simply to the SDK help file so not clear on what BOE Server you are using either.
    There are upgrade paths to follow but need more info...
    Also, I moved your post to the .NET Forums.
    Don

Maybe you are looking for