Remoteapp program

I am not able to access web area access manager under remote app programs which is under remote desktop.
While accessing the web area access manager am getting the following error message
Error: The connection was denied because the user account is not authorized to remote login. Please advise
Thank you
Tanya

Hi Tanya,
Thank you for posting in Windows Server Forum.
From which device you are trying to access RemoteApp program?
For getting any remote session or accessing RemoteApp the user must be added under “Remote Desktop Users” local group. So please under user under that group and verify.
Also add the user under System>Remote Settings>Remote Tab>Allow remote connection to this computer and add the user under that. Now after performing this above steps verify whether user can login remotely.
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Similar Messages

The following remoteapp program is not in the list of authorized programs.

Hi,
Iam in a pickle at the moment.
My RDS 2012 R2 environment was working successfully previously, arrived from holiday and it is not longer working.
My setup:
**RDS01 ( Session Host and Connection Broker Roles )
**RDS02 ( Web Access, Gateway and Licencing Roles)
The Problem i am facing is, after successfully login to the RDWeb page, lunching the remoteapp i get the following:
1st Get Certificate mismatch ( name in the certificate RDS02.mycompany.local is not trusted )
2nd Hit YES and the following message "Windows cannot start the RemoteApp program. The following RemoteApp program is not in the list of authorized programs: WinWord"
It happens whether i do connect externally.
Internally the SSO does not work ( i did check my certificate and it is installed )
If i run the script Set-RDPublishedName and change it from remote.mycompany.com to RDS01.mycompany.local
1st Certificate name mismatch ( requrested pc RDS01, name in the certficate remote.mycompany.com )
2nd Hit Yes and the app works
It happens whether i do connect internally or externally.
Any help will be very appreciated.
cheers
Elton

Hi Elton,
It sounds like the DNS lookup is resolving to the wrong ip address. When the RD Gateway (RDS02) looks up remote.yourcompany.com to connect to your broker/RDSH it should resolve to the ip address of RDS01, but it appears it is resolving to RDS02 instead.
I recommend you use Set-RDPublishedName to change the name back to what is was before (remote.yourcompany.com) and verify that your DNS settings are correct. For example, if you log on to RDS02 and try to ping remote.yourcompany.com it should try to
ping the internal ip address of RDS01, since that is your connection broker.
-TP

Error when starting remoteapp program - "the following is not in your list of authorised programms:"

have 2 rd web servers set up using an nlb cluster
3 rd sesison host servers - dns round robin
session broker (installed on dc)
web single sign on is in place using cert generated internally on standalone ca
I have added several programs to list on all session host servers and allows "domain users" access to them.
regardless of the account that logs on I get the error "the following remoteapp program is not in the list of authorized programs: WordPad
I have tried various things but I am sure the setup is correct.. any ideas?

Hello,
Based on my experience on similar issues, this error may be caused by missing Host Records of the TS servers on the local DNS.
To fix this issue, please add the Host Records of the Terminal Servers into the local DNS and test it again.
Let us know the result if possible. Thanks.
Best Regards,
Lionel Chen

RDS 2008R2 : RemoteApp Program - Remote Desktop

Hello,
I'm able to use all of my RemoteApp programs when I'm connected through the RDS site on my internal network.
When I connect externally, all published applications work fine that I installed on the server. On the RD Session Host server tab on the Gateway I have 'Show a remote desktop connection to this RD Session Host server in RD Web Access' checked.
I also have it checked on the Web Access servers. The Remote Desktop (Published Desktop) of the Web Access servers works fine internally, but I error out when accessing it remotely.
When I click the icon to launch (while connected remotely) I see the internal farm name and the external name of the gateway is not present. I'll press connect and get an error: Remote Desktop can't find the computer "my farm name" This might
mean that "my farm name" does not belong to the specific network. Verify the computer name and domain that you are registering to connect to.
How do I get this remote app to use my SSL connection and RD Gateway and not try to resolve the name locally on my externally connected machine?
I found this post, it solved the problem of using the Remote Access tab on my RDweb site, but I'm trying to fix the RemoteApp.
http://www.concurrency.com/blog/remote-desktop-cant-find-the-computer-through-rdweb-and-gateway/
Thanks

Hi,
Thank you for posting in Windows Server Forum.
What version of OS & RDP client you are using for your environment?
Please recheck that you have configured RD RAP & RD CAP policy. Also as you are facing some SSL certificate issue, I can say that SSL certificate must be signed by trusted certificate authority. Please check below articles for more information.
1. RDWeb: can access internally but cannot access externally
2. RDS: RD Gateway must be configured to use an SSL certificate signed by a trusted certification authority
In addition, I will suggest you to update RDP client to RDP 8.1.
Update for RemoteApp and Desktop Connections feature is available for Windows
Hope it helps!
Thanks,
Dharmesh

Renaming RDP file in RemoteApp Programs

Hello,
I would like to rename the Remote Desktop connection in RDS Web Access > RemoteApp Programs site. I would just like to change it to say something other than, "Remote Desktop". I added the Remote Desktop icon through the RemoteApp Deployment
Settings by clicking "Show a remote desktop connection to this RD Session Host server in RD Web Access".
I have tried looking into the default.aspx to see if the RDP file name is defined there, but no luck. Its strange, because when I am on the Web Access site and I view the HTML source of the site, I see where the RDP file is named, but when I open default.aspx
for editing I do not see the RDP file name there. I am guessing the RDP file name is in a webpart, but I can't seem to locate that webpart on my server.
So does anyone know if it is possible to rename that icon and how I would go about doing it?
Please let me know if you need any more clarification.
Thanks!

Maybe I'm an idiot, but why in the world would Microsoft not provide some other way of naming a Remote desktop access connection in Web Access other than hacking the registry or as even more strangely suggested (if your not comfortable with touching the registry)
use WMI? What planet does Microsoft live on? Do you really think users are more apt to use WMI (an unknowable interface) rather than a registry hack? Even more, if there is the ability to name RemoteApps anything you damn well please, why is there no
way to differentiate the multitude of possible Remote Desktop connections in the Web Access interface just as simply? Really, what planet does Microsoft live on? It seems every time someone at Microsoft opens their mouths, they make complete fools of themselves.
Please give someone, anyone, a reasonable explanation of how the ability to discreetly name Remote Desktop access connections in Remote Web Access was over looked so stupidly.

MS TS RemoteApp Programs Command-line Parameters (%temp% or %appdata%)

Hello,
We are trying to get an in house Application published to the TS RemoteApp Programs. We are using a logon script that places the a cmd file in the users %temp% or %adddata%. We are using this so that there is no file locks that occur.
Then we wish to use the command-line parameter "Always use the following command-line parameters" as Local -t -c "%temp%\file.fp". However this is not successful. I have eliminated the %temp% with the temp directory path and the application
runs correctly.
It looks like to me that the environmental variable is not loading. Is there something that I can do for this to get this running?

Hi,
Thanks for posting in Windows Server Forum.
As this thread has been quiet for a while, we assume that the issue has been resolved. At this time, we will mark it as ‘Answered’ as the previous steps should be helpful for many similar scenarios. If the issue still persists, please feel free to
reply this post directly so we will be notified to follow it up.
BTW, we’d love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems.
Thanks for your Support & understanding.
Regards.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Not all RemoteApp Programs are showing in RD Web

Do you have any idea why some of the RemoteApp programs are not showing (missing 2 or 3 icons) on RD Web when you select RD Connection Broker as your source? But I'm able to view all of them when I select 'One or more RemoteApp sources' and put the RD
Session Host server in the RD Web configuration. I have more than 20 applications published in RD Session Host server.

Never mind. I figured it out. Those missing programs have long alias name. I trimmed down the alias by renaming the file and I'm now able to view them all. Not sure why it behaves that way with RD Connection Broker. Any idea what is the maximum allowable
character for 'alias'?

How to get RemoteApp program list in win2008 R2?

Hi,everyone:
How can i get RemoteApp program list by code? Thanks a lot.

ok, I'v found. we can get application list by WMI class(Win32_TSPublishedApplication).
http://msdn.microsoft.com/en-us/library/bb736365(v=vs.85).aspx

RemoteApp program not asking for credentials.

Hey everyone.
I'm building a demonstration for RemoteApp functionality and I have a problem.
When I open the Microsoft RemoteApp program, it automatically logs in to an account. I'm not really sure what account it is, but I have no applications in it. When I opened the program on my personal laptop, it worked and asked me for credentials. What I
want to know is, could I have unknowingly configured Single Sign-On and now it's automatically logging in to some account? Where can I disable it so I can enter the credentials I want?
There's nothing in the RemoteApp event logs and in my GPO definitions all the "Credential Delegation" definitions are "Not Configured".
Also, it doesn't seem to login at all, since the program is opened and in the window title it only says "Microsoft RemoteApp" - not "Microsoft RemoteApp - [email protected]" like in my personal computer after logging in.
What could I be missing?
Thanks in advance.

Hi,
1. Are you able to click Sign out on the toolbar, and then click
Get Started to bring up the credential prompt? In rare cases I have seen a connectivity problem cause the issue you are seeing whereby the client is open, but no user logged on and the icon area is blank.
2. If the above does not correct the problem please uninstall Microsoft RemoteApp from Programs and Features, and then download/install it again and test.
3. What operating system version are you running on the client PC?
Thanks.
-TP

Win Srv 2008 R2 DC interfering with Win Srv 2012 R2 RDS RemoteApp functionality during program opening by any user

I have a small LAN with a Win 2008 R2 SRV as DC, File Server and App Server for QuickBooks and QB POS, and a VMware 5.1 host that has three utility servers running on it. One of these three is a Win 2012 R2 SRV config'd with these RDS roles (RD Session Host,
RD Connection Broker, RD Web Access, RD Licensing and RD Gateway) installed as a single server solution, simply because we're only servicing a few users. RDS roles were installed and configured before installing the MS Office 2013 and QuickBooks apps. I created a
simple Collection and setup the RemoteApps for access.
Initially I had only installed the RD Session Host, Connection Broker and Web Access. Installed the Apps, restricted access to only the RemoteApps and tested their ability to open via an internal connection from within the LAN in browser, minus the SSL errors
and .local address everything worked fine when a user authenticated. I installed the Licensing component and activated it and the internal LAN connectivity continued to function. I then installed my single SSL cert and configured it for use in each requiring
RDS role, opened port 443 thru my firewall to the RDS server and then began testing connectivity from external browser, at this point I initially encountered rights errors with my RDP users group, they were being denied logon access, it seemed
the Win 2008 R2 DC is mixed in the middle of the auth cycle of course so I straightened out that problem via GPO. I then again attempted to login via external source and now could login and obtain access to the RDS Web Access page showing my RemoteApps
BUT now when I click on an App to open it as either a user or Admin it attempts to Auth the process thru the Win 2008 R2 DC instead of directly to where the App is run from on the 2012 RDS server and gives me this error...
RemoteApp Error: Windows cannot start the RemoteApp program. The following RemoteApp program is not in the list of authorized programs:
Further details can be added to this but has anyone encountered this problem with a similar setup?
Thanks
NeoPaladine

Yes, but thanks for bouncing all of the ideas.
I saw that I was receiving Event Error 201 each time a failed RemoteApp load would occur, followed the trail for that and found the following that fixed it!
http://blogs.technet.com/b/networking/archive/2010/01/14/remote-desktop-gateway-client-fails-authentication-with-your-user-account-is-not-authorized-to-access-the-rd-gateway.aspx
Specifically this step:
Solution 1
Register the NPS server in Active Directory:
In Server Manager, browse to the following location:
Roles\Network Policy and Access Services\NPS (Local).
Right click on the NPS (Local) node and choose Register server in Active Directory.
Click OK to authorize the server when prompted.
Once I registered as above the RemoteApp's loaded perfectly both internally and externally when requested.
Thanks for leading me in the right direction!
Brent
NeoPaladine

How to deploy a Desktop Access 2010 app via Azure and RemoteApp?

I currently sell an Access 2010 app that uses the 2010 Access Runtime for deployment on desktop PCs. I very much would like to make it available over the internet on PC/Mac/iPad using the Azure RemoteApp, if possible. The Access app has a number of supporting
files- it’s not just an Access accdb or accde file. For it to work correctly all the supporting files need to be in folders related to the main accde/accdb fie. Those files are a few other accde files, csv, pdf, and some folders.
Each of my clients (a company) may have 1-15 simultaneous users. On the Desktop Access version, I have a Front End accde installed on each workstation and a single Back End accdb data file installed on a shared drive. Each FE workstation is linked to the
single BE data file. I would need to replicate this somehow on an Azure VM (like perhaps have a designated folder for the BE data file that each user account’s FE is linked to?).
I created an Azure VM (server 2012 R2) and installed the Access Desktop App on it. I can access that full VM with RDP (and see the whole desktop, not just my Access app). What I’m trying to figure out is a way to do this with RemoteApp- can RemoteApp use
my Access 2010 app as an available ‘app’ or does the user need to see the whole VM desktop?
As well, in my Azure portal the ‘RemoteApp’ option is grayed out ‘pending approval’ so I can’t test it.
Any help figuring this out would be great. Thanks-

N8827N
I ended up a great solution for this. I'm using 3 Windows Server 2012 R2 VMs to run it as a RemoteApp program. It's set up sort of like this:
VM 1: RD Broker
VM 2: Active Directory (where Users/Groups are created)
VM 3: AppServer (where the Access app is actually located and run on- the VM2/Active Directory 'talks' to the AppServer to create/validate users but all the action happens on VM3).
RemoteApp requires Windows Server 2012 so I don't think it'll work with Server 2008. The great thing about RemoteApp is it opens the Access 2010 Front End in a unique window, all on its own. The user doesn't need to see the Desktop of the server- they just
see the Access Navigation Form(s).
In brief, on the VM3/AppServer I have a unique folder for the backend Access data file and a User Account (created in the VM2 Active Directory) for each user with the frontend Access file in C/Users/Username/AppData.
RemoteApp- when the user logs in via the RemoteApp app- points to that specific user profile's frontend Access db in that location and opens it in its own window on their host computer. And since each FE is linked to a common BE data file everyone uses the
same data, just like in a regular LAN Server FE/BE setup.
It required some changes in the Access app to deal with it- uploading images and files, emailing straight from the app, etc but it was worth it. I also had to pay a development company to set up the 2012 R2 Servers, as I didn't know the details of how to
do that myself. But I'm managing the setup, ongoing, and it's not so hard to do.
So now my customers can run the Access app on a PC, Mac, or iPad pretty much anywhere. Excellent way to extend an Access application..

Using remote desktop web access (RDWEB) with remoteapps and a traditional remote desktop

I configured windows 2012 r2 remote desktop services and remote desktop web access (rdweb) and was able to click the icon on the rdweb page to log on to a remote desktop session. When I published a remoteapp program, the remote desktop icon went away. How
do I get it back? Do I need to publish remote desktop as a remoteapp so users can both use remote apps and log on to a traditional remote desktop session?
thanks in advance for the help

Hi,
You can just publish RDC as RemoteApp and then can connect to the desired remote desktop connection. You can check the below snap.
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

RemoteApp 2012 and File Type Associations

Hi, All :),
the scenario is like this - 2 x Server 2012: one as the RD Connection Broker and RD Web Access and one as the RD Session Host (clients are Windows 7). ALMOST everything works: there is one collection, several applications, all successfully thrown into
the RemoteApp and Desktop Collections by GPO (Powershell script - http://gallery.technet.microsoft.com/ScriptCenter/313a95b3-a698-4bb0-9ed6-d89a47eacc72/).
But one thing doesn't work - file type associations. Well, I want the client without, for example, Office installed to open the RemoteApp application (Excel) by clicking on the XLSX file. When looking at the application properties -> File Type Associations
-> Current Associations column, I see the name of the collection, which includes Excel ... but it does not work. After updating the RemoteApp and Desktop Connections on the client, the RDP file with Excel noticed a new line:
remoteapplicationfileextensions: s:. csv,. xls,. xlsx,. xltx
How do I make it work? I know that in RemoteApp on Server 2008R2 you could export the MSI file that took care of File Type Associations, but what to do in case of Server 2012?

Unfortunately, the feature to install file type associations for RemoteApp programs in your GPO-pushed RemoteApp and Desktop Collection is only supported on Windows 8 clients. Several improvement were made over the old MSI-based file type associations, and
those improvements rely upon changes in the Windows 8 OS.
Ultimately file type associations are controlled with registry keys, all of which are documented on MSDN. RemoteApp programs are pretty much the same as any other local program, except the file type is associated with mstsc.exe with some special parameters.
Although the way we register those file type associations in Windows 8 won't work for you, the way the old MSIs used to register them would. You could in theory register the RemoteApp file type associations yourself in the same way that one of the old MSIs
would have done (you could use some sort of GPO-pushed script on the clients).
The easiest way to do this would be to track down one of those old MSIs, install it, and do a before-and-after view of the registry to see what changes it makes.
Hope that helps,
Travis Howe | RDS Blog: http://blogs.msdn.com/rds/default.aspx

RDS and Gateway issues: Cannot get remoteapps to run without opening port 3389 on firewall

I am testing the setup of a small RDweb server to host QuickBooks for some remote sales users (4 users). For the most part, I have everything installed on one virtual server (using 2012r2 "Quick Start" session host deployment with the additional
Licensing and Gateway server roles added to the same server).
Everything works excellent with one exception. External clients cannot launch published apps without having port 3389 open on the firewall, even with the gateway role installed and the 'Deployment Properties' set to use the gateway. They can properly connect
to the RDweb site and view the published apps. The only way it works is open the firewall port (at which time I can disable the gateway or leave it configured and it works either way). Internally, everything works accordingly. I have followed the steps outlined
on many sites and have combed though the forum here to no avail.
Error received (summarized but is a well documented error):
remote desktop can't connect to the remote computer: 1- Your user account is not listed (it actually is) or 2- You might have specified the remote computer in NetBios format . . etc.
This is an existing SBS 2011 environment with additional virtual servers setup to host QuickBooks as outlined below:
Current setup:
Used Quick Start to install Remote Desktop Services in hosted sessions mode
Installed the additional roles for Licensing and Gateway server on same server
Configured wild card public certificates on all four services (Connection Broker(2), Web Access and Gateway)
Configured internal DNS to properly lookup our external FQDN of this server (ex. quickbooks.contoso.com points to quickbooks.contoso.local
One thing I noticed (just now) when I launch a published app and the firewall has port 3389 closed, a dialog box pops up directly after launching the app that warns about running a RemoteApp program and mentions the Remote Computer and the Gateway Server
as both the same (which it is); however, I would have assumed one would have listed the internal server's name while, instead, both are listed as the external FQDN. Either way, internal DNS should still allow it to properly route . . no? I don't know . . I'm
sure I am just missing something in a routing configurations somewhere. The gateway service is not properly looking up the RDweb service and then seeming not routing the encapsulated RDP session through HTTPS. . .. is my guess . .
I was reading about the "set published name" commandlet; however, I am not experiencing a certificate name mismatch; however, the certificate name does show up as *.contoso.com versus the actual name. I may just be grasping as straws now . . :)

Ok, while I was in the server and looking over the BPA scans: "The Remote Desktop Gateway (RD Gateway) server Secure Sockets Layer (SSL) certificate may not have a valid certificate subject name." This may be due to it showing up as *.companyname.com
versus quickbooks.companyname.com. Anyhow. .. on to the list of actions above:
Changed RD RAP from "Select Active Directory" group to "Allow any network resource" and tested with port 3389 closed on firewall:
Worked. Initially it did not as I had used a custom shortcut created from earlier; however, after logging into the RDweb site again, the application loaded fine now (after the RD RAP change)
No error message appeared; however, I did notice that for a split second, the word Error did appear in the browser's tab title, but only very shortly. The app launch does take a bit longer too now (about 10-15 seconds, up from about 4 seconds with the port
open). This, I could care less about so long as we are properly forwarding the traffic through the gateway.
As for log entries, I had spend quite a bit of time in there and only had minor issues with loading user profile setting taking too long and policy settings preventing the redirection of USB devices. Looking again, no issues still. Just a bunch of informational
entries where I would connect before (and disconnect) but only with the port on the firewall open; otherwise, there was not an entry corrolating to when I would receive an error before. Now though, I am connecting after the RD RAP change and logs are showing
connections even with the port closed. These are in "operational", the "admin" log only shows the update to the RD RAP configuration.
Yes, the LAN's DNS server does relay the lookup information for my public FQDN as the local LAN address. No need for a local host record.
I have now added a new rule in our firewall to allow and forward UDP port 3391 traffic to the internal server hosting remote services
Thank you very much for your assistance on this matter. The RD RAP rule was default built during the creation of this services. Why is the resource not cross-referencing AD security groups? I could have sworn I created a group for that . . .

RemoteApp Disconnected - Server 2012 R2

I have a single 2012 R2 Standard server setup with all the RDS roles (RD Gateway, Broker, Session Host, Licensing, etc). I am able to publish apps and connect just fine only if the clients have the following setting: Local Policies > Security Options
> Network security: LAN Manager authentication level - SEND NTLM response only. The default for windows clients is "Send LM & NTLM - use NTLMv2 sessions security if negotiated". In the past, I have just applied this setting to all the clients
via GPO. However, this server will have primarily external users that are not a part of this domain. What setting(s) can I changed on the RDS server to prevent me from having to make any changes on the client's computers?

Hi,
Thank you for posting in Windows Server Forum.
Firstly please check that you have configures RD Gateway setting properly. You need to configure RD RAP and RD CAP properties. After creating the RD RAP, add the user groups that you defined in the RD CAP. Also, create a new RD Gateway-managed computer group
that contains both the NetBIOS names and the fully qualified domain names (FQDNs) of the RD Session Host servers or the RD Session Host server farm that hosts the RemoteApp programs.
As you are using RD Gateway, you need to open TCP port 443 and UDP port 3391 and forward them to your RD Gateway server. Because when external client launches RemoteApp they will connect to RD Gateway via above port, then RD Gateway connect to your internal
RDSH server using TCP and UCP port 3389.
Please check below articles for reference.
Checklist: Make RemoteApp Programs Available from the Internet
http://technet.microsoft.com/en-us/library/cc772415.aspx
In addition also suggest you to update client RDP version to RDP 8.1 for better feature and accessibility.
Hope it helps!
Thanks.
Dharmesh Solanki

Remoteapp program

Similar Messages

Maybe you are looking for