Server 2008 R2 RDS HA Licensing configuration best practices

Hello
What is the best practice for setting up and HA licensing environment for RDS? I'm using a mixture of RDS CALs for my internal/AD users and External Connector license for my external/Internet users.
Daddio

Hi,
To ensure high availability you want to have a fallback License Server in your environment. The recommended method to configure Terminal Service
Licensing servers for high availability is to install at least two Terminal Services Licensing servers in Enterprise Mode with available Terminal Services CALs. Each server will then advertise in Active Directory as enterprise license servers with regard to
the following Lightweight Directory Access Protocol (LDAP) path: //CN=TS-Enterprise-License-Server,CN=site name,CN=sites,CN=configuration-container.
To get more details on how to setup your License Server environment for redundancy and fallback, go over the "Configuring License Servers for High Availability"
section in the Windows Server 2003 Terminal Server Licensing whitepaper
Regards,
Dollar Wang
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support,
contact [email protected]
Technology changes life……

Similar Messages

RAID Level Configuration Best Practices

Hi Guys ,
We are building new Virtual environment for SQL Server and have to define RAID level configuration for SQL Server setup.
Please share your thoughts for RAID configuration for SQL data, log , temppdb, Backup files .
Files RAID Level
SQL Data File -->
SQL Log Files-->
Tempdb Data-->
Tempdb log-->
Backup files--> .
Any other configuration best practices are more then welcome .
Like Memory Setting at OS level , LUN Settings.
Best practices to configure SQL Server in Hyper-V with clustering.
Thank you
Please Mark As Answer if it is helpful. \\Aim To Inspire Rather to Teach A.Shah

Hi,
If you can shed some bucks you should go for RAID 10 for all files. Also as a best practice keeping database log and data files on different physical drive would give optimum performance. Tempdb can be placed with data file or on a different drive as per
usage. Its always good to use dedicated drive for tempdb
For memory setting.Please refer
This link for setting max server memory
You should monitor SQL server memory usage using below counters taken from
this Link
SQLServer:Buffer Manager--Buffer Cache hit ratio(BCHR): IIf your BCHR is high 90 to 100 Then it points to fact that You don't have memory pressure. Keep in mind that suppose somebody runs a query which request large amount of pages in that
case momentarily BCHR might come down to 60 or 70 may be less but that does not means it is a memory pressure it means your query requires large memory and will take it. After that query completes you will see BCHR risiing again
SQLServer:Buffer Manager--Page Life Expectancy(PLE): PLE shows for how long page remain in buffer pool. The longer it stays the better it is. Its common misconception to take 300 as a baseline for PLE. But it is not,I read it from
Jonathan Kehayias book( troubleshooting SQL Server) that this value was baseline when SQL Server was of 2000 version and max RAM one could see was from 4-6 G. Now with 200G or RAM coming into picture this value is not correct. He also gave the formula( tentative)
how to calculate it. Take the base counter value of 300 presented by most resources, and then determine a multiple of this value based on the configured buffer cache size, which is the 'max server memory' sp_ configure option in SQL Server, divided by 4 GB.
So, for a server with 32 GB allocated to the buffer pool, the PLE value should be at least (32/4)*300 = 2400. So far this has done good to me so I would recommend you to use it.
SQLServer:Buffer Manager--CheckpointPages/sec: Checkpoint pages /sec counter is important to know about memory pressure because if buffer cache is low then lots of new pages needs to be brought into and flushed out from buffer pool,
due to load checkpoint's work will increase and will start flushing out dirty pages very frequently. If this counter is high then your SQL Server buffer pool is not able to cope up with requests coming and we need to increase it by increasing buffer pool memory
or by increasing physical RAM and then making adequate changes in Buffer pool size. Technically this value should be low if you are looking at line graph in perfmon this value should always touch base for stable system.
SQLServer:Buffer Manager--Freepages: This value should not be less you always want to see high value for it.
SQLServer:Memory Manager--Memory Grants Pending: If you see memory grants pending in buffer pool your server is facing SQL Server memory crunch and increasing memory would be a good idea. For memory grants please read this article:
http://blogs.msdn.com/b/sqlqueryprocessing/archive/2010/02/16/understanding-sql-server-memory-grant.aspx
SQLServer:memory Manager--Target Server Memory: This is amount of memory SQL Server is trying to acquire.
SQLServer:memory Manager--Total Server memory This is current memory SQL Server has acquired.
For other settings I would like you to discuss with vendor. Storage questions IMO should be directed to Vendor.
Below would surely be a good read
SAN storage best practice For SQL Server
SQLCAT best practice for SQL Server storage
Please mark this reply as answer if it solved your issue or vote as helpful if it helped so that other forum members can benefit from it.
My TechNet Wiki Articles

GPP Delete policy not working on Windows Server 2008 R2 RDS when deleting shared printers with status access denied.

Hi!
I Have one AD Security group for each shared printer, I have one GPP that map the printer if the user is in the security group that belong to the printer. And one GPP to delete the printer if the user is NOT member of the security group. The security group
is also applied in “Security” tab on the printsrv with PRINT rights and “everyone” is removed. This works 100 % on Windows 7 clients and Windows 2003 Terminal Servers. But on Windows 2008 R2 RDS this dont work.The Delete Policy will not delete the shared
printer. No warning in any logs, and the gpresult shows that the gpo setting applyed sucessfully. The only way I can make the Delete policy work is if i give the user print rights on the printer on the printsrv. Looks like for the policy to work on 2008
R2 the user must have print rights on the printer object on the printserver. The GPP Delete Policy will not delete printers that have status : access denied. Anyone else had this problem?

Hi,
Based on your description, it seems that we need to give users appropriate permissions, for the error
Access is denied is more or less related to permissions.
However, we can avoid deploying the GPP printer delete policy. As far as I know, we can use Item-Lvel Targeting of GPP to push the shared printers
to the targeted users or groups.
Regarding ILT, the following articles can be referred to for more information.
Preference Item-Level Targeting
http://technet.microsoft.com/en-us/library/cc733022.aspx
Security Group Targeting
http://technet.microsoft.com/en-us/library/cc772471.aspx
Best regards,
Frank Shen

DNS Configured-Best Practice on Snow Leopard Server?

How many of you configure and run DNS on your Snow Leopard server as a best practice, even if that server is not the primary DNS server on the network, and you are not using Open Directory? Is configuring DNS a best practice if your server has a FQDN name? Does it run better?
I had an Apple engineer once tell me (this is back in the Tiger Server days) that the servers just run better when DNS is configured correctly, even if all you are doing is file sharing. Is there some truth to that?
I'd like to hear from you either way, whether you're an advocate for configuring DNS in such an environment, or if you're not.
Thanks.

Ok, local DNS services (unicast DNS) are typically straightforward to set up, very useful to have, and can be necessary for various modern network services, so I'm unsure why this is even particularly an open question. Which leads me to wonder what other factors might be under consideration here; of what I'm missing.
The Bonjour mDNS stuff is certainly very nice, too. But not everything around supports Bonjour, unfortunately.
As for being authoritative, the self-hosted out-of-the-box DNS server is authoritative for its own zone. That's how DNS works for this stuff.
And as for querying other DNS servers from that local DNS server (or, if you decide to reconfigure it and deploy and start using DNS services on your LAN), then that's how DNS servers work.
And yes, the caching of DNS responses both within the DNS clients and within the local DNS server is typical. This also means that there is need no references to ISP or other DNS servers on your LAN for frequent translations; no other caching servers and no other forwarding servers are required.

Server 2008 R2 Failover cluster network configuration

Hi
We have a customer with a Server 2008 R2 Hyper-V failover cluster. They have 2 cluster networks, "Cluster Network 1" and "Cluster Network 2".
"Cluster Network 1": NIC team on 172.16.1.0/24 for private cluster network communication
"Cluster Network 2": NIC team on 192.168.1.0/24 for production network communication
I can see that "Cluster Network 1" is configured to "Allow cluster network communication on this network" and "Allow clients to connect through this network".
If "Cluster Network 1" is ONLY for communication between the to cluster nodes then I assume the selection in "Allow clients to connect through this network" should be removed?
/Lasse

It will cause a lost network connection for any client that is accessing through that network. Those clients would need to reconnect.
Did you configure both IPs on the cluster resource name that clients are accessing? If you only configured the one you want, there should be no issue. If you configured both, then it is possible some clients might be connected via the private
network.
Another thing you should, and if you have already done this you will most likely not have issues at all, is that you should disable DNS registration on any network you do not want client access coming through. If the clients can only find the resource
through the DNS name registered, that is the way they will be coming in. In my clusters, which often have 7 or more NICs, there is only one with a published DNS record.
. : | : . : | : . tim

Server 2008 R2 standard guest license with Server 2008 R2 datacenter Host

Hello Experts,
I have Windows Server 2008 R2 Datacenter edition based server. Now I want to know that do I have to buy license to activate the guest OS in the VMs like for Server 2008 R2 standard edition, or I can use it for free like in the case of AVMA in server 2012 R2 as it has keys for essentials standard and datacenter edition of server 2012 that can be used with AVMA in order to activate the guest OS license for Free..
Thanks
This topic first appeared in the Spiceworks Community

Hello Experts,
I have Windows Server 2008 R2 Datacenter edition based server. Now I want to know that do I have to buy license to activate the guest OS in the VMs like for Server 2008 R2 standard edition, or I can use it for free like in the case of AVMA in server 2012 R2 as it has keys for essentials standard and datacenter edition of server 2012 that can be used with AVMA in order to activate the guest OS license for Free..
Thanks
This topic first appeared in the Spiceworks Community

Printer redirection using Server 2008 R2 RDS

Hi
I have a server 2008 R2 (not a domain controller) running as a remote desktop session host with 2 remote XP SP3 client PCs connecting to it. Up until Friday last week these client PCs could successfully print via the redirected printer using the RD Easy
Print Driver. As from this week though all printing has ceased! No updates have been installed on either server or clients in the interim. When I try to send a test print from the server (logged on using RD 7 for XP) it tells me that the test print has failed,
do I want to run the troubleshooter? If I say yes then the troubleshooter fails with an unexpected error, the details of which include error code 0x80070057. If i try to print from the server using notepad I get the error "the parameter is incorrect". If I
print from wordpad the document appears briefly in the queue but nothing prints. If I manually add a printer (using specific printer driver - not easy print driver) and choose the correct redirected port and then print using this printer, the print job appears
briefly in the queue and then disappears - nothing appears in the print queue on the client PC and nothing prints. Initially printing like this caused the client TsWpfWrp.exe to fail but upgrading the version of TsWpfWrp.exe stopped this problem. I have tried
updating to .net 4.0 on the client PC, upgrading from RD 6.1 to 7.0, XP SP2 to SP3 all to no avail.
Does anyone know the solution to this problem? I am at a complete loss as to the way forward. I have checked all group policies and set all the correct permissions on the spool and PRINTERS folder in system32 on the server and nothing seems to help.
Thanks for your help!

Hi,
Please try to check the following items.
1.
Remove the Remote desktop easy print from Print Management console.
2.
Remove the complete package.
3.
Then install the Remote desktop easy print driver again.
Please also check if the
fenableRDR key still exists in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd.
Technology changes life……

IP over Infiniband network configuration best practices

Hi EEC Team,
A question I've been asked a few times, do we have any best practices or ideas on how best to implement the IPoIB network?
Should it be Class B or C?
Also, what are your thoughts in regards to the netmask, if we use /24 it doesn't give us the ability to visually separate two different racks (ie Exalogic / Exadata), whereas netmask /23, we can do something like:
Exalogic : 192.168.*10*.0
Exadata : 192.168.*11*.0
While still being on the same subnet.
Your thoughts?
Gavin

I think it depends on a couple of factors, such as the following:
a) How many racks will be connected together on the same IPoIB fabric
b) What rack configuration do you have today, and do you foresee any expansion in the future - it is possible that you will move from a purely physical environment to a virtual environment, and you should consider the number of virtual hosts and their IP requirements when choosing a subnet mask.
Class C (/24) with 256 IP values is a good start. However, you may want to choose a mask of length 23 or even 22 to ensure that you have enough IPs for running the required number of WLS, OHS, Coherence Server instances on two or more compute nodes assigned to a department for running its application.
In general, when setting a net mask, it is always important that you consider such growth projections and possibilities.
By the way, in my view, Exalogic and Exadata need not be in the same IP subnet, especially if you want to separate application traffic from database traffic. Of course, they can be separated by VLANs too.
Hope this helps.
Thanks
Guru

RDM Configuration (Best Practices...)

Folks, when attaching multiple RDM's on a VM, would you add one RDM per vSCSI adapter, or would you add multiple RDM's to the same vSCSi adapter?
Also, when creating the RDM would you keep it with the virtual machine, or store it on a seperate datastore (RDM pointers)?
Just looking for some best practices.

Stuarty1874 wrote:
Folks, when attaching multiple RDM's on a VM, would you add one RDM per vSCSI adapter, or would you add multiple RDM's to the same vSCSi adapter?
multiple
Also, when creating the RDM would you keep it with the virtual machine, or store it on a seperate datastore (RDM pointers)?
Keep it the same
Just looking for some best practices.
Also you might find this good
http://pubs.vmware.com/vsphere-50/topic/com.vmware.ICbase/PDF/vsphere-esxi-vcenter-server-50-storage-guide.pdf
start with p135

SRST Configuration - Best Practices

We are starting a new Unified Communication deployment and will have an SRST at each remote location. I am wondering if there are any best practices in regards to the configuration of the SRST.
For example Does it matter what interface is specific for the source address. I have seen some that say it needs to be the LAN address and others say it needs to be a Loopback address. Since the phones themselves will be attached to a VLAN on a switch that is connected to the router is there a benefit either way? Are there any considerations not really covered in the base configuration that need to be considered as a best practice?
I am sure I will have more questions as we progress so thanks for the patience in advance...
Brent

Hi Brent,
The loopback is used because it is an interface that remains up regardless of the physical layer, so provided that appropriate routing is in place, the lo address will be reachable through the physical interfaces.
Best practices on the top of my mind should include looking at the release notes for the software version you're using, check network requirements and compatibility matrix, interworking, caveats, and reserve time for testing.
I'm sure you'll be just fine
hth

Project Server / Project Pro = Cut and Paste official best practices to avoid corruption

It is pretty common knowledge among Project Server veterans that Cut and Paste between Project Pro files can cause corruption with the assignment table. This leads to Publish and Reporting (Project Publish)
failures. I just went through an upgrade from Project Server 2007 to 2013 and a LOT of files had to be rebuilt from scratch.
I ask my users to not Cut and Paste within or between project files. They do not always listen.
I have looked and cannot find official Microsoft text on the subject or at least some sort of official best practices doc. It would help me prevent some corruption if I had a doc with a Microsoft logo that says “It is not recommended….”
Or “If you do this you will make your admin cry…”
If this doc is right in front of me and I just missed it I apologize in advance.
Thanks

John --
To the best of my knowledge, there is no such Best Practice document from Microsoft. Based on my experience with Project Server from Project Central through Project Server 2013, following are some items that can cause corruption in your project:
Use of special characters in the name of the project.
Cutting/copying/pasting entire task rows within a single enterprise project or between multiple enterprise projects.
Opening an enterprise project on your laptop while connected to a wireless network, then closing the laptop lid, walking to another room in the building when you pass from one wireless access point to another, and then opening the laptop lid again.
I learned this from one of our former clients.
Beyond this, there are some other items that will not corrupt your project, but which will cause problems with saving or publishing a project. These items include:
Using blank rows in the project.
Using special characters in task names.
Task names that start with a space character (this sometimes happens when copying and pasting from an Excel workbook).
In both Project Server 2010 and 2013, the recommended method for resolving a corrupted project is to use the Save for Sharing feature. Refer to my directions in the following thread on how to use the Save for Sharing feature:
http://social.technet.microsoft.com/Forums/projectserver/en-US/ec2c5135-f997-40e1-8fe1-80466f86d373/task-default-changing?forum=projectprofessional2010general
Beyond what guidance I have provided, I am hoping other members of this community will add their thoughts as well. Hope this helps.
Dale A. Howard [MVP]

Licensing Server 2008 R2 RDS with SPLA licenses?

I haven't used SPLA for doing any RDS licenses and am having trouble finding info on where to get the licenses.
Where do I get licenses from? I can't find any info on the SPLA site or on the Microsoft Volume Licensing Service Center site.
Thanks!

Hi,
Please contact Microsoft Volume Licensing Centers to get professional and accurate response, you can find corresponding phone number for your region here:
Microsoft Volume Licensing Activation Centers Worldwide Telephone Numbers
http://www.microsoft.com/licensing/existing-customers/activation-centers.aspx
In addition, here is a related blog below for you:
Licensing How To: When do I need a Client Access License (CAL)?
http://blogs.technet.com/b/volume-licensing/archive/2014/03/10/licensing-how-to-when-do-i-need-a-client-access-license-cal.aspx
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Event ID's 4005, 50 and 56 on Server 2008 R2 RDS

My event log's are being hammered with Event 4005 The Windows logon process has unexpectedly terminated,
Event 50 The Terminal Server security layer detected an error in the protocol stream and has disconnected the client
and Event 56 The RDP protocol component <component> detected an error in the protocol stream and has disconnected the client.
I have followed the suggestions in
http://technet.microsoft.com/en-us/library/cc734097(v=ws.10).aspx and searched on this without finding a solution to make the events go away.
I also tried following this suggestion to remove two Windows Updates (even though I have Win 2008 Standard R2 and not SBS)
http://social.technet.microsoft.com/Forums/en-US/dd7157b8-8ecc-4a13-88ad-f4ca0d3b3249/error-the-windows-logon-process-has-unexpectedly-terminated?forum=smallbusinessserver
I have cross referenced the dates & times of these events with a login audit file I keep and hoping to find a pattern related to specific users but no luck.
Before I open a paid support ticket, I just want to find out if there is any common thread to these Event ID's.
Can these be caused by:
1) an RDP worm/malware?
2) Macintosh RDP clients?
3) Disconnected session being logged off after 2 hrs by policy?

Hi,
The error which you are facing, might occurs due to some network related issue or some RDP\disconnection related issue. You can try to configure TCP offload chimney, disable RSS Disable NetDMA for Eevent ID 50 & 56. For Event ID 4005, as you have provided
the link for article. Did you check whether registry is corrupted? Windows logon service is running.
Please check below article for more information:
1. How
to troubleshoot “The Terminal Server security layer detected an error in the protocol stream and has disconnected the client. Client IP:” and “The RDP protocol component X.224 detected an error in the protocol stream and has disconnected the client”err
2. How to resolve the issue “Remote Desktop Disconnected” or
“Unable to Connect to Remote Desktop (Terminal Server)”
Hope it helps!
Thanks,
Dharmesh

Deploying Applications with SCCM 2012 R2 to Server 2008 R2 RDS servers

I'm having some trouble finding some concrete information from Microsoft regarding the deployment of applications to RDS servers using SCCM 2012 R2. There seems to be a lot of conjecture, old information and old wives tales floating around and I was hoping
I could get some information confirmed!
1. MSI installs automatically switch to install mode on RDS servers?
I've seen this mentioned a few times. I've also seen it mentioned that it is only true when running the MSI from the console session manually (i.e clicking the MSI file) not running as SYSTEM as SCCM would usually do. Can someone confirm if they do this
themselves or not?
2. Users still logged in when deploying applications?
Is it possible to deploy an application while users are still logged in? Is this only related to going into 'install' mode and taking the chance that a user will do something that will cause issues? Or is it known to cause issues?
I guess those are the main ones, I'm experienced in SCCM but not with deploying to RDS servers, I cant seem to find any straight answers!
Anyway, thanks in advance!

I've never had large enough RDS environment to use SCCM for app push, but from my experience in managing 2012/R2 RDS and local installs, I never bother with switching to install mode anymore and it works fine. Now if you're skeptical, you can
easily build this into a script that runs as a pre-req to your .MSI as part of the software package in SCCM so it's not a big deal.
As for installing apps while users are logged in, shouldn't be a problem if you're installing a new app., if however you're updating an existing application or uninstalling it, then it may be best to drain that RDS host first of all user sessions then do
the work just to be safe. this also helps avoid reboots.

WLC Configuration Best practices - no updates since 2008?

There has been no updates to this doc for almost 4 years.
http://www.cisco.com/en/US/partner/tech/tk722/tk809/technologies_tech_note09186a0080810880.shtml
That's a long time for wireless, especially since it still references release 5.2, and we now it's 7.0. Plus quite a few new AP families have been announced, 802.11n, Cleanair, etc. I think this document is overdue for an update. Has there not been any lessons learned since 2008? Can anyone from Cisco comment on this?

Guys:
I agree with you. many docs are old, pretty old.
You can use the Feedback button at the bottom of the doc page and send your feedback to Cisco.
Most of the time they will reply you and you can discuss your opinion about that doc is very old.
I've done this with more than one doc and config examples that describes the config by providing images for version 3.x. They updated some of the docs to reflect later releases (6.x and 7.x).
They have no problem with updating the docs, they have a good team to work on the docs to create and update. Just you be positive and hit that "Feedback" button and tell them and they'll surely help. (if not please tell me. I have a kind of personal contact with the wireless docs manager).
HTH,
Amjad
You want to say "Thank you"?
Don't. Just rate the useful answers,
that is more useful than "Thank you".

Server 2008 R2 RDS HA Licensing configuration best practices

Similar Messages

Maybe you are looking for