VPN from an RDP Session

Hello there,
We are trying to connect to an anyconnect instance through an RDP session. We have no difficulty connecting, but once we do the RDP session is terminated. This makes sense in theory, but is there any way to avoid this? Enabling split-tunnel?
Any insight would be appreciated.

In the routing world, and configuring a GRE tunnel - you would get the same issue if you route the GRE end points into the tunnel, the tunnel cannot form - chicken and the egg.
I will not ask why you are soing this, but you will need to split-tunnel the traffic you need to encrypt, not the IP connection that the RDP session is created with.
HTH./

Similar Messages

Cannot print from a rdp session on a local printer

Hi,
I think it is a stupid issue but I cannot see it...
So far here is what I have seen:
- I have a windows server 2008R2 which is used for connect clients using RDP.
- Clients are not in the same building so they need to be able to print on local printer.
Problem is: even if I am able to see the redirection of my local printer on the RDP session and click on the "printing test page", well nothing happen. No errors, no trouble, just nothing at all, and still, I do not have my copy.
However, when I try to print a "Nozzle check" (on a Ricoh printer) for testing print condition, it works...
Hope you will be able to help me.

Hi,
Thank you for posting in Windows Server Forum.
Does the printer physically connects to your client computer and it can work properly?
What is OS version of your client computer?
Ensure that the spooler service is running on both the client and Server. Please also check the firewall & ports between target server and client.
Have you try to use Microsoft RDS Universal printing solution and check the result. More information from following link.
How to configure Microsoft RDS Universal Printing
http://www.virtualizationadmin.com/articles-tutorials/vdi-articles/microsoft-hyper-v/how-configure-microsoft-rds-universal-printing.html
Apart from this, there is one hotfix available might resolve your issue.
Printer redirection is not applied to client computers that connect to a Windows Server 2008 R2 SP1-based Terminal Services server
http://support.microsoft.com/kb/2662585
Hope it helps!
Thanks.
Dharmesh Solanki

RDP Session not showing redirected printers.

I have a very weird issue and can't seem to find a fix..
I have a user on a XP pc who connects to server via RDP.. all the settings are correct on his pc from what i can tell, but he can't see his local printers from the RDP session.
I know thing are fine on the server side are set correctly, because if we connect to the server from another XP pc in the office, using the same credentials.. he can see the printers in the RDP session, so we know it is not the server or his user profile,
but something to do with his PC specifically.
I have checked every setting that i can think of, and have searched the web, but I have had no success.
Any suggestions... short of reinstalling/upgrading the OS?

Hello friend
Your question is ambiguous
Please give a clearer title.

Flash video in RDP session

I have a problem, we have installed a VDI solution that uses Wyse V10L clients. The clients make an RDP connection to a virtual desktop and then is presented with a desktop environment.
From this RDP session we have made every attempt to get Flash based videos working, however the quality is very poor. We are experiencing delays in video and audio.We have installed all of the recommended TCX Multimedia packages, published by Wyse, even the Beta Re-distributer product and the quality has not been improved.
Can anyone advise how Adobe intend to combat the problem with running Flash video (youtube) via RDP?

Hi Daniel,
Actually, there is a method to improve the display of Flash video in RDP sessions. Ericom Blaze is a software-based RDP acceleration AND compression product that improves video response over WAN and congested LANs. Besides delivering higher frame rates and reducing screen freezes and choppiness, Blaze accelerates RDP performance by up to 10-25 times higher, while significantly reducing network bandwidth consumption over low-bandwidth/high latency connections.
Ericom Blaze works with any standard RDP host, including VDI, Terminal Servers and remote physical machines.
You can read more about Blaze at:
http://www.ericom.com/ericom_blaze.asp?URL_ID=708
Or view a video demo at:
http://www.ericom.com/blaze_youtube.asp?URL_ID=708
Adam
Ericom

Starting AnyConnect VPN through RDP Session

Hi,
We have AnyConnect (ver 3.1.01065) configured on our ASA5520 boxes. VPN is working fine from the desktop, but I also need the ability to establish a VPN connection through a RDP connection (i.e. I'm using RDP to connect to a PC which has AnyConnect installed on, then trying to establish a VPN connection).
I've downloaded the Cisco VPN Profile Editor, chaned the <WindowsVPNEstablishment> option to "AllowRemoteUsers". Then applied the profile to the relevant Group Policy. Connected VPN from the PC (not through RDP), so that it downloads the new profile, and then disconnected again.
However, I still can't start VPN through an RDP connection. (Error is "VPN establishment capability from a remote desktop is disabled. A VPN connection will not be established".)
I've checked the XML file on the local PC to confirm the profile has been downloaded (and is has, and I can see the AllowRemoteUsers option.
This also happened with the previous version of AnyConnect (3.0.xxxx).
The PC's local routing tables look fine, and I can't see any conflicts that would cause the RDP session to drop.
Also - If I connect VPN, then RDP onto the PC, both the VPN and RDP sessions work fine.
Any ideas would be appreciated!
Thanks
Tony

Hi Portu,
Thanks for your reply, and thanks for confirming that it works with AC 3.1 and ASA 8.4 (I'm using the same ASA version).
It looks like the issue was that I created the profile with the standalone Cisco VPN Profile Editor, saved it, uploaded it to the ASA, I then added a new profile on the ASA (in the Cisco AnyConnect Profiles section), and specified the file... however, it appears that I over wrote the uploaded profile, as the WindowsVPNEstablishment was set to LocalUsers. Once I changed it to AllowRemoteUsers and applied the config, then deleted the profiles from the client, it worked!
Simple mistake - but easily done!!
Thanks again
Tony

How to end RDP sessions remotely from different network?

Hi
How to end RDP sessions remotely for windows 2008r2 server from different network?
not from local LAN
Thanks

Hi
what ports need to be open to successfully connect to server behind firewall?
from WAN to LAN using :
net use \\servername_or_IP /USER:username “password“
or
qwinsta /server:ServerIP
Thanks

Black Screen after logging in locally to Windows 7 that previously had an open RDP session.

Here is what happens. I leave my home computer on (running Windows 7 Ultimate) and sometimes I will remote to it from another location (work, friends house, or wherever). When I return home, I will go to login, the screen then goes blank (no mouse cursor
or anything). I have to do a cold boot to get back into Windows. This only happens if I ever RDP into it sometimes during the day. It seems random. I've tried logging off the RDP session, just closing it without logging off, nothing seems to be the answer
in that regard. It seems very random at times. I'll go a week and I can come home and it will login fine with no problems. Then the next week it starts giving me the black screen after I come home and login locally. I've seen several black screen issues here,
but usually they are getting it before logon. Anyone have a clue what might be causing this?

Hello,
The Windows Desktop Perfmon and Diagnostic tools forum is to discuss performance monitor (perfmon), resource monitor (resmon), and task manager, focusing on HOW-TO, Errors/Problems, and usage scenarios.
As the question is off topic here, I am moving it to the
Where is the Forum... forum.
Karl
When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer.
My Blog: Unlock PowerShell
My Book: Windows PowerShell 2.0 Bible
My E-mail: -join ('6F6C646B61726C40686F746D61696C2E636F6D'-split'(?<=\G.{2})'|%{if($_){[char][int]"0x$_"}})

Can't full-screen RDP session window?

Hi, I'm using Win7 to RDP to an AWS WinServer2012 box. I need to view RDP session full screen. Checked RDP -> Display configuration, which is set to Full Screen. My machine's resolution is set to 1680x1050.
I checked the Screen Resolution on the server and see "The display settings can't be changed from a remote session." Also, resolution shows a greyed-out 1280x705, under which is a ! Your resolution is lower than 1024 x 768. Some items might not
fit and apps might not open.
Any leads?
Thanks,
Scott

Hi Scott,
Thank you for posting in Windows Server Forum.
First of all suggest you to increase RDP version of client windows 7 to RDP 8.1. in addition for a try you can change the .RDP file setting and check whether you can use full screen in remote desktop session. For this you need to change the desktop height and
weight under .RDP file as below.
desktopwidth:i:<set to screen width>
desktopheight:i:<set to screen height>
Kindly go through beneath article for detail.
Resolution and Scaling Level Updates in RDP 8.1
http://blogs.msdn.com/b/rds/archive/2013/12/16/resolution-and-scaling-level-updates-in-rdp-8-1.aspx
Hope it helps!
Thanks.
Dharmesh Solanki

How to do Regional Setting Configuration in RDP session ( Eg Date Format, Currency, Decimal Seperator etc)

Hi All,
I am new to Windows Server 2008 R2 administration.
I would like to know is there a way to do Regional Setting Configuration in RDP session. i.e Date Format, Currency, Decimal Separator etc are based on users local machine.
Eg If a user from UK logs in he should see date format as DD/MM/YY and if user from US logs in he should date format as MM/DD/YY.
We are currently using citrix and we are managing this using logon script that runs based on citrix published application name.
Is there any way we can achieve the same in RDP ?
Thanks in Advance.
Thanks & Regards,
Nithin Kumar

Hi Nithin,
Do you need any other assistance?
Thanks.
Dharmesh Solanki
TechNet Community Support

Disabling Local machine trackpad in RDP session

Hello!
I'm having an issue with users in my network. Haha!
I've got some users who prefer an external mouse to their laptop's trackpad, which I have no problem with. However, many of these users have issues with typing while not touching the trackpad.
I've been IT Director since the beginning of July and have received several complaints of "My mouse keeps jumping around like crazy."
So, being the nice guy that I am, I disabled the trackpad on the local machines for these users. Unfortunately, this setting hasn't translated to their RDP session into the terminal server (Server 2012 Standard) that hosts our EMR software (where most
users actually do most of their work).
Long story short, my question is how can I disable the local machine's trackpad in an RDP session to a terminal server for specific users?
I thought maybe a Group Policy item could fix the issue, but not all users in the group use an alternative to the trackpad and not all of the users that are having these issues are in the same group.
Also, all laptops are Dells, but different models, so possibly different trackpads/drivers.
I've done quite a bit of searching and stumbled onto other forums, but found nothing to even point me in the right direction, so any help/advice is greatly appreciated!

Hi,
Thank you for posting in Windows Server Forum.
Which version of server\client OS using in your environment?
From your description it seems that you are facing issue with specific users, so for that you need to disable the track pad manually and GPO can’t apply over that. In addition, I want to say that please use client RDP 8.1 for better feature.
If you are using server 2008 R2, then please try to update KB 2579381 and check the result.
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support

Windows Server 2008 R2 SP1 RDS hang and stop responding new rdp session. Already connected session also hang as well

We have a Windows Server 2008 R2 SP1 RDS supporting many ThinClients, mostly using a mandatory profile on a Windows 2003 R2 AD environment
at the moment of the hang what we experienced was:
New RDP sessions got stucked in the legend "Iniciando" (we have the spanish MUI).
Systems Events shows a lot of Warnings:
The Group Policy Client Side Extension Group Policy Shortcuts may have caused the Group Policy Service to terminate unexpectedly. To prevent further failures in the Group Policy
Service, this extension has been temporarily disabled until after the next system restart. Group Policy settings managed by this extension may no longer be enforced until the system is restarted. The vendor of this extension should be contacted if this issue
recurs.
and after that a lot of this errors:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the CryptSvc service.
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the NlaSvc service.
The RDP protocol component X.224 detected an error in the protocol stream and has disconnected the client.
timeout (30000 milliseconds) was reached while waiting for a transaction response from the Schedule service.
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the gpsvc service.
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the BITS service.
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SessionEnv service.
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service.
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the CertPropSvc service.
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the IKEEXT service.
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the iphlpsvc service.
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SessionEnv service.
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the iphlpsvc service.
During the problem we ping DC and Network Share where Profile and Document Redirection resides and they were working OK (we also did a
\\server\HomeUsers and we reached it without problem)
Only reseting the server worked, Any Ideas of what could be causing this ?? Best Regards
Federico Giampietri Latamsupport IT Infrastructure Services

Hi Clarence,
Today we experienced the problem again,
Users can’t login to RDS, but now they got stucked at “"Please wait for the Group Policy client”;
System log events recorded the following errors again:
timeout (30000 milliseconds) was reached while waiting for a transaction response from the Schedule service.
timeout (30000 milliseconds) was reached while waiting for a transaction response from the sessionenv service.
timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service.
timeout (30000 milliseconds) was reached while waiting for a transaction response from the Wuauserv service.
timeout (30000 milliseconds) was reached while waiting for a transaction response from the BITS service.
timeout (30000 milliseconds) was reached while waiting for a transaction response from the CertPropSvc service.
What path do you suggest to investigate further?
Thanks a lot!
Federico Giampietri Latamsupport IT Infrastructure Services

Local printer not showing up in RDP session

Is the user RDP using the RDP shortcut saved or creates a new connection everytime? if using the save connection, have you tried deleting it and re-creating it and checking the local resources option again. It should show up a redirected printer in RDP session.

Hi Spicepros,
Situation: I've got a Windows 7 machine using RDP (let's call it Local) connected to a remote Windows 7 machine (Remote) which is hosted on an iMac in Boot Camp. It is a VPN connection. The printer, attached directly to the Local system is an HP LaserJet 400 M401 PCL6 connected via "USB001 Virtual Port". But this printer does not show up on the remote Windows 7 machine.
The RDP connection has Local Resources turned on.
My colleague was able to print to her local printer until she replaced her printer. Now we can't make it work.
Any suggestions would be greatly appreciated!
Warm regards,
Dave
This topic first appeared in the Spiceworks Community

RDP session freeze when resizing RDP window

Hi
since last week friday a user reports a freezing RDP session when he resize the RDP window (to move the session window to another screen (PC has 3 screens connected)) of a . The RDP target is a windows 2008 R2 RDS. Last Friday there were many MS updates
installed on this PC.
I determined that the issue must be related to the PC, if user connects from another PC to RD-Server the problem doesn't exists. But i have no starting point to search for the reason. There are no warnings or errors in local eventlog. RDP connections to
another RD-Server work fine.
Any hint where to start to solve this issue?
Regards Carsten

Hi Carsten,
Thanks for the reply.
It seems that the user has updated his RD client to RDP 8.0. If so, please note that Aero Glass is not supported.
Description of the Remote Desktop Protocol 8.0 update for Windows 7 SP1 and Windows Server 2008 R2 SP1
http://support.microsoft.com/kb/2592687
Thanks.
Jeremy Wu
TechNet Community Support

RDP Session (MSTSC)

How to Hide or Block Local resources (Like .. Local Drive) during RDP Session (MSTSC)? to prevent data copy from one system to another system via rdp local drive mapping for multiple users?
cmd --> mstsc --> options --> Local Resources --> Drives.
please suggest me on this...
Thanks
Bipin Rajan
[email protected]

Hi,
Please check this:
Jump to Local Resources tab, under local devices and resources section, click More button, this window will popup:
In the read marked section, make sure all drives' checkboxes are not checked.
Karen Hu
TechNet Community Support

Need Help on Configuring the Site to Site VPN from Cisco 2811 to Websense Cloud for web Traffic redirect

Hi All,
I need help on Configuring the Site to Site VPN from Cisco 2811 to Websense Cloud for web Traffic redirect
2811 having C2800NM-ADVIPSERVICESK9-M
2811 router connects to the Internet SW then connects to the Internet router.
Note- For Authentication am using the Device ID & Pre share key. I am worried as all user traffic goes with PAT and not firing up my tunnel for port 80 traffic. Can you please suggest what can be the issue ?
Below is router config for VPN & NAT
crypto keyring ISR_Keyring
pre-shared-key hostname vpn.websense.net key 2c22524d554556442d222d565f545246
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp keepalive 10
crypto isakmp profile isa-profile
   keyring ISR_Keyring
   self-identity user-fqdn [email protected]
   match identity user vpn-proxy.websense.net
crypto ipsec transform-set ESP-NULL-SHA esp-null esp-sha-hmac
crypto map GUEST_WEB_FILTER 10 ipsec-isakmp
set peer vpn.websense.net dynamic
set transform-set ESP-NULL-SHA
set isakmp-profile isa-profile
match address 101
interface FastEthernet0/1
description connected to Internet
ip address 216.222.208.101 255.255.255.128
ip access-group HVAC_Public in
ip nat outside
ip virtual-reassembly
duplex full
speed 100
no cdp enable
crypto map GUEST_WEB_FILTER
access-list 101 permit tcp 192.168.8.0 0.0.3.255 any eq www
access-list 103 deny   ip 192.168.8.0 0.0.3.255 host 85.115.41.187 log
access-list 103 deny   ip 192.168.8.0 0.0.3.255 host 85.115.41.181 log
access-list 103 deny   ip 192.168.8.0 0.0.3.255 host 85.115.41.182 log
access-list 103 deny   ip 192.168.8.0 0.0.3.255 86.111.216.0 0.0.1.255
access-list 103 deny   ip 192.168.8.0 0.0.3.255 116.50.56.0 0.0.7.255
access-list 103 deny   ip 192.168.8.0 0.0.3.255 86.111.220.0 0.0.3.255
access-list 103 deny   ip 192.168.8.0 0.0.3.255 103.1.196.0 0.0.3.255
access-list 103 deny   ip 192.168.8.0 0.0.3.255 177.39.96.0 0.0.3.255
access-list 103 deny   ip 192.168.8.0 0.0.3.255 196.216.238.0 0.0.1.255
access-list 103 permit ip 192.168.8.0 0.0.3.255 any
ip nat pool mypool 216.222.208.101 216.222.208.101 netmask 255.255.255.128
ip nat inside source list 103 interface FastEthernet0/1 overload
ip nat inside source route-map nonat pool mypool overload

How does Websense expect your source IPs in the tunnel? 192.168.8.0 0.0.3.255 or PAT'ed 216.222.208.101 ?
Check
show crypto isakmp sa
show crypto ipsec sa
show crypto session
You'd better remove the preshared key from your post.

VPN from an RDP Session

Similar Messages

Maybe you are looking for