Win2008r2 RDS farm with "Remote Session Environment" set, Need on screen keyboard as well.

I have an RDS farm with select users running an app for their session, I use the following GPO:
http://i.imgur.com/DaKpW76.jpg
This works great, however, I also want an on screen keyboard to load with it as well... This setting disables most login scripts I have tried.

Hi,
Thank you for posting in Windows Server Forum.
Sorry to disappoint you, but as per my research there is no any default path to set for all users to display on-screen keyboard. You need to start manually or need to develop some script to start on logon. For developing any script or program, I suggest you
to contact our MSDN forum.
Hope it helps!
Thanks.
Dharmesh Solanki

Similar Messages

Server 2012R2 -- RDS Farm with XP and Windows Vista Clients

Hi There,
My team has been having some fun in getting our Server 2012R2 farm operational, annoyingly MS documentation is severely lacking on how to correctly configure a 2012R2 Farm correctly.
We have an RDG1-TCC server, which is the RDGateway, RDConnection Broker and RDWeb Server. We have two session host servers RDS1-TCC and RDS2-TCC.
It took us some time and much online research to figure out exactly how we needed to configure the RDS server as a lot of information online for 2012R2 was apparently incorrect(was based on 2008R2 practices). We started off with using a DNS Round Robin for
the RDS Session hosts servers and after a number of certificate issues, we later found this was incorrect. We're now using RDWeb exclusively, which appears to be the correct way to have the Connection Broker working?
We've ran into a number of issues with certificates too, we have an external certificate for remote.domain.com. Installing this on all 4 options in the certificate manager has made internally work correctly via RDWeb, however externally we are getting a
certificate mismatch as it's trying to connected to RDG1-TCC with a certificate for remote.domain.com. I'm pretty sure I can resolve this with a replacement remote.domain.com certificate that includes a SAN for *.domain.internal. Testing with a self signed
certificate seemed to resolve this issue.
Now providing i've configured everything the correct way, we have an issue where RDWEb RDP files do not work internally or externally for XP, Vista or Windows 7 (With RDP7.1). Windows 8/8.1 and Windows 7 with RDP 8/8.1 updates work perfectly fine. Unfortunately
this new client has a few XP machines that they are not willing to update just yet.
Is there a known fix/workaround to get these older clients working correctly?
Sorry for the extremely long post, but I'm sick of banging my head against the wall trying to get something that we assumed would have been fairly simple to get up and running.
Cheers,
Ben

Thanks for the assistance so fat, now I have all clients connecting, I need to tackle the certificate issues.
The UC SAN certificate is going to cost much more than the current certificate, currently that idea is on the back burner as the client does not wish to pay a few hundred extra.
To quickly sum things up:
AD DNS(internal DNS) override in place for remote.domain.com.au pointing it to the internal IP of the gateway/connection broker/RDWeb server.
Connecting Internally its working perfectly fine under all circumstances (I'm guessing this is because of Kerberos Auth)
When users connect externally via RDWeb they get a certificate missmatch as the cert is for remote.domain.com.au and the server is RDG1-TCC.domain.com.net
When users connect externally via MSTSC using the Gateway option, they get a certificate missmatch as per the above, however they also receive a second "certificate is not trusted" error for whatever RDS server they hit.
I have tried the below previously and they broke other things:
"Change published FQDN for Server 2012 or 2012 R2 RDS Deployment."
This resolved the external certificate issue. However then internal connections stopped working. When connecting via RDWeb, you would get asked for credentials instantly and no matter what you entered, it just asked for credentials again.
There did not seem to be ANY event logs for this connection.
"Changing RDP-Tcp listener on RDSH to use external certificate."
I can't recall the exact error we had when we did this, but I know we had to roll back the change. I have a feeling we then started getting certificate missmatch errors on the Session Hosts.
I'm half thinking that when the farm is free(Currently being used for application UAT), I'm going to try and reconfigure the RDP-Tcp listener on the RDSH servers again and see if that resolves one or more of our issues.
Do you have any suggestions on how I can use the correct published FQDN name without breaking internal access? Or any other ideas on getting this entire thing working both internally and externally?
Also, Dharmesh, I've tried clearing out the certificate cache as suggested, but to no avail.

When on=line banking, or checking my cell phone bill, I can't download my statement or phone bill, the page will pop up, but will remain blank. No problem with I.E. What setting needs to be changed???

When I'm on a secure site, like my bank, or my cell phone account, I can't download my bank statement or cell phone bill. If I click on my bank statement, it will take me to a page with the list of my statement months. When I click on a month, another page will appear that says "about blank", but then nothing appears on the page. I'm guess it's a security setting, or a proxie setting, but I don't know which, or what to change it too. Help?? If I use I.E. (which I hate to use) everything works okay. Same problem if I try and download my cell phone bill from Verizon. Thanks

Thanks for your help firstly.
No I don't have any firewall that I know of that could affect the Desktop app. I have reviewed the link you sent across and the results are as follows:
1. Make sure you can connect to the internet.
Yes, internet is all good... no problems here.
2. Make sure that you can access secure sites:
Yes, I can access secure sites as tested by the example in the list (https://www.adobe.com).
3. Check your hosts file.
Test successful after going to: https://lm.licenses.adobe.com
Moving on to reset the hosts file...
I've followed the instructions and I get to "Select the hosts file and open it".
If I simply double click, then the default is to open in TextEdit.
Once open, I go to find File > Save As, but it only says, "Save a Duplicate" and then once I save a duplicate, I don't know where to save it because the Save window only shows the basic folders and I don't know how to get back into the /etc folder from the Private files.
More instructions please, if possible?
Thanks again

Server 2012R2- RDS Farm Certificate Miss-Match on Session Hosts

Hi Guys,
I've another RDS2012R2 issue. Internal and external domains do not match. External: domain.com.au; Internal: domain.com.net.
I'm getting certificate miss-match errors when connecting to the Farm/RemoteApps.
I have performed the follow fixes:
Change published FQDN for Server 2012 or 2012 R2 RDS Deployment (http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80). This resolved the original issue where I was getting a certificate miss-match error externally
for the FQDN of the server.
Updated the RDP-Tcp certificate used on the Session Host Servers. This was to resolve an issue where using mstsc to RDP to the farm externally(via gateway) would give a Certificate is not trusted error on the RDSH side.
Now whenever RDWeb is used to launch a RemoteApp or the farm, I get a certificate miss match error as the RDSH server is called RDS1-TCC.domain.com.net and the certificate is for remote.domain.com.au.
I rolled back the last change so that RemoteApps and the Farm would work successfully internally without certificate issues. How do I go about resolving the certificate errors?
For extra background details see my orignal thread, It was marked as answered when only 1 out of 2 issues was resolved. http://social.technet.microsoft.com/Forums/windowsserver/en-US/b664ddaf-6c11-49e2-8a69-0df3b8ef13a1/server-2012r2-rds-farm-with-xp-and-windows-vista-clients?forum=winserverTS
Cheers,
Ben

Hi Ben,
Thank you for posting in Windows Server Forum.
In your case, I can suggest you to check that the certificate must match the FQDN of the server. If you are creating SSL certificate then it must be signed by trusted authority and also the certificate must be stored under “local computer/personal store“.
Also you can buy the certificate from 3rd party which is wild card certificate and only 1 certificate can be used for your network. Please check below links for more information regarding certificate issue.
1. Certificate Requirements for Windows 2008 R2 and Windows 2012 Remote Desktop Services
2. Configuring RDS 2012 Certificates and SSO
3. Windows 2012 RDS Certificate mismatch
Hope it helps!
Thanks,
Dharmesh

RDS 2012 Farm with RDS 2008 R2 - Switch between applications issue.

Hello All,
We have setup Windows Server 2012 R2 RDS farm with two hosts and joined Windows Server 2008 R2 to the farm. We joined server 2008 to the farm becouse we require Internet explorer 9 for compatibility testing. Internet explorer 11 in emulated modes does not
work for us. Now we seem to be facing a wierd issue.
When switchig between RemoteAPP application from server 2012 R2 and server 2008 R2, the applicatoins don't get displayed on screen. The computers try to desplay the applicaitons but it seems that Server 2008 R2 applications win and stay on top. The applications
are switched only with effort, 4-5 clicks on the applicaiton.
Did anyone else expiriance similar problem. Does anyone knows a solution for this. Is there alternative aproach/solution to my problem.
Any suggestoins are welcome.
Thanks.
Regards, Luka

Hi Luka,
When switchig between RemoteAPP application from server 2012 R2 and server 2008 R2
Do you mean that both Windows Server 2012 R2 and Windows Server 2008 R2 have published remoteapp applications, and users are switching remoteapp applications from these two servers through RDWeb page?
I suggest you try to fully patch servers and clients to see if the issue persists.
If there are any third party software installed, please disable them temporarily to test.
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]

Outlook 2010 as a remote app with Remote Exchnage

Hello All
I am running RDS Farm with Windows Server 2008 R2. I have 2 RDS servers connected to domain and so on.
I have managed to "publish" Internet Explorer as a remote app (For secure surfing) and it works perfectly.
Now I would like to publish Outlook 2010 as a remote app and getting this issue:
When I try to run the published outlook shortcut, it opens up the outlook profile initialize in order to get the exchange server settings which is ok. But when I try to type my exchange server parameters
it does not accept it and I get the attached screenshot error.
It seems like it does not "see" the Exchange server from the remote app.
On the other hand, if I log on to one of the rds servers with RDP (as remote desktop) and open up outlook, it accept the details and works fine. ( Basically I do not want to publish
a full remote desktop but only specific remote apps )
From some reason when I run the Outlook as a remote app it does not recognize the Exchange server and won't let me setup the profile.
Even if I type the ip address of my exchange I get the same error, so I assume it has nothing to do with DNS issue nor Firewall or Antivirus.(?)
In addition, Once I do manage to initialize the profile through the RDP and then run it from the remote app it works.
Obviously I cannot log on with 60 with remote desktop and initialize their profiles, I need to publish it and configure the profile from the remote app....
some more details :
1. Windows 2008 R2 Domain environment.
2. Exchnage server 2007 Std.
2. LAN is on a different segment from RDS Farm and Exchnage Server is on a difrenet Segment as well.
3. If any other details is needed please let me know.
Moreover, this post seem to be similar to my issue but I am not sure if it would solve my issue. (http://social.technet.microsoft.com/Forums/windowsserver/en-US/059a57ad-09e0-4b2d-9292-18532f7d0339/outlook-2010-server-is-unavailable-error-when-starting-remote-app?forum=winserverTS)
Thanks in advance!

Hi Gil,
Please make sure that we have enabled Outlook Anywhere and installed the trust certificate on our Remote Desktop.
More details in the following article:
How to Enable Outlook Anywhere
http://technet.microsoft.com/en-us/library/bb123889(v=exchg.80).aspx
Feel free to contact me if there is any problem.
Thanks
Mavis
Mavis Huang
TechNet Community Support

KB2923545 remote sessions drop issue

In our environment we have Remote Desktop Services Host running patched and up to date Windows 2008 R2 Enterprise behind Remote Desktop Gateway running Windows 2012 R2 Standard. Dual Factor
Authentication from Windows Azure is used in our system as well.<o:p></o:p>
We experienced following strange behavior. Users with updated Windows 7 clients can successfully authenticate against RD Gateway, receive a call from Windows Azure DFA, authenticate
and establish remote session to RDSH. No issues while working in remote session until user need step back or minimize the active RD session window. After 120 seconds the session get dropped and reconnects immediately and the user receives another authentication
call from DFA.<o:p></o:p>
No errors on client side, no errors on DFA, RDG or RDSH servers, just entries that the session was disconnected and then reconnected.<o:p></o:p>
Running Wireshark on the clients side shows that the local computer sends RST, ACK which drops connection and then immediately sends SYN to RDG server with initiates connection reestablishment
and a call from DFA. <o:p></o:p>
We figured out that this behavior is related to the stations with KB2923545 installed. As soon as we remove mentioned KB, no session drops.<o:p></o:p>
Anybody experiencing the same and had found other solution then just removing windows update KB2923545? <o:p></o:p>

Hi,
Thank you for posting in Windows Server Forum.
Does this happen on any particular system with specific account?
As this KB is specific for the issue for your issue, here suggest you to install on another system or reinstall the KB after restating the system. And finally check with new user account without any permission.
Hope it helps!
Thanks.
Dharmesh Solanki

Best practices for setting up RDS pool, with regards to profiles /appdata

All,
I'm working on a network with four physical sites and currently using a single pool of 15 RDS servers with one broker. We're having a lot of issues with the current deployment, and are rethinking our strategy. I've read a lot of conflicting information on how
to best deploy such a service, so I'd love some input.
Features and concerns:
Users connect to the pool from intranet only.
There are four sites, each with a somewhat different local infrastructure. Many users are connecting to the RDS pool via thin clients, although some locations have workstations in place.
Total user count that needs to be supported is ~400, but it is not evenly distributed - some sites have more than others.
Some of the users travel from one site to another, so that would need to be accounted for with any plans that involve carving up the existing pool into smaller groups.
We are looking for a load-balanced solution - using a different pool for each site would be acceptable as long as it takes #4 and #7,8 into account.
User profile data needs to be consistent throughout: My Docs, Outlook, IE favorites, etc.
Things such as cached IE passwords (for sharepoint), Outlook settings and other user customization needs to be carried over as well.
As such, something needs to account for the information in AppData/localroaming, /locallow and /local between these RDS servers.
Ideally the less you have to cache during each logon the better, in order to reduce login times.
I've almost never heard anything positive about using roaming profiles, but is this one of those rare exceptions? Even if we do that, I don't believe that covers the information in <User>/AppData/* (or does it?), so what would be the best
way to make sure that gets carried over between sessions inside the pool or pools?
The current solution involves using 3rd party apps, registry hacks, GPOs and a mashup of other things and is generally considered to be a poor fit for the environment. A significant rework is expected and acceptable. Thinking outside the box is fine!
I would relish any advice on the best solutions for deployment! Thank you!

Hi Ben,
Thank you for posting in Windows Server Forum.
Please check below blogs and document which helps to understand some basic requirement and to setup the new environment with proper guided manner.
1. Remote Desktop Services Deployment Guide
(Doc)
2. Step by Step Windows 2012 R2 Remote Desktop Services –
Part 1, 2,3 & 4
3.Deploying a 2012 / 2012R2 Remote Desktop Services (RDS) farm
Hope it helps!
Thanks.
Dharmesh Solanki

RDS Farm setting applied through GPO causing connection issues

I'm having a strange issue with some RDS GPO's. Since automating the RDS server build process through SCCM I've moved the RDS farm / connection broker settings to a GPO. This works fine, once the servers are built the GPO applies and the machines join the
farm.
However, when any GPO associated with the farm is changed, all the sessions connected to the farm are dropped. User can reconnect but this is very inconvenient for us to try and push shortcuts and what not during production.
After searching fro a while, to me, it seems like the GPO that assigns the farm settings is being reprocessed, causing the settings to drop and connections to be dropped.
I wouldn't think that this would be normal behavior? Can anyone confirm for me that this should work as I expect it to?
Thanks!

Ok so I finally figured it out.
It was what I expected, the GPO refresh was causing the settings to be dropped, this caused some registry keys to momentarily revert to their default.
Specifically:
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/Terminal Server/fDenyTSConnections
The problem is that even if you set this registry key by hand, it will still revert during the GPO processing, which is what threw me off.
The solution is to simply apply a GPP to the computer that specifically sets this registry entry to '0'. By setting the GPP, it stops the setting from reverting when GPO is refreshed. After extensive testing, I can confirm that this is fixed.

Windows server 2012 Data Center with VDI configuration error message ( The remote session was disconnected because there are no remote desktop license servers available)

Dears,
I have two windows server 2012 Data Center and I configured (Virtual Desktop Interface)VDI on it's.
All my clients connected on both of servers by used Remote Desktop sessions ,5 months since.
Currently,when the clients is connected on the both of servers they received the following error:
"The remote session was disconnected because there are no remote desktop license servers available to provide license"
Kindly note, I installed windows Licenses Server Data Center on the both of servers.
Regards.

Hi,
Please let us know if you have purchased RDS CALs and install it in your RD licensing server.
Also, on RD Session host servers, please make sure that you have specified the license mode and point them to the RD licensing server.
Remote Desktop Services Client Access Licenses (RDS CALs)
http://technet.microsoft.com/en-us/library/cc753650.aspx
RD Licensing Configuration on Windows Server 2012
http://blogs.technet.com/b/askperf/archive/2013/09/20/rd-licensing-configuration-on-windows-server-2012.aspx
Hope this helps.
Jeremy Wu
TechNet Community Support

Insufficient privileges when creating MV with alter session set current_sch

I am getting Insufficient privileges when creating MV with alter session set current_schema=Application schema name. User running the alter session is DBA user. If run as SYSDBA, MV is created successfully. DB Version is 10.2.0.3
I observed similiar issue with regular View also in 9.2.0.6 also.
Any advice is greatly appreciated.
Thanks,
Siva

Sounds like your management needs a stern lecture on the concept of change management. <g>
I am not debating what you do. I am questioning the logic, or lack thereof, of doing it that way. My recommendation would be to change your procedure to one that:
A. Is more in line with good change management practices.
B. Works.

Can i catch a virus through Teamviewer App (doing a remote session with other computer) in my iPad?

Can i catch a virus through Teamviewer App (doing a remote session with other computer) in my iPad?

There are no viruses that can affect the iPad. And a teamviewer session is a remote connection to a computer. Anything you do in the teamviewer session is happening on the remote computer not on your iPad, so unless you manually transfer a file to the iPad there's no way for a virus to move through the session.
And as I said, even if you transferred an infected file from the remote machine, the virus can't run on an iPad so it would not affect it.

Mail: Problem with copy&paste from Remote Session

Hi,
I have a problem to copy just text from remote session (MS RDP Client) directly into an email. It always shows a contact .
The workaround is to paste into any other app, it doesn't matter which one. It works with Outlook for Mac but not with Mail. Does someone have the same issue and maybe a solution?
Due to connection issues I cannot use Outlook outside the company... so not an alternative at the moment.
Thanks

Hi,
I test the issue with my colleague and didn't find the same issue.
Here is the screenshot:
So please check if Lync Server 2013 and all the issued Lync 2013 client update to the latest version firstly, it not update to the latest version, update it and then test again.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Best practice for licence server for RDS Farm & Certificate errors

Hello,
I am in the process of creating an RDS farm using Server 2008 R2. I have three Session Hosts and a Connection Broker.
I have a set of 10 user CALs available and also another 20 on our current RDS server which will need migrating once we go live with the farm.
I understand the User CALs need to be installed on another Server 2008 R2 and I am wondering what is best practice. We are running on an entirely virtual environment and it would be simple enough to create another server and install the CALs on there.
The only issue with that is that I would need to create a replica of this new machine for DR purposes, but this would take up valuable space which may not be necessary.
We are planning on creating replicas of one of the Session hosts and the broker for DR, so I am guessing I would need to install some CALs on the Session Host which is going to be replicated.
There are a few options and I am just wondering what is the best way to go about things.
Also, as an aside, I am getting an annoying certificate error each time I log a test user onto the RDS farm - I think this is because I am using the DNS alias of the RDS Farm to log on. Is there an easy way to get around this, other than the 'Do not show
this message again'. I have been doing some research and the world of Certificates is very confusing!!
Thanks,
Caroline
C.Rafferty

Hi Caroline,
Firstly for your License related issue, you can perform the step on any VM or can create the new VM as replica for RDSH server also. But please be sure that you have installed RD License server on it, activate it and then install RDS CAL on it. But be safe
if possible don’t install RD License server with RDCB, please make that out of it as little away. As you can also install RD License server with AD or make replica of that and install RDL on that.
Best practices for setting up Remote Desktop Licensing (Terminal Server Licensing) across Active Directory Domains/Forests or Workgroup
http://support.microsoft.com/kb/2473823
What’s the specified certificate error which you are receiving?
If you're going to allow users to connect externally and they will not be part of your domain, you would need to deploy certificates from a public CA. In meantime you can refer blog for getting insight for certificate case.
Certificate Requirements for Windows 2008 R2 and Windows 2012 Remote Desktop Services
http://blogs.technet.com/b/askperf/archive/2014/01/24/certificate-requirements-for-windows-2008-r2-and-windows-2012-remote-desktop-services.aspx
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Using USB Devices in RDS VDI with Windows 8.1 Scenario

We are currently in a Upgrade Scenario from our old Windows XP/ Citrix XenDesktop Farm to a new VDI Installation. The new Installation is a Windows Server 2012 R2 Remote Desktop Services Collection using Remote Desktop Virtualizaion Hosts on 2012 R2 too.
The VD- Clients are Windows 8.1 ENT and the User Endpoints are HP ThinClients with Windows Embedded 8.1 Industry Enterprise.
The user connects to his Virtual Desktop via 8.1 Embedded (RDP8.1)
We want all new USB- Drives to map natively in the RDP- Session (RemoteFX USB redirect) so USB- Sticks or CD/DVD Drives are controlled by the VD-Client OS.
We understand, that there are so called "high level devices" which RDP is using per Default. We also know, that there is a GPO that redirects all "other supportet USB devices". That works well for e.g. Webcams, but we want to override the
"high Level devices" policy an simply map a e.g. USB Stick natively to the RDP Destination.
Currently the drive is mapped as a "high Level usb device" and the usb key has no drive letter, cant be formattet or used in other RemoteApp Sessions initiated on the VD- Client OS.
The Systems we are using:
Windows 8.1 Enterprise - VD Client on HyperV 2012 R2 FO Cluster
Windows 8.1 Embedded Industry Enterprise as ThinClient OS
Windows Server 2012 R2 as Middleware (RDS VDI Collection, Web Access)
Thank you in Advance
Chris

Hi Chris,
Thank you for posting in Windows Server Forum.
The USB devices that you would like to use in the remote session must be plugged in before starting Remote Desktop Connection; devices plugged in during the session will not be redirected.
Have you tried to reconfigure the USB device?
Please try to remove that device and reconfigure with use of following command and check whether issue get resolved.
Set-RDVirtualDesktopCollectionConfiguration –CollectionName YourCollectionName –CustomRdpProperty "usbdevicestoredirect:s:{6bdd1fc6-810f-11d0-bec7-08002be2092f }"
where {6bdd1fc6-810f-11d0-bec7-08002be2092f} is the System-Defined Device Setup Class GUID.
More information.
1) RemoteFX USB Redirection in Windows Server 2012 and Windows 8
2) Introducing Microsoft RemoteFX USB Redirection: Part 3
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support

Win2008r2 RDS farm with "Remote Session Environment" set, Need on screen keyboard as well.

Similar Messages

Maybe you are looking for