We have an RD farm with two session hosts and a gateway that has been working. It has been in use for several months and I don't think anything was changed. I was informed that it stopped working and I do see evidence of this. I've been troubleshooting and see that the hosts both left the farm last week with this error message:

Log Name:      Microsoft-Windows-TerminalServices-SessionBroker-Client/Operational
Source:        Microsoft-Windows-TerminalServices-SessionBroker-Client
Date:          7/19/2013 3:06:42 PM
Event ID:      1283
Task Category: Connection Broker Client terminate
Level:         Information
Keywords:      
User:          NETWORK SERVICE
Computer:      citiclo-svts08.citidc.com
Description:
Remote Desktop Services successfully left a farm on the Connection Broker server gate.citidc.com.


Since then whenever someone connects we get three events in a row in the same log:

I have RemoteFX USB Redirection up and running. However i have a device that when redirected if accessed will cause the VM to Blue Screen. I am looking for ideas here. Its an intraoral camera sopro 617. I have tried both windows 7 and server 2012 as the VM and both crash

Here is a debug of the mini dump

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

WORKER_THREAD_RETURNED_AT_BAD_IRQL (e1)
Arguments:
Arg1: fffff88003f08ee4, address of worker routine (do ln on this to find guilty driver)
Arg2: 0000000000000002, IRQL returned at (should have been 0, but isn't).
Arg3: fffffa80023640f0, workitem parameter
Arg4: fffffa80023641e8, workitem address

Debugging Details:
------------------


FAULTING_IP: 
tsusbhub!CKDynamicVC::static_SingleThreadPostReadCompletion+0
fffff880`03f08ee4 48895c2408      mov     qword ptr [rsp+8],rbx

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xE1

PROCESS_NAME:  System

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff8000295eef8 to fffff800028d6c00

STACK_TEXT:  
fffff880`03165ca8 fffff800`0295eef8 : 00000000`000000e1 fffff880`03f08ee4 00000000`00000002 fffffa80`023640f0 : nt!KeBugCheckEx
fffff880`03165cb0 fffff800`02b74ede : 00000000`00000000 fffffa80`01970b50 00000000`00000080 fffffa80`018c1040 : nt! ?? ::FNODOBFM::`string'+0x58286
fffff880`03165d40 fffff800`028c7906 : fffff880`02f68180 fffffa80`01970b50 fffff880`02f72fc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`03165d80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16


STACK_COMMAND:  .bugcheck ; kb

FOLLOWUP_IP: 
tsusbhub!CKDynamicVC::static_SingleThreadPostReadCompletion+0
fffff880`03f08ee4 48895c2408      mov     qword ptr [rsp+8],rbx

SYMBOL_NAME:  tsusbhub!CKDynamicVC::static_SingleThreadPostReadCompletion+0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: tsusbhub

IMAGE_NAME:  tsusbhub.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce7abde

FAILURE_BUCKET_ID:  X64_0xE1_tsusbhub!CKDynamicVC::static_SingleThreadPostReadCompletion+0

BUCKET_ID:  X64_0xE1_tsusbhub!CKDynamicVC::static_SingleThreadPostReadCompletion+0

Followup: MachineOwner

Hi there,

We have a terminal server that users from other sites RDP into. If they are on the default domain, they can use saved credentials just fine. However if their saved credentials is one of our child domains, then they get the logon screen with the domain set to the default domain - so
their saved credentials do not work.

I do not believe this is a setting on the client's end - I can test from one of the child domains, and provided I use saved credentials from our primary domain, I can log in without prompting. However if I use saved credentials from a child domain, then I get the logon screen with the domain set back to the primary domain.

There were a couple of GP settings I thought might be creating this behaviour so I have disabled them as follows:

Originally, the following setting was set to the primary domain: Computer Configuration > Policies > Administrative Templates > System > Logon > Assign a default domain for logon. I have now set this to disabled.

I also noticed a custom ADM template with a registry setting SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon \ DefaultDomainName set to the primary domain - I have set this to not configured, removed the template, and deleted the registry key and rebooted the server.

The terminal server is Windows 2008 R2 standard.

Any advice or pointers would be appreciated :-)

Hi I recently installed Server 2012 and started with RDS installation. After I performed 1st time quick installation (Web Access, Broker, Session host), installation failed according to the setup, but I was able to start remote apps, connect to webaccess page locally... Because it failed I removed Roles/Features and I started again, and from that moment I have ghost files (2x calc, paint ... which was left from the prevoius installation ) and I am able to connect to web access, but I was not able to start any of the programs. Error is " This computer can't connect to the remote computer. Try connection again if it continues contact the owner of the computer or your Administrator". So I removed roles several times including IIS but still nothing .

From the outside I use SBS 2011 as a gateway and it doesn't show any application, I can log into to SBS Web access but it won't show anything (empty page like no app is published). This happened also from the first time so I thought that it is because installation failed so sessions are not registered. I must say here that I have server 2008 in parallel and when I change in gateway web access which server to look, and if I choose 2008 everything works without any problem, with this I concluded that it must be something with Server 2012. 

Event viewer on SBS for RDS it says that I am successfull connected and disconnected. Session lasts for 2 sec.

Event Viewer on Server 2012 ,

Error 1306 Remote Desktop Connection Broker Client failed to redirect the user domain\user.Error: NULL

Error 802 RD Connection Broker failed to process the connection request for user domain\user. Error: Element not found. 

Error 1296 Remote Desktop Connection Broker Client failed while getting redirection packet from Connection Broker. User : domain\user . 
Error: Element not found. 

Any Ideas ?

Hello,

I have windows server 2012 foundation with remote desktop services, I have activated license server but i found a warning. A yellow triangle withan exclamation mark. Two lines oflicenses installedinstead ofa

Hi,

I have server 2008 r2 sp1 that every 3 minutes report Schannel event.

after number google searches I haven't been able to find a solution, hope to find here.

how do I fix it?

thanks to helpers.

I have an SBS 2011 Standard Server with a member Windows 2012 Server that is acting as a remote app host.  User are able to log onto the server and run the remote app.  However Group Policy is only working if the the user is logging on from a domain joined computer.  If the user logs on from a home computer certain Group Policies don't work: for example the Group Policy is set to sign off the user rather than disconnect when the user exits the remote app. This works on the domain but not when the user connect over the internet. The user is not signed off. 

What settings do I need to change to get this to work for user connecting from the internet? The users connecting remotely have accounts on the SBS Server.

Justin

We are planning to deploy Session based Windows 2012 based RDS. Currently we are testing this in a lab scenario.

Our lab consist of the following setup

• 1 x Win2012 based Domain Controller with DDNS
• 1 x Win2012 based RD Connection Broker
• 2 x Win2012 based RDWeb Access in Windows NLB
• 3 x Win2012 based RD Session Host
• We have created Session Collection and included the 3 RD session Host + enabled User Profile Disk [UVHD]
  

Everything work fine as of now.

Just wish to know the following

1. If we are already using User Profile Disk [UVHD] to store users profile then when do we use the "Remote Desktop Service Profile" AD user properties setting?
   
2. What are the pro's and cons of using "Remote Desktop Service Profile" AD user properties setting v/s User Profile Disk [UVHD] ?

Hi.

We have a mac and try to connect to Windows server 2008. There is a Ciso Firewall and the port 3389 is open for RDP.

We get the message "The connection tothe Windowsbasseconditionedcomputer was brokenbecause therewas a problemin connection with thelicensingprotocol"

Then we try to antoher Windows server 2008 but there have we firewall linksys and all works.

Must Mac and rdp have more ports open in the firewall or must some other service be start on the terminal server?

Best regards

Rolf Andrén

We are working on an new desktop for our users, it will be based on 2008 file and DC's and 2012 RDS Servers, we have the 2012/Windows 8 ADMX templates loaded, At the moment we are in the testing phase and we notice som strange behavior.

We have some default programs installed we would like to place as tiles/shortcuts on the Start Menu, we are using Group Policy Preferences for them to create new shortcuts.

When we create/update/replace an shortcut for the start menu (per user of all users) we see different behaviour in the start menu.

1: When there is an existing user profile (traditional or in an User Profile Disk) the shortcut get's added to the Apps part AND in the main start screen (as desired)

2: When it is an new user profile (also traditional or in an UPD) the shortcut will be added to the Apps part, but NOT to the main start screen, also you can logon, logoff or change the type of shortcut in the GPP, it will never be added to the user first start screen (but it is in the All Apps part)

Does someone know a way how we can achieve our goal or what we are doing wrong?

First,thanks for the help.
I havea test labfor VDIandfollowthe process describedhere.

http://blog.itvce.com/?p=1569

i only change the HD ubication.
When I createa collection,when I selectthe template,it shows methis error: "There isa virtual hard diskexposed to thevirtualdesktop"
You havesome helpon this?

i suposed it´s a hard disk permissions.

thanks for everything.

http://kinomakino.blogspot.com

Are these cals to be used with RDS?  I have multiple copies of 2008 r2 all of which came with a card that says CALs for Microsoft Windows Server 2008, but none of which actually include a license which means I can't install the license.  

What am I missing?  

Thanks, Justice Schmidt

It seems there is a lot of information related to 2008 server but I specifically want 2008 R2 for Remote Desktop Gateways services. This is for a call center that wants 100 remotes to be able to access the 3 existing enterprise servers acting as remote desktop servers in a round robin configuration.

The questions I really have is in sizing the RD gateway servers and available bandwidth. Should I cluster 2 with NLB for dependability?

I have found some documentation but, it seems outdated. Another question would be if I should go with a never version of server. Would I need to get new licensing for all clients internally and externally? would there be issues in connecting with the 2008 servers on the back end?  This would become cost prohibitive.

Hello,

I am currently building a new Remote Desktop farm in Windows 2008 R2 with 2 hosts who holds the roles of Session Host, Web Access and Connection Broker (using DNS Round Robin and failover cluster management).

The client will be Thin Client starting an RDP session which gives them a full desktop, and also Windows XP and Windows 7 computers.
The Windows XP and Windows 7 computers will use the Remote Desktop farm to access some applications on them via the RD Web Access (using single sign on).

And here is the problem: when the users start a RemoteApp Program, and this is idle for more than 10 minutes, they get a lock screen and have to re-enter their credentials.

I know I could disable this by GPO (using loopback) by disabling the screensaver, but this will disable the screensaver for all users, including the ones who have a full desktop using a thin client.

The goal is to disable the screen lock for RemoteApp Programs only, but keep it for the full desktop users.

Extra info: users can sometimes log on to a thin client and receive a full desktop, or use RemoteApp Programs from a Windows computer with the same credentials.

Whenever I use RDP through a ICA session it was always choppy since windows 7 / 2008.  XP / 2003 was never an issue.  I found that in windows 7 / 2008, you chose the "Basic" theme under personalize and all was good, this is not the same in 2012.  How can we make it speed up?

William Lee

Hi all

I have implemented following remote desktop solution for a company.

Windows server 2012 remote desktop services, two connection broker servers high available with SQL server 2008 R2 database on a separate server. And two windows server 2012 session broker servers high available configured with a hardware load balancer balancing session load. IP address redirection is disabled on all servers so hardware load balancer is balancing load and initiating the RDP session. Session persistence is managed by connection broker.

Everything working fine with my solution, session persistence and load balancing is also works as expected. Except some of the users connecting from remote branch experience connection disconnect when minimized the Remote desktop connection and also while working.

Then I have configured the keep-alive setting on session host servers using group policy and Restart servers to apply them. I have checked clients using network monitor, they are receiving the keep-alive packet from hardware load balancer IP. but I have still facing the problem of client disconnecting when minimized, but this is not occur to every user.

Please provide me a solution.

Asitha

A single user is receiving a Runtime Error when logging into RD Web Access (Server 2012). I did notice an event pop up in the Application log:

Level: Warning

Source: ASP.NET 4.0.303190

Event ID: 1309

Task Category: Web Event

Event code: 3003 
Event message: A validation error has occurred. 
Event time: 8/5/2013 9:23:11 AM 
Event time (UTC): 8/5/2013 1:23:11 PM 
Event ID: db80b8f6c5f54803a050624241698c18 
Event sequence: 3302 
Event occurrence: 13 
Event detail code: 0 
Application information: 
    Application domain: /LM/W3SVC/1/ROOT/RDWeb/Pages-2-130171705261678145 
    Trust level: Full 
    Application Virtual Path: /RDWeb/Pages 
    Application Path: C:\Windows\Web\RDWeb\Pages\ 
    Machine name: VDICB12KDC01 
Process information: 
    Process ID: 1044 
    Process name: w3wp.exe 
    Account name: IIS APPPOOL\RDWebAccess 
Exception information: 
    Exception type: HttpRequestValidationException 
    Exception message: A potentially dangerous Request.Form value was detected from the client (UserPass="sfjt<KADM").
   at System.Web.HttpRequest.ValidateString(String value, String collectionKey, RequestValidationSource requestCollection)
   at System.Web.HttpRequest.ValidateHttpValueCollection(HttpValueCollection collection, RequestValidationSource requestCollection)
   at Microsoft.TerminalServices.Publishing.Portal.FormAuthentication.TSFormsAuthentication.ExtractInfoFromForm(HttpContext objHttpContext)
   at Microsoft.TerminalServices.Publishing.Portal.FormAuthentication.TSFormsAuthentication.OnAuthenticateRequest(Object source, EventArgs e)
   at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
   at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

 
 
Request information: 
    Request URL: https://<server>:443/RDWeb/Pages/en-US/login.aspx 
    Request path: /RDWeb/Pages/en-US/login.aspx 
    User host address: 10.77.110.77 
    User:  
    Is authenticated: False 
    Authentication Type:  
    Thread account name: IIS APPPOOL\RDWebAccess 
Thread information: 
    Thread ID: 14 
    Thread account name: IIS APPPOOL\RDWebAccess 
    Is impersonating: False 
    Stack trace:    at System.Web.HttpRequest.ValidateString(String value, String collectionKey, RequestValidationSource requestCollection)
   at System.Web.HttpRequest.ValidateHttpValueCollection(HttpValueCollection collection, RequestValidationSource requestCollection)
   at Microsoft.TerminalServices.Publishing.Portal.FormAuthentication.TSFormsAuthentication.ExtractInfoFromForm(HttpContext objHttpContext)
   at Microsoft.TerminalServices.Publishing.Portal.FormAuthentication.TSFormsAuthentication.OnAuthenticateRequest(Object source, EventArgs e)
   at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
   at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

Windows Server 2012 std ed rdp license issue. I had working RDP connections with  my Actionpack subscription, with 10 rdp cals. Then it noticed some temp lic., for RDP expired, and all connections suddenly disabled.  The manager shows 10 licenses are ok and active. The diagnostic shows a expired temp and a 10 that is ok.  But it looks like it defaults to the expired lic.  I did uninstall/reinstall RDP lic. I need some help fixing this, I did install all missing RDP features etc. But that is not getting me there. I need more info to fix this.  P.S. I am using Hyper-V Thanks

I'm getting the following error message when trying to remote desktop into a server.  I was able to remote in last week and now I can't.  I'm unsure what changed.  I've rebooted the server but still can't figure out what's causing this problem. Your help would be appreciated.

Error Message:

"The remote session was disconnected because there are no Remote Desktop License Servers available to provide a license.  Please contact the server administrator."