TSplus as an alternative to RDS without paying RDS license fees to microsoft
Hello, We are evaluating whether to use TSplus (https://www.terminalserviceplus.eu/) as an alternative to Microsoft RDS/Terminal Server. According to TSplus we can not install or uninstall the RDS role, so we do not use RDS CALs and use TSplus CALs. This way it would not be necessary to pay for Windows Remote Desktop licenses. Is this correct? I can't find any information from Microsoft about it reading documentation. As I see it is correct that using TSPlus without installing Microsoft RDS it would not be necessary to pay Remote Desktop licenses. Could someone confirm me that it is so?Quser hangs and how to find the citrix load index equivalent
Dear all, at first, I was mostly active in a german forum, but most experts of it don't speak german... so I think in english I get more contact to admins with good knowledge. But could you give me some hints which foum, community here is the most activ one for questions on topics Windows Server, Remote Desktop Services and Active Directory? I found this sites and I am not sure how to select the right one: https://learn.microsoft.com/en-us/answers/tags/301/remote-desktop https://learn.microsoft.com/en-us/answers/tags/220/windows-server https://techcommunity.microsoft.com/t5/windows-server/ct-p/Windows-Server https://techcommunity.microsoft.com/t5/windows-server-for-it-pro/bd-p/WindowsServer Now to my current question on Remote Desktop Services: We have a farm with over 30 rdsh. Since some weeks we have login issues. We encountered, that we also have issues with getting session information with the "quser" command. The prompt hangs and no output is done. We have no idea why this happens. Did anybody seen this before? Second question: Some years ago we had Citrix Terminalservers. There was a thing called load index. The Citrix TS put up their load to the max value of 10000 during a logon process from a user. Afterwards it comes down to a lower value based on some math rules for ressources and so on. I haven't found any command in RDS to get a value alike the load value. Is RDS doing something similar to the load index like Citrix? Where can I get this value? How does a rdsh prevent too many logins at the same time? If we force simultaneously logons the user gets a message with i assume is in english "remote desktop services utilized" (in german Remotedesktopdienste ausgelastet). And also the quser command seems to take a "short break" and the output comes some seconds later. Best regards, Stefan
Remote App strange behavior with saved credentials
This problem has confused me for awhile now, and I haven't been able to find any solution. I'm not sure if this is an issue with the mstsc.exe on the client, or if it's an issues server side at this point. The bottom line issue, is that the "Remember me" checkbox for the remote app credentials will stop showing up, preventing the user from saving his or her credentials for the remote app connection. So, here's the scenario. I have a Windows Server 2016 environment, with it's own domain that provides access to applications to remote clients via Remote App services. Joining the clients to the domain isn't an option. We have a publicly trusted certificate deployed in our Remote App servers. When we setup a client machine, we do so through the Remote App and Desktop Connections control panel app, and enter the RDweb url. The client machines are a mix of Windows 7 machines to Windows 10. When we give the users their credentials, it's always in the format of <username>@<domain name> not <domain name>\<username> When we initially setup the client machine, usually the user will save his credentials. Which is fine. However, when their password expires, or when they want to change it through the web interface, things get weird. When everything is working fine, in the windows credential manager there are two entries, both in the Windows Credentials section. 1) <public FQDN of remote app collection> with the username in the format of <username>@domainname> 2) TERMSRV/<public FQDN of remote app collection> with the username in the format of <username>@domainname> When the users change their passwords via the RDWeb portal page, obviously it doesn't update their saved credentials. The expectation would be that the remote desktop client would prompt them for their new password, with the option to save it, as how it was when it was originally setup. And this is what happens, some times. They get prompted for their password, with a screen that shows them their username in the <domain>\<username> format, with the remember me box. Eventually though, it will break. And this is 100% repeatable by changing the password on the AD side, and trying to conenct again from the client. At some point, one of those times they change their password, they will be prompted for their new password with a credential screen with no remember me box. When it does this. if you look in the credential manager, there will be 3 entries. Windows Credentials: TERMSRV/<RDSessionHost FQDN> with username in <domain name>\<username> format TERMSRV/<public FQDN of remote app collection> with the username in the format of <username>@domainname> Generic Credentials: TERMSRV/<public FQDN of remote app collection> with username in <domain name>\<username> format After this happens, the users will never get the remember me box again, unless they completely delete the session from their control panel, and re-add it. Manually fixing the credentials in the credential manager to make them match how they were when it was working fine works temporarily, but will break again next time they reboot their computer, or the session disconnects from the servers. I’m not sure what to do with this next. If anyone has any ideas, it'd be greatly appriciated.
Cameras To Redirect Custom RDP Property Does not Work
In mstsc.exe, under Local Resources > More.. there is an option for Video capture devices. Which lists my webcam and Devices that I plug in later. I have determined that this option the an RDP file is the string camerastoredirect:s:* So what I have done is ran the following command on my Connection Broker so that this line will be added to rdp file generated by the feed. Set-RDSessionCollectionConfiguration -CollectionName $CollectionName -CustomRdpProperty "camerastoredirect:s:*" When I run Get-RDSessionCollectionConfiguration I see the value has been added to CustomRdpProperty along with "use redirection server name:i:1" which seems to be a default on all collections. What I am trying to solve is, why does my custom RDP property not apply to the RDP files that are downloaded.
Unable to install RDS roles on windows server 2019
Problem: Per my knowledge all requirements listed above, checks out: Domain Admin is also member of local admin group: a) What is causing this problem? b) How can I fix it? C) This is a fresh install of server 2019 Any help would be appreciated, thanks!Server 2019 RDS HTML5 Webclient with Azure Application Proxy - Web Socket Error
Hi all, I have a small Server 2019 RDS environment running on-prem consisting of three servers. 1 x RDS Gateway/Web Access/Broker 2 x RDS Session Hosts I am using Azure Application Proxy to enable remote working. I have installed the new webclient (/rdweb/webclient/) and if I connect via the App proxy, the setup works perfectly for accessign remote apps and full desktop while making use of the RDP file option, however if I switch to the HTML5 browser option, connections fail and I receive a websocket error (pasted below) Both RDP and HTML5 browser options work perfectly if I access /rdweb/webclient from an on-prem machine. Does anyone have any advice with regards RDS webclient via App Proxy? PD websockettransport.cpp(304): OnErrorFromJS() at Object.Logger.a.errorWithoutTimestamp (https://domain.com/RDWeb/webclient/js/client.93f1e024.js:1:2848),at Function.<anonymous> (https://domain.com/RDWeb/webclient/js/client.93f1e024.js:5:15934),at methodCaller_emscripten$$val_$emscripten$$val_emscripten$$val$ (eval at new_ (https://domain.com/RDWeb/webclient/js/rdcore.eb28ca45.js:86:1501056), <anonymous>:6:26),at __emval_call_method (https://domain.com/RDWeb/webclient/js/rdcore.eb28ca45.js:86:1522590),at S$a (https://domain.com/RDWeb/webclient/js/rdcore.eb28ca45.js:126:82431),at Djd (https://domain.com/RDWeb/webclient/js/rdcore.eb28ca45.js:134:115033),at invoke_viiiii (https://domain.com/RDWeb/webclient/js/rdcore.eb28ca45.js:86:1574347),at R$a (https://domain.com/RDWeb/webclient/js/rdcore.eb28ca45.js:126:80844),at Bjd (https://domain.com/RDWeb/webclient/js/rdcore.eb28ca45.js:134:114867),at invoke_viii (https://domain.com/RDWeb/webclient/js/rdcore.eb28ca45.js:86:1573937),at H0a (https://domain.com/RDWeb/webclient/js/rdcore.eb28ca45.js:126:120009),at Rfb (https://domain.com/RDWeb/webclient/js/rdcore.eb28ca45.js:116:167461),at zjd (https://domain.com/RDWeb/webclient/js/rdcore.eb28ca45.js:134:114736),at invoke_vii (https://domain.com/RDWeb/webclient/js/rdcore.eb28ca45.js:86:1573548),at C1a (https://domain.com/RDWeb/webclient/js/rdcore.eb28ca45.js:126:157205),at zjd (https://domain.com/RDWeb/webclient/js/rdcore.eb28ca45.js:134:114736),at invoke_vii (https://domain.com/RDWeb/webclient/js/rdcore.eb28ca45.js:86:1573548),at D1a (https://domain.com/RDWeb/webclient/js/rdcore.eb28ca45.js:126:158017),at Bjd (https://domain.com/RDWeb/webclient/js/rdcore.eb28ca45.js:134:114867),at dynCall_viii_472 (eval at makeDynCaller (https://domain.com/RDWeb/webclient/js/rdcore.eb28ca45.js:86:1497203), <anonymous>:4:12),at OnMessageCallback$Invoke [as Invoke] (eval at new_ (https://domain.com/RDWeb/webclient/js/rdcore.eb28ca45.js:86:1501056), <anonymous>:9:1),at Worker.<anonymous> (https://domain.com/RDWeb/webclient/js/rdcore.eb28ca45.js:86:106254) 2020-12-20T15:06:53.340Z WebSocketTransport(NORM): WebSocket closed, url=wss://domain.com:443/remoteDesktopGateway?CorId=%7Bac79013d-72f2-4a53-bfc0-6b6bf31e0000%7D&ConId=%7B539f728e-ab48-4fe8-91fd-32cd49afa8a1%7D&ClGen=HTML%3D1&ClBld=Type%3DRdClient%3B%20Build%3Dprivate&AuthS=SSPI_NTLM, wasClean=false, code=1006, reason="" 2020-12-20T15:06:53.516Z Connection(ERR): The connection generated an internal exception with disconnect code=ConnectionBroken(8), extended code=<null>, reason=WebSocket closed with code: 1006 reason: Thrown in thread 399652 at: websockettransport.cpp(335) Call Stack: at imb at fmb at Tp at Djd
RD Web Client (HTML5) Redirected devices
Hi, I've recently installed the new HTML5 RD Web Client and all is working fine, with the exception of smart card redirection. Our users need to authenticate to a secure website (using RDS) with a smart card. We aren't using smart cards to authenticate to RDS, or the VM. When I connect to the VM through RDS, the options for device redirection are only clipboard and printer, not no smart card. If I download the RDP file and connect through mstsc.exe, the smart card works fine. It's only if I open the remote resource in the web browser the smart card isn't redirected. I've enabled the option on the RDS collection to allow smart card redirection, and it's still not working. Am I missing something, or is smart card redirection not available through the web browser session? CheersProblem with kb KB5018411 on domain controllers
After we install KB5018411 on WS 2016 domain controllers, we cannot authenticade rdp connections using dns name in mstsc against servers and client, in network capture we see Kerberos errors 1039 9.056341 10.4.1.6 10.4.1.72 KRB5 268 KRB Error: KRB5KDC_ERR_PREAUTH_REQUIRED then 1031 9.054642 10.4.1.6 10.4.1.72 KRB5 155 KRB Error: KRB5KDC_ERR_TGT_REVOKED and that is occur everytime we can acces rdp with dns name connection with ip address in mstsc client works edit here is the same problem on reddit KB5018411 installed friday, can't RDP to terminal server (on prem)? : sysadmin (reddit.com)
Server 2019 RD-Connectionbroker Rolle broken after Windows Update
Hi, we have a RD session deployment with 1 Connection Broker/Web Access, 8 Session Hosts for RD and 1 Session Host for Apps and 1 License Server. All Servers are VM´s on VMware running Server 2019 DC running perfect for a year now. Some Weeks ago after an Windows update i noticed that i was no longer able to see and configure the deployment in Server Manager on the Connection Broker (I can see and in parts manage the deployment from other Servers Server Manager) Deployment is still working and users are able to connect, load balancing also works. On The Connection Broker it just says: "Es ist keine Remotedesktopdienste-Bereitstellung im Serverpool vorhanden. Führen Sie zum Erstellen einer Bereitstellung den Assistenten zum Hinzufügen von Rollen und Features aus, und wählen Sie die Installationsoption "Remotedesktopdienste" aus." Powershell get-rdserver output: PS C:\Windows\system32> get-rdserver get-rdserver : Der RD-Verbindungsbrokerserver ist nicht verfügbar. Stellen Sie sicher, dass Sie eine Verbindung mit dem RD-Verbindungsbrokerserver herstellen können. In Zeile:1 Zeichen:1 + get-rdserver + ~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [Write-Error], WriteErrorException + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Get-RDServer Eventlog: ID1280 "Die Remotedesktopdienste konnten keine Verknüpfung mit dem Verbindungsbroker auf dem Server "VSTSBro01.xxx.de" herstellen. Fehler: Die aktuelle asynchrone Nachricht wurde vom asynchronen Verteiler gelöscht, da eine neue Nachricht vorhanden ist, die die aktuelle Nachricht überschreibt." ID2056 "Der Remotedesktop-Verbindungsbrokerserver konnte die Ziele für den Anbieter "NULL" nicht aus der Datenbank auflisten. Name der in einem Pool zusammengefassten virtuellen Desktopsammlung: NULL Fehler: Die Anmeldung bei der Datenbank ist fehlgeschlagen." Things i tried so far: Configuring Connection Broker HA, WID got successfull migrated to dedicated VM with SQL Server But cause the connection Broker is not available i couldnt add a second connection broker. Restoring Connection Broker VM from Backup, after restore i could see and manage the deployment again but had to reboot the VM after Domain Trust reset. Update got installed with that and Problem is the same again. Update that got installed at that time: Edge Stable 103 x64 Build 103.0.1264.49 2022-07 Cumulative Update for Windows Server 2019 for x64 based Systems KB5015811 I guess something broke the connection to the WID and its no longer able to load the information. But why is it able to show the deployment on other servers? First pic Broken CB second pic other Server Any Ideas how to fix that? Thx!
