54
You can type "Query User" into a command prompt on the remote machine to get a very quick look
35
Run the "qwinsta" command on the server, or with the /server:servername switch.
>qwinsta /?
Display information about Remote Desktop Sessions.
QUERY SESSION [sessionname | username | sessionid]
[/SERVER:servername] [/MODE] [/FLOW] [/CONNECT] [/COUNTER] [/VM]
sessionname Identifies the session named sessionname.
username ...
24
You can see in the Task manager users Tab
23
Generally, I'm opposed to the idea that a Windows server should be rebooted on a regular schedule EXCEPT in relation to TS/RDS servers. We reboot ours every day. It clears up old sessions, releases in use resources (CPU, RAM, file handles, etc.), so my opinion and suggestion would be that you do configure a daily scheduled reboot of your RDS servers.
Note ...
17
Users refuse to log off instead of disconnect
Setup the appropriate group policies to auto-logoff them. You can separately control an idle timeout and logoff. That should certainly minimize some of the issue during the day.
I restart my 3 server TS farm daily at 3:00am. Because, yes crap can build up over time when you have lots of people using a single ...
13
Finally I found solution!
First of all, name of the server had to be changed by adding DNS suffix. For example, if you want to connect to the server by srv.example.com address, your server name should be "srv" and DNS suffix "example.com". It can be done in computer properties.
Then setup licensing in "RD Licensing Manager"
Now issue certificate to domain ...
11
I've found myself in the same scenario as you. Deploying Remote Desktop on a standalone Server 2012 box is quite hard, because the guys at Microsoft don't let you run this on a domain-less network and if you do, you can't manage all the settings.
So, you can install a workgroup-based-box and get the Remote Desktop roles working on it. We need also to ...
10
Yes, you can use your DC as a RDP Licensing server. I do so myself. However, after a while, I started thinking I should have made it a single purpose VM instead but not because of any problem, just a foreseeable future where it ties in this function into my DC. But I have no problem with this set up particularly.
So my recommendation is that while it is ...
10
Open Server Manager.
Navigate to the Remote Desktop Services navigation area.
Select the Overview branch.
Under the Deployment Overview area, select Edit Deployment Properties from the Tasks menu.
Select the RD Licensing page of the displayed dialog.
Specify the licensing mode and the license server, then click OK.
9
I'm going to posit that you can't do this. With NLA (network-level authentication) enforced, a user cannot log in remotely and change his or her password.
You can use tsconfig.msc on the Remote Desktop server, right-click the RDP-Tcp connection and choose Properties, and change the security layer drop-down menu to 'RDP Security Layer,' but then you lose NLA. ...
9
In the end, this issue was caused by incorrect certificate installation in the Remote Desktop Gateway. When I opened the RD Gateway Manager it gave me options to select a certificate to import and use.
It has nothing to do with Network Access Protection, although through this process I ended up adjusting some of my policies anyway to lock it down further.
9
There are two components required for users to log on to a server via RDP: User Rights and Permissions.
Rights: Users must have the "Allow logon through Remote Desktop Services" user right.
Permissions: Users must have the "User Access" and "Guest Access" permission set to Allow on the RDP-Tcp protocol.
By default, users or groups in the local Remote ...
8
Mark, I had a lot of fun tracking this down for you. I can totally see where your line of thought is, but you're asking the wrong question. The question should be "Why can't I establish a 'servermanagerworkflows' session on my machine?"
If you look in the $enf:systemroot\system32\WindowsPowerShell\v1.0\Modules\RemoteDesktop and open the ...
7
I have found a solution to the tsadmin problem. Copy these files from a 2008 server to the Windows 2012/8 computer under C:\windows\system32:
tsadmin.dll
tsadmin.msc
umcRes.dll
wts.dll
Then import the following registry settings:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MMC\SnapIns\FX:{3FCE72B6-A31B-43ac-ADDA-120E1E56EB0F}]
"ApplicationBase"=hex(2):43,00,...
7
As I was setting up an environment in a lab to try this (a simple RDS deployment wihtout a domain), I found the answer to your question, though it's not the one you want to hear.
RDS in [Server 2012 and 2012 R2] requires all its servers to be added to a domain. That, according to a program manager at Microsoft on the Remote Desktop Virtualization team, who ...
7
Remote Desktop Services actually have a pretty rich WMI object library you can take advantage of to query and manipulate the configuration. As of Vista/2008, it's located in the root\cimv2\TerminalServices namespace. Here's a good place to start on browsing what's available: Remote Desktop Services Configuration classes
In regards to your specific ...
7
You will get this logon type 3 when you are using NLA (Network Layer Authentication) as the authentication type since it will try and pre-authenticate you prior to giving you RDP access.
You can test this by changing the security layer to RDP Security Layer. Instructions and detailed information on how to do so are found here: Configure Server ...
7
Start by checking the basics as described in Microsoft's technet article on event 1130:
Make sure the Remote Desktop server has network connectivity to the licensing server. If you can ping the licensing server, you're probably OK as far as the basics go (but see below).
Make sure the license server is configured to be automatically discovered. Use the "...
7
Yes, you can disable Low disk space checks by adding this registry value (DWORD, data: 1) NoLowDiskSpaceChecks
here:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
6
You can use a script to collect this information. Not as ideal/simple, but it will get the job done. Here is a Powershell script that should work on Windows 7/Server 2008r2 or higher (this code can be further cleaned up on newer Powershell versions, but I have kept it as-is for backwards compatibility):
$LogName = 'Microsoft-Windows-TerminalServices-...
6
Essentially my question boils down to: does a computer joined to the domain automatically trust certificates issued by a CA on the same domain, or would they still need to be manually installed on each client device?
Typically, the root certificate for your internal PKI is distributed via GPO to all clients. This makes it "automatic"
6
Depending on your cash, time, and the savviness of your users, another idea could be to stand up a second server. You'll still need to reboot occasionally, but you seem to be reaching the limits of a single server.
You should be able to use the same client CAL's (licensing's not my strongest area), and depending on your virtualization solution an additional ...
5
If you getting "Invalid Parameter" when you trying Ryan's solution, make sure you are using elevated command prompt (run as administrator).
5
Support tsconfig.msc similar to Stefan's solution for tsadmin.msc
1) Add these files (from a 2008 server to the Windows 2012/8 computer under C:\windows\system32):
tsconfig.dll
tsconfig.msc
2) Import the registry settings:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MMC\SnapIns\FX:{3a74debb-f903-46a6-ac59-b6c3f565d6b4}]
"ApplicationBase"=hex(2):43,00,3a,00,...
5
Apparently MS botched the instruction somewhat.
I believe you need to create the cert request in iis manager on the rdg gateway computer. The request needs to specify the fqdn used by the clients to connect over the internet. For processing the request signing you use a CA trusted by your client computers. If you have full control over the client computers ...
5
As of 2008 a Microsoft employee indicated there was "no official way" to accomplish this. Given the six intervening years you'd like to think there has been progress, but I'm not seeing that there has been.
If I were in your situation I'd try to find a small Win32 HTTP/HTTPS proxy that can be "pointed" at an upstream proxy and configured to provide ...
5
I have actually ran into this on a couple of servers running 2012 R2 recently and this solved it. Must be a 'feature'.
http://www.tbngconsulting.com/blog/bid/404182/Licensing-mode-for-the-Remote-Desktop-Session-Host-is-not-configured
In PowerShell, do the following:
$obj = gwmi -namespace "Root/CIMV2/TerminalServices"
Win32_TerminalServiceSetting
$...
5
The answer is:https://technet.microsoft.com/en-us/library/cc754272.aspx
By default, Remote Desktop Services allows users to disconnect from a
remote session without logging off and ending the session. When a
session is in a disconnected state, running programs are kept active
even though the user is no longer actively connected.
To understand ...
5
Unfortunately, there is no PowerShell command that adds servers to Server Manager. Therefore you have to edit ServerList.xml before starting Sever Manager and this can be done with PowerShell.
1. Close Server Manager
get-process ServerManager | stop-process –force
2. Set path to existing ServerList.xml file
$file = get-item "$env:USERPROFILE\AppData\...
5
I agree that the problem can be fixed under Win 2016, but I had to do 2 things in parallel:
Goto „HKEY_CURRENT_USER\Control Panel\Desktop\LogPixels“
=> if LogPixels does not exist then create a new DWORD-value
=> Type in Decimal Value:
96 for Smaller 100%
120 for Medium 125%
144 for Larger 150%
Then Goto „...
Only top voted, non community-wiki answers of a minimum length are eligible