48

You can use qwinsta from the command line to display the current RDP sessions. qwinsta /server:computer01 SESSIONNAME USERNAME ID STATE TYPE DEVICE console 0 Conn wdcon rdp-tcp 65536 Listen rdpwd administrator 2 Disc ...


32

Yep, tsadmin is gone. Kinda' sucks. There's RDMS through Server Manager and the Remote Desktop Powershell cmdlets (get-command *RD*), but those both require that a full Remote Desktop Services deployment exist on that server. Those don't work on servers without RDS deployments or on workstations. You can use Task Manager... or, if you want something ...


32

This seems to be what you are looking for: http://support.microsoft.com/kb/2258492 To deny a user or a group logon via RDP, explicitly set the "Deny logon through Remote Desktop Services" privilege. To do this access a group policy editor (either local to the server or from a OU) and set this privilege: Start | Run | Gpedit.msc if editing ...


13

Before I get to your primary issue I'd like to point out that the fact that you are getting the message {ErrorPrintf(): LoadString failed, Error 15105, (0x00003B01)} Error [15105]:The resource loader cache doesn't have loaded MUI entry. is an indication that something has become corrupted on your system. MUI is the multilingual user interface. Is the ...


13

Just open the Users tab in Task Manager. You'll get a full list of user sessions, their states, and running processes. Also you can log them off through the right-click menu. It seems this is the replacement for tsadmin


11

After some more searching on Google, I managed to find a solution. The login timeout is set in the registry, with the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp Simply add a new DWORD value for LogonTimeout, containing the timeout value in seconds. After that, restart the Terminal Services service. (If you ...


11

I have several thousand folks around the globe that connect and use accounting / office software daily. As long as their response times are under 300ms we don't get complaints but ymmv. As proof of concept I set up one of our user's switches using a linux / netem box and kept pushing up the latency / packet loss until I started having complaints. It was a ...


10

I feel like this is sort of subjective, as some users won't be happy unless the latency is just like a local desktop experience, and other users will be happy and not complain even if latency is 300ms. It's true that latency is a user experience-killer, though, precisely how much is a matter of individual perception. This is a pretty good video from TechEd ...


9

The solution is basically here https://blogs.technet.microsoft.com/askpfeplat/2017/02/01/removing-self-signed-rdp-certificates/ This helped too: https://social.technet.microsoft.com/Forums/ie/en-US/a9c734c1-4e68-4f45-be46-8cae44c95257/unable-to-remote-desktop-to-windows-server-2012-due-to-failed-to-create-self-signed-certificate?forum=winserverTS ...


8

I've just discovered that most of the actions can be performed from TaskManager, right on users (logoff, send messages etc...)


6

Set the Remote Control settings to view the session with the "Require user's permission" checkbox unchecked. You can set this setting on both the user account and the RDP protocol on the server but the server setting over-rides the user account setting. Also make sure this isn't being set to a conflicting setting via GPO. When the manager "connects" to the ...


6

The down arrow. Also, I think you meant Tab instead of Shift in your post.


6

The term you are looking for is VDI - Virtual Desktop Infrastructure. It's a pretty wide topic - there are entire books written about it. But knowing that term should get you started on finding the appropriate guides.


5

Don't use cached mode...if you want to limit the size, Outlook 2013 can do that (slider on the account settings) easily. Not using cached mode with a local Exchange server isn't that big of a deal, as long as your Exchange server is always online. It's not ideal, but it's doable and won't cause any heartache for the users. Or you can have them use OWA ...


5

This question cannot be answered truly universally and objectively. The results really depend on the workload type and users' demands. Nothing can be better here than UX tests. I often work remotely over RDP from different locations, most of the time connecting via LTE (4G) network which offers latencies similar to 62 ms. At this very time I'm in a hotel ...


4

Write caching disabled and RAID5? That is a particularly underperforming combination of bad. Windows stands on the user profiles, so the appdata and registry activity alone would surface this issue on such a poor-performing storage subsystem. There could be other aggravating factors, such as the default registry lazy flush interval is too frequent. The ...


4

No. Windows does not offer the type of user impersonation capability you're asking about here. There's no sudo equivalent, or even approximation in Windows. I can't find the document or article at the moment, but not allowing sudo-style user impersonation functionality in Windows was a deliberate design decision way back in the earliest days of the NT ...


4

They do expect you to do so, the roles have changed dramatically and "Remote Desktop Session Host" is "Terminal Server", albeit in new language. You will still be able to access your machine via remote desktop without the role installed, it will just be limited to 2 concurrent connections from administrative users.


4

Our own beloved Evan Anderson wrote that, and he explicitly mentions at the top of the script the multitude of ways that you can contact him directly for support of that script. https://github.com/EvanAnderson/ts_block That being said, if your Windows Firewall is already set up to only allow RDP connections from a whitelisted set of IP addresses already, ...


4

You can create a self-signed certificate with many different tools. Makecert is one such tool: http://msdn.microsoft.com/en-us/library/bfsktky3(v=vs.110).aspx The OID for 'Server Authentication' is 1.3.6.1.5.5.7.3.1, so the argument -eku 1.3.6.1.5.5.7.3.1 will be in there somewhere. makecert -r -pe -n CN="MyServer" -eku 1.3.6.1.5.5.7.3.1 -ss my -sr ...


4

Sub-100-ms latency is likely not going to be a problem unless your customers are gaming over this network. But you might run out of bandwidth in certain, graphics-intensive applications (especially video playbacks) which will affect the latency adversely and push it well beyond 100 ms, annoying your users. RDP 8 (Server 2012 and later) does come with ...


4

According to Microsoft this is not a bug but rather a feature introduced with the changes to the Remote Connection Manager (RCM) in Windows Server 2016. Quoting https://support.microsoft.com/en-us/help/3200967/changes-to-remote-connection-manager-in-windows-server-2016: Starting in Windows Server 2016, RCM no longer queries the user’s object in AD DS. ...


4

The setting: gatewayusagemethod:i:2 Is likely not appropriate for this service. That corresponds to the setting "Bypass RD Gateway server for local addresses". The third-party company should not be delivering RDP files with that setting enabled.


3

The only way I can think to do this easily is by using a Remote Desktop Gateway. The call to the gateway can then go to a Network Policy Server (NPS) which can issue remote RADIUS calls. I don't know of any way to issue RADIUS requests for direct Remote Desktop Access since at that point you have already gottent to the client and the client follows its ...


3

RDP 7.1 was introduced in Windows 7 SP1 & Server 2008 R2 SP1 & it adds RemoteFX functionality. So to use RDP 7.1 you need both client side & server side support. In your case if you have already updated your clients, you need to install SP1 on your Windows Server 2008 R2 (link to download SP1 for Windows Server 2008 R2 from Microsoft). There is ...


3

One approach may be to run a logon script that connects them to the disconnected session instead of requiring some action on their part. SETLOCAL SET SESSIONNUMBER=-1 FOR /F "skip=1 tokens=3" %%i in ('query session %username% ^| find /v ">"') DO SET SESSIONNUMBER=%%i IF {%SESSIONNUMBER%}=={-1} GOTO :EOF tscon.exe %SESSIONNUMBER% ENDLOCAL logoff.exe


3

Go to the Control Panel -> "Network and Sharing Center" and pick the "Change advanced sharing settings" link in the left pane. Under "Domain" profiles, make sure Network Discovery is turned off:


3

Apparently this can be triggered by using mRemote / Remote Desktop Connection Manager (RCDMan 2.2) or similar software. The fix is to set TaskOffload = Disabled using Set-NetOffloadGlobalSetting Source: http://www.itnotes.eu/?p=1193


3

This will solve your problem: In Registry Editor, locate and then click one of the following registry subkeys: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services Add DWORD fQueryUserConfigFromLocalMachine with value 1 restart Reference https://support.microsoft.com/nl-nl/help/4021856/sbsl-issue-when-you-create-an-rdp-connection-...


Only top voted, non community-wiki answers of a minimum length are eligible