Remote Desktop Services

This is an old page being updated.

http://ryanmangansitblog.com/2013/03/11/deploying-rds-2012-single-server-session-based-deployment/

Google Chrome (and other modern web browsers) can cause very high CPU and other resource utilization and this is compounded on RDS servers.

Google Chrome Browser Tweaks

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/Q_28119881.html

Microsoft recommends turning off Cached Exchange Mode. Disable it server-wide:

Create this registry Key:

HKEY_LOCAL_MACHINE/SOFTWARE/Policies/Microsoft/Office/14.0/Outlook/OST

In that key, create a DWORD named NoOST and set the value to 2.

http://technet.microsoft.com/en-us/library/ee791756%28v=ws.10%29.aspx

Session Shadowing: http://blogs.technet.com/b/askperf/archive/2013/10/22/windows-8-1-windows-server-2012-r2-rds-shadowing-is-back.aspx

Computer Configuration → Administrative Templates → Windows Components → Remote Desktop Services → Remote Desktop Session Host → Connections

• Set rules for remote control of Remote Desktop Services user sessions → Enabled - Full Control without user's permission

This does not create an entire RDS configuration, but is does set up a session host suitable for Parallels RAS.

http://technet.microsoft.com/en-us/library/ff817595%28WS.10%29.aspx

USB Redirection: http://blogs.msdn.com/b/rds/archive/2012/09/11/remotefx-usb-redirection-in-windows-server-2012-and-windows-8.aspx

http://support.microsoft.com/kb/2592687/en-us

Install Desktop Experience: http://technet.microsoft.com/en-us/library/cc742809.aspx

Configure Audio and Video Playback: http://technet.microsoft.com/en-us/library/dd759165.aspx

Configure Audio Recording Redirection: http://technet.microsoft.com/en-us/library/dd759231.aspx

Make sure the Windows Audio and Windows Audio Endpoint Builder services are be running:

net start Audiosrv

http://www.concurrency.com/blog/remote-desktop-services-in-windows-server-2012-step-by-step-guides/

http://ali.vg/2011/03/three-ways-to-use-rds-remote-desktop-services-from-outside-your-office/

http://redmondmag.com/Articles/2013/12/24/RD-Gateway-in-Windows-Server.aspx?Page=2

• RD Web Access and RD Gateway are usually installed on the same server
• Provides a list of Remote Desktop services available in a web browser (IE)

http://blogs.msdn.com/b/rds/archive/2009/07/31/rd-gateway-deployment-in-a-perimeter-network-firewall-rules.aspx

https://www.virtuallyboring.com/setup-rd-gateway-role-on-windows-server-2012-r2/

This tutorial points to Control Panel, Administrative tools, Remote Desktop Gateway Manager for a portion of the configuration. If not there type “Remote Desktop Gateway Manager” on the start menu to find it.

https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/1160/19/csr-generation--microsoft-iis-8x

• RD Web Access and RD Gateway are usually installed on the same server
• Tunnels RDP traffic over SSL
• Managed with Remote Desktop Gateway Manager
  • tsgateway.msc

http://www.thewindowsclub.com/manage-trusted-root-certificates-windows

• Often run on another server such as the domain controller

• In larger environments, there may be multiple connection brokers
• Connection brokers use a MSSQL (or Express) database for high availability

• Terminal Server

• Hyper-V Host

http://thewolfblog.com/2014/02/24/user-profile-disks-for-rds-2012-2012-r2/

http://www.virtualizationadmin.com/articles-tutorials/vdi-articles/general/working-with-user-profile-disks-on-session-based-desktop-deployments.html

• Defined per session collection
• User profile disks can’t be shared across types of collections

If you have a deployment that supports Virtual Desktop Infrastructure (VDI), Remote Desktop session collection(s) and RemoteApp programs, you’ll have three different profile disks for each user.

User Profile Disks are used instead of Roaming Profiles and folder redirection. If you already have roaming profiles and folder redirection configured, you probably don't need to implement UPDs.

UPDs can be used with folder redirection.

User profile disks centrally store user and application data on a single virtual disk that is dedicated to one user’s profile. When the user logs on, their profile disk is attached to their session and detached when the user logs out.

You can create the share with the default share permissions which is everyone:read. The permissions will be modified for you when you enable UPDs in the RDS collection.

You can use Group Policy (gpmc.msc) or Local Policy.

On the RDS server, run gpedit.msc to edit Local Policy:

Computer Configuration → Administrative Templates → Windows Components → Remote Desktop Services → Remote Desktop Session Host → Licensing

• Use the specified Remote Desktop license servers
• Set the Remote Desktop licensing mode

http://technet.microsoft.com/en-us/library/cc770585.aspx

After installation of the licenses you need to point the RDS Server to the RDS License Server. They may be on the same server or different servers.

On the RD Session Host server, open Remote Desktop Session Host Configuration. To open Remote Desktop Session Host Configuration, click Start, point to Administrative Tools, point to Remote Desktop Services, and then click Remote Desktop Session Host Configuration.

If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Yes.

In the Edit settings area, under Licensing, double-click Remote Desktop license servers.

On the Licensing tab of the Properties dialog box, click Add.

In the Add License Server dialog box, select a license server from the list of known license servers, and then click Add. If the license server that you want to add is not listed, in the License server name or IP address box, type the name or IP address of the license server that you want to add, and then click Add.

You can add more than one license server for the RD Session Host server to use. The RD Session Host server contacts the license servers in the order in which they appear in the Specified license servers box.

Click OK to close the Add License Server dialog box, and then click OK to save your changes to the licensing settings.

Activate the RDS License server. Add licenses using “Telephone” method. Answer no to all prompts until a human answers the phone. Explain that you need to downgrade. If using an Action Pack license number tell them it is “retail”.

http://www.ncomputing.com/kb/To-log-on-to-this-remote-computer-you-must-be-granted-the-Allow-log-on_243.html

You receive the error message “To log on to this remote computer, you must be granted the Allow log on through Terminal Services right. By default, members of the Remote Desktop Users group have this right. If you are not a member of the Remote Desktop Users group or another group that has this right, or if the Remote Desktop Users group does not have this right, you must be granted this right manually”

To correct this issue, first log in as an administrator to the RDS Server. Click Start and then click Run. Type in “gpedit.msc” Click “OK” When the Group Policy Object Editor appears, navigate to: Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment In the right-hand pane, locate the entry named “Allow Log on through Remote Desktop Services” and double-click on it. Click “Add User or Group..” Type “everyone” into the available text box and click “Check Names” After the name is underlined, click OK Click OK

Deploy VDI: http://thewolfblog.com/2014/03/26/deploying-vdi-for-rds-2012-2012r2-part-i/

Publishing a Desktop http://thewolfblog.com/2014/04/14/deploying-vdi-for-rds-2012-2012olr2-part-ii/

Updating a Desktop Image http://thewolfblog.com/2014/04/19/deploying-vdi-for-rds-2012-2012r2-part-iii/

• You need a physical 2012 server with the Hyper-V role installed
• A Hyper-V cluster is preferred

1. Join the RDVH server to the AD domain
2. Using Server Manager, add the designated RDVH server to be managed
3. Add Roles and Features
4. Remote Desktop Services installation
5. Standard Deployment
6. Virtual machine-based desktop deployment
7. Select the existing connection broker and web access servers
8. Add the new server as a virtualization host
9. A new virtual switch is created and will be used for the virtual desktops
10. Edit the Deployment Properties
    1. Select the Active Directory domain and OU for VDI desktops
    2. Specify the Export Location where VDI templates are copied to

http://deadlytechnology.com/terminal-services/regenerating-temporary-terminal-server-cals/