SOLVED: How To Patch Remote Desktop Servers

If you have setup a Remote Desktop Server (RDS) farm, you will know how to manage the monthly patches, but if you are managing someone else’s RDS farm you will likely be confused. The nut of the problem is that from Server 2016 on, you can no longer directly install patches on a Remote Desktop Server Host.  There is a process you need to go through.  Fortunately that process is not too challenging. Log into…

SOLVED: How To Setup RDS User Profile Disks

A User Profile Disk is simply a VHDX that is created for each user that contains their C:\USERS\<user> profile and blocks remote users from interacting with the physical disk.  This is good for security and also lets user profiles roam across different Session Hosts. Setting up User Profile Disks is easy but the thing tech’s make a mistake on is using a local path.  You MUST use a path that all of your RDS users…

SOLVED: GPOs To Lock Down Your Remote Desktop Session Host Server

If you have a Server 2016 Remote Desktop Services infrastructure, you will likely want to lock down the Sessions Hosts.  Below are some of the useful Group Policies that we suggest you apply. Note that Server 2012 and Server 2016 have the option to use something very important for security named USER PROFILE DISKS.  A User Profile Disk is a VHDX that is created for each user.  That Virtual Hard Disk contains their C:\USERS\ profile…

SOLVED: How to Create a .PFX Certificate File

I needed to import a certificate into a Server 2016 RDS server but it was requesting a .PFX file I did not have, so I had a problem.  The certificate I wanted the RDS to use was already installed and functional but the RDS CONFIGURE THE DEPLOYMENT did not show the cert. How to Create a .PFX File From An Already Installed Certificate: Launch a new MMC Click START and type MMC.EXE then press the…

SOLVED: How To Customize Your RDS RDWeb Page

If you are running Remote Desktop Services (RDS) you likely have an /RDWeb landing page that you would like to reconfigure to make it easier for people to visit.  My RDWeb page now looks like the one on the right. If you are interested in customizing the RDWeb page, you might be interested in our easy explanation of how to eliminate the /RDWeb portion of the rds.YourDomain.com/RDWeb and change it to just rds.YourDomain.com, HERE. WARNING:…

SOLVED: How To Remove /RDWeb From The RDS Login Page URL

By default, RDS will setup yourdomain.com/RDWeb to present Work Resources like published apps to your visitors.  You can easily eliminate the need for to add /RDWeb to the URL, using a simple redirect in IIS: Launch IIS Click on DEFAULT WEBSITE Double click on HTTP REDIRECT from them middle pane Type /RDWeb into the REDIRECT REQUESTS TO THIS DESTINATION field Click APPLY (top right of the Actions Pane) Restart IIS (I like using IISRESET) Test…

SOLVED: Certificate Disappears From IIS After COMPLETE CERTIFICATE REQUEST on Server 2016

If you add a certificate to IIS Manager SERVER CERTIFICATES section using COMPLETE CERTIFICATE REQUEST that appears without error but then is not visible the next time you go to (or refresh) the SERVER CERTIFICATES, we have the answer. The problem is likely that you somehow added that certificate to your server using Certificates MMC.  This can easily happen if you are installing GoDaddy intermediate certificates.  You should only add the certificate named something like gd-g2_iis_intermediates.p7b…

SOLVED: How to Troubleshoot Windows Server Remote Desktop Services System Health Agent (SHA)

If you want to see what is happening with SHA or NAP take a look a this: ON THE USERS PC Check the EVENT VIEWER: Applications and Services Logs > Microsoft > Windows > Network Access Protection > Operational In a CMD (run as administator) window, run netsh nap client show config to see the NAP Client configuration In a CMD (run as administator) window, run netsh nap client show state to see the client…

SOLVED: How to Source and Install a Certificate for Server 2012 RDWeb Site (or any other IIS 8 Site)

This is part TWO of a series of tutorials on Server 2012 Remote Desktop Services. HOW TO CREATE & INSTALL A CERTIFICATE FOR YOUR RDS RDWEB SITE ON SERVER 2012 Start IIS MANAGER Click on your servers host name Click SERVER CERTIFICATES Right click and select CREATE CERTIFICATE REQUEST Enter all of the required info and click NEXT.  Be sure to enter a FULLY quanlified domain name Set the level to 2048 Open your Certificate Request, copy…

SOLVED: Server 2012 – Remote Desktop Connection Broker server could not enumerate the targets for the provider named NULL from the database

If you see the following error on your Server 2012 RD install: The Remote Desktop Connection Broker server could not enumerate the targets for the provider named NULL from the database. Pooled virtual desktop collection name: NULL Error: Logon to the database failed. you likely have either an old domain or one that was upgraded from an old domain and you need to manually add your Remote Desktop server into the MEMBER OF tab of “Windows…