Printable View
None of our clients have been able to connect since applying the SP, so we're going to have to return to roll back, what we've found is that it wont let us turn off Network level authentication, if anyone can suggest a way to work around this then I would be very appreciative. We no longer have a support contract and I couldnt say what firmware they are on, but they did work with R2 previously with security set to negotiate on the server.
Hi
Have you downloaded the latest RDC Client to connect to the R2SP1 server?
Regards
Sukh
They are thin terminals, there is no downloadable client, desktop machines connect fine.
we uninstalled the service pack, but they still cant connect. it's the only thing we have changed on that server in a very long time!
if I change the wnos.ini answer file to point to a different terminal server (2003) that works okay...but thats a staff rd server, the weird thing is that this all worked prior to the sp.
gah :(
Hi
Thin clients- What OS?
How did you connect before?
Can you check the R2 Server event logs and post the exact error message.
Ensure no GPP is being applied controlling the setting.
To configure Network Level Authentication for a connection
On the RD Session Host server, open Remote Desktop Session Host Configuration. To open Remote Desktop Session Host Configuration, click Start, point to Administrative Tools, point to Remote Desktop Services, and then click Remote Desktop Session Host Configuration.
Under Connections, right-click the name of the connection, and then click Properties.
On the General tab, select the Allow connections only from computers running Remote Desktop with Network Level Authentication check box.
If the Allow connections only from computers running Remote Desktop with Network Level Authentication check box is selected and is not enabled, the Require user authentication for remote connections by using Network Level Authentication Group Policy setting has been enabled and has been applied to the RD Session Host server.
Click OK.
Regards
Sukh
WYSE S10 with WTOS 5.3.0.09
machines pick up dhcp option to pick up WNOS.ini answer file from ftp server (this works)
answer file tells them to run rdp connection to server 'studentRD; 172.16.45.103'
this brings up an rdp connection on full screen normally, now we just get a short message saying "Connection "studentrd": connection failed.
on the terminal event log I get loads of invalid statement:"random characters" after the 'Accessing system profile' event, may I reiterate that this event log is on the CLIENT
the server doesnt really provide any information in the event log, before we removed the service pack it was showing some error messages specifically stating those machine names, but they seem to have disappeared now. i'm tempted to reinstall the service pack to see if they start showing up again
Hi
Have you tried to change the Network Level Authentication?
Regards
Sukh
re-read my original post,
but to add
security layer - negotiate
Encryption Level - Client Compatible
Cert - (Domain CA provided)
Enforce NLA - greyed out due to Negotiate selected making it 'optional'
Hi
See Wyse S10 and WT1200LE with RDP/Win2k8
Does this help you.
Regards
Sukh
does anyone know if there is a way to force disable NLA in 2008r2sp1, as I think that this would solve all of our issues.
all the options under remote connections are greyed out and the options in TS dont seem to do anything either.
Hi
The option "Allow connections only from computers running Remote Desktop with Network Level Authentication".
Is this ticked or not?
Thanks
Sukh
The RDP setting “Allow connections from all clients” worked for me when I had issues from XP clients to a 2008 SP1 box. Not using thin client though, so just a suggestion.
please read my previous posts as I have already provided this information.Quote:
Originally Posted by sukh
Enforce NLA - greyed out due to Negotiate selected making it 'optional'
unfortunately this doesn't seem to be an option on R2 (that i can see)Quote:
Originally Posted by alexsanger
It's there on my 2008r2 SP1 TS. Right click my computer, properties, remote settings, 3 options, pick the middle one (any version of remote desktop)Quote:
Originally Posted by sacrej
Oh those options, yes I have those - however they are all grayed out with the bottom option selected (Enforce NLA)Quote:
Originally Posted by kmount
not sure how to 'un-gray' them :/
I am logged in as a domain admin, local admin has the same issue.