Second login on RDS

[Sheridan]

I've setup a test RDS server to see how well it will replace our aging citrix system and for the sake of the test everything is on the same 2012 R2 box - with only the basic wordpad/paint apps ready.

 

Testing it internally works fine, but externally users get a second dialogue box (with the correct domain details) - but entering their details still doesn't work.

 

I've had a look around and a few places mention policy settings but I've done these and it makes no difference. So i'm not quite sure a) why the dialogue appears and b) why, when a user enters valid credentials it still won't proceed past the second login dialogue?

 

I'm just experimenting with RDS (like I say I've been using citrix for years) so a bit stumped?

[northernmike]

Have you tried this setting on your RDP file?

 

Edited December 2, 2016 by northernmike

[Sheridan]

Have you tried this setting on your RDP file?

 

[ATTACH=CONFIG]40128[/ATTACH]

 

Yup thats what we've got set - through the RDS settings in Server Manager. We have a valid SSL (wildcard) for the gateway and web access components as well.

[northernmike]

Have you checked the settings from the Connection Broker Server \ Server Manager \ Remote Desktop Services \ Overview \ Deployment Properties

 

[Sheridan]

Our gateway is set the same as that, apart from the HA settings. It really is a basic test config so I'm wondering what I've missed here!

[Sheridan]

This is the second dialogue box we see (on a windows 10 pc) but I notice the domain is blank - which suggests I've not configured something right?

 

 

Even when I enter the domain\user and password it still fails saying 'The Login attempt failed'

Edited December 3, 2016 by Sheridan

[kmount]

Is this with an RDP file you've downloaded via RDWeb or is it just a plain RDP configuration?

[AngryITGuy]

Yup thats what we've got set - through the RDS settings in Server Manager. We have a valid SSL (wildcard) for the gateway and web access components as well.

 

Have you configured the certificate for the connection broker part of the deployment too? I believe you need a certificate to enable single sign on.

[Sheridan]

Is this with an RDP file you've downloaded via RDWeb or is it just a plain RDP configuration?

 

This is from rdweb, clicking one of the apps once logged in.

[Sheridan]

Have you configured the certificate for the connection broker part of the deployment too? I believe you need a certificate to enable single sign on.

 

Yes, same wildcard domain cert on all. Oddly it works internally but externally is where this falls over suggesting I've missed something

[AngryITGuy]

This is from rdweb, clicking one of the apps once logged in.

 

Have you tried connecting to the published apps URL using the built-in windows 10 remote apps feature to see if the credentials are being passed to the RD Session host?

 

What's your setup like, how many servers?

[AngryITGuy]

Yes, same wildcard domain cert on all. Oddly it works internally but externally is where this falls over suggesting I've missed something

 

Might be worthwhile checking out https://msfreaks.wordpress.com/2013/12/09/windows-2012-r2-remote-desktop-services-part-1/

 

I used the guides on there to setup or solution.

Edited December 3, 2016 by AngryITGuy

[kmount]

This is from rdweb, clicking one of the apps once logged in.

 

Assuming you're using IE did you click the "private" box at the logon screen?

 

When you log in do you get a notification in the bottom right hand corner about being connected to resources?

 

Just to make it all about RDweb, if you log on with a different browser (non ActiveX) and download the RDP file - then run that natively does it work as you'd expect?

[Sheridan]

Assuming you're using IE did you click the "private" box at the logon screen?

 

When you log in do you get a notification in the bottom right hand corner about being connected to resources?

 

Just to make it all about RDweb, if you log on with a different browser (non ActiveX) and download the RDP file - then run that natively does it work as you'd expect?

 

I get the same result when trying on non IE browsers, it opens the Rdp and then requires a second login.

 

This is a really basic single server setup for testing rds for certain apps. Everything is on one server and no HA setup or anything complicated as it is unlikely to be a live server.

[kmount]

NLA enabled for RDP?