Solved

RDS Printer Redirection with non-domain client

Posted on 2013-06-16
8
737 Views
Last Modified: 2013-11-23
Windows 2008 R2 Domain Controller used as RDS Host.
Printer redirection is not working (nothing's printing) for remote client PCs which are not in the domain. I have even loaded the correct driver but cannot persuade the server to use anything but the RDS Easy driver, which doesn't work.
0
Comment
Question by:ajmcqueen
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
8 Comments
 
LVL 11

Expert Comment

by:Manjunath Sullad
ID: 39251703
Installing the RD Session Host role service on an Active Directory domain controller is not recommended. Allowing users to run programs on a domain controller could create security risks and performance issues.

If the RD Session Host role service is installed on a domain controller, the security settings of the domain controller will need to be adjusted to allow users to have remote access to the server. This remote access is controlled by the Allow logon through Remote Desktop Services user rights assignment, which can be configured by using the Group Policy Management Console (GPMC).

by default, only the Administrators group is granted the Allow logon through Remote Desktop Services user right. To allow remote access to the RD Session Host server for users who are not members of the Administrators group, you should grant the Remote Desktop Users group the Allow logon through Remote Desktop Services user right

For more information about RD Licensing, see the Remote Desktop Services page on the Windows Server 2008 R2 TechCenter (http://go.microsoft.com/fwlink/?LinkId=140434).

Regards,
Manjunath S
0
 

Author Comment

by:ajmcqueen
ID: 39315518
Should have come back earlier on this but still cannot get get printing to work. Also have otehr problems.

For example, in group policy I set it to only connect default client printer - it ignores that.
And diagnostics keeps coming back with "Issue:
The Remote Desktop Users group on the Remote Desktop Session Host server does not contain any domain users or groups.

Impact:
If the Remote Desktop Users group on the RD Session Host server does not contain domain users or groups, users will not be able to connect to the RD Session Host server.

Resolution:
Use the Remote tab in the System Properties dialog box to add domain users or groups to the Remote Desktop Users group on the RD Session Host server."

and yet I have added users and groups as specified.

Probably this is related to the server being a Domain Controller in an SBS network but I really don't want to lose that functionality.

There must be something else I am missing....
0
 

Author Comment

by:ajmcqueen
ID: 39392563
I haven't heard anything back and still need help.
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 

Author Comment

by:ajmcqueen
ID: 39457926
I have demoted the server from Domain Controller to normal server and now have other problems - one account used for service login doesn't work now (had permissions removed - e.g. log on as a service, I think - yet to solve) and still remote printing doesn't work - will spend more time investigating as must sort.
0
 

Accepted Solution

by:
ajmcqueen earned 0 total points
ID: 39656584
Decided to use alternative method for remote printing so no solution found.
0
 

Author Closing Comment

by:ajmcqueen
ID: 39671075
Problem not resolved. Workaround found
0

Featured Post

Backup Solution for AWS

Read about how CloudBerry Backup fully integrates your backups with Amazon S3 and Amazon Glacier to provide military-grade encryption and dramatically cut storage costs on any platform.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question