Solved

Troubleshooting Remote Desktop Services Connectivity - Windows Server 2012 R2

Posted on 2014-03-28
12
288 Views
Last Modified: 2015-02-09
I have a number of users who connect to Published Applications over the internet. (Workers work from home). On any given day, user A can stay connected to the remote app with no disconnections for 8 hours, no problem. On the same day, user B may be disconnected 10-15 times during the exact same time period.

This is oversimplifying a good deal - there are many users who are fine, and many users with disconnections at different times of the day. (If everyone got disconnected at the same time, I could wrap my head around the idea of it being an issue on the server/our network).

My question is: how does one go about troubleshooting this? Their computers are all company provided. However, users are responsible for their own router/firewall/internet providers. They of course will call their internet provider, who will in turn "test their connection", and they'll be told that their connection is fine.

I need to be able to show WHAT is happening (both to the user and to myself), so that I can then troubleshoot further.

I've toyed with the idea of running Network Monitor/Wireshark, but honestly, I'm not real sure WHAT I'm looking for.

Anyone have any troubleshooting tips/tricks to share?
0
Comment
Question by:dday515
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 5
12 Comments
 
LVL 17

Expert Comment

by:Brad Bouchard
ID: 39961726
I wouldn't use Wireshark just yet.  I'd start in the Event Viewer of the RDS server.  I had the exact same issue awhile back, and one thing that we had to do was to turn Windows Firewall off.  So, I'd start there.

Next, I'd look in the event logs and see if you can see the disconnects; they should say something about the stream getting disconnected (sorry for the vague description, I just don't remember the exact phrase.)  You'll know it when you see it, please repost it here so we can evaluate it.
0
 
LVL 17

Expert Comment

by:Brad Bouchard
ID: 39961732
A few other things to check on:

1)  Your licensing situation; how does it look?  Do you have enough and are licenses being used up and you are running out?
2)  How many users are accessing this server/remote app at one time?  If it's 30 or more you might have the issue nailed down right there.

Anyway, get back to me when you can and we'll troubleshoot further.
0
 

Author Comment

by:dday515
ID: 39961776
Approximately 20 users. (Never more than 30).

We are getting some licensing errors in the event log (Licensing role is on same server, not a DC):

The Remote Desktop license server cannot update the license attributes for user "XXX" in the Active Directory Domain "XXX". Ensure that the computer account for the license server is a member of Terminal Server License Servers group in Active Directory domain "XXX".
If the license server is installed on a domain controller, the Network Service account also needs to be a member of the Terminal Server License Servers group.
If the license server is installed on a domain controller, after you have added the appropriate accounts to the Terminal Server License Servers group, you must restart the Remote Desktop Licensing service to track or report the usage of RDS Per User CALs.
Win32 error code: 0x80070005


I'm not seeing any further events in the event logs that show my disconnections. Maybe I need to turn on some additional auditing?
0
How our DevOps Teams Maximize Uptime

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us. Read the use case whitepaper.

 
LVL 17

Expert Comment

by:Brad Bouchard
ID: 39961816
This article references 2008, but the groups are the same.  Have a look at the 2nd post and let me know your thoughts:

http://social.technet.microsoft.com/Forums/en-US/4084188d-b979-440f-b81a-29cc08162f38/the-remote-desktop-license-server-cannot-update-the-license-attributes?forum=winserverTS
0
 

Author Comment

by:dday515
ID: 39961924
I believe I have that resolved, but it should be noted that the above error occurs on Logon, not on disconnect.
0
 
LVL 17

Expert Comment

by:Brad Bouchard
ID: 39961959
The next thing I would look at then, is Internet connection speed on your end and potential dropped packets as referenced in your original post and wanting to use Wireshark.


What sort of connection (download/upload speed) do you have coming into your datacenter/server?  What is in between (firewalls, switches, etc.) the server and your Internet connection?
0
 

Author Comment

by:dday515
ID: 39961994
50 Mbps up and down. (which is overkill for us, honestly).

There is a single Router/Firewall, and maybe 2 switches between the server and the external internet connection.
0
 
LVL 17

Expert Comment

by:Brad Bouchard
ID: 39962043
Very good.

The first spot I would look is to the router/firewall to see what might be happening around the time people are getting kicked off, so that will require a little detective work from you; perhaps if you had an individual that would report to you when they get kicked off then you could go look at the firewall logs/events to determine if something in common is happening.

What model of firewall is it?  I have experience with many vendors and may be able to help further on that.

If you check all of this and it's still ok, then I would resort to Wireshark and filter for packets that are specific to RDP.
0
 

Author Comment

by:dday515
ID: 39962050
Its a Cisco 2821 ISR (Integrated Service Router). Combo Firewall/Router/Call Processor.
0
 
LVL 17

Expert Comment

by:Brad Bouchard
ID: 39962070
Can you launch the web based GUI for that?  I'm not familiar with the ISR line, more on the ASA, 800 series, PIX, etc.
0
 

Author Comment

by:dday515
ID: 39962409
You can manage it some with SDM (a java based GUI).
0
 
LVL 17

Accepted Solution

by:
Brad Bouchard earned 500 total points
ID: 39962596
That's right I forgot about SDM.  Give the logs a look and see if you can see anything that corresponds.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
In this article, I'll explain how to setup a Plex Media Server (https://plex.tv/) on a Redhat (Centos) 7 based NAS with screenshots to help those looking for assistance.  What is Plex? If you aren't familiar with Plex, it’s a DLNA media serv…
In this Micro Tutorial viewers will learn how to use Windows Server Backup to create full image of their system. Tutorial shows how to install Windows Server Backup Feature on Windows 2012R2 and how to configure scheduled Bare Metal Recovery backup.…
In this Micro Tutorial viewers will learn how to restore their server from Bare Metal Backup image created with Windows Server Backup feature. As an example Windows 2012R2 is used.

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question