<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Nefaria.com &#187; Terminal Services</title>
	<atom:link href="http://nefaria.com/tag/terminal-services/feed/" rel="self" type="application/rss+xml" />
	<link>http://nefaria.com</link>
	<description>☠ ☠ ☠ ☠ ☠ ☠</description>
	<lastBuildDate>Mon, 12 Mar 2012 14:03:40 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Opening Terminal Server registry propogation window. (aka: Installing software in windows takes forever)</title>
		<link>http://nefaria.com/2011/02/opening-terminal-server-registry-propogation-window-aka-installing-software-in-windows-takes-forever/</link>
		<comments>http://nefaria.com/2011/02/opening-terminal-server-registry-propogation-window-aka-installing-software-in-windows-takes-forever/#comments</comments>
		<pubDate>Mon, 14 Feb 2011 13:57:22 +0000</pubDate>
		<dc:creator>musashi</dc:creator>
				<category><![CDATA[I.T.]]></category>
		<category><![CDATA[Terminal Services]]></category>
		<category><![CDATA[Windows]]></category>

		<guid isPermaLink="false">http://nefaria.com/?p=978</guid>
		<description><![CDATA[That&#8217;s not a typo. For the past few months, I&#8217;ve noticed that installing software or running updates on one particular terminal server that I manage (Windows Server 2003, std.), the updates/installation take hours &#8212; in some cases, days. So I enabled windows installer logging and here&#8217;s what I found: MSI (s) (2C:30) [01:58:16:558]: Opening Terminal [...]]]></description>
			<content:encoded><![CDATA[<p>That&#8217;s not a typo. For the past few months, I&#8217;ve noticed that installing software or running updates on one particular terminal server that I manage (Windows Server 2003, std.), the updates/installation take hours &#8212; in some cases, days. <a href="http://support.microsoft.com/kb/223300">So I enabled windows installer logging</a> and here&#8217;s what I found:</p>
<div class="code_block">
MSI (s) (2C:30) [<strong>01:58:16:558</strong>]: Opening Terminal Server registry propogation window.<br />
MSI (s) (2C:E8) [<strong>02:35:44:188</strong>]: RunEngine wait timed out<br />
Installer is no longer responding.<br />
MSI (s) (2C:E8) [<strong>03:13:14:358</strong>]: RunEngine wait timed out<br />
Installer is no longer responding.<br />
MSI (s) (2C:E8) [<strong>03:50:44:453</strong>]: RunEngine wait timed out<br />
Installer is no longer responding.<br />
MSI (s) (2C:E8) [<strong>04:28:14:529</strong>]: RunEngine wait timed out<br />
Installer is no longer responding.<br />
MSI (s) (2C:E8) [<strong>05:05:44:619</strong>]: RunEngine wait timed out<br />
Installer is no longer responding.<br />
MSI (s) (2C:E8) [<strong>05:43:14:897</strong>]: RunEngine wait timed out<br />
Installer is no longer responding.<br />
Action ended 5:52:07: InstallInitialize. Return value 1.<br />
MSI (s) (2C:30) [<strong>05:52:07:859</strong>]: Doing action: SxsInstallCA<br />
Action start 5:52:07: SxsInstallCA.</div>
<p>So as you can see by the snippet above, this routine installation took an enormous amount of time. This exact scenario played out anytime I tried running updates or installing software. As it turns out, <a href="http://forums11.itrc.hp.com/service/forums/questionanswer.do?admit=109447626+1297688771164+28353475&amp;threadId=1247687">this</a> was the problem. Simply removing the driver and deleting the following registry keys, and then installing the latest version of the driver (&#8230; I was on ~3 something; at the time of this writing, the latest version is 6.1) fixed the problem. Here are the registry keys that should be removed after the driver has been uninstalled (and before the latest version has been installed):</p>
<div class="code_block">HKEY_LOCAL_MACHINE\SOFTWARE\Hewlett-Packard<br />
HKEY_CURRENT_USER\SOFTWARE\Hewlett-Packard<br />
HKEY_USERS\.DEFAULT\Software\Hewlett-Packard</div>
<p>This was an extremely frustrating issue &#8212; other symptoms included server crashes with an error message about the registry being too large; logging in a brand new user for the first time takes ~15 minutes or so, and a whole host of other performance related weirdness. At first I thought that installing UPHClean would help solve this (the symptoms being registry-related and all) but it may have actually made the problem worse. If you scroll all the way down to the bottom of the page of the previous link to HP&#8217;s website, you&#8217;ll see the following post:</p>
<div class="code_block">
JulianBlue  Oct 6, 2010 07:37:53 GMT<br />
It is very likely that HP UPD problem replicating tons of registry keys to global default registry hive (.DEFAULT) being related to Terminal Server on which the Microsoft UPHClean Tool is installed. I would recommend to look at the readme.txt with UPHClean and setup an exclusion for svchost.exe/rpcss.dll.</p>
<p>&#8220;UPHClean assists the operating system to unload user profile hive by remapping the handles to the user profile hive to the default user hive. For example if a process has a handle to HKEY_USERS\S-1-5-21-X-Y-Z\Software\Microsoft after remapping it would have a handle to HKEY_USERS\.DEFAULT\Software\Microsoft.&#8221;
</p></div>
<p>I haven&#8217;t had the chance to test this yet, but it does sound plausible enough. There&#8217;s also some <a href="http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1217189">other posts</a> related to this on HP&#8217;s website that are worth having a look at. Here&#8217;s the <a href="http://download.microsoft.com/download/a/8/7/a87b3d05-cd04-4743-a23b-b16645e075ac/readme.txt">readme.txt that comes with UPHClean</a>. Setting up an exclusion list is fairly straightforward; for convenience, I&#8217;ve pasted the pertinent section of the UPHClean readme here:</p>
<div class="code_block">
PROBLEMS USING UPHCLEAN<br />
=======================</p>
<p>Because UPHClean assists in unloading the users registry<br />
hive some services may behave incorrectly.  Administrators<br />
are encouraged to test and watch for unexpected behavior.<br />
If unwanted behavior is identified contact the developers of<br />
software that UPHClean identified as preventing profile from<br />
unloading.</p>
<p>UPHClean assists the operating system to unload user profile<br />
hive by remapping the handles to the user profile hive to the<br />
default user hive. For example if a process has a handle to<br />
HKEY_USERS\S-1-5-21-X-Y-Z\Software\Microsoft after remapping<br />
it would have a handle to HKEY_USERS\.DEFAULT\Software\Microsoft.<br />
This allows the profile hive to unload.  This may not work if the<br />
application expects data that would only be available under the<br />
specific user profile hive it was accessing since the data will not be copied.</p>
<p>If you find that removing UPHClean stops a particular problem from<br />
occurring then you may be interested in restricting UPHClean from<br />
processing certain handles.  UPHClean ignores handles that are<br />
held opened to profile hives for the users specified on the user<br />
exclusion list or by processes specified on the process exclusion list.<br />
These lists are specified using the following registry values:</p>
<p>HKLM\System\CurrentControlSet\Services\UPHClean\Parameters\PROCESS_EXCLUSION_LIST</p>
<p>HKLM\System\CurrentControlSet\Services\UPHClean\Parameters\USER_EXCLUSION_LIST</p>
<p>Note that since these values are specified as REG_MULTI_SZ strings<br />
you should use regedt32 on Windows NT and Windows 2000 to edit them.</p>
<p>The process exclusion list is a list of process names that UPHClean<br />
should  ignore when determining which handles to user profile hives<br />
to act on.  Each process name is specified on its own line when<br />
input in registry editor.  The process name should be specified the<br />
same way as it shows in Task Manager. Usually this is the file<br />
name of the program (e.g. notepad.exe).</p>
<p>A few process show multiple times in Task Manager.  It is possible to<br />
specify that a certain DLL be loaded in the process to allow a selection<br />
of a specific process.  This is useful with the svchost process to identify<br />
a specific instance.  For example to specify the svchost process that<br />
the Remote Procedure Call (RPC) service is running in on Windows 2000,<br />
Windows XP and Windows Server 2003 you would specify<br />
svchost.exe/rpcss.dll in the process exclusion list</p>
<p>The user exclusion list is a list of user security identifier (SID) or user that<br />
UPHClean should ignore when determining which handle to user profile<br />
hives to act on.  Each user SID or name is specified on its own line when<br />
input in registry editor.  If specifying a user name you must enter the user<br />
domain name followed by a backslash followed by the user name.  For<br />
example RCARONDOM\RCARON to specify the user RCARON from<br />
domain RCARONDOM.  SIDs should be specified in the usual string<br />
format (e.g. S-1-5-21-2127521184-1604012920-1887927527-68486).<br />
This is the same string you see under HKEY_USERS in registry editor.</p>
<p>Note that the user exclusion list always includes the following<br />
SIDs: S-1-5-18, S-1-5-19, S-1-5-20.  Unloading these profiles can cause<br />
problems so UPHClean will not attempt to process handles to these profiles.</p>
<p>Which processes UPHClean performs handle remapping can specified<br />
using the following registry value:</p>
<p>HKLM\System\CurrentControlSet\Services\UPHClean\Parameters\REMAP_HANDLE_PROCESS_LIST</p>
<p>The list by default contains &#8216;*&#8217; which specifies that handle remapping should<br />
be performed for all non-excluded processes.  This list can be changed to<br />
only include specified processes in the same manner as the process<br />
exclusion list. Processes specified on this list can be preceeded by a &#8216;-&#8217;<br />
character to specify that they should be excluded from handle remapping.<br />
Any handle for a process that is not excluded but has handle remapping<br />
turned off will be closed.
</p></div>
<p>I hope this helps!</p>
]]></content:encoded>
			<wfw:commentRss>http://nefaria.com/2011/02/opening-terminal-server-registry-propogation-window-aka-installing-software-in-windows-takes-forever/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Configuring &#8220;Per User&#8221; licensing in Terminal Services, remotely *without* Remote Desktop access</title>
		<link>http://nefaria.com/2010/01/configuring-per-user-licensing-in-terminal-services-remotely-without-remote-desktop-access/</link>
		<comments>http://nefaria.com/2010/01/configuring-per-user-licensing-in-terminal-services-remotely-without-remote-desktop-access/#comments</comments>
		<pubDate>Thu, 07 Jan 2010 23:48:00 +0000</pubDate>
		<dc:creator>musashi</dc:creator>
				<category><![CDATA[I.T.]]></category>
		<category><![CDATA[Terminal Services]]></category>
		<category><![CDATA[Windows]]></category>

		<guid isPermaLink="false">http://nefaria.com/?p=796</guid>
		<description><![CDATA[So the other day I was trying to connect to one of the terminal servers that I manage (for the purpose of this post, we&#8217;ll call the server &#8216;TERMSVR01&#8242;) and I got the following error message and was promptly disconnected: The remote session was disconnected because there are no Terminal Server client access licenses available [...]]]></description>
			<content:encoded><![CDATA[<p>So the other day I was trying to connect to one of the terminal servers that I manage (for the purpose of this post, we&#8217;ll call the server &#8216;TERMSVR01&#8242;) and I got the following error message and was promptly disconnected:</p>
<div class="code_block">
The remote session was disconnected because there are no Terminal Server client access licenses available for this computer
</div>
<p>At first glance, this seems as though the server ran out of TS CALS (Terminal Server Client Access Licenses). I was pretty sure that the server was configured to use the &#8220;Per User&#8221; licensing mode. However, a Windows Server 2003 Terminal Server operating in the &#8220;Per User&#8221; licensing mode can&#8217;t run out of licenses to the extent that it prevents the user from connecting (and instead, giving them the aforementioned error message). To the best of my knowledge, it can <em>only</em> do this when it is operating in &#8220;Per Device&#8221; mode. So this was the assumption that I ran with &#8212; that somehow, this server was never configured for &#8220;Per User&#8221; -or- it was, but the setting was either changed, reset, or corrupted somehow.</p>
<p>So, even though I wasn&#8217;t able to connect to TERMSVR01 via Remote Desktop, I <em>was</em> able to &#8220;Manage&#8221; it remotely by doing the following:</p>
<ol>
<li>Open &#8220;Active Directory Users and Computers&#8221; on any Domain Controller</li>
<li>Expand the &#8220;Computers&#8221; node</li>
<li>Right-click TERMSVR01 and select &#8216;Manage&#8217;</li>
</ol>
<p>Now we can do a few things (not many) on the server. One thing I wanted was to have a look at the Event Viewer. There were a few error messages like the following:</p>
<div class="code_block">
Event Type: Information<br />
Event Source: TermService<br />
Event Category: None<br />
Event ID: 1004<br />
Date: 1/5/2010<br />
Time: 6:18:23 PM<br />
User: N/A<br />
Computer: TERMSVR01<br />
Description:<br />
The terminal server cannot issue a client license.  It was unable to issue the license due to a changed (mismatched) client license, insufficient memory, or an internal error. Further details for this problem may have been reported at the client&#8217;s computer.</p>
<p>For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
</p></div>
<p>The more of these I saw, the more confident I was that my assumption was correct &#8212; the server was operating in &#8220;Per Device&#8221; mode and it had finally run out of licenses. I had the following options:</p>
<ol>
<li>Wait for someone to go onsite and reconfigure the licensing mode (easy, but it would have to wait until tomorrow) or&#8230;</li>
<li>Attempt to reconfigure this setting <em>and</em> restart the service remotely (so that the setting takes takes effect) &#8230; all without having &#8220;Remote Desktop&#8221; access to the server.</li>
</ol>
<p>Care to guess which option I chose?  <img src='http://nefaria.com/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> </p>
<p><strong>Step #1: Override the licensing mode setting using group policy</strong></p>
<ol>
<li>Click &#8216;Start&#8217;</li>
<li>Click &#8216;Run&#8217;</li>
<li>Type the following command:
<div class="code_block">
gpedit.msc /gpcomputer:TERMSVR01
</div>
</li>
<li>Click &#8216;OK&#8217;</li>
</ol>
<p>Those four steps open the group policy (remotely) for TERMSVR01. Next we need to actually change the setting:</p>
<ol>
<li>In the left-hand panel, expand &#8220;Administrative Templates&#8221;</li>
<li>Expand &#8220;Windows Components&#8221;</li>
<li>Click on &#8220;Terminal Services&#8221;</li>
<li>Locate the following setting in the right-hand panel:
<div class="code_block">
Set the Terminal Server licensing mode
</div>
</li>
<li>Double-click the aforementioned setting</li>
<li>Change the option (directly below the heading) to &#8220;Enabled&#8221;</li>
<li>Select &#8220;Per User&#8221; from the drop-down box (below the heading: &#8220;Specify the licensing mode for the terminal server&#8221;.)</li>
<li>Click &#8216;OK&#8217;</li>
<li>Close the &#8220;Group Policy Object Editor&#8221; window</li>
</ol>
<p>Great. The licensing mode has been changed but the setting won&#8217;t take effect until the service is restarted. We <em>could</em> open &#8216;services.msc&#8217; and connect to &#8216;TERMSVR01&#8242; by using the &#8216;Connect to another computer &#8230;&#8217; option in the &#8216;Action&#8217; menu. This will allow us to administer almost all running services on TERMSVR01 &#8230; almost all. You&#8217;ll notice immediately that you cannot start/stop the &#8216;Terminal Services&#8217; service from this management console, so we need to find another way to do it.</p>
<p>The easiest way I know to accomplish this task is to use the WMIC command from the command prompt.</p>
<p><strong>Step #2: Restart a remote service using WMIC</strong></p>
<ol>
<li>Open a command prompt</li>
<li>Type the following command (then hit enter) to stop the service:
<div class="code_block">
wmic /node:TERMSVR01 service where &#8220;caption=&#8217;Terminal Services&#8217;&#8221; call StopService
</div>
</li>
<li>Then, type the following command to start the service:
<div class="code_block">
wmic /node:TERMSVR01 service where &#8220;caption=&#8217;Terminal Services&#8217;&#8221; call StartService
</div>
</li>
<li>Close the command prompt</li>
</ol>
<p>If everything was successful (and my assumption about the nature of the problem was correct), then I should be able to connect to the server using the Remote Desktop client. I fired up the client and voilà! It worked perfectly.</p>
]]></content:encoded>
			<wfw:commentRss>http://nefaria.com/2010/01/configuring-per-user-licensing-in-terminal-services-remotely-without-remote-desktop-access/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
	</channel>
</rss>

