Remoteapp session shadowing black screen issue in windows server 2022 Remote Desktop Services implementation

Guillermo Feijóo Gavari 21 Reputation points
2022-11-03T13:18:18.543+00:00

Hi experts

New deployment, all windows server 2022 Datacenter Edition.
BROKER2022 as the session broker for the entire deployment.
PROFILE2022 as file server for user´s profile shared folder. (Fslogix profile management -had a funny number of hours dealing with outlook search strange results-)
TS012022, TS022022, TS032022 and TS042022 as RDSH-Remote desktop collection servers (only one collection)
REMAPPS012022 and REMAPPS022022 as RDSH-remoteapps collection servers (only one collection)
All RDSH are under same GPOs.

Remote desktop collection session shadowing is working fine as espected.
Remoteapp collection session shadowing shows a black screen, I can only see the mouse. If I publish VNC viewer as a remoteapp then session shadowing works ok, but word, excel, cmd, notepad, server manager, and many more, just shows a black screen.

I have tried:

  • (GPO) Restrict the number of monitors to 1 on the remoteapp-collection RDSH; same result, black screen.
  • (GPO) Force the graphics screen controller to XDDM; same result, black screen.
  • (GPO) Configure max. resolution for remoteapp; same result, black screen.

In event viewer I can only see events reporting the user permission granted for the session sharing and the session sharing start, and zero errors :(

"Snapshot view permission granted
User domain\user (session id: 2) granted permission to user domain\admin"
"Snapshot view session started
User domain\admin on computer BROKER2022 is viewing user domain\USER (session id: 2)"

This is happening in a Vsphere production environment , and in my hyperv homelab, so It´s not hardware/virtualization related.
If I add all RDS farm servers to a non-member in server manager and try to shadow a remoteapp session there, the result is the same.
If I try to shadow a remoteapp this way same result.

"mstsc /v:[IP address or host name of remote connection destination] /prompt /shadow: [session ID] /control"

If anyone could help I would be very grateful.

Thanks in advance (and apologies for my english)

256822-remoteappsessionshadowblackscreen.png

Windows for business | Windows Client for IT Pros | User experience | Remote desktop services and terminal services
Windows for business | Windows Server | User experience | Other
{count} votes

3 answers

Sort by: Most helpful
  1. Nikolay Savin 5 Reputation points
    2025-01-27T11:03:26.18+00:00

    RemoveApp

    I found the reason.

    I had a similar problem on the terminal server 2022, on 2016 everything is ok.

    The solution is to disable the policy (Disabling RemoteFX graphics for RemoteApp)

    Use advanced RemoteFX graphics for RemoteApp

    After disabling the policy, the user to which they connect needs to completely re-logon in terminating the session.

    Sorry screenshot from the Russian version of the system.

    1 person found this answer helpful.

  2. Limitless Technology 44,766 Reputation points
    2022-11-08T09:12:20.323+00:00

    Hi. Thank you for your question and reaching out.

    Your firewall may block the connection.
    If the Remote Desktop Service uses port 3389 by default, the session host must be reachable from the end-user devices for internal connections or from the Remote Desktop Gateway for external connections.
    Verify that no firewall, including Windows Defender Firewall if it is turned on on the session host, is blocking the port that your RDS environment utilizes between the client and the session host.

    Another possibility is a certificate issue. Because it employs SSL encryption, Remote Desktop Gateway needs a certificate to be installed. In order to ensure a successful connection with the session hosts, clients must have confidence in the certificate authority that issued the certificate.
    Verify that a copy of the root certificate for the certificate authority has been imported into the Trusted Root Certification Authorities store by opening the Certificates Microsoft Management Console (MMC) on the client device.

    -----------------------------------------------------------------------------------------------------------------------------------------------------------

    If the reply was helpful, please don’t forget to upvote or accept as answer, thank you.


  3. Mahmudbek Sharifzoda 0 Reputation points
    2024-12-11T06:38:34.69+00:00

    Configure the shadow connection mode. You can configure whether you need to request the user confirmation to connect and whether view or control is allowed in the shadow session. You can configure shadow connection mode through the GPO option Set rules for remote control of Remote Desktop Services user sessions (Computer Configuration -> Administrative Templates -> Windows components -> Remote Desktop Services -> Remote Session Host -> Connections).

    The following 5 modes are available:0 – disable shadow remote control; 1 — full control with user’s permission; 2 — full control without user’s permission; 3 — view session with user’s permission; 4 — view session without user’s permission.

    Everything after this simple action all works.

    Attach this policy to RDSH. Update all group policies.I also had the same situation as you after that everything worked as it should.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.