Share via

RDS 2019 Deployment

MCHAM_MAO 156 Reputation points
2021-04-01T22:41:36.807+00:00

Hi there

We have deployed a new RDS farm with 5 RDS Hosts, 1 RDS Broker (broker and licensing role) and RDS WEB (not configured yet, for future)

For load balancing we use for the time DNS RR. It has worked great in the past for the TS 2008 R2 farm.
All 5 RDS hosts, have static ip and the FARM points to the each IP of the RDS HOSTS.

We defined the collection accordingly, gave it the same name as the farm name (without the local domain name) .
Recently, at random times and random users, we get an error that states: "Remote Desktop Connection cannot verify that the two remote computers belong to the same farm...." and points to the name of one specific host. That RDS Host , is already a member of the farm , so not sure why would this happen.
My only suspicion so far is that we asked our users to open the rdp using the fgdn, like farm.domain.local
Not sure if we should try in the rdp just farm and let DNS to its magic.
i feel this is a cheap shot . We cant replicate it all the time.
It will happen once, and all of a sudden second attempt works.

Any ideas ? Things we missed ?

Windows for business | Windows Client for IT Pros | User experience | Remote desktop services and terminal services
0 comments No comments

1 answer

Sort by: Most helpful
  1. Carl Fan 6,901 Reputation points
    2021-04-02T08:04:28.087+00:00

    Hi,
    Firstly, I suggest that check for update. If any security updates could be found, please install. It could make sure to update system files.
    I consider that if it has something to do with the names of the servers not being added in DNS
    make sure DNS is updated and then also do a ipconfig /flushDNS
    Meanwhile some settings you may could check:
    1.Log into RDS Host Configuration, open RD Connection Broker settings and ensure that ‘Participate in Connection Broker Load-Balancing’ in selected.
    2.Changing the Security layer to RDP Security Layer (Session Host Configuration -> RDP-Tcp Properties -> Security Layer
    changed it back to Negotiate security to check.
    Hope this helps and please help to accept as Answer if the response is useful.
    Best Regards,
    Carl

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.