Remotedesktopconnection from WinXP SP3 to a TerminalServerFarm (2008)

[Guest Daniel Siebers]

Hello,

 

Following situation:

We have installed a terminal server farm with two terminal servers and a

session broker.

 

The problem: We cant open a connection with the RemoteDesktopClient

from computers to the farm, which are in the same domain as the farm.

 

The following error occurs:

An authentification error occured (Code: 0x80090327)

 

RDC runs normally from computers which are not in the same domain as the

farm...

 

We did the following until now:

 

we created a certificate request for our two terminal servers, with the

name of the serverfarm: farm1. Our Certification Authority signed it.

 

Then the signed ceritificate was implemented in both terminal servers.

As long as NTLA is disabled we can see the certificate is properly

implemented and that no error occurs.

 

We think that the problem lies there, but we dont know where exactly...

Also there is nothing written in the event protocols about the error,

which could give us a hint of the error source...

 

Does someone have an idea?

 

greetings

Daniel

[Guest Ramasamy Pullappan [MSFT]]

Re: Remotedesktopconnection from WinXP SP3 to a TerminalServerFarm (2008)

 

Hi,

 

Are the clients using signed RDP files to connect to the TS farm? If so,

then it can probably be because the root cert is not present in the client's

trusted root certificate store.

 

Hope this helps,

Ram.

--

This posting is provided "AS IS" with no warranties, and confers no rights.

 

"Daniel Siebers" <daniel.siebers@fernuni-hagen.de> wrote in message

news:uGACutuIJHA.2156@TK2MSFTNGP05.phx.gbl...

> Hello,

>

> Following situation:

> We have installed a terminal server farm with two terminal servers and a

> session broker.

>

> The problem: We cant open a connection with the RemoteDesktopClient from

> computers to the farm, which are in the same domain as the farm.

>

> The following error occurs:

> An authentification error occured (Code: 0x80090327)

>

> RDC runs normally from computers which are not in the same domain as the

> farm...

>

> We did the following until now:

> we created a certificate request for our two terminal servers, with the

> name of the serverfarm: farm1. Our Certification Authority signed it.

>

> Then the signed ceritificate was implemented in both terminal servers.

> As long as NTLA is disabled we can see the certificate is properly

> implemented and that no error occurs.

>

> We think that the problem lies there, but we dont know where exactly...

> Also there is nothing written in the event protocols about the error,

> which could give us a hint of the error source...

>

> Does someone have an idea?

>

> greetings

> Daniel