RD Web Access Configuration

Microsoft.Windows.Server.10.0.RemoteDesktopServices.NewUnitMonitor_3 (UnitMonitor)

This object monitors the configuration of the RD Web Access server.

Knowledge Base article:

Summary

When the Remote Desktop Web Access (RD Web Access) role service is installed, a default Web site is automatically created. By default, the Web site is located at http://server_name/RDWeb, where server_name is the name of the RD Web Access server.

To populate the Web page with a list of available RemoteApp programs or virtual desktops, you must specify an RD Session Host server or RD Connection Broker server for RD Web Access to use. Any RemoteApp programs on the specified RD Session Host server or RD Connection Broker server that are configured to appear in RD Web Access will appear on the Web page.

Resolutions

To resolve this issue, check the event ID, and then view the troubleshooting information for that event in the sections below.

Resolution steps for the following event IDs: 8, 10

To resolve this issue, add the computer account for the RD Web Access server to the TS Web Access Computers local group on the RD Session Host server or the RD Connection Broker server. An RD Connection Broker server is required for virtual desktops.

To perform this procedure, you must have membership in the local Administrators group, or you must have been delegated the appropriate authority.

To add the computer account for the RD Web Access server to the TS Web Access Computers local group:

1. On the RD Session Host server or the RD Connection Broker server, open the Local Users and Groups snap-in. To open Local Users and Groups, click Start, click Run, type lusrmgr.msc, and then click OK.

2. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.

3. In the left pane, click Groups.

4. In the right pane, right-click the TS Web Access Computers group, and then click Add to Group.

5. Click Add.

6. In the Select Users, Computers, or Groups dialog box, click Object Types.

7. Select the Computers check box, and then click OK.

8. In the Enter the object names to select, specify the computer account of the RD Web Access server, and then click OK.

9. Click OK to close the TS Web Access Computers Properties dialog box.

Resolution steps for the following event ID:4

To resolve this issue, make a RemoteApp program on the RD Session Host server available through RD Web Access.

To perform this procedure, you must have membership in the local Administrators group, or you must have been delegated the appropriate authority.

To make a RemoteApp program available through RD Web Access:

1. On the RD Session Host server where the RemoteApp programs are configured, open RD RemoteApp Manager. To start RD RemoteApp Manager, click Start, point to Administrative Tools, point to Remote Desktop Services, and then click RD RemoteApp Manager.

2. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.

3. In the RemoteApp Programs list, ensure that a Yes value appears in the RD Web Access column next to the program that you want to make available through RD Web Access.

4. If a No value appears in the RD Web Access column for a program that you want to make available through RD Web Access, click the program name, and then in the Actions pane, click Show in RD Web Access.

5. If no RemoteApp programs are listed, you can add a RemoteApp program by using the RemoteApp Wizard. To run the RemoteApp Wizard, in the Actions pane, click Add RemoteApp Programs.

Resolution steps for the following event ID: 6

To resolve this issue, specify a source from which to populate the list of RemoteApp programs that will appear in the RD Web Access Web Part.

To perform this procedure, you must be logged on with the local Administrator account or have membership in the local TS Web Access Administrators group on the RD Web Access server.

To specify which source to use:

1. Connect to the RD Web Access Web site. To do this, use either of the following methods:

2. On the RD Web Access server, click Start, point to Administrative Tools, point to Remote Desktop Services, and then click Remote Desktop Web Access Administration.

3. Use Internet Explorer to connect to the RD Web Access Web site. By default, the Web site is located at http://server_name/RDWeb, where server_name is the name of the RD Web Access server.

4. Log on to the site by using either the local Administrator account, or an account that is a member of the local TS Web Access Administrators group. If you are already logged on to the computer as one of these accounts, you are not prompted for credentials.

5. On the title bar, click the Configuration tab.

Note: If you access the RD Web Access Web site by using the RD Web Access Administration option, the page automatically opens to the Configuration tab.

6. In the Select source to use area, select the An RD Connection Brokerserver option if you are using an RD Connection Broker server. If you are using one or more RD Session Host servers, select the One or more RemoteApp sources option.

7. In the Source name box, enter the name of the RD Connection Broker server or RD Session Host server that you want to use as the data source.

Note: If you are using multiple RD Session Host servers, enter each RD Session Host server in the Source name box separated by a semicolon.

6. Click Apply to apply the changes.

Resolution steps for the following event IDs: 5, 11

To resolve this issue, do the following:

Determine the source that the RD Web Access server is configured to use.
Ensure that the source specified is configured as either an RD Session Host server or an RD Connection Broker server.
Identify and fix any network connectivity problems between the RD Web Access server and the source.

To perform these tasks, refer to the following sections.

Determine the source that the RD Web Access server is configured to use

To perform this procedure, you must be logged on with the local Administrator account or have membership in the local TS Web Access Administrators group on the RD Web Access server.

To determine the source that RD Web Access is configured to use:

1. Connect to the RD Web Access Web site. To do this, use either of the following methods:

On the RD Web Access server, click Start, point to Administrative Tools, point to Remote Desktop Services, and then click Remote Desktop Web Access Administration.

3. Use Internet Explorer to connect to the RD Web Access Web site. By default, the Web site is located at http://server_name/RDWeb, where server_name is the name of the RD Web Access server.

5. On the title bar, click the Configuration tab.

Note: If you access the RD Web Access Web site by using the RD Web Access Administration option, the page automatically opens to the Configuration tab.

6. In the Select source to use area, select the An RD Connection Broker server option if you are using an RD Connection Broker server. If you are using one or more RD Session Host servers, select the One or more RemoteApp sources option.

7. In the Source name box, enter the name of the RD Connection Broker server or RD Session Host server that you want to use as the data source.

Note: If you are using multiple RD Session Host servers, enter each RD Session Host server in the Source name box separated by a semicolon.

8. Click Apply to apply the changes.

Ensure that the source specified is configured as either an RD Session Host server or an RD Connection Broker server

To perform these procedures, you must have membership in the local Administrators group, or you must have been delegated the appropriate authority.

To check that the server is configured as an RD Session Host server:

1. On the server, open Server Manager. To open Server Manager, click Start, point to Administrative Tools, and then click Server Manager.

2. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.

3. In the left pane, expand Roles. If listed, click Remote Desktop Services. If Remote Desktop Services is not listed, the server is not configured as an RD Session Host server.

4. Under Role Services, the status of Remote Desktop Session Host should be listed as Installed. If the status is listed as Not installed, the server is not configured as an RD Session Host server.

5. If the server is not configured as an RD Session Host server, do either of the following:

6. Add (install) the Remote Desktop Session Host role service onto the server.

7. Configure RD Web Access to use another server that is already configured as a Remote Desktop Session Host server. To configure RD Web Access to use a different Remote Desktop Session Host server, navigate to the Configuration tab of the RD Web Access Web site. In the Select source to use area, select the One or more RemoteApp sources option. In the Source name box, type the name of the Remote Desktop Session Host server, and then click Apply.

To check that the server is configured as an RD Connection Broker server:

1. On the server, open Server Manager. To open Server Manager, click Start, point to Administrative Tools, and then click Server Manager.

2. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.

3. In the left pane, expand Roles. If listed, click Remote Desktop Services. If Remote Desktop Services is not listed, the server is not configured as an RD Connection Broker server.

4. Under Role Services, the status of Remote Desktop Connection Broker should be listed as Installed. If the status is listed as Not installed, the server is not configured as an RD Connection Broker server.

5. If the server is not configured as an RD Connection Broker server, do either of the following:

6. Add (install) the Remote Desktop Connection Broker role service onto the server.

7. Configure RD Web Access to use another server that is already configured as an RD Connection Broker server. To configure RD Web Access to use a different RD Connection Broker server, navigate to the Configuration tab of the RD Web Access Web site. In the Select source to use area, select the An RD Connection Broker server option. In the Source name box, type the name of the RD Connection Broker server, and then click Apply.

Identify and fix any network connectivity problems between the RD Web Access server and the source

To identify and fix any network connectivity problems between the RD Web Access server and the source, do the following:

Determine if there is a network connectivity problem by using the ping command.
Perform additional troubleshooting steps, if necessary, to help identify the cause of the problem.

To perform these tasks, refer to the following sections.

Note: The following procedures include steps for using the ping command to perform troubleshooting. Therefore, before performing these steps, check whether the firewall or Internet Protocol security (IPsec) settings on your network allow Internet Control Message Protocol (ICMP) traffic. ICMP is the TCP/IP protocol that is used by the ping command.

To perform these procedures, you must have membership in the local Administrators group, or you must have been delegated the appropriate authority.

Determine if there is a network connectivity problem

To determine if there is a network connectivity problem between the RD Web Access server and the source:

1. On the RD Web Access server, click Start, click Run, type cmd, and then click OK.

2. At the command prompt, type ping server_FQDN, where server_FQDN is the fully qualified domain name (FQDN) of the source (for example, server1.contoso.com), and then press ENTER.

If the ping was successful, you will receive a reply similar to the following:

Reply from IP_address: bytes=32 time=3ms TTL=59

Reply from IP_address: bytes=32 time=20ms TTL=59

Reply from IP_address: bytes=32 time=3ms TTL=59

Reply from IP_address: bytes=32 time=6ms TTL=59

3. At the command prompt, type ping IP_address, where IP_address is the IP address of the source, and then press ENTER.

If you can successfully ping the source by IP address, but not by FQDN, this indicates a possible issue with DNS host name resolution.

If you cannot successfully ping the source by IP address, this indicates a possible issue with network connectivity, firewall configuration, or IPsec configuration.

Perform additional troubleshooting steps

The following are some additional troubleshooting steps that you can perform to help identify the root cause of the problem:

Ping other computers on the network to help determine the extent of the network connectivity issue.
If you can ping other servers but not the source, try to ping the source from another computer. If you cannot ping the source from any computer, first ensure that the source is running. If the source is running, check the network settings on the source.
Check the TCP/IP settings on the local computer by doing the following:

1. Click Start, click Run, type cmd, and then click OK.

2. At the command prompt, type ipconfig /all, and then press ENTER. Make sure that the information listed is correct.

3. Type ping localhost to verify that TCP/IP is installed and correctly configured on the local computer. If the ping is unsuccessful, this may indicate a corrupt TCP/IP stack or a problem with your network adapter.

4. Type ping IP_address, where IP_address is the IP address assigned to the computer. If you can ping the localhost address but not the local address, there may be an issue with the routing table or with the network adapter driver.

5. Type ping DNS_server, where DNS_server is the IP address assigned to the DNS server. If there is more than one DNS server on your network, you should ping each one. If you cannot ping the DNS servers, this indicates a potential problem with the DNS servers, or with the network between the computer and the DNS servers.

If the source is on a different subnet, try to ping the default gateway. If you cannot ping the default gateway, this might indicate a problem with the network adapter, the router or gateway device, cabling, or other connectivity hardware.
In Device Manager, check the status of the network adapter. To open Device Manager, click Start, click Run, type devmgmt.msc, and then click OK.
Check network connectivity indicator lights on the computer and at the hub or router. Check network cabling.
Check firewall settings by using the Windows Firewall with Advanced Security snap-in.

Check IPsec settings by using the IP Security Policy Management snap-in.

Element properties:

Target

Microsoft.Windows.Server.10.0.RemoteDesktopServicesRole.Service.RDWebAccess

Parent Monitor

System.Health.ConfigurationState

Category

Custom

Enabled

True

Alert Generate

True

Alert Severity

MatchMonitorHealth

Alert Priority

High

Alert Auto Resolve

True

Monitor Type

Microsoft.Windows.2SingleEventLogManualReset3StateMonitorType

Remotable

True

Accessibility

Public

Alert Message

RD Web Access Configuration Alert

Event ID: {0} -- Description: {1}

RunAs

Default

Source Code:

<UnitMonitor ID="Microsoft.Windows.Server.10.0.RemoteDesktopServices.NewUnitMonitor_3" Accessibility="Public" Enabled="true" Target="Microsoft.Windows.Server.10.0.RemoteDesktopServicesRole.Service.RDWebAccess" ParentMonitorID="SystemHealth!System.Health.ConfigurationState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.2SingleEventLogManualReset3StateMonitorType" ConfirmDelivery="true">

  <Category>Custom</Category>

  <AlertSettings AlertMessage="Microsoft.Windows.Server.10.0.RemoteDesktopServices.NewUnitMonitor_3_AlertMessageResourceID">

    <AlertOnState>Warning</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>High</AlertPriority>

    <AlertSeverity>MatchMonitorHealth</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/EventDisplayNumber$</AlertParameter1>

      <AlertParameter2>$Data/Context/EventDescription$</AlertParameter2>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="UIGeneratedOpStateIdc96efb2643604234b6b2a769009230b8" MonitorTypeStateID="ManualResetEventRaised" HealthState="Success"/>

    <OperationalState ID="UIGeneratedOpStateId6ba663d3fd23498e8c3d5ef4453ecdef" MonitorTypeStateID="SecondEventRaised" HealthState="Warning"/>

    <OperationalState ID="UIGeneratedOpStateId6e6a31ea06ec4592b5cd50eb935d4612" MonitorTypeStateID="FirstEventRaised" HealthState="Error"/>

  </OperationalStates>

  <Configuration>

    <FirstComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</FirstComputerName>

    <FirstLogName>Application</FirstLogName>

    <FirstExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">TSWebAccess</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <Or>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="UnsignedInteger">8</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="UnsignedInteger">10</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="UnsignedInteger">11</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </Or>

        </Expression>

      </And>

    </FirstExpression>

    <SecondComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</SecondComputerName>

    <SecondLogName>Application</SecondLogName>

    <SecondExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">TSWebAccess</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <Or>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="UnsignedInteger">4</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="UnsignedInteger">5</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="UnsignedInteger">6</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </Or>

        </Expression>

      </And>

    </SecondExpression>

  </Configuration>

</UnitMonitor>