Remotedesktopconnection from WinXP SP3 to a TerminalServerFarm (2008)

[Daniel Siebers]

Hello,

Following situation:
We have installed a terminal server farm with two terminal servers and a
session broker.

The problem: We cant open a connection with the RemoteDesktopClient
from computers to the farm, which are in the same domain as the farm.

The following error occurs:
An authentification error occured (Code: 0x80090327)

RDC runs normally from computers which are not in the same domain as the
farm...

We did the following until now:

we created a certificate request for our two terminal servers, with the
name of the serverfarm: farm1. Our Certification Authority signed it.

Then the signed ceritificate was implemented in both terminal servers.
As long as NTLA is disabled we can see the certificate is properly
implemented and that no error occurs.

We think that the problem lies there, but we dont know where exactly...
Also there is nothing written in the event protocols about the error,
which could give us a hint of the error source...

Does someone have an idea?

greetings
Daniel

 

[Ramasamy Pullappan [MSFT]]

Re: Remotedesktopconnection from WinXP SP3 to a TerminalServerFarm (2008)

Hi,

Are the clients using signed RDP files to connect to the TS farm? If so,
then it can probably be because the root cert is not present in the client's
trusted root certificate store.

Hope this helps,
Ram.
--
This posting is provided "AS IS" with no warranties, and confers no rights.

"Daniel Siebers" <daniel.siebers@fernuni-hagen.de> wrote in message
news:uGACutuIJHA.2156@TK2MSFTNGP05.phx.gbl...
> Hello,
>
> Following situation:
> We have installed a terminal server farm with two terminal servers and a
> session broker.
>
> The problem: We cant open a connection with the RemoteDesktopClient from
> computers to the farm, which are in the same domain as the farm.
>
> The following error occurs:
> An authentification error occured (Code: 0x80090327)
>
> RDC runs normally from computers which are not in the same domain as the
> farm...
>
> We did the following until now:
> we created a certificate request for our two terminal servers, with the
> name of the serverfarm: farm1. Our Certification Authority signed it.
>
> Then the signed ceritificate was implemented in both terminal servers.
> As long as NTLA is disabled we can see the certificate is properly
> implemented and that no error occurs.
>
> We think that the problem lies there, but we dont know where exactly...
> Also there is nothing written in the event protocols about the error,
> which could give us a hint of the error source...
>
> Does someone have an idea?
>
> greetings
> Daniel