Single sign-on (SSO) with RD WebAccess on Server 2012 R2 fails

-

hi experts,


when client logs in on web access , starts rd web application, client uses stored credentials instead of actual web access credentials.

on server 2008r2 logon webaccess passed through remote desktop client. on same client not work server 2012.

on both servers have activated gpo "allow delegating default credentials".


there way automatically pass through credentials on server 2008?


in advance

ulrich schumacher

hmm. fact taskbar notification not come tells me going wrong javascript in rd web access page. here how it's supposed work:

  1. user fills in username & password in rdweb login page
  2. user clicks "submit" button. @ time, javascript sends username & password local "wksprt.exe" process, calling com api exposed our activex control.
  3. the server authenticates user & user loads main page (default.aspx).
  4. as part of default.aspx page load, javascript informs local "wksprt.exe" process credentials received (again calling in com api exposed our activex control).
  5. when wksprt.exe receives these 2 pieces of information (credentials + notification passed authentication), causes notification area icon open & pop balloon quick "you connected" message (i don't recall exact wording, sorry)

so, fact you're not seeing notification area pop-up tells me breaking webpage's javascript code's ability call activex control, or activex control's ability call other user processes needs talk to. in past i've typically seen caused ie security settings involving activex support and/or javascript execution, might try checking of those. other that, i'm not sure might causing issue.

sorry couldn't of more help,

travis howe | rds blog: http://blogs.msdn.com/rds/default.aspx



Windows Server  >  Remote Desktop Services (Terminal Services)



Comments

Post a Comment

Popular posts from this blog

Error: 0x80073701 when trying to add Print Services Role in Windows 2012 Standard

-
hello, i'm getting error when trying add print services role in windows 2012 standard. i'm getting same error whether use gui or powershell. this new server install. the powershell error follows: add-windowsfeature : request add or remove features on specified server failed. installation of 1 or more roles, role services, or features failed. the referenced assembly not found. error: 0x80073701 at line:1 char:1 + add-windowsfeature print-services + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~     + categoryinfo          : invalidoperation: (@{vhd=; credent...name=localhost}:psobject) [install-windowsfeature],     exception     + fullyqualifiederrorid : dismapi_error__failed_to_enable_updates,microsoft.windows.servermanager.commands.addwind    owsfeaturecommand success restart needed exit code      feature result ------- -------------- ---------      -------------- false   no             failed         {} issue appreciated. hi, i think should st
Read more

Disconnecting from a Windows Server 2012 R2 file sharing session on a Windows 7,8,10 machine

-
i've been trying disconnect server while , haven't been able to. there quick way this? i've used net session , net user , work sometime never consistent. can task? hi yrusad, thanks post. does work when check “computer management > system tools > shared folders > open files/sessions”. directly manage from gui. and based on knowledge, quick way mentioned net session /delete /y. mean never consistent? best regards, mary please remember mark replies answers if , unmark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com . Windows Server  >  Windows Server 2012 General
Read more

Event ID 64,77,1008 Certificates Events Windows Server 2008, 2008R2

-
hi guys, i need event ids. event id 64 clear - expired certificate. problem computers have new certificate ca of them keep old one. can remove them certificate store on computers or should check before? event id 77 - 1 strange me. warning , in same time don't see suspicious: "windows default" policy module logged following warning: active directory connection <domain controller name> has been reestablished <domain controller name>. have 4 dcs. should check or ignore these messages. event id 1008 - "certificate services client: credential roaming not performed because number of tokens in local store has exceeded limit." - i've checked articles credential roaming i'm not sure should do. if give tips , answers, great. in advance. hi, event id 64 clear - expired certificate. problem computers have new certificate ca of them keep old one. can remove them certificate store on computers or should check before? i assume these
Read more