Azure混合AD加入 - RDP问题
您好
我已经构建了一个新域来替换旧的旧域。旧域包含几个具有站点到站点vpns的azure订阅,本地虚拟服务器和资源的负载。连接到本地域(DC)的所有笔记本电脑都可以RDP到包括新域控制器在内的所有
。
I have built a new domain to replace our old legacy domain. The old domain consists of several azure subscriptions with site to site vpns, loads of local virtual servers and resources. All laptops connected to this local domain (DC) can RDP to everything including the new domain controller.
我有一个奇怪的问题,任何注册了Intune和配置为Hybrid Azure AD加入。笔记本电脑不再能够RDP任何本地资源。
I have a weird issue where any new laptop that is enrolled with Intune and configured to be Hybrid Azure AD joined. The laptop is no longer able to RDP any local resources.
RDP适用于外部服务器,例如通过公共IP远程连接到Azure服务器。
RDP没有使用服务器的DNS或IP名称进行内部工作。
检查防火墙规则,尝试没有防火墙。
检查端口设置,组策略, NLA打开/关闭。
可以通过Powershell远程登录到端口3389上的服务器
RDP works for external servers such as remote connections to Azure servers via Public IP.
RDP does not work internally using DNS or IP names for servers.
Checked firewall rules, tried without firewall on.
Checked port settings, group policy, NLA on/off.
Can telnet to servers on port 3389 via Powershell
使用相同的Windows ISO但没有连接到域的笔记本电脑和这台笔记本电脑可以RDP我们的域名没有问题所以它必须与它连接到新域或intune时有关。
任何建议都会非常有用,因为我已经在上周与Intune签了一张票并且还在等待初始回复。
谢谢你来
Alec
Built laptop using same windows ISO but not connected to domain and this laptop can RDP either of our domains fine with no issues so it has to be something to do with when its connected to the new domain or intune.
Any advice would be very helpful as I have logged a ticket with Intune last week and still awaiting the initial response.
Thanks
Alec
您好,
当您尝试使用RDP时,客户端会发生什么? 您可以telnet的事实是一个好兆头,因为它排除了路由问题等。
What happens at the client side when you try to RDP? The fact you can telnet is a good sign as that rules out routing issues etc.
如果您再次尝试此操作,然后查看Windows服务器上的事件日志。 如果您将"安全"事件过滤为"审核失败"或过滤器列表中的任何选项,则"安全"事件将显示状态代码。
If you try this again and then take a look at the event logs on the Windows server. The 'security' events will should show a status code if you filter it to 'Audit Failure' or whatever the option like that is on the filter list.
然后您应该获得更详细的信息"应用程序和服务日志"下的事件日志中的细分> '微软'> 'Windows'> 'terminal services-localSessionManager'
Then you should get a more detailed breakdown in the event logs under 'Application and Service logs' > 'Microsoft' > 'Windows' > 'terminal services-localSessionManager'
请告诉我这是否有帮助?
Let me know if that helps?
谢谢,
Matt
Thanks,
Matt