TS Session broker - double logons

Soldato
Joined
17 Jul 2005
Posts
3,192
Hi Guys

Trawled the net for a solution to this but at a loss. Lot's of technet posts with no end solution so thought I'd see if anyone had any ideas on here.

We have a 20+ Server 2008 R2 terminal servers presented through 3 NLB clusters with round robin at the front. We then have a standalone session broker server with all TS members of the farm. The session broker has load balancing and IP reconnection configured.

The setup works fine and is a big improvement on the old 2k3 NLB based clusters - all servers are always evenly balanced and the guaranteed reconnection is a bonus. However one big problem! Our users have to logon twice.

We predominantly use HP thin terminals (t5325s, etc) that have the latest linux OS installed. They use RDesktop 1.6.

From a server perspective we have tried;

  • Bringing the session broker server into the farm
  • Ensuring '..always prompt for password' is disabled
  • Added TERMSRV/*.domain to the delegate credentials GPO
  • Tried disabling NLB and connecting directly to a TS - still get the double logon

... there's probably a few other things I've tried as well.

For info, following this I have configured the 'use the following logon information' and entered the domain name to stop users being required to enter domain\username each time.

I also get the double logon on my windows 7 machine using the 6.1 RDC client with the credssp value set to 0. Same scenario if I RDP hop from a 2008 box. Also the same from an XP SP3 machine with 6.1 installed.

It's a bit of a pain having to explain to users that it's for their benefit!
 
I had a feeling this was to do with NLA which enables the single sign on aspect, and thus doesn't need the second login.

Which would make sense when you say when you 'disable' nla by setting the credssp to 0 it doesn't work.

That was my understanding of it anyway, we've been doing a project recently that's involved a lot of this and enabling NLA removed the twin logins, but broke other stuff for us :p
 
Back
Top Bottom