Description of the Remote Desktop Connection 7.0 client update for Remote Desktop Services (RDS) for Windows XP SP3, Windows Vista SP1, and Windows Vista SP2

This article discusses the Remote Desktop Connection (RDC) 7.0 client update that enables you to use the new Remote Desktop Services features. These features are introduced in Windows 7 and in Windows Server 2008 R2. These features are available for computers that are running Windows XP Service Pack 3 (SP3), Windows Vista Service Pack 1 (SP1), and Windows Vista Service Pack 2 (SP2).

The RDC 7.0 client can be used to connect to legacy terminal servers or to remote desktops as before. However, the new features that are mentioned in this article are available only when the client connects to a remote computer that is running Windows 7 or Windows Server 2008 R2.

New features in the RDC 7.0 client update

The RDC 7.0 client update contains the following new features.

Web Single Sign-On (SSO) and Web forms-based authentication

Remote Desktop (RD) Web Access now uses forms-based authentication to improve the user experience. Web SSO makes sure that after a user is logged on, no additional passwords are required for RD Gateway, RD Session Host servers and RemoteApp programs.

For security, Web SSO requires remote applications to be signed using a certificate from a trusted issuer.

Access to personal virtual desktops by using RD Connection Broker

Users can access personal virtual desktops when they use the new Remote Desktop Virtualization Host in Windows Server 2008 R2. Personal desktops are assigned to users on a one-to-one basis and maintain state over time.

Access to virtual desktop pools by using RD Connection Broker

Users can access virtual desktop pools when they use the new Remote Desktop Virtualization Host in Windows Server 2008 R2. Pooled desktops are shared between multiple users, and all changes a user makes are typically rolled back when the user logs off.

Status & disconnect system tray icon

A single system tray icon enables users to see all of their remote connections. The user can disconnect all or individual connections that use this icon. The icon appears only when opening RDP connections which are associated with a RemoteApp and Desktop Connection feed.

RD Gateway-based device redirection enforcement

In Windows Server 2008, it was possible for non-Microsoft Remote Desktop clients to override the gateway device redirection controls. In Windows Server 2008 R2, device redirection settings are defined in RD Gateway and can be configured not to be overridden.

RD Gateway system and logon messages

System and logon messages can be added to RD Gateway and displayed to the remote desktop user. System messages can be used to inform users of server maintenance issues such as shutdowns and restarts. Logon messages can be used to display a logon notice to users before they gain access to remote resources.

RD Gateway background authorization & authentication

Background authentication and authorization requests are performed after a configured session timeout is reached. Sessions for users whose property information has not changed are not affected, and authentication and authorization requests are sent in the background.

RD Gateway idle & session time-outs

Configurable idle and session time-outs with RD Gateway provide better control of users who connect through RD Gateway. An idle time-out lets the user reclaim resources that are used by inactive user sessions without affecting the user's session or data. This helps free up resources on the RD Gateway server.

NAP remediation with RD Gateway

NAP remediation allows you to manage remote clients by updating them with the latest software updates and settings. This helps keep remote clients in compliance with network security policies.

Windows Media Player redirection

Windows Media Player Redirection enables content hosted in Windows Media Player to be redirected to the client for decoding on users’ computers. This improves the quality of the video and makes sure that video and audio are always in sync. This works for both full Windows Media Player and Windows Media Player controls hosted in Web pages.

Bidirectional audio

You can redirect audio recording devices such as microphones on the client computer. This is ideal for applications such as Windows 7 voice recognition, and applications that record audio.

Multiple monitor support

In Windows Vista and in Windows Server 2008, Terminal Services supported only monitor spanning. Remote Desktop Services now includes multiple monitor support for up to 16 monitors, and works for both Remote Desktop and RemoteApp programs.

Note For connections with multiple monitor support enabled, AeroGlass support is currently not supported and will be turned off.

Enhanced video playback

Bitmap acceleration improves the remote display of graphics-intensive applications such as PowerPoint, Flash, and Silverlight.

Known issues affecting Windows Vista package

1. Setup strings for the following languages are not fully localized. The issue affects the dialog box that provides users with the package identity (the KB number) and user approval (click OK) for continuation.
   • Chinese-Hong Kong
   • Ukrainian
   • Hebrew
   • Bulgarian
   • Romanian
   • Thai
   • Estonian
   • Croatian
   • Latvian
   • Slovenian
   • Slovak
   • Serbian
2. If you have previously installed the hotfix that is described in Microsoft Knowledge Base article 968358
   (http://support.microsoft.com/kb/968358/ )
   , installing RDC 7.0 will undo the fix. That means, you cannot use a mouse to select combo box items in a RemoteApp program through RDC 7.0. To workaround this issue, use the keyboard instead of the mouse to select the combo box items.

Known issues affecting Windows XP package

1. By default, Network Level Authentication (NLA) is disabled in Windows XP Service Pack 3 (SP3). To enable NLA, you have to turn on the Credential Security Service Provider (CredSSP). For more information, click the following article number to view the article in the Microsoft Knowledge Base:
   951608

   (http://support.microsoft.com/kb/951608/ )

   Description of the Credential Security Service Provider (CredSSP) in Windows XP Service Pack 3
2. On a computer that is running Windows XP SP3, when you use RDC 7.0 to try to connect to a remote computer through a Windows Server 2008-based or Windows Server 2008 R2-based RD Gateway server, you receive either of the following error messages:
   
   Error 1:
   
   An error occurred while sending data to the Remote Desktop Gateway server. The server is temporarily unavailable or a network connection is down. Try again later, or contact your network administrator for assistance.
   Error 2:
   Your computer can't connect to the remote computer because an error occurred on the remote computer that you want to connect to. Contact your network administrator for assistance.
   If you ignore the error message and click Connect again, you will be able to connect to the remote server.
   
   To fully resolve this issue, turn on CredSSP. For more information about how to turn on CredSSP, click the following article number to view the article in the Microsoft Knowledge Base:
   951608

   (http://support.microsoft.com/kb/951608/ )

   Description of the Credential Security Service Provider (CredSSP) in Windows XP S951608
3. The Single Sign-On (SSO) between RD Gateway and the RD Session host will not work. If you need SSO across TS roles, use workspaces SSO. This requires Windows server 2008 R2 running RD Web Access. Additionally, you can use default credentials for SSO. To learn more about how to use default credentials on terminal services, visit the following Microsoft Web site:
   http://technet.microsoft.com/en-us/library/cc772108(WS.10).aspx

   (http://technet.microsoft.com/en-us/library/cc772108(WS.10).aspx)
4. The disconnect tray icon does not display the options to the user in Windows XP SP3. Users will see a blank space instead of the menu options. There are no workarounds for this issue.
5. When they run some embedded media player applications that use Windows Media Player OCX (for example, Yahoo Jukebox) in a remote session, users may be unable to mute audio or change the volume. To workaround this issue, disable multimedia redirection on the RDP client.
   
   You can change the RDP setting from videoplaybackmode:i:1 to videoplaybackmode:i:0.
6. If you have previously installed the hotfix that is described in Microsoft Knowledge Base article 968358
   (http://support.microsoft.com/kb/968358/ )
   , installing RDC 7.0 will undo the fix. That means, you cannot use a mouse to select combo box items in a RemoteApp program through RDC 7.0. To workaround this issue, use the keyboard instead of the mouse to select the combo box items.

Functionality available only when connecting from Windows 7 to Windows 2008 R2

Language Bar docking

RemoteApp allows users to use their docked Language Bar with their RemoteApp applications just as they do with the local applications.

This productive functionality was previously unavailable. Instead, users had to use the floating Language bar.

Remote application task scheduler

Remote application task scheduler functionality automatically starts remote applications on the Remote Desktop client required by the user. The client computer must have Windows 7 installed to use this feature.

Aero Glass support

Terminal Services in Windows Server 2008 did not support Aero Glass remoting for sessions. This is now supported in Windows Server 2008 R2 Remote Desktop Services, but is incompatible with multi-monitor support.

Start applications and desktops from 'RemoteApp and Desktop Connections'

Users can subscribe to all of their RemoteApp programs and desktops which are then listed in their local Start menu. The list is automatically updated as items are added or deleted.

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.