From 6fb8cf9d3b79c516faadfa74b6785e63d18db6c2 Mon Sep 17 00:00:00 2001 From: oshati Date: Wed, 14 Aug 2024 14:03:42 +0100 Subject: [PATCH 1/8] Desktop access troubleshooting docs update --- .../desktop-access/troubleshooting.mdx | 27 +++++++++++++++++++ 1 file changed, 27 insertions(+) diff --git a/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx b/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx index d2ed129129ac..768073cc55df 100644 --- a/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx +++ b/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx @@ -393,3 +393,30 @@ to force the policy update: ```code $ gpupdate.exe /force ``` +### Shared Directory Error + +Attempts to share directory on a remote desktop session results in the error: + +``` +Encountered shared directory error 1 +``` + +Solution: Review and disable configured Device Redirection Group Policy + +First, make sure that all [Drectory sharing](./directory-sharing.mdx/#prerequisites) pre-requisites has been met. + +Teleport requires device redirection policies to be disabled in RDP policies to allow directory sharing from a remote computer in an RDP session + +To fix this issue, review and disable the `Device and resource redirection policy` within the `Remote Desktop session host` path below: +`Computer configuration > Policies > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Device and Resource Redirection > *` + +Some key policies to lookout for: +- Do not allow COM port redirection +- Do not allow drive redirection +- Do not allow LPT port redirection + +After disabling the policies, run the following command from the Windows Command prompt as an administrator to force the policy update: + +```code +$ gpupdate.exe /force +``` \ No newline at end of file From f25644281b295fabcba31862f5ae5757019ee8f5 Mon Sep 17 00:00:00 2001 From: oshati Date: Wed, 14 Aug 2024 14:13:55 +0100 Subject: [PATCH 2/8] clean up --- .../desktop-access/troubleshooting.mdx | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx b/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx index 768073cc55df..f62e1a8d1924 100644 --- a/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx +++ b/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx @@ -401,16 +401,20 @@ Attempts to share directory on a remote desktop session results in the error: Encountered shared directory error 1 ``` -Solution: Review and disable configured Device Redirection Group Policy +**Solution:** Review and disable configured Device Redirection Group Policy First, make sure that all [Drectory sharing](./directory-sharing.mdx/#prerequisites) pre-requisites has been met. Teleport requires device redirection policies to be disabled in RDP policies to allow directory sharing from a remote computer in an RDP session To fix this issue, review and disable the `Device and resource redirection policy` within the `Remote Desktop session host` path below: -`Computer configuration > Policies > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Device and Resource Redirection > *` + +```text +Computer configuration > Policies > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Device and Resource Redirection > * +``` Some key policies to lookout for: + - Do not allow COM port redirection - Do not allow drive redirection - Do not allow LPT port redirection @@ -419,4 +423,4 @@ After disabling the policies, run the following command from the Windows Command ```code $ gpupdate.exe /force -``` \ No newline at end of file +``` From 1a406164ed07fafee10f3df9960b45dfc9cbfc83 Mon Sep 17 00:00:00 2001 From: oshati Date: Wed, 14 Aug 2024 15:38:01 +0100 Subject: [PATCH 3/8] fix typo --- docs/pages/enroll-resources/desktop-access/troubleshooting.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx b/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx index f62e1a8d1924..11fdb62aa111 100644 --- a/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx +++ b/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx @@ -403,7 +403,7 @@ Encountered shared directory error 1 **Solution:** Review and disable configured Device Redirection Group Policy -First, make sure that all [Drectory sharing](./directory-sharing.mdx/#prerequisites) pre-requisites has been met. +First, make sure that all [Directory sharing](./directory-sharing.mdx/#prerequisites) pre-requisites has been met. Teleport requires device redirection policies to be disabled in RDP policies to allow directory sharing from a remote computer in an RDP session From c659432e57491574b003f1a4af413bc04aa98915 Mon Sep 17 00:00:00 2001 From: oshati Date: Wed, 14 Aug 2024 16:26:48 +0100 Subject: [PATCH 4/8] fix typo --- docs/pages/enroll-resources/desktop-access/troubleshooting.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx b/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx index 11fdb62aa111..2aaf5b9b23a8 100644 --- a/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx +++ b/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx @@ -403,7 +403,7 @@ Encountered shared directory error 1 **Solution:** Review and disable configured Device Redirection Group Policy -First, make sure that all [Directory sharing](./directory-sharing.mdx/#prerequisites) pre-requisites has been met. +First, make sure that all [Directory sharing](https://goteleport.com/docs/enroll-resources/desktop-access/directory-sharing/#prerequisites) prerequisites has been met. Teleport requires device redirection policies to be disabled in RDP policies to allow directory sharing from a remote computer in an RDP session From 3049c4003286d236e8ac29055eb24f349370bc18 Mon Sep 17 00:00:00 2001 From: Olu Oshati <74545288+oshati@users.noreply.github.com> Date: Fri, 16 Aug 2024 09:53:24 +0100 Subject: [PATCH 5/8] Update docs/pages/enroll-resources/desktop-access/troubleshooting.mdx Co-authored-by: Zac Bergquist --- docs/pages/enroll-resources/desktop-access/troubleshooting.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx b/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx index 2aaf5b9b23a8..f0fc4a9c20ec 100644 --- a/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx +++ b/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx @@ -410,7 +410,7 @@ Teleport requires device redirection policies to be disabled in RDP policies to To fix this issue, review and disable the `Device and resource redirection policy` within the `Remote Desktop session host` path below: ```text -Computer configuration > Policies > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Device and Resource Redirection > * +Computer configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Device and Resource Redirection ``` Some key policies to lookout for: From 7b4398893d8800e197805ebc609938b69e67823c Mon Sep 17 00:00:00 2001 From: Olu Oshati <74545288+oshati@users.noreply.github.com> Date: Fri, 16 Aug 2024 09:54:10 +0100 Subject: [PATCH 6/8] Update docs/pages/enroll-resources/desktop-access/troubleshooting.mdx Co-authored-by: Zac Bergquist --- docs/pages/enroll-resources/desktop-access/troubleshooting.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx b/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx index f0fc4a9c20ec..7e7a6c072c75 100644 --- a/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx +++ b/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx @@ -405,7 +405,7 @@ Encountered shared directory error 1 First, make sure that all [Directory sharing](https://goteleport.com/docs/enroll-resources/desktop-access/directory-sharing/#prerequisites) prerequisites has been met. -Teleport requires device redirection policies to be disabled in RDP policies to allow directory sharing from a remote computer in an RDP session +Teleport requires device redirection to be enabled in order to share a directory from a remote computer in an RDP session. To fix this issue, review and disable the `Device and resource redirection policy` within the `Remote Desktop session host` path below: From affbd154a5efbaea03e8fdc601cb70eb78738072 Mon Sep 17 00:00:00 2001 From: Olu Oshati <74545288+oshati@users.noreply.github.com> Date: Fri, 16 Aug 2024 10:13:09 +0100 Subject: [PATCH 7/8] Update docs/pages/enroll-resources/desktop-access/troubleshooting.mdx Co-authored-by: Zac Bergquist --- docs/pages/enroll-resources/desktop-access/troubleshooting.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx b/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx index 7e7a6c072c75..257452a3e7d5 100644 --- a/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx +++ b/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx @@ -401,7 +401,7 @@ Attempts to share directory on a remote desktop session results in the error: Encountered shared directory error 1 ``` -**Solution:** Review and disable configured Device Redirection Group Policy +**Solution:** Review Device Redirection Group Policy First, make sure that all [Directory sharing](https://goteleport.com/docs/enroll-resources/desktop-access/directory-sharing/#prerequisites) prerequisites has been met. From c98b66b2eb6a6ff9da6658fcbddd4ed9203bbf4c Mon Sep 17 00:00:00 2001 From: oshati Date: Fri, 16 Aug 2024 10:31:08 +0100 Subject: [PATCH 8/8] commit suggestions --- .../desktop-access/troubleshooting.mdx | 12 +++--------- 1 file changed, 3 insertions(+), 9 deletions(-) diff --git a/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx b/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx index 257452a3e7d5..f832c7e8ea4f 100644 --- a/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx +++ b/docs/pages/enroll-resources/desktop-access/troubleshooting.mdx @@ -395,11 +395,7 @@ $ gpupdate.exe /force ``` ### Shared Directory Error -Attempts to share directory on a remote desktop session results in the error: - -``` -Encountered shared directory error 1 -``` +Attempts to share directory on a remote desktop session results in the error. **Solution:** Review Device Redirection Group Policy @@ -407,17 +403,15 @@ First, make sure that all [Directory sharing](https://goteleport.com/docs/enroll Teleport requires device redirection to be enabled in order to share a directory from a remote computer in an RDP session. -To fix this issue, review and disable the `Device and resource redirection policy` within the `Remote Desktop session host` path below: +To fix this issue, review and the Device and resource redirection group policy settings at the path below: ```text Computer configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Device and Resource Redirection ``` -Some key policies to lookout for: +Key policy to lookout for: -- Do not allow COM port redirection - Do not allow drive redirection -- Do not allow LPT port redirection After disabling the policies, run the following command from the Windows Command prompt as an administrator to force the policy update: