File Associations in 2012 R2 RDS Server using Roaming Profiles

Background Information

We recently moved from using 2008 R2 RDS servers to 2012 R2 RDS Servers. All of our users
have roaming profiles. When we migrated from the old terminal servers to the
new terminal servers, the users got completely new profiles. The only thing
moved from their old profiles were documents and items on their desktops. We
have multiple PDF viewers/editors installed on our RDS servers. Mostly due to
the cost difference between Adobe Acrobat and other, cheaper products that a
lot of our users can get away with using that don't need the functionality of
Adobe Acrobat.

The Problem

Ever since moving to the new 2012 R2 RDS servers, whenever our users log off terminal
server, the next time they log in their default PDF Viewer association doesn't
load, and they have to go through the process of choosing a default PDF viewer.
This only occurs when there's more than one PDF viewer installed on the server.
We've tested it with only one PDF viewer program, and the setting remains after
logging off and back on. The problem we've found is that the registry key that
houses the default user choice:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf\UserChoice
when set during the session, to Adobe Acrobat 11 for example, reads as such
inside that registry key. For example, the Progid key will say
Acrobat.Document.11 and this setting will persist until the user logs off. Upon
logging off and back on to the terminal servers, if you look at that same
Progid key, it has been converted in to a Hash value, and the Operating System
is unable to read the hashed value and determine what that user's default PDF
Viewer choice is, causing them to have to go through the process of setting it
again.

Things we've tried

We created a GPO that runs a script that exports the registry key upon log off that has
the non-hashed value, and have it set to import that value on log on. However,
by default this registry key has the DENY WRITE permission applied to it, so
when the system tries to import the registry key through the login script it is
unable to do so. 

Summary

This issue only started happening once we moved over to 2012 R2 RDS servers. It only
occurs for users using Roaming Profiles. It only occurs when we have multiple
PDF Viewers installed on the servers. Any insight on why this is happening or
how to resolve it would be greatly appreciated.

  • Edited by AdamDouglas Thursday, April 30, 2015 4:28 PM
April 30th, 2015 4:21pm

Tried pushing the "Not Hashed" value using a GPP and this still does not work. I'm assuming due to the Deny "Set Value" permission on the key.  I tried to follow your link to show how to set registry permission using GPP, however, it seems to be a broken link.

I've also tried using a GPP to delete the key before the deny permission takes effect, however, this also does not work. However, if I go to the registry as the user and delete the key manually, it deleted without a problem and I can import the registry setting without an issue. I've opened a support case with Microsoft, however, they are telling me that since this problem only occurs with the .pdf file extension that this is an unsupported Third-Party issue, however, I've seen several people having this exact same problem.

I've tried using PowerShell to modify the permissions in a logon script, but my scripting skills are weak to say the least and I've been unsuccessful in getting that to work also.

Getting frustrating since MS has no help and none of the group policy solutions I've found work the way they are supposed to.

Free Windows Admin Tool Kit Click here and download it now
May 11th, 2015 6:00pm

Hi Adam,

having the same issue with my RDS Server. I have installed a iFilter driver (from Adobe) side by side with Acrobat Reader. After the installation the file association with .pdf files for all users were gone. Users with local profile are able to set the file association. For users with Terminal Server Profile the accossiation is gone after logoff.

Were you able to solve this issue? I have tried different approaches including GPP but was not able to solve the issue.

Kind regards

Denis    

June 10th, 2015 1:44am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics