question

Duy-3719 avatar image
1 Vote"
Duy-3719 asked IvanIvanov-9650 published

Microsoft Store Remote Desktop does not work with Kiosk mode on Build 20H2

After updating my machine to Build 20H2, my Remote Desktop app is no longer working. The app is able to connect to the remote Work Resources but the remote Apps will not load. After failing 3 times, it will display "We weren't able to start your app...0x80004005". This only apply to the Kiosk mode using the orange Remote Desktop store app. It works fine in regular mode and on non 20H2 build. Any idea what this could be?

windows-10-generalremote-desktop-services
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

HI Duy-3719,

"It works fine in regular mode and on non 20H2 build"
1.Do you mean remoteapp desktop app works fine on regular mode of win1020h2 and on kiosk mode of win10(none 20h2).

2."orange Remote Desktop store app"
Do you mean WVD remote desktop application like picture?
94702-8.png





3.Please run below command in powershell and share us the picture like below.
get-appxpackage remote -allusers

94675-9.png



Please make sure that the pictures you post do not contain your company and your private information (including but not limited to domain name, public IP, email account, domain account, etc.). These private information must be altered.




0 Votes 0 ·
8.png (91.3 KiB)
9.png (19.0 KiB)
Duy-3719 avatar image
0 Votes"
Duy-3719 answered JiaYou-MSFT edited

Hi JiaYou-MSFT.

  1. That is correct.

  2. That is also correct.

  3. 94805-2021-05-07-09-04-00-administrator-windows-powershe.png



· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

HI Duy-3719,

4.On kiosk mode of win10, does local admin account can open remote desktop app successfully?

5.When issue happen, is there any error or waring log in below location?
Please go to below location and search these logs then open them
C:\windows\system32\winevt\logs\

System.evtx
setup.evtx
application.evtx
Microsoft-Windows-Store%4Operational.evtx
Microsoft-Windows-AppReadiness%4Admin.evtx
Microsoft-Windows-AppReadiness%4Operational.evtx
Microsoft-Windows-AppXDeploymentServer%4Operational.evtx
Microsoft-Windows-AppXDeployment%4Operational.evtx
Microsoft-Windows-AppxPackaging%4Operational.evtx
Microsoft-Windows-TWinUI%4Operational.evtx

0 Votes 0 ·
Duy-3719 avatar image
0 Votes"
Duy-3719 answered

JiaYou-MSFT,

  1. Yes, the admin or any standard user can open remote desktop app successfully. Only the kiosk user have problem.

  2. Here's the error for below.
    Microsoft-Windows-Store%4Operational.evtx - Various store and install-service warning.
    Microsoft-Windows-AppReadiness%4Admin.evtx - None
    Microsoft-Windows-AppReadiness%4Operational.evtx - None
    Microsoft-Windows-AppXDeploymentServer%4Operational.evtx - Event ID 759 error, Failed creating preview tiles for package Microsoft.VCLibs.140.00_14.0.29231.0_x64__8wekyb3d8bbwe. Error: 0x8007000D
    Microsoft-Windows-AppXDeployment%4Operational.evtx - None
    Microsoft-Windows-AppxPackaging%4Operational.evtx - Multiple error for App manifest validation warning: Declared namespace (xbox and windows 10)
    Microsoft-Windows-TWinUI%4Operational.evtx - None


And there's a few error under Application
StartMenuExperienceHost (6380,P,98) TILEREPOSITORYS-1-5-21-3909421813-2734799875-1110804500-1016: An attempt to open the device with name "\.\C:" containing "C:\" failed with system error 5 (0x00000005): "Access is denied. ". The operation will fail with error -1032 (0xfffffbf8).


Activation context generation failed for "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest".Error in manifest or policy file "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" on line 1. Component identity found in manifest does not match the identity of the component requested. Reference is UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0". Definition is UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0". Please use sxstrace.exe for detailed diagnosis.


Faulting application name: RdClient.Windows.exe, version: 1.0.0.0, time stamp: 0x60411c6c
Faulting module name: KERNELBASE.dll, version: 10.0.19041.906, time stamp: 0x2f2f77bf
Exception code: 0xc000027b
Fault offset: 0x000000000010b2dc
Faulting process id: 0x12a4
Faulting application start time: 0x01d745ea57b91569
Faulting application path: C:\Program Files\WindowsApps\Microsoft.RemoteDesktop_10.2.1810.0_x64_8wekyb3d8bbwe\RdClient.Windows.exe
Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
Report Id: 68602071-11fe-4551-9894-16987427cb8a
Faulting package full name: Microsoft.RemoteDesktop_10.2.1810.0_x64
_8wekyb3d8bbwe
Faulting package-relative application ID: App


And I noticed one under System as well.
A fatal error occurred while creating a TLS client credential. The internal error state is 10013.

There's also a warning for User Device Registration, event 360

And Event 2 for Kernel-EventTracing, Session "URDC-FileSession" failed to start with the following error: 0xC0000022

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JiaYou-MSFT avatar image
0 Votes"
JiaYou-MSFT answered JiaYou-MSFT edited

HI Duy-3719,

Thanks for your reply.

0xc000027b
An application-internal exception has occurred.

0xfffffbf8
Cannot access file, the file is locked or in use

0xc0000022
A process has requested access to an object, but has not been granted those access rights

1.Is there any difference about "windowsapps" permission for kiosk account between kiosk mode of win10(none 20h2) and kiosk mode of win10(20h2)
C:\Program Files\WindowsApps

2.If we fresh install win10(20h2) and install Microsoft remote app then put this pc to kiosk mode, will the same happen?

3.Did you try to download and install Windows 64-bit of windows desktop client on your problematical PC then check if it can be opened in kiosk account.
https://docs.microsoft.com/en-us/azure/virtual-desktop/connect-windows-7-10

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Duy-3719 avatar image
0 Votes"
Duy-3719 answered JiaYou-MSFT commented

JiaYou-MSFT

  1. I do not see any difference. They both have the same permission structure for C:\Program Files\WindowsApps. Changing the permission will also break Window Store.

  2. Yes. I installed a fresh one and tried it on multiple PC and same thing happened. I also upgraded a PC that was working to 20H2 and it stopped working.

  3. I tried the Windows Desktop client as well but I am unable to subscribe to my Work Resources with this client and it also does not populate in the Kiosk list of apps.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

HI
Is there any progress on your question?

0 Votes 0 ·
JiaYou-MSFT avatar image
0 Votes"
JiaYou-MSFT answered JiaYou-MSFT edited

HI Duy-3719,

1.Please enable below event log and sub key logs on your problematical win10 client and logon the kiosk mode to check if there is log recorded on this machine.

Applications and Services Logs\Microsoft\Windows\AssignedAccess\Operational channel, which is disabled by default.

Applications and Services Logs\Microsoft\Windows\Applocker
Applications and Services Logs\Microsoft\Windows\AppxDeployment

Troubleshoot kiosk mode issues
https://docs.microsoft.com/en-us/windows/configuration/kiosk-troubleshoot

2."Yes. I installed a fresh one and tried it on multiple PC and same thing happened."
Is the test win10(20h2) in workgroup(none domain)environment?

3.Could you enter secpol.msc in command and check if UAC setting is the same as win10(1909)?

4.Did you try to do testing about "adding kioskuser0 account to local administrators group ", then check if the same issue still happen ?


============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JiaYou-MSFT avatar image
0 Votes"
JiaYou-MSFT answered JiaYou-MSFT edited

HI Duy-3719,

Is there any progress on your question?

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JiaYou-MSFT avatar image
0 Votes"
JiaYou-MSFT answered MD-0695 published

HI Duy-3719,

Is there other thing to help you?

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.strong text

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello,

i am experiencing the same error, ist there any workaround/fix for it?
Communitys are stacking with the same error.

What i've tried yet:
-Adding Kiosk User to local administrator (giving him rdp permissions)
-Starting without Kiosk Mode works fine for the user and administrator on Clients
-Testet with multiple clients same error

Good day,

0 Votes 0 ·
MD-0695 avatar image MD-0695 LeonMathiasJanis-3498 ·

I am also wondering if there is any workaround/fix. I have the exact same issue.

0 Votes 0 ·
IvanIvanov-9650 avatar image
0 Votes"
IvanIvanov-9650 answered IvanIvanov-9650 published

У меня точно такая же проблема

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.