Event ID 513 — RD Gateway Server Configuration
Applies To: Windows Server 2008 R2
.jpg)
For remote clients to successfully connect to internal network resources (computers) through a Remote Desktop Gateway (RD Gateway) server, the RD Gateway server must be configured correctly. The RD Gateway server must be configured to use an appropriate Secure Sockets Layer (SSL)-compatible X.509 certificate, and authorization policy settings must be configured correctly. Remote Desktop connection authorization policies (RD CAPs) specify who can connect to the RD Gateway server. Remote Desktop resource authorization policies (RD RAPs) specify the internal network resources that clients can connect to through an RD Gateway server.
Event Details
| Product: | Windows Operating System |
| ID: | 513 |
| Source: | Microsoft-Windows-TerminalServices-Gateway |
| Version: | 6.1 |
| Symbolic Name: | AAG_EVENT_CENTRAL_NAP_DISABLE_FAILED |
| Message: | The central connection authorization policy store could not be disabled. The following error occurred: "%2". |
Resolve
Review event log for Network Policy Server events
There is no specific resolution for this issue. Therefore, consider reviewing the Network Policy Server (NPS) event log to locate events that can assist in troubleshooting this issue.
If you have configured local Remote Desktop connection authorization policies (RD CAPs), perform the following procedure on the RD Gateway server. If you have configured central RD CAPs, perform the following procedure on the NPS server where the central RD CAPs are stored.
To search the event log to find NPS events:
- On the RD Gateway server or the central NPS server, click Start, point to Administrative Tools, and then click Event Viewer.
- Navigate to Windows Logs\Application, and then search for events that contain the word NPS. If you find any NPS events, note the event ID and source of the relevant events for further investigation.
- Navigate to Windows Logs\System, and then search for events that contain the word NPS. If you find any NPS events, note the event ID and source of the relevant events for further investigation.
- While you are still in the Windows Logs\System event log, filter the current log to search for any NPS events. For example, you can select the NPS check box. If any events correspond to the event sources that you have selected, note the event ID and source of the relevant events for further investigation.
Verify
To verify that the RD Gateway server is configured correctly, examine Event Viewer logs and search for the following event messages. These event messages indicate that the Remote Desktop Gateway service is running, and that clients are successfully connecting to internal network resources through the RD Gateway server.
To perform this procedure, you do not need to have membership in the local Administrators group. Therefore, as a security best practice, consider performing this task as a user without administrative credentials.
To verify that the RD Gateway server is configured correctly:
- On the RD Gateway server, click Start, point to Administrative Tools, and then click Event Viewer.
- In the Event Viewer console tree, navigate to Application and Services Logs\Microsoft\Windows\TerminalServices-Gateway, and then search for the following events:
- Event ID 101, Source TerminalServices-Gateway: This event indicates that the Remote Desktop Gateway service is running.
- Event ID 200, Source TerminalServices-Gateway: This event indicates that the client is connected to the RD Gateway server.
- Event ID 302, Source TerminalServices-Gateway: This event indicates that the client is connected to an internal network resource through the RD Gateway server.