

It was hit and miss, with two DNS servers running on domain controllers under the NIC, users logging in queried a random DNS server. Server Manager > Tools > Terminal Services > Remote Desktop Licensing Manager > Server was not activated, or not added into the right AD security group (click yellow triangle if present). One of the Remote Desktop Services was not running. , rather than RDS.local or something internal. If you use RemoteApp, ensure the DNS address is what people use to connect to, e.g. If you don't have a publicly signed SSL, it's time to get one. PFX (private + public keys) to a browse-able file to be imported via the Server Manager. Namecheap has $10 SSLs, Use IIS > Server Certificates to generate (2048 bit Microsoft RSA) and complete your request with the SSL provider's signed. Solution was to reimport the publicly signed SSL with private key on the server (.PFX).

On Server > Server Manager > Remote Desktop Services > Deployment Overview > Properties > Certificates, despite being present for a year, suddenly the SSL was not defined. Don't know why a RDP client would need them, but it worked. Solution was changing properties on those services and enabling and starting them. The SSDP Discovery and UPnP services were disabled or stopped on the RDS. "An internal error occurred" is a generic catch-all error that can happen for any number of reasons. I've seen this 20+ times in the last two months across 20 different RDS servers in completely separate domains.
