Desktop Studio Error: “Can't Get License Info”

The license server can be registered with XenDesktop either when XenDesktop is configured, or through the Change license server action on the Licensing node in Desktop Studio.

When the administrator specifies the address of the license server, Desktop Studio attempts to discover the License Configuration Service to allow more reading of license usage.

The error “Can’t get license info” appears if Desktop Studio cannot detect the License Configuration Service. The error does not signify that XenDesktop is not functioning as expected or that the users cannot connect to their desktops and applications.

For administrator authentication issues, only full administrators can connect to the License Configuration Service. Local administrators of the license server machine are implicitly full administrators of the License Configuration Service installed on that machine. Other full administrators can add the new administrators to the License Configuration service.

Some administrators setup on the License Configuration service might still experience problems when connecting to the service. This is generally because of the domain setup issues. The License Configuration Service uses Active Directory (AD) authentication to approve which users are allowed to retrieve license information. For this authentication process to work, either the license server must be in the same domain as the XenDesktop site, or there must be a two-way trust between both domains. Refer to Microsoft documentation for details on configuring trust relationships.


  • No Related Posts

ShareConnect Settings

ShareConnect offers a variety of account and security settings that you can customize from the ShareConnect Web App. These settings can be used to customize how remote sessions behave.

Note: If you are connecting to a File Server, these preferences are not available. If you are connecting to a Mac computer, not all features may be available.

To view and edit account-wide settings:

  1. These settings can only be configured by an Admin user
  2. Sign into ShareConnect
  3. Access the Settings menu under Manage Team Account.

User-added image

Available Settings

User-added image

User-added image
User-added image

To view and edit user-specific settings:

  1. Sign into ShareConnect and access your username in the upper left.
  2. Click the Settings link.
  3. The settings displayed in this menu reflect the account-wide settings configured by an Admin user.
User-added image
User-added image


  • No Related Posts

ShareConnect Mobile Viewer

You can access host computers via the ShareConnect mobile app for iOS and Android.

Note – Multiple monitors cannot be viewed from the ShareConnect mobile app.

Connect to a Computer

Log in to your ShareConnect account. Select the View Files button beside the computer you want to remotely access and enter your system’s credentials.

You will see the following on the ShareConnect Mobile Viewer:

Remote Computer – The computer that you are connected to remotely.

Search – Ability to search for files or apps within a folder.

Recent Files – The 10 most recently used files.

Applications – All applications present on your host computer. By default, you will see a couple of browsers and Microsoft Office applications.

Folders – A list of all folders in your remote computer.

Files List – A table list of the files with details.

You can also remotely access your host computer by clicking Show Desktop under your computer’s name in the left navigation.

You can disconnect from your host computer by clicking Disconnect your host computer’s name. You will be redirected to the My Computer’s page.

The ShareConnect Mobile Viewer Toolbar

When you connect remotely to a host computer to begin a ShareConnect session, the ShareConnect Viewer toolbar helps you with performing certain actions on your remote computer. The toolbar is located in the right navigation of your Viewer screen.

In addition to helping you on your remote computer, you can apply security settings to your host computer.

Search – Search within files and folders available on your remote computer.

Maximize – Displays the remote computer screen in 100% size.

FIT – Displays the remote computer within your ShareConnect Viewer window.

Zoom – Performs the zoom out and zoom in functionality respectively.

Full screen – Displays the remote computer in full screen mode.

Ctrl Alt Del – Sends the Ctrl-Alt-Del command to the remote computer

Windows – Sends the Windows command to the remote computer.

Leave Session – Ends your ShareConnect remote session.

Security Settings – Apply security settings to blank your remote computer’s screen and lock keyboard & mouse action in-session

User-added image


  • No Related Posts

Language bar not appearing with launched applications

You need to install the language pack using Admin credentials on the VDA and then go to the below option on the same screen .

Now go to Administrative and copy settings:

Select these Two options

And logoff .

Now you need to reset your user’s Profile in order for these settings to effect

Also under receiver Preference , select the below setting

– This issue happens when the user’s are not given access to Published Desktops and they cannot select the language Pack already installed on the server for there profile to have this setting .


  • No Related Posts

The connection to Microsoft Exchange is unavailable, Outlook must be online or connected

Microsoft Outlook, at times, is known to give an error saying — The action cannot be completed. The connection to Microsoft Exchange is unavailable, Outlook must be online or connected to complete this action. In this post, we will show how you can fix this problem and get back it to working as usual.

The connection to Microsoft Exchange is unavailable, Outlook must be online or connected to complete this action

The connection to Microsoft Exchange is unavailable, Outlook must be online or connected to complete this action

The connection to Microsoft Exchange is unavailable. Outlook must be online or connected to complete this action

There are two ways to fix tjis issue. First, create a new default profile. Second, Delete the default profile. Not many have multiple Outlook profiles is not always an option. So use the second method as follows:

  1. Delete Default Profile
  2. Create a New Outlook Profile
  3. Update or create your Outlook profile with RPC encryption
  4. Disable the encryption requirement on all CAS servers
  5. Deploy a Group Policy setting to update existing Outlook profiles with RPC encryption

The first, three can be configured by the end-user, while the last two are only for Servers.

1] Delete Default Profile

Change Default Outlook Profile Windows 10

  • Launch Outlook, and then click on Info > Account settings dropdown > Manage Profile
  • It will open the Mail Setup window. Click on Show Profiles button.
  • Delete the default profile by clicking on the Remove button.
  • Restart Outlook.

When you remove the profile, all offline cached content for its account will be removed. However, you can backup the OST profile to reuse it.

When you relaunch Outlook, you will have to create a new profile, and then go through the setup process again.

2] Create a New Outlook Profile

Create New Outlook Profile Windows 10

If you do not want to delete, you can create a new default profile. At the Mail Setup > Profiles section, you can click on the Add button, and then give a name to the profile. Next, you need to add the email accounts you want to add. Make sure to properly configure the email account, so the error doesn’t reappear. Also, make sure to set that as the default profile.

3] Update or create your Outlook profile with RPC encryption

create your Outlook profile with RPC encryption

Most of the users have all email accounts under one single profile. One of the email accounts may be having trouble with that is running Microsoft Exchange Server 2010, Microsoft Exchange Server 2013, or Microsoft Exchange Server 2016. These are usually corporate accounts that haven’t been configured properly.

  1. Launch Outlook, and then click on Info > Account settings dropdown > Manage Profile
  2. Click on E-mail Accounts > select the email which is configured with Exchange Server, and then click on Change > More Settings
  3. In the Microsoft Exchange window, switch to Security tab
  4. Select Encrypt data between Microsoft Office Outlook and Microsoft Exchange.
  5. Click Ok and exit

It should fix the issue if it were because of RPC encryption error.

4] Disable the encryption requirement on all CAS servers

This part is specifically for IT admins who can disable encryption requirements. Microsoft warns that it should be only used where you cannot immediately deploy the necessary RPC encryption settings on your Outlook clients. Run the following command in the Exchange Management Shell:

Set-RpcClientAccess –Server <Exchange server name> –EncryptionRequired:$False

You must run this cmdlet for all Client Access servers that are running Exchange Server 2010 or later version. Rerun this command for each Exchange server that has the Client Access Server role. Also, make sure to disable RPC encryption, which we talked about in the above step.

However, make sure to enable it back again after deployment with changes to the RPC requirement on the Outlook.

5] Deploy a Group Policy setting to update existing Outlook profiles with RPC encryption

Enable RPC Encryption Policy Settings

You can also change RPC settings on the server-side by using Group Policy. Navigate to User Configuration > Administrative Templates > Microsoft Office “Version number” > Account Settings > Exchange. Locate policy Enable RPC encryption and disable it.

We hope these methods helped you to resolve Outlook connected issues with Microsoft Exchange.

Windows Security Center shows “Status Unavailable” w/SEP 14.2

I need a solution

We’ve encountered an issue with SEP 14.2 RU1 MP1 (14.2.4814.1101) on Windows 10 1803 where Windows Defender Security Center shows “Status Unavailable” for both “Virus & Threat Protection” and “Firewall & Network Protection”. If I open SEP, everything looks good, as expected, and opening the Windows Defender Firewall control panel applet shows the “These settings are being managed by vendor application Symantec Endpoint Protection”, as expected.

I’ve tried to do some research on this before posting; TECH247987 doesn’t appear to apply in this situation, as that’s for an older version. TECH255344 says to check the SepWscSvc and SymELAM services; SepWscSvc is running without error, and SymELAM is enabled but stopped. If I manually start the SymELAM service, the status messages in WSC don’t change.

What’s weird is if I open WSC right after a reboot, it’ll display an indeterminate progress bar (the animated “line of dots” thing) under both Virus & threat protection and Firewall & network protection for about a minute or two, then for about 15 seconds Firewall will go green and say “No action needed” and Virus will show “Threat service has stopped. Restart it now”. After that, it reverts back to “Status unavailable”.

It shouldn’t matter that we have a password set for the SEP client, right? Anyone have any ideas?



  • No Related Posts

Disable Log without Response Rule

I need a solution


I have a policy name is File A with rule to detect by keyword. I want to monitor and block when endpoint copy file A to USB and HTTP/HTTPs so I enable option Removable Device and HTTPS, HTTP on Agent Configuration. I config Response Rule with Endpoint Prevention: Block when any protocol as Removable Device, HTTPS, HTTP, everything is okay.  But I have another policy name File B to classify another file and I want to monitor when it is copied to network file server –> I enable option Copy to Network Share on Agent Configuration. And DLP Agent still sent the log of File A when I copy it to File Server. How can I disable it because I only need log of File B when It is copied to File Server ?

Thank in advance.



  • No Related Posts

Version 14.x Application Control Rules are not working

I need a solution

We use Application Control rules to prevent users installing applications or running executables by limitting applications to run only from the following locations:





we also allow certain apps to run from other locations based on their fingerprints. This is preventing executables from trying to run from various places, most notably the users’ AppData folder due to ransomware and other malicious software.

Everything was working fine until we upgraded SEP from 12.x to 14.x

However, we are having problems with version 14.x

For example if a user clicks a hyperlink in an Outlook email and if Internet Explorer is the default browser for hyperlinks, SEP prevents this action. Logs shows that during this process, a randomly named temporary file is created under user’s TEMP folder which is not a permitted location. However this temporary file doesnt have an EXE extension and its name changes everytime. (The similar issue happens when java.exe calls java Updates – both from allowed locations listed above. A randomly named temp file is created under user’s TEMP folder and SEP prevents Java Updates)

We created a case with Symantec and after several months the engineer recommended that we should include user’s TEMP folder in the allowed locations. I tried to explain that using Application Control makes no sense if we are to allow running applications from the TEMP folder. However the engineer insisted this is how it should be done. 

Am I missing something here? or SEP’s application Control feauture is broken and has no use.




  • No Related Posts

Client push error.

I need a solution

Unable to client push SEP on other machines. it is possible when i take RDP of the machine and copy the setup and install the endpoint protection.

machine is already in domain. But not able to client push SEP. The error is like “Failed to download and/or install the remote Installation Service. A logon request contained an invalid type value.”

Error: -2   ApiError: 0  Message: Failed to download and/or install the remote Installation Service. A logon request contained an invalid logon type value.



  • No Related Posts