Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Mysterious Remote Desktop Failures

27 Jul 2012   #1

Windows 7 Home Premium 64-bit
 
 
Mysterious Remote Desktop Failures

I'm seeing some very odd remote desktop problems at work. The server is 2008 Server R2 64-bit. Unfortunately, I do not have administrative privileges. I have to escalate to another group in order to analyze logs. I have done this, but my team may meanwhile sit idle for days. All clients are Windows 7 Enterprise Service Pack 1 64-bit. I have full admin privileges on all clients. The clients that cannot connect are on a domain, and the clients that can connect are not on a domain. The server is on a totally different domain, and we are logging in with local user accounts.

Some of the clients can connect to the server using remote desktop. Other clients cannot connect using precisely the same credentials. This rules out a username/password error. However, it is some sort of username/password problem because repeated attempts will lock out the account. The remote desktop failure message is "invalid credentials." If I remove the system from the domain, the problem goes away! It seems like being on the domain is causing the credentials passed to the server to be invalid, even though we're typing the same username and password that work on other clients. We're specifying exactly the same username and password, and we're specifying a local user account by prefixing the username with the remote desktop server hostname: servername\firstname.lastname

They are on the same subnet, and I can literally move the network cable from one system that works to one that doesn't, and the system still cannot connect to the server. This, in my opinion, rules out network problems. I don't see anything noteworthy in event viewer on the client side.

I used Wireshark to compare the network transmissions between failing hosts and succeeding hosts. I cannot analyze the payload, of course, because the session is encrypted. I do, however, notice that the systems that cannot connect are the first to send a packet with the FIN flag. This tells me that the clients are the ones initiating the dismantling of the TCP session. This is consistent with all of the other evidence pointing towards a client-specific problem.

I began checking into security policy settings, but I can't for the life of me find any differences. I checked the certificate being used by the server and imported it into the trusted certificates store. I know I'm trying to connect to the server using the same hostname that appears on the certificate. Does anyone have any suggestions? I'm a UNIX admin and I'm a little stumped. Are there any tools or scripts that can dump security policy settings for easy comparison? Any debuggers that will allow me to analyze the remote desktop session on the client side? If anyone can point me to some documentation that may provide some education, I'll be happy to read it. Any advice would be greatly appreciated.

Thanks!

My System SpecsSystem Spec
.

30 Jul 2012   #2

Windows 7 Home Premium 64-bit
 
 

Any suggestions? Remote desktop works when I'm not connected to a domain. It does not work when I am on the domain. The username and password I'm using is identical in both cases. In both cases I am prefixing the username with the remote computer's local computer name: NAME\username
My System SpecsSystem Spec
30 Jul 2012   #3

Windows 7 Ult, Windows 8.1 Pro,
 
 

My System SpecsSystem Spec
.


31 Jul 2012   #4

Windows 7 Home Premium 64-bit
 
 

Thanks a lot, Chev! I found our solution in the thread. This was the fix:

Open the .RDP remote desktop connection shortcut with a text editor and add this line:

enablecredsspsupport:i:0
My System SpecsSystem Spec
31 Jul 2012   #5

Windows 7 Ult, Windows 8.1 Pro,
 
 

Quote   Quote: Originally Posted by ccarver0 View Post
Thanks a lot, Chev! I found our solution in the thread. This was the fix:

Open the .RDP remote desktop connection shortcut with a text editor and add this line:

enablecredsspsupport:i:0
Good deal ccarver0, I figured it must be in that thread somewhere.

They did mention how to fix the problem at TechNet but the link below is where the answer came from, just in case anyone else finds this thread for future reference.

Remote Desktop Connection client 6.0 introduces new authentication features to improve security for Windows Vista and Windows Longhorn Server, which makes it mandatory for the user to enter logon credentials before RDP client can establish connection to the remote server (" Enter your credentials for <server>. These credentials will be used when you connect to the remote computer" ), but if the remote machine is configured to show logon warning message or if the remote system happens to be Windows 2000 or XP, you’ll need to enter the credentials again at remote machine’s logon screen.

Read more here: http://www.boredsysadmin.com/2008/06...prompt-of.html
My System SpecsSystem Spec
Reply

 Mysterious Remote Desktop Failures




Thread Tools




Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 08:58 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33