Windows 11 22H2 - Cant connect to a RDS server after update

Mmmax 171

Hi,

I have several clients on Windows 11 , and after the update 22H2, they were not able to log to our RDS servers

I tried to log to the server using the private IP, it worked
It is still not working when I try to log to the public IP

I tried without the firewall, nothing changed

The problem disappeared after the rollback, they have been able to log back in.

I cant find anything about this issue.

This issue happens during the connexion to both Windows Server 2012 R2 and Windows Server 2016.

Is there a fix yet ?

Thanks

Paul Okimura 11 Reputation points

2022-09-21T20:18:28.843+00:00

We are running Windows Server 2019 RDS in our environment, and experiencing the same issue as a result of the latest Windows 11 update.
Brandon Chapman 186 Reputation points

2022-09-22T17:39:37.073+00:00

This is definitely an issue with Windows 11 22H2--specifically the mstsc.exe and mstscax.dll files that come with it.

If you are connecting to an RDS farm that has a broker and a gateway, regardless of whether it's running Windows Server 2022, 2019, or 2016, the RDP client will get stuck at "Loading virtual machine" or sometimes "Configuring remote connection". You'll have to use Task Manager to end mstsc.exe because you won't be able to close the program by clicking the X.

Connecting directly to another computer/server with mstsc.exe (no broker or gateway) works fine.

The only workaround for now is to copy c:\windows\system32\mstsc.exe and mstscax.dll from a Windows 11 21H2 machine to the same location on your 22H2 machine. You may have to take ownership of the 22H2 versions of the files in order to be able to overwrite those files.

EDIT: JeffCleath-8569's fix is even better!!! Make the following registry change and restart your computer:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\Client
New DWORD value: fClientDisableUDP SET TO 1
Salina Tooraji 6 Reputation points

2022-11-03T15:09:22.613+00:00

Perfect, added the value worked for me.
Борис Садовский 6 Reputation points

2022-11-07T04:37:04.27+00:00

Another one solution is change path and working directory of mstsc.exe from "%windir%\systems32\mstsc.exe" to backup path"C:\Windows.old\Windows\System32\mstsc.exe" in exe link.
Manny 6 Reputation points

2022-11-07T05:33:43.257+00:00

Love this solution, use different MSTSC and .dll I believe temporarily. How did you do it?
Борис Садовский 6 Reputation points

2022-11-07T06:42:25.067+00:00
While trying to use this solution above
"The only workaround for now is to copy c:\windows\system32\mstsc.exe and mstscax.dll from a Windows 11 21H2 machine to the same location on your 22H2 machine."

I got an 5 "Access denied" error.
So next step was not copy, but change exe path to backup copy of Windows 11 21H2 in a link.
Michael Benadiba 0 Reputation points

2023-01-17T21:39:12.3933333+00:00

The solution was to sign into the console of the target computer

Run Notepad.exe "Run-As" and enter in the credentials of the account you are trying to use to RDP in.

from the Run Command: runas /user:"Username" notepad.exe

This will initialize something and allow you to login from a remote computer.

In my case, the issue i believe was also related to signing into a microsoft account instead of a local account.
Musa Ata 0 Reputation points

2023-02-20T11:19:38.5033333+00:00

Can someone update if this issue is solved including a link to the item solved please.

Answer accepted by question author

Jeff Cleath 181 Reputation points

2022-09-22T17:01:58.61+00:00

We have had the issue as well. I believe the problem is due to the fact that the RDS connection is trying to connect over UDP and is not trying to connect over TCP if the UDP fails.

If you add the following registry setting the Remote Desktop Connection will work.
Have to set this value to 1 in the registry for Windows 11 client to work outside the network
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\Client
KEY VALUE - fClientDisableUDP SET TO 1

I am on the early adopter program with Microsoft and raised this exact issue with Microsoft when the beta came out for Windows 11 and they did not fix the issue.
Please sign in to rate this answer.

16 people found this answer helpful.
Brandon Chapman 186 Reputation points

2022-09-22T17:46:24.647+00:00

OMG, that works!

That's a MUCH better fix than replacing the mstsc.exe and mstscax.dll files from a 21H2 computer!!!

Thank you!!!!

Minder Andreas (ID) 6 Reputation points

2022-09-23T06:01:24.253+00:00

Wow, this is it. Thank you so much!

Mmmax 171 Reputation points

2022-09-23T08:10:12.887+00:00

Thank you so much ! It worked perfectly !

Matthias Zeitler 6 Reputation points

2022-09-23T11:06:22.86+00:00

Super Jeff, thank you for your information and analysis!

Best Regards, Matthias

Ed Hammond 6 Reputation points

2022-09-26T18:29:58.823+00:00

I pushed this out to all my Window 11 PCs using Group Policy. Crisis averted!
Just make sure to only hit your windows 11 PCs by using a WMI Filter in Group Policy:
SELECT * FROM Win32_OperatingSystem WHERE Name LIKE "%Windows 11%"

Manny 6 Reputation points

2022-09-29T06:06:22.05+00:00

Thank you, you are a life saver. :)

Peter Cooke 1 Reputation point

2022-09-29T10:58:37+00:00

Didn't work for me. I changed the registry on the client first and then my workstation. I rebooted after each time change and I still received "Your credentials did not work error".

I'm running Windows 11 on both machines.

I assume you only need to make this change on the client and not the machine you are trying to remote into.

Any ideas?

Thanks,

pete

Jeff Cleath 181 Reputation points

2022-09-29T14:54:15.187+00:00

If you are getting an error regarding credentials then you are having a different issue. You would just get an endless message of trying to connect with the issue described.

If you are getting a credentials error then either you have the incorrect username/password, your account does not have permission to connect remotely, or some other user/permission error most likely.

Brandon Chapman 186 Reputation points

2022-09-29T23:08:54.257+00:00

You can do this to Windows 10 machines as well--it's just that it's not necessary since its mstsc.exe version doesn't have the UDP bug.

George Koukouvetsios 1 Reputation point

2022-09-30T10:55:55.623+00:00

Can someone say what to do I am very bad at computers and I deal with the problem I can’t connect to Microsoft servers pliz help

Altenburger, Mark 1 Reputation point

2022-09-30T15:00:50.467+00:00

Thanks!

Waliu Mustapha 1 Reputation point

2022-09-30T23:08:17.463+00:00

Thanks for this fix @Jeff Cleath !! I will be speaking with my Infrastructure guys on Monday to push this out via Group Policy as I have begun to set up new machines with Windows 11 22H2. I just happen to be testing it my own machine and was wondering why it suddenly wouldn't work. Totally fine adding the RDS link via Control Panel, but just wouldn't open any apps I select.

Thanks again Jeff!

Waliu Mustapha 1 Reputation point

2022-09-30T23:09:42.69+00:00

Here's hoping Microsoft make changes soon with a patch of some sort!

Oren Lahav 6 Reputation points

2022-10-02T06:21:55.097+00:00

Thanks Jeff,
I have enable the UDP 3389 in my hosting farm FW and and its solved as well.
Is there any disadvantage for enabling work with RDP UDP over WAN?

Vojta Fluger 1 Reputation point

2022-10-02T13:15:52.757+00:00

I cannot find the fClientDisableUDP option in the registry. Im in the right directory and all. But its just not there. Should I create one?

Oren Lahav 6 Reputation points

2022-10-02T13:19:10.897+00:00

Yes,
Create the new DWORD (32-bit) fClientDisableUDP

Vojta Fluger 1 Reputation point

2022-10-02T13:50:32.863+00:00

So, I did that, but it created like new folder - I named it fClient... and then changed the default value to 1. But it didn't work. Should I make DWORD file instead of the key?

Oren Lahav 6 Reputation points

2022-10-02T14:00:25.847+00:00

New DWORD (32-bit) Value

ITPro-714 1 Reputation point

2022-10-03T23:26:35.88+00:00

Anyone getting this error?

Not sure if both of these are related. The server is accessible on Windows 10 and below. Windows 11 21H2 is still able to connect. Windows 11 with 22h2 getting this error. Only option is to uninstall the 22H2 update. Tried doing both recommendation above, but it did not work. Added registry fClientDisableUDP SET TO 1 and tried copying the mstsc.exe and mstscax.dll. No success.

George Khairallah 121 Reputation points

2022-10-03T23:39:10.937+00:00

This feels like an isolated case. Is this happening on multiple workstations? All within the same domain? What about a workstation that’s not joined to the domain?

Can you check whether the wksprt.exe process exists, if it does kill it.

Try clearing any entries related to your rdgateway in your credential manager on the workstation?

ITPro-714 1 Reputation point

2022-10-04T01:02:04.547+00:00

-Thanks George for the support -
Yes, this is happening to multiple workstations that are on Windows 11 version 22H2. All workstation are on workgroup. wksprt.exe process does not exist on any of the workstations. Also, cleared any saved entry in rds and credential manager. Tried connecting by manually typing in the gateway, server, username and password with same result. Password and credentials are correct. I did test the same configuration using the microsoft remote desktop app from the microsoft store. The remote desktop app does work. Just having issue with mstsc. It seems weird that by uninstalling Windows 11 22H2 update I was able to start using mstsc for rdp again.

We have other workstation on Windows 10 and Windows 11 21H2 version. They are able to connect just fine. It's weird that the errors are different. But the only similarity for the fix was to uninstalling Win11 22H2 update this allowed the affected workstation to connect.

Just wanted to see if anyone else is having this same error.

George Khairallah 121 Reputation points

2022-10-04T01:45:34.763+00:00

Curious about a few items, not sure if missed it in some of your replies:

are you connecting to a RDS Desktop deployment or a RemoteApp (Published App) deployment?

if RemoteApp, is your collection setup via the control panel or via web browser? Is the result the same on both?

can you try to connect via the HTML5 web client and see if you are able to connect?

As far as I know, the workarounds presented here are related to the initial connection and not the authentication.

Microsoft RDS development team reached out to me directly to work on this issue and if this credential problem is another unintended side effect of 22H2, I can probably add it to the list.

They are unable to reproduce the problem on their end, but the issue exists in over 26 RDS deployments we gave on 2012R2, 2016 and 2019.

ITPro-714 1 Reputation point

2022-10-18T22:55:38.5+00:00

Hey George, sorry for the late response. We are not using RemoteApp. What I meant was the Microsoft Remote Desktop application from the Microsoft Store. I was able to test the connection and remote into the server using this as a temporary solution.

Rene Scott Simonsen 1 Reputation point

2022-11-17T06:45:52.12+00:00

Thank you for this fix. I also reported this issue to Microsoft 7 months ago when it was still beta. I guess multiple reports of an issue isn't a showstopper to prevent worldwide rollout :)
Link to my report in feedback hub: https://aka.ms/AAiq8vr

AdminGISIT 1 Reputation point

2022-11-30T21:41:03.28+00:00

I installed the update shown below this morning hoping MS would have fixed this issue, but no joy:

"2022-11 Cumulative Update for Windows 11 Version 22H2 for x64-based Systems (KB5020044)"

Here's what I'm now running after today's update:

After my computer rebooted, I again had to modify my registry as outlined above int JeffCleath-8569's post and my AWS RDS in now functioning again.

My clients connect to their Diamond (tax software) via RDS which is hosted in AWS via Central Square here in Canada.

Hopefully Windows and AWS are able to address this issue soon.................

George Khairallah 121 Reputation points

2022-11-30T21:53:14.637+00:00

The fix that will address his is issue will be KB900417

If you are interested, you may see our advisory, which we are keeping up to date on this matter. We worked directly with the Microsoft RDS development team on this. We have an internal patch for this KB and have verified that the hotfix will resolve the issue. It will be released in the 4th week of January 2023
https://support.gotomyerp.com/portal/en/community/topic/active-windows-11-22h2-update-breaks-gotomyerp-connection-23-9-2022

Stuart Elliott 146 Reputation points

2023-02-20T10:54:27.7266667+00:00

I've just started experiencing this today for some obscure reason, some 5 months later, the registry addition solution still applies.

Get your sh*t together MickeySoft.

EDIT: I'm guessing it's related to KB5022845 which just got installed, that apparently contains a fix KB5022360 that was mean to remedy this issue.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

24 additional answers

RCoenen 1 Reputation point

2022-10-25T09:28:55.063+00:00

We, an IT service provider, ran into the same problem this morning. The aforementioned registry edit helped!
Please sign in to rate this answer.
Rodrigo C. Cortes Cano 6 Reputation points

2022-10-30T12:55:57.53+00:00

Hi!

in my case publish UDP port 3391 into the FW to RDG work better without any registry modify.

:)
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
George Khairallah 121 Reputation points

2022-11-16T19:39:00.96+00:00

Hello all, just an update:
We finally received the private patch from Microsoft and are currently testing it to confirm it works.
If the KB doesn't change on the patch's release date, then it will be KB900417.

Will post an update once we have tested and confirmed that it has been resolved.
At this time, the release is still slated for the 4th week of January.
Please sign in to rate this answer.
eyeteelo 11 Reputation points

2022-11-17T01:04:49.687+00:00

Hi George,

If this KB900417 only applicable to Win11, or this is also applicable to Win10?

I got similar issue on Win10 as per https://free.blessedness.top/en-us/answers/questions/1081490/all-in-a-sudden-cannot-rdp-to-remote-site-servers.html?childToView=1091743#answer-1091743

Many thx!

George Khairallah 121 Reputation points

2022-11-17T01:15:25.237+00:00

This is for Windows 11 22H2 only.

Brice Huxter 1 Reputation point

2023-01-03T18:48:42.187+00:00

Hi George,

Do you happen to know if this helped with the issue at all? We have a client who is having issues on Win 11 22H2 where they get Estimating Connecting Quality and we had to use the RDgTransport registry key and disable UDP for them to connect, however it affect performance significantly.

Do you have a link for the patch I can snag or can you PM me?

Thanks,
Brice Huxter

George Khairallah 121 Reputation points

2023-01-03T18:52:45.723+00:00

Hey Brice, I do have a private patch, however, it is not to be used for production, as it also puts the operating system in testing mode, and you have to enable that explicitly. The official patch will be available in the 4th week of January, and will indeed resolve the issue.

Please feel free to use either or of the solutions in these 2 articles, depending on your needs in the interim.
https://support.gotomyerp.com/portal/en/kb/articles/updating-to-windows-11-22h2-breaks-remoteapp

https://support.gotomyerp.com/portal/en/kb/articles/receiving-the-remote-desktop-service-activex-mstscax-dll-control-does-not-match-the-version-of-the-client-shell

Cheers,

Rosa LeDuc 1 Reputation point

2023-01-12T19:12:56.42+00:00

Hi George,

Do you know if the patch is available now? I had updated to Win 11 22H2 but had to revert back to Windows 10 because I couldn't connect to the Remote Desktop Connection.

Thank you,

Rosa

George Khairallah 121 Reputation points

2023-01-12T21:32:04.45+00:00

According to Microsoft, it should be available around the 4th week of January.

HS 0 Reputation points

2023-01-30T15:07:22.5366667+00:00

Less than two days left in January, is it still aiming for a January release?

I ask as I'm not sure if the patch is out and didn't work for me or if the patch is not out yet? I checked my Windows Update history and didn't see a reference of "KB900417" but maybe number changed.

It'll be good if someone can confirm, thanks.

George Khairallah 121 Reputation points

2023-01-30T15:57:36.0466667+00:00

The KB has been released under KB5022360

https://support.microsoft.com/en-us/topic/january-26-2023-kb5022360-os-build-22621-1194-preview-f6973dbe-bcc4-402a-8b9a-0541b0959403

It is currently an Optional Update, as it is in Preview, and will be rolled into standard updates next month. But should show up in the optional updates for users.

We are testing to confirm that it works in the same way it did with the internal patch Microsoft sent to us.

Will confirm once we have the results.

Thanks,
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Rodrigo C. Cortes Cano 6 Reputation points

2022-11-17T01:19:13.86+00:00

Hi everyone!

The best solution without patch or registry is open the 3391 UDP in your firewall to RDS Gateway. Windows 11 22H2 or 21H1, Windows 10 21H2 or 22H2 work with any issue.

The only other issue detected in W11 22H2 is cant save password in RDP conecction, need add a registry input to fixed.

Thx.
Please sign in to rate this answer.
eyeteelo 11 Reputation points

2022-11-17T02:34:26.12+00:00

Hi Rodrigo,

In my Win10 case https://free.blessedness.top/en-us/answers/questions/1081490/all-in-a-sudden-cannot-rdp-to-remote-site-servers.html?childToView=1091743#answer-1091743
site-to-site VPN already open all ports, but didn't help.

I tried the registry option but it also didn't fix, so what else can I try?
[HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client]
"RDGClientTransport"=dword:00000001

Many thx!

Rodrigo C. Cortes Cano 6 Reputation points

2022-11-17T10:24:26.05+00:00

that registry work for me but need restart to work

:)
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Paris Wells 1 Reputation point

2022-11-24T00:16:23.277+00:00

Hope everyone has Intune or an RMM to deploy this fix , as I guess these devices will be out of the network!

How to create Dynamic Group for Windows 11 Devices : https://www.anoopcnair.com/create-windows-11-azure-ad-device-group/

Powershell script to deploy via Intune

Set-ItemProperty -Path "HKLM:\Software\Policies\Microsoft\Windows NT\Terminal Services\Client" -Name "fClientDisableUDP" -Value 1

RDP-CSP Doesn't have this :( https://free.blessedness.top/en-us/windows/client-management/mdm/policy-csp-remotedesktopservices
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Windows 11 22H2 - Cant connect to a RDS server after update

24 additional answers

Your answer