RDP Session, very unstable.. No changes on system or network


Recommended Posts

This is on my home network running Windows Server 2012. My firewall is a pFSense box configured to allow RDP.. I have had this setup for a couple of months with no RDP issues..Nothing has changed on my network or on the server. I use it just to remote in from work to manage things while I am away. I have done some goolging and found about 10000 different possible issues.. Didn't know if anyone here has ran into this.. Everything else on my network is working great.. No Bandwidth issues, good pings.. rebooted the server, modem, switch (managed) and pFsense.. Any ideas come off that might point me in the right direction?

Thanks!

Yes, I tried from my parents house last night and still same thing.. Sometimes it won't even let me login.. When it does, I have about a 1-2 minute window before it drops

Maybe I should use LogMeIn or Team Viewer.. Those are more secure anyway from what I read/been told.. I know there are exploits out there and a VPN + RDP is 1000x better.. maybe its a sign to change my ways at home..lol Suggestions on that?

Yes, I tried from my parents house last night and still same thing.. Sometimes it won't even let me login.. When it does, I have about a 1-2 minute window before it drops

Maybe I should use LogMeIn or Team Viewer.. Those are more secure anyway from what I read/been told.. I know there are exploits out there and a VPN + RDP is 1000x better.. maybe its a sign to change my ways at home..lol Suggestions on that?

RDP should be encrypted already, I wouldn't switch the way I do things because of a technical glitch. Any issues on the RDP Server machine in Event Viewer under System/Application that stand out? Windows Firewall turned off on that machine?

And is anything logged in the 2012 server for the drop?

I rdp to multiple boxes on my home network from work, but I do it over a vpn (openvpn) Problem I have with rdp open to the public net, unless you have it locked down to your work IP or other locations you might access it from in pfsense. Is its just a username password for protection. With my vpn, there is no way your guessing anything to get in - you have to have cert issued to by my CA, etc. And if for some reason I lost say my certs I store on my usb - then I could just revoke that cert and issue new ones.

Are you seeing any packet loss to your pfsense box? Can you get a running ping going, let it run for say 1000 or so pings - do you see drops? Increase the packet size of the pings to max.. Run the same test do you see any loss?

Move rdp to a different port. I had the standard 3389 set on my home network and it was getting constant attacks with attempted logins. This made it fragile to login remotely whereas on the lan it was fine.

The event viewer will show a load of failed authorisations if this is the case.

As of now, I can't even log in anymore..It ask me for my user/pass then drops. I will post logs and everything when I get home.. I can't ping the connection because I have that blocked. Thanks for everyone's help..

I was able to get in, and install Team Viewer.. I looked in the event log and there are a ton of,

TerminalServices-Printers

Driver Send To Microsoft OneNote 2010 Driver required for printer Send To OneNote 2010 is unknown. Contact the administrator to install the driver before you log in again.

Team Viewer is not crashing.. Hm...

Also getting a bunch of,

The Device Setup Manager service entered the running state.

The Device Setup Manager service entered the stopped state. Every two minutes..

Also getting these..

The Windows logon process has unexpectedly terminated.

For testing purposes only, bypass the router and directly connect the server to the internet. If you can RDP no problem, and over your internal LAN like you said with no problem, then it is your firewall hardware.

Instead of using any pre-programmed 'RDP' rules on the router, try forwarding an external port to internal port 3389. Then connect remotely using IPADDRESS:PORT. This will keep you safe from the RDP portscanner hack attempts and bypass the routers pre-programmed rules.

I was able to get in, and install Team Viewer.. I looked in the event log and there are a ton of,

TerminalServices-Printers

Driver Send To Microsoft OneNote 2010 Driver required for printer Send To OneNote 2010 is unknown. Contact the administrator to install the driver before you log in again.

Team Viewer is not crashing.. Hm...

Also getting a bunch of,

The Device Setup Manager service entered the running state.

The Device Setup Manager service entered the stopped state. Every two minutes..

Disable printer forwarding.

I was able to get in, and install Team Viewer.. I looked in the event log and there are a ton of,

TerminalServices-Printers

Driver Send To Microsoft OneNote 2010 Driver required for printer Send To OneNote 2010 is unknown. Contact the administrator to install the driver before you log in again.

Team Viewer is not crashing.. Hm...

Also getting a bunch of,

The Device Setup Manager service entered the running state.

The Device Setup Manager service entered the stopped state. Every two minutes..

Also getting these..

The Windows logon process has unexpectedly terminated.

Change your remote desktop connection to ignore printers under options | local resources.

it sounds like you have some troubleshooting to do on your server.

The Device Setup Manager service entered the running state.

The Device Setup Manager service entered the stopped state. Every two minutes..

Also getting these..

The Windows logon process has unexpectedly terminated.

^ if just a file server and other services that linux/bsd can do then sure pick your fav distro and run with it!

Just the other day I was looking to setup printing on my ipad I got for xmas, uses that stupid bonjour to find the printers. Well I had disabled most of the multicast on my windows box because just not having any need for it. And it was sending a bunch of noise that my gateway firewall was logging so just disabled it.

So since I have a linux VM running on my esxi host 24/7/365 anyway, just installed cups on it - connected it to the printer and there you go ipad can now see the printer being shared by cups ;) Took all of 10 minutes to setup vs having to turn mulicast back on my windows machine that would of generated a bunch of noise that isn't needed to be seen on my network.

linux can be a great solution for a bunch of stuff! Enjoy!

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • I have a Motorola, one of the lower end ones, it works fine. It is possible to get rid of the Gemini app and also to disable googles assistant , but A.i is still apps. I try to avoid all LLM A.I, is i can, I use no Ai duck duck go.
    • Free Software Foundation Europe pushes EU to force Google to allow AI uninstalls on Android by Paul Hill Credit: Pexels Users should be able to fully uninstall AI-based features from Android devices and be able to access interoperability functions, free from Google’s verification requirements, the European Commission has heard as part of an Android interoperability consultation under the Digital Markets Act. These measures were proposed by the Free Software Foundation Europe (FSFE) last week when it submitted its documentation. The FSFE noted that Google had started silently installing AI models without telling users. It noted that the EU’s DMA requires companies like Google to allow users to uninstall pre-loaded software from their devices, but in the case of the AI models Google is installing, they reinstall if you delete them, contravening the DMA. To get Google back under control, the FSFE has told the European Commission that there needs to be improvements within the Android Open Source Project (AOSP). First, it said that users should be able to fully remove pre-loaded AI components from their devices, with companies being prohibited from silently reinstalling or reactivating them. Second, access to Android interoperability features should not be contingent on registration, authorization, or contractual relationships with Google. This pertains to Google’s attempt to force developers to register with Google, even to publish apps to alternative app stores like F-Droid. Discussing its submission, Lucas Lasota, FSFE Legal Programme Manager, said: Google is planning to roll out its Android Developer Certification in September 2026. This will force every Android app developer to register with Google before their software can be installed on certified Android devices, but it should affect those who have removed Google Apps from their device. The program is controversial because it entails the signing of contracts and payment of account fees to Google, as well as the handing over of the identities of developers. It said: The FSFE said that if the Commission’s draft measures remain unchanged, then Google will be allowed to make developers verify their identity. The FSFE believes that asking developers to register is contrary to the text and spirit of the law. In summary, the FSFE has told the Commission that no developer should need a Google account, a Play Store presence, or any agreement with Google to access Android’s interoperability features.
  • Recent Achievements

    • Conversation Starter
      sumytbe earned a badge
      Conversation Starter
    • One Year In
      B4dM1k3 earned a badge
      One Year In
    • One Year In
      DarkWun earned a badge
      One Year In
    • Dedicated
      Almohandis earned a badge
      Dedicated
    • Dedicated
      JuvenileDelinquent earned a badge
      Dedicated
  • Popular Contributors

    1. 1
      +primortal
      519
    2. 2
      +Edouard
      188
    3. 3
      PsYcHoKiLLa
      87
    4. 4
      Michael Scrip
      81
    5. 5
      Steven P.
      72
  • Tell a friend

    Love Neowin? Tell a friend!