RDP Session, very unstable.. No changes on system or network


Recommended Posts

This is on my home network running Windows Server 2012. My firewall is a pFSense box configured to allow RDP.. I have had this setup for a couple of months with no RDP issues..Nothing has changed on my network or on the server. I use it just to remote in from work to manage things while I am away. I have done some goolging and found about 10000 different possible issues.. Didn't know if anyone here has ran into this.. Everything else on my network is working great.. No Bandwidth issues, good pings.. rebooted the server, modem, switch (managed) and pFsense.. Any ideas come off that might point me in the right direction?

Thanks!

Yes, I tried from my parents house last night and still same thing.. Sometimes it won't even let me login.. When it does, I have about a 1-2 minute window before it drops

Maybe I should use LogMeIn or Team Viewer.. Those are more secure anyway from what I read/been told.. I know there are exploits out there and a VPN + RDP is 1000x better.. maybe its a sign to change my ways at home..lol Suggestions on that?

Yes, I tried from my parents house last night and still same thing.. Sometimes it won't even let me login.. When it does, I have about a 1-2 minute window before it drops

Maybe I should use LogMeIn or Team Viewer.. Those are more secure anyway from what I read/been told.. I know there are exploits out there and a VPN + RDP is 1000x better.. maybe its a sign to change my ways at home..lol Suggestions on that?

RDP should be encrypted already, I wouldn't switch the way I do things because of a technical glitch. Any issues on the RDP Server machine in Event Viewer under System/Application that stand out? Windows Firewall turned off on that machine?

And is anything logged in the 2012 server for the drop?

I rdp to multiple boxes on my home network from work, but I do it over a vpn (openvpn) Problem I have with rdp open to the public net, unless you have it locked down to your work IP or other locations you might access it from in pfsense. Is its just a username password for protection. With my vpn, there is no way your guessing anything to get in - you have to have cert issued to by my CA, etc. And if for some reason I lost say my certs I store on my usb - then I could just revoke that cert and issue new ones.

Are you seeing any packet loss to your pfsense box? Can you get a running ping going, let it run for say 1000 or so pings - do you see drops? Increase the packet size of the pings to max.. Run the same test do you see any loss?

Move rdp to a different port. I had the standard 3389 set on my home network and it was getting constant attacks with attempted logins. This made it fragile to login remotely whereas on the lan it was fine.

The event viewer will show a load of failed authorisations if this is the case.

As of now, I can't even log in anymore..It ask me for my user/pass then drops. I will post logs and everything when I get home.. I can't ping the connection because I have that blocked. Thanks for everyone's help..

I was able to get in, and install Team Viewer.. I looked in the event log and there are a ton of,

TerminalServices-Printers

Driver Send To Microsoft OneNote 2010 Driver required for printer Send To OneNote 2010 is unknown. Contact the administrator to install the driver before you log in again.

Team Viewer is not crashing.. Hm...

Also getting a bunch of,

The Device Setup Manager service entered the running state.

The Device Setup Manager service entered the stopped state. Every two minutes..

Also getting these..

The Windows logon process has unexpectedly terminated.

For testing purposes only, bypass the router and directly connect the server to the internet. If you can RDP no problem, and over your internal LAN like you said with no problem, then it is your firewall hardware.

Instead of using any pre-programmed 'RDP' rules on the router, try forwarding an external port to internal port 3389. Then connect remotely using IPADDRESS:PORT. This will keep you safe from the RDP portscanner hack attempts and bypass the routers pre-programmed rules.

I was able to get in, and install Team Viewer.. I looked in the event log and there are a ton of,

TerminalServices-Printers

Driver Send To Microsoft OneNote 2010 Driver required for printer Send To OneNote 2010 is unknown. Contact the administrator to install the driver before you log in again.

Team Viewer is not crashing.. Hm...

Also getting a bunch of,

The Device Setup Manager service entered the running state.

The Device Setup Manager service entered the stopped state. Every two minutes..

Disable printer forwarding.

I was able to get in, and install Team Viewer.. I looked in the event log and there are a ton of,

TerminalServices-Printers

Driver Send To Microsoft OneNote 2010 Driver required for printer Send To OneNote 2010 is unknown. Contact the administrator to install the driver before you log in again.

Team Viewer is not crashing.. Hm...

Also getting a bunch of,

The Device Setup Manager service entered the running state.

The Device Setup Manager service entered the stopped state. Every two minutes..

Also getting these..

The Windows logon process has unexpectedly terminated.

Change your remote desktop connection to ignore printers under options | local resources.

it sounds like you have some troubleshooting to do on your server.

The Device Setup Manager service entered the running state.

The Device Setup Manager service entered the stopped state. Every two minutes..

Also getting these..

The Windows logon process has unexpectedly terminated.

^ if just a file server and other services that linux/bsd can do then sure pick your fav distro and run with it!

Just the other day I was looking to setup printing on my ipad I got for xmas, uses that stupid bonjour to find the printers. Well I had disabled most of the multicast on my windows box because just not having any need for it. And it was sending a bunch of noise that my gateway firewall was logging so just disabled it.

So since I have a linux VM running on my esxi host 24/7/365 anyway, just installed cups on it - connected it to the printer and there you go ipad can now see the printer being shared by cups ;) Took all of 10 minutes to setup vs having to turn mulicast back on my windows machine that would of generated a bunch of noise that isn't needed to be seen on my network.

linux can be a great solution for a bunch of stuff! Enjoy!

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • AMAZON needs to take total accountability for this.
    • Server Summit had a heap of announcements, ADCS changes are baller.
    • Nice, hope they *finally* fixed the issue with the NTFS driver where the system would completely brick during large file copies using the built in driver. It's been broken for years requiring me to use the older, slower, NTFS-3G FUSE driver.
    • Windows 11 KB5094126 BSODing, freezing, forcing BitLocker lockout, breaks OneDrive, and more by Sayan Sen Microsoft released Windows 11 KB5094126 and KB5093998 last week as the latest Patch Tuesday updates. Following that the company also published the accompanying dynamic updates under KB5094149, KB5095971, and KB5094156. While Microsoft has so far not acknowledged any major problems with the release, some users online are running into problems. These range from OneDrive and Dropbox access issues, BitLocker recovery lockouts, to blue screens and BSODs. The most common one seems to be happening with HP systems wherein affected users say they hit 0xc0430001 BSOD (blue screen of death) error code after the KB5094126 update. We wonder if this could be related to the recent bug we covered on HP devices wherein the ongoing Secure Boot certificate updates are leading to similar issues. While we are not certain, users affected by this issue likely need to ensure that the boot.stl file is included on the installation media (such as a USB installer or ISO), if the above-mentioned dynamic updates are deployed. If this file is missing, computers may fail to boot from the installation media and could display the error 0xc0430001. This STL file is used by Secure Boot to verify that the boot files are trusted, so it must match the same Windows version and system architecture. To ensure the file is included, Microsoft recommends using the Update WinPE script, which automatically updates the image and handles the required files. Alternatively, you can manually copy the boot.stl file from the Windows\Boot\EFI folder on a Windows device and place it in the matching folder on your installation media before deploying the updated image. Aside from blue screening some users also note their systems have been freezing following the update. This could be happening to Lenovo PCs specifically. In the case of the OneDrive and Dropbox access issues, a user figured out that there could be a conflict with UAC. He explained: "Okay, so I did some digging, and in our environment KB5094126 breaks OneDrive and Dropbox in Explorer. I went through all our GPOs and found out that the combination of disabling UAC and having my user being a local admin breaks OneDrive in Explorer. ... If I enable UAC again, then it works, even with KB5094126 still installed." Hopefully, Microsoft will look into these issues. Source: Microsoft forum (link1, link2, link3, link4), Reddit (link1, link2, link3, link4)
    • It is when it's a desktop in my house though for a PC that's lightly used and not really important when it is. If it was a laptop, it would be a different story. The real solution is varied and begins starting at post #22 in that thread.
  • Recent Achievements

    • Week One Done
      Jeroen Wilms earned a badge
      Week One Done
    • Week One Done
      rolfus earned a badge
      Week One Done
    • One Month Later
      Leroy Jethro Gibbs earned a badge
      One Month Later
    • Conversation Starter
      flexorcist earned a badge
      Conversation Starter
    • One Month Later
      AndreaB earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      508
    2. 2
      +Edouard
      198
    3. 3
      PsYcHoKiLLa
      138
    4. 4
      ATLien_0
      90
    5. 5
      Steven P.
      80
  • Tell a friend

    Love Neowin? Tell a friend!