RDP Issues due to a recent Microsoft update

Many of us have been struggling with failing RDP connections since an O/S update went out from Microsoft on Tuesday (5/8/18)

The answer to the connection issue is to patch all the computers involved and it should be fine. But often server owners need to control how updates are applied for a variety of very good reasons... so we have a problem. 

I found a solution that worked for me and I'm posting it below so I don't lose it...

Please understand that this approach is not best practice and will allow the security vulnerability to continue. But I don't have a choice, I need to get to work.

 

Copied from https://serverfault.com/questions/729818/rdp-error-the-function-requested-is-not-supported-after-enabling-nla

 

I had the same issue. I found the issue has to do with a Windows Update patch that was pushed out to my work station in last nights Windows Updates. There was a critical CVE (CVE-2018-0886) for RDP which required a patch to fix.

If you workstation is patched, but your server isn't, your workstation will fail to connect.

Quoting from the following blog website with information about the issue, you've got three options:

  • Patch your target computer for CVE-2018-0886 (Recommended)
  • Enforce the Vulnerable parameter on the source computer (Not recommended)
  • Disable NLA on your target computer (Not recommended)

I didn't have alternative access to the server(remote access only), so I had to chose Option 2 so I could go do the updates on the server.

I opened the start menu on my work station, searched for "group policy", clicked Edit Group Policy. Then following Microsoft spec, Go to "Computer Configuration -> Administrative Templates -> System -> Credentials Delegation", then :

  • Double-click on Encryption Oracle Remediation
  • Setting Encryption Oracle Remedation set to "Enabled"
  • In Options below, set "Protection Level: to Vulnerable

 

 

 

I had a machine where this fix didn't work, this registry entry fixed it.


RealWorldCode gives developers practical, real‑world solutions with clean, working code — no fluff, no theory, just answers.
Links
Home
Knowledge Areas
Sitemap
Contact
Et cetera
Privacy Policy
Terms and Conditions
Cookie Preferences