{"id":24675,"date":"2018-05-14T09:00:02","date_gmt":"2018-05-14T07:00:02","guid":{"rendered":"https:\/\/nolabnoparty.com\/?p=24675"},"modified":"2018-05-16T15:25:43","modified_gmt":"2018-05-16T13:25:43","slug":"windows-10-rdp-connection-fails-after-credssp-update","status":"publish","type":"post","link":"https:\/\/nolabnoparty.com\/en\/windows-10-rdp-connection-fails-after-credssp-update\/","title":{"rendered":"Windows 10 RDP connection issue after CredSSP update"},"content":{"rendered":"<p><img decoding=\"async\" class=\"aligncenter wp-image-24677 size-full\" title=\"windows-10-rdp-connection-fails-01\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2018\/05\/windows-10-rdp-connection-fails-01.jpg\" alt=\"windows-10-rdp-connection-fails-01\" width=\"602\" height=\"202\" \/><\/p>\n<p>A recent security update released for Windows 10 documented in the <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4103727\/windows-10-update-kb4103727\" target=\"_blank\" rel=\"noopener\">KB4103727<\/a>, affects<strong>\u00a0the RDP functionality<\/strong> causing an RDP connection failure to the target machine showing an error related to <strong>CredSSP encryption oracle remediation<\/strong>.<\/p>\n<p><a href=\"https:\/\/msdn.microsoft.com\/en-us\/library\/windows\/desktop\/bb931352(v=vs.85).aspx\" target=\"_blank\" rel=\"noopener\">CredSSP<\/a> (Credential Security Support Provider ) protocol is an authentication provider that <strong>processes authentication requests<\/strong> for other applications.\u00a0This error occours when an updated Windows 10 machine tries to RDP an <strong>unpatched Windows Server<\/strong>.<!--more--><\/p>\n<p>&nbsp;<\/p>\n<h2>RDP connection issue<\/h2>\n<p>The error occours when you try to <strong>establish an RDP connection<\/strong> to a target server not yet patched with the CredSSP update.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-24683 size-full\" title=\"windows-10-rdp-connection-fails-02\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2018\/05\/windows-10-rdp-connection-fails-02.jpg\" alt=\"windows-10-rdp-connection-fails-02\" width=\"407\" height=\"253\" \/><\/p>\n<p>After entering the credentials, you receive this error message.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-24684 size-full\" title=\"windows-10-rdp-connection-fails-03\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2018\/05\/windows-10-rdp-connection-fails-03.jpg\" alt=\"windows-10-rdp-connection-fails-03\" width=\"469\" height=\"193\" \/><\/p>\n<p>Although you should <strong>patch both clients and servers<\/strong>\u00a0of your network to avoid this issue and for security reasons, a provisional workaround to <strong>allow RDP connections<\/strong> from a Windows 10 client is to <strong>edit\u00a0the registry<\/strong> and modify the <em>AllowEncryptionOracle<\/em> key as follows:<\/p>\n<pre class=\"height-set:true height-mode:1 height:30 lang:default decode:true \">[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\CredSSP\\Parameters] \u201cAllowEncryptionOracle\u201d=dword:00000002<\/pre>\n<p>Open the Registry Editor and locate the specified registry key. Double click the <strong>AllowEncryptionOracle<\/strong> REG_DWORD and enter <strong>2<\/strong> as <strong>Value data<\/strong>, then click <strong>OK<\/strong> to save the configuration.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-24685 size-large\" title=\"windows-10-rdp-connection-fails-04\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2018\/05\/windows-10-rdp-connection-fails-04-600x423.jpg\" alt=\"windows-10-rdp-connection-fails-04\" width=\"600\" height=\"423\" \/><\/p>\n<p>After modifying the registry, the Windows 10 client will be able to successfully RDP the target unpatched server.<\/p>\n<p><img decoding=\"async\" title=\"signature\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/images\/firma.jpg\" alt=\"signature\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A recent security update released for Windows 10 documented in the KB4103727, affects\u00a0the RDP functionality causing an RDP connection failure to the target machine showing an error related to CredSSP encryption oracle remediation. CredSSP (Credential Security Support Provider ) protocol is an authentication provider that processes authentication requests for other applications.\u00a0This error occours when an updated Windows 10 machine tries to RDP an unpatched Windows Server.<\/p>\n","protected":false},"author":3,"featured_media":24677,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":{"facebook_2879994398731222_17841400390232720":"","mastodon_115463926174894442_115463926174894442":"","linkedin_93tdZWzMZc_93tdZWzMZc":"","bluesky_did:plc:tkabz5kl2rukzdwtuongv3kz_did:plc:tkabz5kl2rukzdwtuongv3kz":""},"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[1065,919],"tags":[1874,1016,1873],"class_list":["post-24675","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-microsoft-en","category-windows-server-en","tag-credssp","tag-rdp-en","tag-windows-10","has_thumb"],"_links":{"self":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/24675","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/comments?post=24675"}],"version-history":[{"count":0,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/24675\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media\/24677"}],"wp:attachment":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media?parent=24675"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/categories?post=24675"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/tags?post=24675"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}