I have reviewed several of the other posts on this issue. None seem to provide a fix that works for me.
I am receiving the following error when connecting remotely from one machine to another using RDP. I have seen this issue on several of my servers lately (RDP stops working) and I am concerned this is becoming a major issue as my end users can no longer manager their servers remotely without me connecting to console for them. The server having the issue is in Remote Desktop Administration mode. Let me explain further symptoms and attempted fixes.
For the rest of my description I will call the server having this RDP issue "server". Sorry to be so vague.
- Connect from Windows 7 to server (2008 R2 no patches, no antivirus) using RDP client and receive "This computer can't connect to the remote computer. Try connecting again. If the problem continues, contact the owner of the remote computer or your network administrator."
- Connect from Windows 7 to server using "telnet servername 3389" and connection succeeds
- Connect from server to localhost using RDP client, receive "This computer can't connect to the remote computer. Try connecting again. If the problem continues, contact the owner of the remote computer or your network administrator."
- From server do a "netstat -na|find "3389"" and see 3389 listening
Event viewer on server, I see several errors around the time of the RDP attempts:
- Event ID 50 TermDD The RDP protocol component X.224 detected an error in the protocol stream and has disconnected the client.
- Event ID 36871 Schannel A fatal error occurred while creating an SSL server credential. The internal error state is 10013.
Attempted Solution
- Checked on the server for the x509 certificates under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService\Parameters and on a server with working RDP these registry keys don't exist
- Checked that Client Encryption is set on the server for the RDP listener
- Randomly tried registering schannel.dll on the server using "regsvr32 c:\windows\system32\schannel.dll" and receive, "The module 'c:\windows\system32\schannel.dll' was loaded but the entry-point DllRegisterServer was not found. Make sure that 'c:\windows\system32\schannel.dll' is a valid DLL or OCX file and then try again."