Re: RDP Data Encryption Error

Hi Josh,

Been looking all over the web to solve this problem, but never found it. Do
you have the right solution yet?

This is what happens:
We have vpn tunnels from the homes to work (ipsec tunnels through linksys
gatways), meaning we can access the ip's at work from home and vice versa.

If we make a remote connection to the server at work and then RDP into one
of the workstations (on which Vista Business is running) there is no problem.

If we RDP into the workstation WITHOUT setting a remote connection to the
server first, we get this "encryption error" after a few seconds. (rdp is
established, remote desktop is visible, aso...)

If we RDP into an XP machine or into the server (2003 SP2), without setting
the remote connection, there is no problem neither.

I tried to set the grouppolicies to the lowest security level possible
(gpedit.msc), but nothing seems to work, we have to make the remote
connection to the server in order to access the vista workstations by RDP

If someone finds the solution, please post it.

Thanks
Johan




"Josh Rosenberg [MSFT]" wrote:

You might check group policy and capabilities set for the server and client.
If the server is responding with unencrypted data, and the client expects a
certain minimum level of encryption, the client will drop the connection
immediately to prevent possible man in the middle attacks. The client also
does this if it cannot decrypt the packet, if the security header is
missing, etc.

Basically, these errors occur when:
1. Unencrypted (or poorly encrypted) data is sent to the client when the
client wants a more secure encryption.
2. Errors occurred in the encryption or transmission of the data, rendering
it impossible to decrypt.

I'm assuming access to computer A is not otherwise impacted (the network
link isn't a total disaster), so that leaves bad encryption (you may have a
corrupted file on the server), or incompatible group policy (client requires
encryption level > X, server only set to handle encryption <= X). Of
course, you could be experiencing a man in the middle attack every time, but
that's unlikely to say the least.

If you can't reconcile the security settings, you may just want to ghost a
working machine and put it on the non-working machine to see if it solves
the problem.

--
Josh Rosenberg [MSFT]
SDE - Terminal Services


"Roberts" <Roberts@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:9F13BC6C-C111-4C3E-AB27-65B43E5F7D09@xxxxxxxxxxxxxxxx
Hello Evereyone,

We have a server running SBS 2003, with 5 computers on the network, these
five computers are all running Windows XP and are all updated. The problem
that we are having is that when we try to RDP into one of the computers
"CPU
A" we will either get a time out, or an error message that says "Because
of
error in data encryption, this session will end. Please try connecting to
the
remote computer again". This might happen at the start of the RDP session,
or
after a few minutes, but we will always get that error during the
sesssion,
over and over again. This error does not happen on any other computer,
only
on "CPU A.
We RDP to "CPU A" only from office. Its listening port is 3389 we have
tried
changing that to 3390 and the same problem occurs.

Any ideas of what is wrong?

Thanks


.

Relevant Pages

  • Re: Socket Server with Encryption help
    ... Before the client ... Authentication protocols are fiercely difficult to get right. ... by Needham and Schroeder "Using encryption for authentication in large ... Client connects into Server and Server accepts the connection. ...
    (microsoft.public.dotnet.security)
  • RE: Windows Remote Desktop
    ... clients and match your server configuration to match the target server ... the certificate can remain valid and it won't be flagged by the client. ... Citrix can be more secure then RDP. ... >We provide Ethical Hacking, Advanced Ethical Hacking, Intrusion ...
    (Security-Basics)
  • Re: RDP between sites.
    ... so if the client did have some way of printing locally, the data in the print queue will still travel up the pipe to the remote printer. ... This is why I recommend using network products that allow protocol priorisation and bandwidth throttling. ... But the RDP bursts can be really painful in networks without protocol priorisation. ... MVP Windows Server - Terminal Server ...
    (microsoft.public.windows.terminal_services)
  • Re: RDP Problems
    ... I understand that the SBS server cannot RDP to the clients. ... If you try to input the IP address of the client to RDP to the client, ... Microsoft Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Question on client/server application
    ... (one will act as a simple TCP server and the other will be a simple ... TCP client). ... What is the simplest way for me to implement a secure connection ... There are plenty of encryption libraries out ...
    (comp.lang.pascal.delphi.misc)