Tag: Remote Desktop (RDP)

Details of the event with ID 1053 of the source Microsoft-Windows-TerminalServices-RemoteConnectionManager

Event Source:Microsoft-Windows-TerminalServices-RemoteConnectionManager
Event ID:1053 (0xC000041D)
Event log:System
Event type:
Event text (English):The RD Session Host Server is configured to use a certificate that is expired. %1 The SHA1 hash of the certificate is in the event data. The default certificate will be used for RD Session Host Server authentication from now on. Please check the security settings by using the Remote Desktop Session Host Configuration tool in the Administrative Tools folder.
Event text (German):Der Remotedesktop-Sitzungshostserver ist für die Verwendung eines Zertifikats konfiguriert, das abgelaufen ist. %1 Der SHA1-Hash des Zertifikats findet sich in den Ereignisdaten. Von jetzt an wird für die Remotedesktop-Sitzungshostserver-Authentifizierung das Standardzertifikat verwendet. Überprüfen Sie die Sicherheitseinstellungen mithilfe des Tools "Konfiguration des Remotedesktop-Sitzungshosts" im Ordner "Verwaltung".

Continue reading "Details of the event with ID 1053 of the source Microsoft-Windows-TerminalServices-RemoteConnectionManager"

Details of the event with ID 1052 of the source Microsoft-Windows-TerminalServices-RemoteConnectionManager

Event Source:Microsoft-Windows-TerminalServices-RemoteConnectionManager
Event ID:1052 (0xC000041C)
Event log:System
Event type:
Event text (English):The RD Session Host Server is configured to use a certificate that will expire in %2 days. %1 The SHA1 hash of the certificate is in the event data. Please check the security settings by using the Remote Desktop Session Host Configuration tool in the Administrative Tools folder.
Event text (German):Der Remotedesktop-Sitzungshostserver ist für die Verwendung eines Zertifikats konfiguriert, das in %2 Tagen abläuft. %1 Der SHA1-Hash des Zertifikats findet sich in den Ereignisdaten. Überprüfen Sie die Sicherheitseinstellungen mithilfe des Tools "Konfiguration des Remotedesktop-Sitzungshosts" im Ordner "Verwaltung".

Continue reading "Details of the event with ID 1052 of the source Microsoft-Windows-TerminalServices-RemoteConnectionManager"

Details of the event with ID 1051 of the source Microsoft-Windows-TerminalServices-RemoteConnectionManager

Event Source:Microsoft-Windows-TerminalServices-RemoteConnectionManager
Event ID:1051 (0xC000041B)
Event log:System
Event type:Error
Event text (English):The RD Session Host Server is configured to use SSL with user selected certificate, however, no usable certificate was found on the server. The default certificate will be used for RD Session Host Server authentication from now on. Please check the security settings by using the Remote Desktop Session Host Configuration tool in the Administrative Tools folder.
Event text (German):Der Remotedesktop-Sitzungshostserver ist für die Verwendung von SSL mit einem vom Benutzer ausgewählten Zertifikat konfiguriert, jedoch wurde kein verwendbares Zertifikat auf dem Server gefunden. Ab jetzt wird für die Remotedesktop-Sitzungshostserver-Authentifizierung das Standardzertifikat verwendet. Überprüfen Sie die Sicherheitseinstellungen mithilfe des Tools "Konfiguration des Remotedesktop-Sitzungshosts" im Ordner "Verwaltung".

Continue reading "Details of the event with ID 1051 of the source Microsoft-Windows-TerminalServices-RemoteConnectionManager"

Requesting Remote Desktop certificates fails with error message "The permissions on the certificate template do not allow the current user to enroll for this type of certificate."

Assume the following scenario:

The RD Session Host server cannot install a new template-based certificate to be used for Transport Layer Security (TLS) 1.0\Secure Sockets Layer (SSL) authentication and encryption. The following error occurred: The permissions on the certificate template do not allow the current user to enroll for this type of certificate.

Continue reading "Requesting Remote Desktop certificates fails with error message "The permissions on the certificate template do not allow the current user to enroll for this type of certificate.""

Remote desktop certificate request fails with error message "The requested certificate template is not supported by this CA."

Assume the following scenario:

The RD Session Host server cannot install a new template-based certificate to be used for Transport Layer Security (TLS) 1.0\Secure Sockets Layer (SSL) authentication and encryption. The following error occurred: The requested certificate template is not supported by this CA.

Continue reading "Remote desktop certificate request fails with error message "The requested certificate template is not supported by this CA.""

Remote desktop connection no longer possible after in-place upgrade of Windows Server operating system

Assume the following scenario:

  • An in-place upgrade of the certification authority's operating system is performed.
  • After the upgrade, logon via Remote Desktop is no longer possible. The connection fails with the following error message:
An authentication error has occurred.
The function requested is not supported.
Remote Computer: 192.168.1.149
This could be due to CredSSP encryption oracle remediation.
For more information, see https://go.microsoft.com/fwlink/?linkid=866660

In German:

Authentifizierungsfehler.
Die angeforderte Funktion wird nicht unterstützt.
Remotecomputer: 192.168.1.149
Ursache könnte eine CredSSP Encryption Oracle-Abwehr sein.
Weitere Informationen finden Sie unter https://go.microsoft.com/fwlink/?linkid=866660

Continue reading "Remote desktop connection no longer possible after in-place upgrade of Windows Server operating system"

Logon via smart card using Remote Desktop (RDP) fails with error message "The requested key container does not exist on the smart card."

Assume the following scenario:

  • A user logs on to a Remote Desktop system using the smart card logon function.
  • The user uses a Yubico Yubikey as a smart card. The required middleware is installed on both the local and the remote system.
  • The logon fails with the following error message:
The system could not log you on. The requested key container does not exist on the smart card.

Continue reading "Logon via smart card using Remote Desktop (RDP) fails with error message "The requested key container does not exist on the smart card.""

Manually requesting a Remote Desktop (RDP) certificate

There are cases in which you cannot or do not want to obtain Remote Desktop certificates from a certification authority in your own Active Directory forest, for example, if the system in question is not a domain member.

In this case, the use of certificate templates is not possible, and one must manually create a Certificate Signing Request (CSR).

Continue reading "Manually requesting a Remote Desktop (RDP) certificate"

Identify the active Remote Desktop (RDP) certificate

If you have configured a certificate template for Remote Desktop certificates and an appropriate Group Policy , or manually assigned a Remote Desktop certificate , you may want to verify that the certificates on the participating computers are being used correctly by the Remote Desktop session host.

Continue reading "Identify the active Remote Desktop (RDP) certificate"

Configuring a Group Policy (GPO) for Remote Desktop (RDP) Certificates

After configuring a certificate template for the distribution of Remote Desktop certificates (see the article "Configuring a Certificate Template for Remote Desktop (RDP) Certificates "), a Group Policy is still required that instructs the participating computers to also use the certificates originating from the template.

Continue reading "Configuring a Group Policy (GPO) for Remote Desktop (RDP) Certificates"