Ошибка расшифровки на сервере удаленное подключение было отключено

Недавно, после очередного обновления сервера терминалов на базе Windows Server 2003, клиенты из удаленного офиса, подключающиеся к нему с помощью стандартного Подключения к удаленному рабочему столу, стали получать ошибку «Ошибка расшифровки на сервере. Удаленное подключение было отключено.» примерно каждые пять минут. На сервере же, стала появляться ошибка TermDD 50.

Тип события: Ошибка
Источник события: TermDD
Категория события: Отсутствует
Код события: 50
Дата: 12.01.2011
Время: 15:47:02
Пользователь: Н/Д
Компьютер: TS01
Описание:
Компонент "DATA ENCRYPTION" RDP-протокола обнаружил ошибку в потоке протокола и отключил этого клиента
Дополнительные сведения можно найти в центре справки и поддержки, в "http://go.microsoft.com/fwlink/events.asp".
Данные:
0000: 00 20 04 00 02 00 52 00   . ....R.
0008: 00 00 00 00 32 00 0a c0   ....2..À
0010: 00 00 00 00 32 00 0a c0   ....2..À
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........
0028: 92 01 00 00               ’...

Сначала я грешил на VPN-туннель, через который пользователи подключались к серверу, но потом выяснилось, что и некоторые пользователи в локальной сети получали точно такое же сообщение.

Погуглив, нашел несколько вариантов решения проблемы:

1. Encryption levels defined on the RDP-TCP connection (or ICA, if appropriate), are set too high for the client to successfully negotiate. For example, a client set to Low encryption would be unable to connect to a server with High (or now, FIPS compliant) encryption levels defined. Additionally, XP and XP SP1 clients are currently unable to connect at all if «FIPS compliant» encryption level is set (article in progress on this issue).

To check this, open Terminal Services Configuration (tscc.msc) on the Terminal Server, select the RDP-Tcp connection, select properties, and view the Encryption settings on the General tab. Verify that this is set to Client Compatible, or low, and retest the connection (if needed).

Начал с него, как с самого простого 🙂 Поставил низкий уровень шифрования, перезагрузил сервер — ошибка, к сожалению, не пропала.

Пришлось переходить ко второму варианту:

2. Another frequent cause of these problems stems from issues with some registry values in the TermServiceParameters registry key. To this end, could you export the following key: HKLMSystemCurrentControlSetServicesTermServicesParameters

After doing this, delete the Certificate, X509 Certificate, and X509 Certificate ID values, and restart the Terminal Server. These values should be regenerated on reboot (but keep the Exported values just in case). This is documented in M323497. The X509 Certificate and X509 Certificate ID values have also been known to cause this problem, so delete them as well. Also see M329896. In 9 out of 10 cases this resolves the issue.

Удалил значения указанных ключей, предварительно сделав бекап этой ветки реестра, перезагрузился.

Почему-то значение ключа Certificate не создалось автоматически — не беда, добавил старое из бекапа 😉

После еще одной перезагрузки пользователи успешно подключились к серверу и уже сутки не жалуются. Ошибка TermDD 50 больше не появляется.

Ниже приведу третий вариант решения проблемы, хотя мне он и не понадобился 🙂

3. The third possibility is that some software you are installing is overwriting some of the files needed for the protocol stream. Schannel.dll, rsaenh.dll, and several others are involved in this process.

Hello everybody,

I am trying to remote desktop connect to a pc running Windows 10 Pro trough a VPN. The VPN is an IPSec one, and the vpn clients I am using are both the one provided by Android 8 and the Remote Desktop client provided by Windows 7. In both cases the rdp connection
starts but then immediately crashes and I get the following error message: 

«Your session ended because of a data encryption error. If this keeps happening, ask your admin or tech support for help. Error code: 0x407»

I have read carefully solutions provided in this thread: 

https://social.technet.microsoft.com/Forums/lync/en-US/1fe7892c-36c3-479a-8e51-cd7f94ea2e87/quotbecause-of-an-error-in-data-encryption-this-session-will-endquot?forum=winserverTS

but none of the solutions provided there apply to my case.

First of all, I haven’t the values 

• Certificate
• X509 Certificate
• X509 Certificate ID

under the subkey HKEY_LOCAL_MACHINESystemCurrentControlSetServicesTermServiceParameters

Then, the pc I am trying to connect to is using a wireless connection (Intel AC 9560) and not a wired one, so I couldn’t find he property IPv4
Large Send Offload in its advanced configuration. I tried disabling ARP offload for WoWLAN and NS offload for WoWLAN, but with no luck.

I can’t also use the trick of uninstalling the  Link-Layer Topology (Mapper I/O Driver and Responder) protocols, as well as
the QoS Packet Scheduler service on client machine, since I am using an Android tablet mainly as client, even if this fix worked for a Windows pc client, it would be of practically no use for me.

I am not using Sonicwall or Cisco vpn client, so the solutions related to these products don’t work for me (I don’t have the Citrix DNE LightWeight Filter service in the network adaptor).

The only thing that apparently seems to solve this issue, is to go to sharing properties of the wireless card and
to check «Allow other network users to connect through this computer’s internet connection». But this works for a limited random period of time after enabling this feature, then the error comes back again.

Can anybody help me to solve this issue?

• Edited by

  Thursday, January 17, 2019 6:11 PM

Hello everybody,

I am trying to remote desktop connect to a pc running Windows 10 Pro trough a VPN. The VPN is an IPSec one, and the vpn clients I am using are both the one provided by Android 8 and the Remote Desktop client provided by Windows 7. In both cases the rdp connection
starts but then immediately crashes and I get the following error message: 

«Your session ended because of a data encryption error. If this keeps happening, ask your admin or tech support for help. Error code: 0x407»

I have read carefully solutions provided in this thread: 

https://social.technet.microsoft.com/Forums/lync/en-US/1fe7892c-36c3-479a-8e51-cd7f94ea2e87/quotbecause-of-an-error-in-data-encryption-this-session-will-endquot?forum=winserverTS

but none of the solutions provided there apply to my case.

First of all, I haven’t the values 

• Certificate
• X509 Certificate
• X509 Certificate ID

under the subkey HKEY_LOCAL_MACHINESystemCurrentControlSetServicesTermServiceParameters

Then, the pc I am trying to connect to is using a wireless connection (Intel AC 9560) and not a wired one, so I couldn’t find he property IPv4
Large Send Offload in its advanced configuration. I tried disabling ARP offload for WoWLAN and NS offload for WoWLAN, but with no luck.

I can’t also use the trick of uninstalling the  Link-Layer Topology (Mapper I/O Driver and Responder) protocols, as well as
the QoS Packet Scheduler service on client machine, since I am using an Android tablet mainly as client, even if this fix worked for a Windows pc client, it would be of practically no use for me.

I am not using Sonicwall or Cisco vpn client, so the solutions related to these products don’t work for me (I don’t have the Citrix DNE LightWeight Filter service in the network adaptor).

The only thing that apparently seems to solve this issue, is to go to sharing properties of the wireless card and
to check «Allow other network users to connect through this computer’s internet connection». But this works for a limited random period of time after enabling this feature, then the error comes back again.

Can anybody help me to solve this issue?

• Edited by

  Thursday, January 17, 2019 6:11 PM

Подписывайтесь на канал

Яндекс.Дзен

и узнавайте первыми о новых материалах, опубликованных на сайте.