

It can also be cause when a windows servers is running on vmware or hyper-v and in some cases with a stand alone server where hardware has changed. Restart the service or system to make the change active., Open regedit, and go to "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\TerminalServer\WinStations\RDP-Tcp" then select the PortNumber REG_DWORD entry and change the value data in Decimal to the new port number.

WARNING, Incorrectly editing your registry can cause your system to become non functional. However, in some cases this may not be possible, so you may change the port number which may help mitigate the attack.

Its best practice to limit RDP connections to specific IP addresses or via a VPN to prevent this. This can occur with with to many rdp connection attempts, someone may be trying to break into your computer/server.Ĭheck your resource monitor network usage, if you see many connections (10, 20+) with svchost.exe (termsvcs) then someone is attempting to break into the system. This is way above my pay grade and we've been using external ports (bad practice, I know, but the VPN is useless for Remote Desktop as of 2019).09 August 2018 Shawn-Hyde How To Guides, Quick Tips, Microsoft, Windows, Windows Errors (0) The LAN consists of both gigabit and 100baseT connections (if that has anything to do with it). (various branded NICs too, so we can rule NIC drivers out as well), or perhaps the protocol (something that would be appended to, or missing from, packet headers?). I believe the issue is with some windows updates that were added since this started (I think it was April - not sure since this is not utilized very often - it could have started as early as February) that makes Windows not like something in the traffic I would blame the router, so I tried a different router (and older SonicWall), set up the tunnel (IPSec) with the same results. I've tried every setting in Remote Desktop I can find - disabling auto-reconnect, enabling/disabling NLA, firewalls, and quite frankly, I'm stumped. No changes were made to the router, what-so-ever, in that time period (Netgear UTM25) and the tunnel(s) work just fine for file transfer, ICMP, FTP, HTTP(s) - ONLY Remote Desktop is affected. I canĬonnect within the network just fine to all these machines and can connect from outside the VPN (after opening a port on the router) with no problems (though, that is a security risk) as well.

A couple of months ago, I started getting the error message "An internal error occurred" when connecting through an IPSec tunnel to all Windows 10 machines, a Windows 7 machine and a Windows 2008 R2 server machine.
