Remote » How to Resolve Remote Desktop Disconnected Error - License certificate corruption

Resolving remote desktop disconnected error: License certificate corruption

Quick search

    A Remote desktop disconnected error can occur due to License certificate corruption. This error can throw any of the following error messages:

    Because of a security error, the client could not connect to the Terminal server. After making sure that you are logged on to the network, try connecting to the server again.

    or,

    Remote desktop disconnected. Because of a security error, the client could not connect to the remote computer. Verify that you are logged onto the network and then try connecting again.

    Additionally, any of the following license related event ID messages may be logged:

    1. Event ID: 50
      Event Source: TermDD
      Event Description: The RDP protocol component X.224 detected an error in the protocol stream and has disconnected the client.
    2. Event ID: 50
      Event Source: TermDD
      Event Description: The RDP protocol component X.224 detected an error in the protocol stream and has disconnected the client.
    3. Event ID: 1004
      Event Source: TermService
      Event Description: The terminal server cannot issue a client license.
    4. Event ID: 1010
      Event Source: TermService
      Event Description: The terminal services could not locate a license server. Confirm that all license servers on the network are registered in WINS/DNS, accepting network requests, and the Terminal Services Licensing Service is running.
    5. Event ID: 28
      Event Source: TermServLicensing
      Event Description: Terminal Services Licensing can only be run on Domain Controllers or Server in a Workgroup.

    If you suspect License certificate corruption, check for the above events in the Event Viewer of the Remote desktop server. Then proceed with the resolution.

    Quick Tip: ManageEngine EventLog Analyzer, a comprehensive log management solution can help you set alerts to spot these events in the logs. Click here to know more.

    To resolve this problem, perform the following procedure on all Remote Desktop Servers

    1. Back up and then remove the X509 Certificate registry keys,
    2. Restart the computer
    3. Reactivate the Remote Desktop Services Licensing server.

    Note: Making changes to the registry should be done with utmost caution as incorrect changes may result in serious problems. It is advisable to back up the registry before making the changes.

    Steps:

    1. Start Registry Editor.
    2. Locate and click the following registry subkey:
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\RCM
    3. On the Registry menu, click Export Registry File.
    4. Type exported- Certificate in the File name box, and then click Save. If you have to restore this registry subkey in the future, double-click the Exported-parameters.reg file that you saved in this step.
    5. Right-click the following values and click Delete. Click Yes to verify deletion.
      Certificate X509 Certificate X509 Certificate ID X509 Certificate2
    6. Exit Registry Editor, and then restart the server.

    EventLog Analyzer

    EventLog Analyzer, a one-stop log management solution, collects, analyzes, correlates, and archives log data from you on-premises as well as cloud network. With its in-depth log analysis capability, EventLog Analyzer helps enterprises to thwart security threats in real-time, spot anomalous user behaviors, and manage security incidents effectively. Want to know how our solution helps you protect your cloud environment? Check out.

    Download now

    EventLog Analyzer Trusted By

    Los Alamos National Bank Michigan State University
    Panasonic Comcast
    Oklahoma State University IBM
    Accenture Bank of America
    Infosys
    Ernst Young

    Customer Speaks

    • Credit Union of Denver has been using EventLog Analyzer for more than four years for our internal user activity monitoring. EventLog Analyzer provides great value as a network forensic tool and for regulatory due diligence. This product can rapidly be scaled to meet our dynamic business needs.
      Benjamin Shumaker
      Vice President of IT / ISO
      Credit Union of Denver
    • The best thing, I like about the application, is the well structured GUI and the automated reports. This is a great help for network engineers to monitor all the devices in a single dashboard. The canned reports are a clever piece of work.
      Joseph Graziano, MCSE CCA VCP
      Senior Network Engineer
      Citadel
    • EventLog Analyzer has been a good event log reporting and alerting solution for our information technology needs. It minimizes the amount of time we spent on filtering through event logs and provides almost near real-time notification of administratively defined alerts.
      Joseph E. Veretto
      Operations Review Specialist
      Office of Information System
      Florida Department of Transportation
    • Windows Event logs and device Syslogs are a real time synopsis of what is happening on a computer or network. EventLog Analyzer is an economical, functional and easy-to-utilize tool that allows me to know what is going on in the network by pushing alerts and reports, both in real time and scheduled. It is a premium software Intrusion Detection System application.
      Jim Lloyd
      Information Systems Manager
      First Mountain Bank

    Awards and Recognitions

    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    A Single Pane of Glass for Comprehensive Log Management

    © 2020 Zoho Corporation Pvt. Ltd. All rights reserved.