Hi all,

last night I ran into a very strange issue with connecting to a Windows Server 2008 R2 system using RDP. When opening the connection to the host, the remote display opened, showed, that the user is going to be logged in and straight afterwards the connection crashed and RDC client stated, that the connection has been terminated. No error detail, just an error window like when the server isn’t reachable at all.

What did I do?
Just before having issues with RDP connection (by the way: all other services ran fine on the machine, especially web and database services) I installed Service Pack 1 for Windows Server 2008. And that was my fault!

What happend?
Microsoft has released a security fix on 2012-03-12 with the ID KB2667402 which is fixing a critical issue with remote desktop connection service. This update needs to be applied as soon as possible, because it enabled attackers to take control of your server using manipulated RDP packets. So installing the update is a MUST-DO of course. But when installing the optional update „Service Pack 1“ afterwards, your RDP connection will go lost. That’s a very nice feature, Microsoft built in its update routine, because everybody who is using hosting provides without direct access to the machines will run into a major problem: You cannot reach your server for remote administration anymore.

What to do about that?
First of all, be sure to install Service Pack 1 before installing hotfix KB2667402! If you do that, you will not encounter any problems with RDP. If you fall into the same trap like I did (installing SP1 afterwards), you need to get direct access to your machine (e.g. ask your provider for KVM access like LARA). Uninstalling the update KB2667402 and installing it afterwards will make your server be reachable by RDP again and having closed the security issue by the hotfix.

The problem is encountered by the file rdpcorekmts.dll in Windows‘ system32 folder. Having installed KB2667402 before SP1 means, SP1 will replace the fixed file with an older version which is causing problems with error messages like svchost.exe_TermService crashed (you may notice them in the event log). Reinstallation of hotfix KB2667402 is updating that file again to the newest version, so RDP will go live.
Your current file version for rdpcorekmts.dll should be 6.1.7601.17767, then you are fine.

I have to thank several pages and dicussion threads for providing the correct solution after all:

Good luck with your server.


Sex ist eine Schlacht, Liebe ist Krieg. #dotnet #developer #gamer #bisexual

4 Kommentare

caballero · 9. Mai 2012 um 09:29

It was really helpful.

hoppelhase · 14. Juni 2012 um 17:40

you saved my day!
Dealing with the same issue between two windows 7 professional installations. on one the automatic update for KB2667402 failed, but i didnt noticed.

thx a lot

Rik Claeys · 25. Juni 2012 um 13:26

After a lot of forums and possible solutions; this worked for me !


Windows 7 / Server 2008R2 SP1 – RDP Verbindung scheitert | WordPress 4.0.0 · 26. November 2014 um 16:43

[…] Sollte nach der Installation des Service Pack 1 für Windows 7 bzw. Windows Server 2008 R2 keine Remote Desktop Verbindung mehr möglich sein, so sollte man prüfen, ob der Hotfix KB2667402 auf dem System installiert ist.Ist dies der Fall, so muss man den Hotfix manuell deinstallieren und neu installieren, da das Service Pack 1 eine dll überschreibt, welche von diesem Hotfix installiert wurde, wodurch der Remote Desktop Dienst nicht mehr gestartet wird.Quelle […]

Schreibe einen Kommentar zu hoppelhase Antworten abbrechen

Deine E-Mail-Adresse wird nicht veröffentlicht. Erforderliche Felder sind mit * markiert.

Diese Website verwendet Akismet, um Spam zu reduzieren. Erfahre mehr darüber, wie deine Kommentardaten verarbeitet werden.