question

TravisDallegge-2960 avatar image
1 Vote"
TravisDallegge-2960 asked ·

Receiving "Couldn't connect" for all previously configured connections

This morning, it looks like all previously configured connections to machines I had are throwing the following error:
"Your session ended because the remote PC sent unexpected server authentication certificate. Ask your admin or tech support for help.

Error code: 0x907
Extended error code: 0x0"

I was able to connect with these machines yesterday without issue.

It looks like I received an update and am now running version 10.2.1524.0

Any ideas how to resolve?

windows-remote-desktop-client
· 1
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,
We actualy have the same issue has you.
Same error code, same running verions...
Did you find a solution to fix it ?

Best regards

Joris

0 Votes 0 ·
JennyYan-MSFT avatar image
0 Votes"
JennyYan-MSFT answered ·

Hi,
1. Could you please confirm if the OS version of client computer you are running?
2. Have you tried to re-fill in the connection settings as a test?
3. Which version of RDC you are using? RDC for mac, andriod others?
https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/remote-desktop-clients

Looking forward to your update.

Thanks,
Jenny

· 1 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi Jenny,

I'm running Windows 10 Version 1909 (OS Build 18363.1016)

I've uninstalled the app and reinstalled it. After reinstallation, I recreated one one my connections and it still generates the same error.

I'm running the Windows Store version 10.2.1526.0 now.

0 Votes 0 ·
JennyYan-MSFT avatar image
0 Votes"
JennyYan-MSFT answered ·

Hi,
Thanks for the update and details.
1.Kindly confirm what update or other changes you 've made before the issue occurrence.

2.From the error message, it indicated the problem was related to certificate used in remote connection.
Is there any icon you could click to view the certificate when the error message prompted?

3.Is it possible to check if any settings have been changed on the target computer or server?

4.Instead of remoting from windows store app but type in mstsc by right clicking run button from start menu.
After then configure the user account, remote computer or Gateway if any and verify if the remote connection would work.

If not working, click save as to get a .rdp file and navigate to authentication level:i:value with notepad and change it to 0:
- 0: If server authentication fails, connect to the computer without warning (Connect and don't warn me)
Note: this will reduce the security level of remote connection.
https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/rdp-files

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Thanks,
Jenny


· 2 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

  1. I didn't make any specific change. I just noticed the icon for the app had changed from blue to orange.

  2. There is no additional prompt from the app, only the error message. I am able to connect via the regular remote desktop and I receive a warning about the certificate. I can then ignore that message and connect. I have no ability to do that via the Microsoft Store app.

  3. There were no changes that I am aware of for the target servers.

  4. I am able to connect via mstsc, just not via this Microsoft Store version.


0 Votes 0 ·

Hi,
Thanks for the reply.

Could you please share the screenshot or detailed certificate warning when you remote from mstsc?

Looking forward to your update.

Best Regards,
Jenny

0 Votes 0 ·
JohnLesser-7198 avatar image
0 Votes"
JohnLesser-7198 answered ·

24934-image.png




Just to keep the conversation going. An end user came to me with the above screenshot of the error when using the App Store version. It works for now after a reboot of the target machine


image.png (23.2 KiB)
·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JoeyHomicide-4476 avatar image
0 Votes"
JoeyHomicide-4476 answered ·

I too just started having this issue... It happens on all of my servers (35 in total) except 2 domain controllers running server core.
All of these servers could previously be connected to until my Remote Desktop client updated to the 10.2.1534.0 version. I have tried this from multiple computers, here's what I've come up with:
As soon as I update the computers to Microsoft Remote Desktop client version 10.2.15340.0 it breaks. At login we get the following error:
29673-image.png



However, I have computers that haven't updated to the 10.2.15340.0 version, and they still connect just fine. Also on the computers that have the updated version, on the microsoft store there is the Remote Desktop Preview, I can install that, and it seems to work fine. It appears it is version 10.1.1215.0 of the app... so it's an earlier build.
Also I have no issues connecting to any of the servers using the oldschool native Remote Desktop Connection application (mstsc.exe).

In trying to resolve this issue, I have tried deleting an servers remote desktop certificate and had it recreate it, but that had no effect.


image.png (14.8 KiB)
·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

sandrew-9081 avatar image
3 Votes"
sandrew-9081 answered ·

Found the issue & fix/workaround:

Version 10.2.1534 of the Microsoft Remote Desktop (WinRT) app refuses to accept Remote Desktop Authentication (1.3.6.1.4.1.311.54.1.2) certificates, but will accept Server Authentication (1.3.6.1.5.5.7.3.1) certs.

Obviously Microsoft need to fix this as RDAuth certs are perfectly valid & shouldn't be refused, but for now re-issuing/switching to Server Auth certs works.

FYI @TravisDallegge-2960, @JoeyHomicide-4476

· 3 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

We are having a lot of issues with this error while using Microsoft Remote Desktop. I can't seem to find any documentation that explains why your solution works. I realize we often fix stuff by trying things, but I would love to know why this fixed it, and what did MS do to the App that triggered this issue. Thanks.

2 Votes 2 ·

How did you change the type of certs being used or tell which one was in use ?

1 Vote 1 ·

Thanks, that helped to fix the issue for me.

0 Votes 0 ·