Forum

KB4103727 Breaks RD...
 
Notifications
Clear all

KB4103727 Breaks RDP/Remote Desktop Gateway  

  RSS

Hayden
(@hayden-kirk)
Member Admin
Joined: 4 years ago
Posts: 85
10/05/2018 10:08 am  

This morning we awoke to screams from users not being able to login to our remote desktop servers.

KB4103727 has been released which switches a flag to protect against the CredSSP attack.

The quickest way to fix this to get your users working is to patch your domain controller with the May updates and use group policy to push out a change

You can manually add this to the registry for desktop clients

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystemCredSSPParameters] "AllowEncryptionOracle"=dword:00000002

or via command line

reg add "HKLMSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemCredSSPParameters" /f /v AllowEncryptionOracle /t REG_DWORD /d 2

To fix this problem, the May updates need to be installed on all servers and workstations.

More information:

 


Quote
Share: