Link to home
Start Free TrialLog in
Avatar of Act5580
Act5580

asked on

The remote session was disconnected because of a decryption error at the server.

Simply put, we are getting "The remote session was disconnected because of a decryption error at the server." when trying to remote into a Windows server 2k3 Enterprise SP2 box. RDP is enabled, I checked out the basics in the terminal services configuration, remote users are setup properly, and firewalls are off.
Avatar of Netman66
Netman66
Flag of Canada image

There is a setting in the Default Domain Policy for FIPS encryption.  Check it on the client FIRST using gpedit.msc.

Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options::  System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing

Make sure it's disabled.  It might be enabled on the client only and set to Not Defined in the Default Policies - if this is the case, disable it on the local client and leave the Default Policies as they are.
Avatar of Act5580
Act5580

ASKER

My computer and another one I have used arent joined to the domain. For mine the local policy is disabled and it is not defined in the default policy on the server.
Are you running the latest versions of RDP on both server and workstation?
Avatar of Act5580

ASKER

Mstsc version 6.0.6000.16459 on the server and version 6.0.6001.18000 on my laptop.
What happens if you launch RDP from your Vista box like so:  mstsc.exe /admin

Do you still get that error?
Avatar of Act5580

ASKER

Its XP SP3, and yes I still get the same error.
Is there anything in the server logs (application, security, system) that record this connection attempt and failure?  Can you send me all the events that are related?

Avatar of Act5580

ASKER

Screen shot of event being logged from system logs upon RDP attempt. Nothing in security or application.
sferror.bmp
ASKER CERTIFIED SOLUTION
Avatar of Netman66
Netman66
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Act5580

ASKER

That worked. Thank you!