Windows Remote desktop suddenly stopped allowing connections

Posted on 2015-01-12
Last Modified: 2015-03-11
Say, we are running Windows2008 server R2 and with no known reason, remote desktop stopped working. I rebooted the server and this did not help. I disabled the Public firewall and remote desktop was able to connect again.

What ports do I need to allow and what could have caused this? No changes were made to Firewall by ourselves.
Question by:shaunwingin
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
LVL 10

Expert Comment

ID: 40543912
port 3389
You need to check that there is no rule on firewall to stop the application it's self from communicating outside the network.
You could first set up the port and try it out, if it doesn't work then you keep on debugging.
As for what caused it, well it could be anything really. Upgrade, accidental reset, virus ..whatever! Maybe too many tries to hack into the system through this port triggered some protection machanism or something.
LVL 70

Expert Comment

ID: 40543917
First check if the particular firewall rule for Remote Desktop is enabled. If yes, sometimes it helps to uncheck and rechecked the rule.

Author Comment

ID: 40543920
Was most likely this
Maybe too many tries to hack into the system through this port triggered some protection machanism or something.
Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.


Author Comment

ID: 40544037
Say, Cyberarms seems to be the culprit - but showing no current locks.
What can I do?

What is the name of the Remote Desktop .exe to add entire application to firewall?
LVL 70

Expert Comment

ID: 40544137
It is part of the service host: C:\Windows\System32\svchost.exe -k NetworkService

Author Comment

ID: 40544293
Remote Desktop (TCP-In) created by System allows port 3389. Disabled and enabled - same issue persists.
LVL 70

Accepted Solution

Qlemo earned 500 total points
ID: 40544311
Windows Firewall or Cyberarms?

Author Comment

ID: 40544320
Windows Firewall

I've also noticed a 2nd Program is not getting access - seems more generalized issue.

Author Closing Comment

ID: 40659401
uninstalled Cyberarms and resolved

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
OfficeMate Freezes on login or does not load after login credentials are input.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question