Windows Remote desktop suddenly stopped allowing connections

Posted on 2015-01-12
Last Modified: 2015-03-11
Say, we are running Windows2008 server R2 and with no known reason, remote desktop stopped working. I rebooted the server and this did not help. I disabled the Public firewall and remote desktop was able to connect again.

What ports do I need to allow and what could have caused this? No changes were made to Firewall by ourselves.
Question by:shaunwingin
  • 5
  • 3
LVL 10

Expert Comment

ID: 40543912
port 3389
You need to check that there is no rule on firewall to stop the application it's self from communicating outside the network.
You could first set up the port and try it out, if it doesn't work then you keep on debugging.
As for what caused it, well it could be anything really. Upgrade, accidental reset, virus ..whatever! Maybe too many tries to hack into the system through this port triggered some protection machanism or something.
LVL 68

Expert Comment

ID: 40543917
First check if the particular firewall rule for Remote Desktop is enabled. If yes, sometimes it helps to uncheck and rechecked the rule.

Author Comment

ID: 40543920
Was most likely this
Maybe too many tries to hack into the system through this port triggered some protection machanism or something.

Author Comment

ID: 40544037
Say, Cyberarms seems to be the culprit - but showing no current locks.
What can I do?

What is the name of the Remote Desktop .exe to add entire application to firewall?
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

LVL 68

Expert Comment

ID: 40544137
It is part of the service host: C:\Windows\System32\svchost.exe -k NetworkService

Author Comment

ID: 40544293
Remote Desktop (TCP-In) created by System allows port 3389. Disabled and enabled - same issue persists.
LVL 68

Accepted Solution

Qlemo earned 500 total points
ID: 40544311
Windows Firewall or Cyberarms?

Author Comment

ID: 40544320
Windows Firewall

I've also noticed a 2nd Program is not getting access - seems more generalized issue.

Author Closing Comment

ID: 40659401
uninstalled Cyberarms and resolved

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now