Update: I have created a registry file which makes these changes for you. Please see the disclaimer below. Download the file here. Simply run it to merge the registry changes, and reboot for the changes to take effect.
If you get this message, it’s because you’re trying to connect to a computer which uses a newer version of the remote desktop protocol, which supports a higher level of encryption. The connection will not go through because you are using an older version.
If you’re using Windows XP, make sure you are up to date with windows update. You will need to be using service pack 3 for these instructions to work. Also make sure there are no updates for the remote desktop client listed in windows update.
I hate disclaimers, but here goes.
These steps involve editing the registry. If you’re uncomfortable doing that, please do not proceed. I cannot take responsibility for any damage that is incurred by you from following these instructions.
Always back up your registry before editing it – see Microsoft KB article here: http://support.microsoft.com/kb/322756/
Now that that’s out of the way, onward!
- Go to start -> run (or windows-key+r, and type run)
- enter “regedit” into the run box.
- On the left you are presented with various “folders”. Collapse all of them if they aren’t already.
- You want to navigate to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa – note that you will have to find the HKEY_LOCAL_MACHINE key first (keys look like folders), and then SYSTEM nested inside that key, etc.
- Once you are on Lsa, look on the details pane (on the right hand side) and find Security Packages. Right click it and select modify.
- You will be presented with some values, each one on its own line. Do not modify any of the values that are already set! Create a new line by placing your cursor after the last value, and pressing the mouse button to de-select these values. Then press enter to create your own line.
- Now enter tspkg, by itself, on it’s own line, after all of the other values. Press ok.
Security Packages Regedit Edit Window
- Now you will want to navigate to another key – HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProviders
- Find the SecurityProviders in the details pane and as before, right click it and select modify.
- You will see some values, each separated by a comma and a space. Add your own comma and space after these values, and type credssp.dll, so that it matches the screenshot. Press ok.
SecurityProviders Regedit Edit Dialog - credssp.dll
- Close regedit, and restart your computer. Remote desktop client should now have no problems connecting to the remote computer.
Disclaimer: The registry file above will make possibly destructive changes to your registry. Please make a backup first. If you are uncomfortable with the registry, do not download and use the file.
Originally posted 2009-06-30 23:34:14.
#1 by Joel on October 11, 2009 - 6:12 pm
Worked like a charm. Thanks, Harv.