DC 从 Windows Server 2008 R2 迁移到 2022 后,RDP 上出现 SSL 错误

DC 从 Windows Server 2008 R2 迁移到 2022 后,RDP 上出现 SSL 错误

我无法连接到 RDP 客户端(Windows 11 Pro)和带有 RemoteApp 的终端服务器(Win2019 STD)。

最近,我将 DC Windows 2008 R2 迁移到了 Windows Server 2022。全新安装并转移角色。Windows Server 2008 R2 DC 已降级。

今天早上客户端开始无法连接 RemoteApp 和远程桌面。

RDP 客户端提示密码错误。重启或删除已保存的凭证均无法解决问题。

我怀疑这与 SSL 或 RDP 安全有关。如果我强制 RDP 使用 RDP 安全协议而不是 SSL,它就会起作用。

如果我使用 IP 而不是 FQDN 进行连接,也可以工作,因为它使用 RDP 协议而不是 SSL。

以下是日志(抱歉,有些是西班牙语)

在 TS-RemoteApp 服务器 (Windows Server 2019 STD) 上:

Nombre de registro:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational
Origen:        Microsoft-Windows-RemoteDesktopServices-RdpCoreTS
Fecha:         09/11/2023 16:24:12
Id. del evento:226
Categoría de la tarea:Módulo RemoteFX
Nivel:         Advertencia
Palabras clave:
Usuario:       Servicio de red
Equipo:        my-server
Descripción:
RDP_TCP: error al realizar la transición de StateUnknown en respuesta a Event_Disconnect (código del error 0x80070040).
XML de evento:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-RemoteDesktopServices-RdpCoreTS" Guid="{1139c61b-b549-4251-8ed3-27250a1edec8}" />
    <EventID>226</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>4</Task>
    <Opcode>19</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2023-11-09T16:24:12.914820800Z" />
    <EventRecordID>2274647</EventRecordID>
    <Correlation ActivityID="{f420ee1b-2600-427b-9c44-d709f4cc0000}" />
    <Execution ProcessID="96" ThreadID="11440" />
    <Channel>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational</Channel>
    <Computer> my-server </Computer>
    <Security UserID="S-1-5-20" />
  </System>
  <EventData>
    <Data Name="StateTransition">RDP_TCP</Data>
    <Data Name="PreviousState">23</Data>
    <Data Name="PreviousStateName">StateUnknown</Data>
    <Data Name="NewState">21</Data>
    <Data Name="NewStateName">StateDisconnected</Data>
    <Data Name="Event">43</Data>
    <Data Name="EventName">Event_Disconnect</Data>
    <Data Name="ErrorCode">0x80070040</Data>
  </EventData>
</Event>

客户端 Win11 Pro:

Log Name:      Microsoft-Windows-RemoteApp and Desktop Connections/Operational
Source:        Microsoft-Windows-RemoteApp and Desktop Connections
Date:          09/11/2023 16:24:42
Event ID:      1041
Task Category: Connection
Level:         Warning
Keywords:      
User:          MyDomain\test
Computer:      my_computer_client
Description:
Remote application (Acceder a MyRemotaAPP) is launched on RemoteApp and Desktop connection (my TS-RemoteAPP server) but no stored credentials are used for single sign on. (Reason - RemoteApp and Desktop connection does not exist)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-RemoteApp and Desktop Connections" Guid="{1b8b402d-78dc-46fb-bf71-46e64aedf165}" />
    <EventID>1041</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>102</Task>
    <Opcode>0</Opcode>
    <Keywords>0x2000000000000000</Keywords>
    <TimeCreated SystemTime="2023-11-09T15:24:42.8982956Z" />
    <EventRecordID>13</EventRecordID>
    <Correlation />
    <Execution ProcessID="4716" ThreadID="8860" />
    <Channel>Microsoft-Windows-RemoteApp and Desktop Connections/Operational</Channel>
    <Computer> my_computer_client </Computer>
    <Security UserID="My_SID" />
  </System>
  <UserData>
    <EventXML xmlns="Event_NS">
      <RemoteAppName>Acceder a MyRemotaAPP </RemoteAppName>
      <ConnectionName> my TS-RemoteAPP server </ConnectionName>
      <Reason>RemoteApp and Desktop connection does not exist</Reason>
    </EventXML>
  </UserData>
</Event>
Log Name:      Microsoft-Windows-TerminalServices-RDPClient/Operational
Source:        Microsoft-Windows-TerminalServices-ClientActiveXCore
Date:          09/11/2023 16:24:49
Event ID:      226
Task Category: RDP State Transition
Level:         Warning
Keywords:      
User:          MyDomain\test
Computer:      my_computer_client
Description:
RDPClient_SSL: An error was encountered when transitioning from TsSslStateHandshakeInProgress to TsSslStateDisconnecting in response to TsSslEventHandshakeContinueFailed (error code 0x80004005).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-TerminalServices-ClientActiveXCore" Guid="{28aa95bb-d444-4719-a36f-40462168127e}" />
    <EventID>226</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>104</Task>
    <Opcode>19</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2023-11-09T15:24:49.5400668Z" />
    <EventRecordID>139</EventRecordID>
    <Correlation ActivityID="{2fce8265-90dc-48fc-ad73-4c9f95660000}" />
    <Execution ProcessID="10484" ThreadID="1364" />
    <Channel>Microsoft-Windows-TerminalServices-RDPClient/Operational</Channel>
    <Computer> my_computer_client </Computer>
    <Security UserID=" My_SID " />
  </System>
  <EventData>
    <Data Name="StateTransitionName">RDPClient_SSL</Data>
    <Data Name="PreviousState">3</Data>
    <Data Name="PreviousStateName">TsSslStateHandshakeInProgress</Data>
    <Data Name="NewState">10</Data>
    <Data Name="NewStateName">TsSslStateDisconnecting</Data>
    <Data Name="Event">8</Data>
    <Data Name="EventName">TsSslEventHandshakeContinueFailed</Data>
    <Data Name="Error Code">2147500037</Data>
  </EventData>
</Event>

RemoteAPP 客户端出错: RDP 客户端错误

在 DC 上我没有找到任何相关日志。

你有什么线索吗?我不知道在哪里可以诊断它(SSL 相关问题)

干杯!

相关内容