RDP Service and Configuration Issues
VM is reachable but the RDP service itself is broken or misconfigured.
Symptoms → Solutions
| Symptom | Solution | Documentation |
|---|---|---|
| TermService not running | Start the service and set to Automatic | Reset RDP service |
| RDP port changed from 3389 | Reset port or update NSG to allow the custom port | Detailed RDP troubleshooting |
| RDP disabled (fDenyTSConnections = 1) | Reset RDP config via CLI or Portal | Reset RDP service |
| TLS/SSL certificate expired or corrupt | Delete cert and restart TermService to regenerate | RDP internal error |
| NLA/Security Layer mismatch | Temporarily disable NLA for recovery | RDP general error |
| GPO overriding local RDP settings | Check HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services | Detailed RDP troubleshooting |
| RDS licensing expired | Remove RDSH role or configure license server | Specific RDP errors |
Quick Commands
⚠️ Warning: Commands marked with ⚡ use the VM agent/extensions. Run Pre-Flight Safety Checks before using them.
bash
# ⚡ Reset all RDP configuration to defaults