Tuesday 23 August 2016

Connecting Windows Embedded Handheld 6.5 RDP to Windows Server 2012 R2

Lots of references to this around the web, with all the instructions referencing "reactivate your RDP Licensing Server" using the "Web browser" method.

But what if you cannot do this? You have no access to the RDP Licensing Server, which is used for many other RDP setups in your environment.

  1. Disable NLA as documented everywhere.
  2. Delete all of the X509 keys in HKLM\CurrentControlSet\Control\RCM
  3. Set a "Deny" permission on HKLM\CurrentControlSet\Control\RCM ONLY to prevent "Everyone" performing the "Create Subkey" operation.
  4. Restart Terminal Services.
Your mileage my vary, but this allows the devices I'm working with to connect without issue. No need for the "Use512LenPropCert" key, no messing with encryption levels or reactivating the Licensing Server.