Practice
If, while working with a remote desktop (including on a terminal server or via RemoteApp), users get disconnected with the error "Этот сеанс будет прекращен из-за ошибки шифрования данных." or "Because of an error in data encryption, this session will end." - then clearly there is an encryption integrity violation occurring.
This violation is, as a rule, caused by network issues. Moreover, the issues can be either on the client side (if a specific person gets disconnected) or on the server side or on routers/switches (if it periodically disconnects one user or another).
Here are several tips on how the situation can be fixed. These are solutions used by different people, including myself personally. Some were helped by one thing, others by another.
1) Edit the client computer's registry (regedit).
Go to:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TermService\Parameters
and delete the keys "Certificate", "X509 Certificate", "X509 Certificate ID" there. Then restart the computer.
This is, incidentally, the option recommended by Microsoft for this issue ( https://support.microsoft.com/ru-ru/help/323497/-the-rdp-protocol-component-data-encryption-detected-an-error...-error-message ).
2) In the client's network adapter properties, set "Large Send Offload" or "Offload TCP Large Send" to "Disabled".
Go to "Network Connections", into the network connection's properties, "Configure", and move to the advanced settings tab. That is, you need to get into the properties of the network adapter through which communication with the terminal server takes place.
If there is a parameter in the properties that reads something like "Offload TCP Large Send" or "Large Send Offload" or similar, and it is set to some number, set that parameter to "Disabled" or "Выключено".
3) In the client's network adapter properties, set "Offload checksum" to "Disabled" (if such a property exists).
4) Check that the network connection to the terminal server is stable and does not drop packets at sizes close to the MTU (for example, 1500 bytes). Any significant amount of packet loss can cause RDP encryption issues.
5) As a last resort - try replacing the network adapter. On the client's side or on the server's side, respectively - depending on whether this issue occurs only for a single client or for several.
Comments