Windows 10: When attempting to RDP into server. Error message - rdp_basic_settings_exchange

I have a Server running Server 2019 and moved it from one domain to another, but then I got failures, and returned it back to the original domainEach time I RDP to the server I get a message that says error: rdp_basic_settings_exchangeI have run sfc /scannow and it makes no differenceI have attempted to look up this error message but very few hits on thisThis is a dev server, so I am not totally worried about it, but I am thinking before I spend hours trying to fix it that I would ask here.I have over 25 years of windows desktop and server support and I have never come across this issue befor

:)

 

Windows Server 2019 RDP Connects and closes immediately

Hi,

Some background first. This is a Windows Server 2019 Base running on AWS (image date 2020.07.15). I have root access to this AWS account and have administrator password to this server.

Reboot is NOT an option!

Problem is, that since few days ago I cannot RDP to this server any more. It does accept username and password (tried incorrect ones and it says that "Logon attempt failed", however once authenticated,
it just closes the connection and nothing else happens.

Here are the messages from Event Log (a.b.c.d is the IP address):

Code:

INFO: Event ID: 1024, Message: RDP ClientActiveX is trying to connect to the server (a.b.c.d)INFO: Event ID: 1028, Message: Server supports SSL = supportedINFO: Event ID: 1029, Message: Base64(SHA256(UserName)) is = SOME_ENCODED_STRING-Warning: Event ID: 226, Message: RDPClient_SSL: An error was encountered when transitioning from TsSslStateHandshakeInProgress to TsSslStateDisconnecting in response to TsSslEventHandshakeContinueFailed (error code 0x80004005).INFO: Event ID: 1105, Message: The multi-transport connection has been disconnected.INFO: Event ID: 1026, Message: RDP ClientActiveX has been disconnected (Reason= 263)INFO: Event ID: 1028, Message: Server supports SSL = supportedINFO: Event ID: 1029, Message: Base64(SHA256(UserName)) is = SOME_ENCODED_STRING-INFO: Event ID: 1102, Message: The client has initiated a multi-transport connection to the server a.b.c.d.Warning: Event ID: 226, Message: RDPClient_SSL: An error was encountered when transitioning from TsSslStateDisconnected to TsSslStateDisconnected in response to TsSslEventInvalidState (error code 0x8000FFFF).INFO: Event ID: 1105, Message: The multi-transport connection has been disconnected.INFO: Event ID: 1026, Message: RDP ClientActiveX has been disconnected (Reason= 2)

Port scan revealed there 2 other ports open:

5357/tcp open wsdapi

5985/tcp open wsman

Last one as I understand is used by WinrRM HTTP, but because it is not explicitly configured, not sure how much help can it be.

However, I used metasploit (because I'm not that familiar with Powershell) and try and run some commands using WinRM. I am able to list authentication methods (lists: Negotiate), also I am able to login, however when I try to run a command, it gives me HTTP/1.1
500.

Any help or ideas - appreciate it!

 

Windows Update Error Message 0x80070543


Ya Ya Ya, there's over a hundred threads like this, ...

Anyway, started getting this error message a few days ago, and done a lot of searching on this error message, apparently it's not, uncommon.

In particular, the (currently) 4 updates that are being affected are:

• Update for Windows 10 Version 1511 (KB3173428) - Error 0x80070543
• Security Update for Windows 10 Version 1511 (KB3172729) - Error 0x80070543
• Security Update for Adobe Flash Player for Windows 10 Version 1511 (KB3174060) - Error 0x80070543
• Cumulative Update for Windows 10 Version 1511 (KB3176493) - Error 0x80070543

The actions I've taken to date are:

1. Uninstalled firewall program (comodo)
2. Uninstalled anti-virus (Avast)
3. Reset the windows update catalog on local machine.

So the above errors are with the above done.

What other steps should I be taking to resolve the issue?

Below is notations for when I actually add to this thread.

1. Attempted to use the troubleshooter, no dice.

 

"an internal error occurred" when try RDP conect into the server.

Hi John,

To better assist you with your concern about connecting to the remote server, we suggest posting this inquiry on the

Microsoft TechNet forums. This community caters to IT professionals who can provide advanced troubleshooting steps that will help you with this issue.

Should you have other questions, please let us know.