
Microsoft has released an update to its Remote Desktop software, a.k.a. Terminal Services Client. The new version 6.0 contains a number of interesting
new features:
- Network Level Authentication
- Server authentication
- Resource redirection
- Terminal Services Gateway (TS Gateway) servers
- TS Remote Programs
- Multiple monitor spanning
- 32-bit color
- Font smoothing
Network Level Authentication allows the user to be authenticated before the server starts up a full-blown Remote Desktop session, thereby saving resources, and "uses remote computer authentication that helps protect users from connecting to remote computers that are set up for malicious purposes," though I'm not entirely sure what that means. Server authentication "verifies that you are connecting to the correct remote computer or server. Resource redirection lets you use Plug and Play devices that support redirection over a Remote Desktop session. TS Gateway support "enables authorized users to connect to remote computers on a corporate network," which means that if you can connect to a remote PC from across the internet over port 443 (SSL), which isn't blocked by most firewalls. TS Remote Programs sounds pretty cool, essentially allowing you to run programs on your local machine that are installed on the remote machine. "The experience," says Microsoft, "is the same as running a program that is installed on the computer." The last three I think are pretty self-explanatory.
Remote Desktop Connection 6.0 is a
free download from Microsoft, and doesn't require a WGA check.
Reader Comments (Page 1 of 2)
Mike said 8:45PM on 12-01-2006
Unfortunately the update gets about 2/3 of the way through before hanging at the "Running processes after install" step. Is anyone else encountering this?
Reply
p337 said 10:56PM on 12-01-2006
Works for me Mike.
Reply
ignu said 12:59AM on 12-02-2006
since i installed this, i now have to log in twice to connect to all my windows 2000 servers, and i can't find a way around it. :-(
Reply
Jim Kell said 10:11AM on 12-04-2006
DOUBLE LOGON PROMPTS
http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=979744&SiteID=17
I can confirm that the double login occurs; but I believe I know why, as I have tested again two Windows Server 2003 systems: one requiring a "double login" and the other not.
This issue appears to occurs if you have defined the "Always prompt client for password upon connection" via the Group Policy Object Editor. This setting is located under the Computer Configuration > Administrative Templates > Windows Components > Terminal Services > Encryption and Security node.
Normally, this setting would prevent someone from automatically gaining access by launch an RDP profile (pre 6.0) with a saved password. With 6.0, Microsoft eliminated this security hole, but now they've turned the authentication process into two-step process, with the client merely collecting the credentials (prior to connection) and passing it on to the server (upon connection). This is where the problem occurs. That first login prompt is before you even connect -- after which point the above defined policy kicks, the client is not allowed use preestablished credentials, and the server interrogates you for a user name and password.
Note: you can always ignore the first login and simply click "OK", as you will be prompted to login by the target server, provided that you have left the "Server Authentication" option (on the RDP client Advanced tab) at "Always connect, even if authentication fails"
I hope Microsoft does something about this -- especially since the client always adds additional information to the login name (i.e. username becomes server\username) when one goes to connect using the saved user name from the drop-down list, thereby causing authentication to fail.
Reply
Linus said 7:39AM on 12-05-2006
And only for those with english OS :-(
Reply
Eric Hanke said 12:14PM on 12-05-2006
To be totally honest and to the point the "New" and "Improved" RDP client totally sucks! Why should someone have to logon to a server twice to establish RDP connection. I don't care if I have to login 100 times, an additional login does not make the client any more secure than the single sign on the previous RDP clients supported.
WHAT TOTALLY BURNS MY ASS IS THAT I CANNOT REMOVE THE NEW VERSION AND INSTALL THE OLD RDP CLIENT THAT WINDOWS XP SHIPPED WITH!!!!
Man this sucks!
Eric Hanke
Reply
Brian said 5:14PM on 12-15-2006
What sucks is, after installing this new RDP Client, I can no longer Remote Desktop from an XP client to a Server 2003 Machine. Has anyone else been experiencing this. I see nothing in my firewall logs indicating that it is blocking this. To test, I connected using another XP machine. than updated the client and tried again. Hangs forever. Any suggestions would be great. Mike RO suks A$$
Reply
brian said 5:55PM on 12-15-2006
OK, I was wrong, My firewall is now blocking it. TCP packet out of state. First packet isn't syn. It seems Microsoft once again doesn't play by the rules.
Reply
Monty Wilson said 9:04AM on 12-18-2006
If you used to log in to multiple accounts (like Administrator plus one for yourself) under the old software, and are cussing the disappearance of the login screen, do this:
Right-click your TS client icon, choose Edit, then check the box that says "always ask...." The login will reappear for you!
...MontyMan.
http://www.brancekrachy.com/manufacturer_power_tranmission.html
Reply
brian said 6:35PM on 12-15-2006
CORRECTION: If you are using CheckPoint NGX, within Smart Defense, You can no longer protect against malformed RDP requests. 6.0 must be causing CheckPoint to think these requests are malformed. so as I said before. woohoo microsux
Reply
Chugger said 7:44PM on 12-19-2006
If you want to uninstall the new verion, run a search for mstsc.dll.mui and mstsc.exe.mui, rename them to mstsc.dll and mstsc.exe and replace the same files in your system32 folder.
Reply
Sahir Siddiqui said 9:03AM on 12-27-2006
To uninstall, merely remove the KB925876 package from add-remove programs in control panel.
Reply
Antimidas said 11:02PM on 1-03-2007
To easily bypass the second login, enter your username rather than domain\username. The remote host automatically assumes the default remote domain for logins. Putting in domain\username seems to cause the remote hoste to prepend the domain once again making it domain\domain\username thus causing the second login requirement.
Reply
ThunderfistCor said 3:52PM on 1-08-2007
What a hunk of poo! I had to remove the KB925876 package as mentioned above (Thanks Sahir!) to connect to any of my servers. (I run Check Point Integrity Client). Cette programme est une espèce de merde!
Reply
Rob Ingenthron said 10:11PM on 1-08-2007
Yes, you can enter the server or domain name where the desired account database is, but the point is the the other versions of RDP didn't require you to tab back, change the part with the name, and then try to connect. If I am in a domain using the Windows XP version of RDP, I just use my ID and password, and the RDP tool remembers those. If I need to change it, then I can. Also, I can pre-enter the name, password and domain on the XP and older version, but NOT on this new one. It requires much more typing and correction, just to reconnect to the same server. It's ridiculous.
I removed the new one - Thanks, Sahir - which doesn't even mention that it's the RDP tool, and re-installed the old XP version, which works great for everything.
This is the previous version that I use on all my servers and desktops:
Windows XP Remote Desktop Connection software
[XPSP2 5.1.2600.2180]
-- Rob "I" --
Reply
Kongee said 10:08AM on 1-10-2007
The new one really sucks!!
How to remove it:
Add/Remove programs - uninstall KB925876
Or
for some ppl it might not be there. You can go to C:\WINDOWS\$NtUninstallKB925876$\spuninst and remove it directly from there.
Reply
Guy said 11:27AM on 2-03-2007
Unfortunately the update gets about 2/3 of the way through before hanging at the "Running processes after install" step. Is anyone else encountering this?
Meeeeeee,on the laptop but it runs ok on desktop ??!!
Reply
Jeff said 4:56PM on 2-18-2007
Unfortunately if you have used an integrated install for XP (slipstreamed) then the unistall options are not available. There is no entry in ARP and no uninstall entries in Windows. I tried to rename the files as mentioned above and ended up using system restore just to get a functioning RDP again. It's hard to believe that MS pulls crap like this so I am still looking for an uninstall option so I can reinstall the old version.
Jeff
Reply
Mark H said 5:23AM on 2-27-2007
This update is best avoided if at all possible!
Reply
Kevin said 9:51AM on 2-21-2007
You can remove this piece of crap TS client. Go to add/remove programs. At the top, click show updates. Look for "Update for Windows XP (KB925876)", click remove - reboot. Your done.....
Reply