WARNING: Update 969947 may prohibit establishment of an RDP session on Windows XP

  • Thread starter Thread starter David Dickinson
  • Start date Start date
D

David Dickinson

I tested KB969947 on a Windows XP Professional SP3 machine that is reserved
for testing. After installing that update, I could not log on to it in a
Remote Desktop session. In fact, the machine had frozen and could not even
be accessed with its keyboard or mouse, and the hard drive light flashed in
a repeating pattern over several minutes. However, after restarting the
machine, I could log on to it locally. After uninstalling that update, RDP
sessions were successful. I reinstalled it and tested again, and RDP
sessions failed. After uninstalling, they worked.

Test this update thoroughly before deploying it! I've notified Microsoft
about the issue, but the help that is available at this time told me that
Microsoft Enterprise will have to deal with it, and I have to wait until
normal business hours tomorrow to contact them.

I haven't yet tested this update on other versions of Windows, but I hope no
adminstrators have large networks using automatic updates. I'm just hoping
that this isn't the disaster that it could be.

David Dickinson
eveningstar at mvps dot org

NOTE: This message has been cross-posted to microsoft.public.windowsupdate,
microsoft.public.security, microsoft.public.microsoft_update_catalog, and
microsoft.public.windowsxp.security_admin.
 
See the "How to obtain help" section of
http://support.microsoft.com/kb/969947

For home users, no-charge support is available by calling 1-866-PCSAFETY
and/or 1-866-234-6020 in the United States and in Canada or by contacting
your local Microsoft subsidiary. There is no-charge for support calls that
are associated with security updates. When you call, clearly state that
your problem is related to a Security Update and cite the update's KB number
(e.g., KB999999).

Or you can...

Start a free Windows Update support incident request:
https://support.microsoft.com/oas/default.aspx?gprid=6527

Consumer Security Support home page
https://consumersecuritysupport.microsoft.com/

For more information about how to contact your local Microsoft subsidiary
for security update support issues, visit the International Support Web
site: http://support.microsoft.com/common/international.aspx

For enterprise customers, support for security updates is available through
your usual support contacts.
 
Thanks, but as I said, I've already contacted Microsoft about it. I've got
a support request number and everything. But since the Enterprise group
only works during daylight, I have to wait until then to contact them...

....which strikes me as strange. Home users can get help 24/7. But if
you've got a problem that could affect thousands of computers, your problem
has to wait.

David
 
we're having the exact same problems here on several machines. I've had to
boot to safe mode to get it uninstalled then everything is back to normal. I
would advise to disable the download of that update at this point.
 
Not repro-ing that here.

XP sp3
we're having the exact same problems here on several machines. I've had to
boot to safe mode to get it uninstalled then everything is back to normal. I
would advise to disable the download of that update at this point.
Click to expand...
 
I have two XP Pro SP3 test machines. One has the problem, the other
doesn't. I haven't been able to isolate the cause yet. The machines have
significant differences in their configurations, so it will take some time.
 
Recently I had an issue post .net patch that I could not RDP. It was
due to the monitor card software interaction with 951847.

Look in your event log on the workstations and see if you are getting
that error.

After the install of KB951847 (.net family) I found I could not rdp into
a XP workstation. Updating the driver didn't work but putting in the
registry key did:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session
Manager\Memory Management]

"SessionImageSize"=dword:00000020



Brad Rutkowski's Blog : \SystemRoot\System32\RDPDD.dll failed to load:
http://blogs.technet.com/brad_rutko...emroot-system32-rdpdd-dll-failed-to-load.aspx
 
I had considered display driver problems, but that's not it. With 969947
installed, the machine freezes during RDP logon. Without 969947, the
machine works fine. There are absolutely not messages in the event log
relating to this issue. The security log doesn't even show the normal logon
attempt messages. As soon as I enter the password to logon in a remote
desktop session, the machine freezes.

Susan Bradley said:
Recently I had an issue post .net patch that I could not RDP. It was due
to the monitor card software interaction with 951847.

Look in your event log on the workstations and see if you are getting that
error.

After the install of KB951847 (.net family) I found I could not rdp into a
XP workstation. Updating the driver didn't work but putting in the
registry key did:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session
Manager\Memory Management]

"SessionImageSize"=dword:00000020



Brad Rutkowski's Blog : \SystemRoot\System32\RDPDD.dll failed to load:
http://blogs.technet.com/brad_rutko...emroot-system32-rdpdd-dll-failed-to-load.aspx

David said:
I have two XP Pro SP3 test machines. One has the problem, the other
doesn't. I haven't been able to isolate the cause yet. The machines
have significant differences in their configurations, so it will take
some time.
Click to expand...
Click to expand...
 
You said you had a case open right? If not ping me and I'll get you
one. Can you let me know what they say?

David said:
I had considered display driver problems, but that's not it. With
969947 installed, the machine freezes during RDP logon. Without 969947,
the machine works fine. There are absolutely not messages in the event
log relating to this issue. The security log doesn't even show the
normal logon attempt messages. As soon as I enter the password to logon
in a remote desktop session, the machine freezes.

Susan Bradley said:
Recently I had an issue post .net patch that I could not RDP. It was
due to the monitor card software interaction with 951847.

Look in your event log on the workstations and see if you are getting
that error.

After the install of KB951847 (.net family) I found I could not rdp
into a XP workstation. Updating the driver didn't work but putting in
the registry key did:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session
Manager\Memory Management]

"SessionImageSize"=dword:00000020



Brad Rutkowski's Blog : \SystemRoot\System32\RDPDD.dll failed to load:
http://blogs.technet.com/brad_rutko...emroot-system32-rdpdd-dll-failed-to-load.aspx


David said:
I have two XP Pro SP3 test machines. One has the problem, the other
doesn't. I haven't been able to isolate the cause yet. The machines
have significant differences in their configurations, so it will take
some time.


Second machine tested. Can't repro on second box.

Susan Bradley wrote:

Not repro-ing that here.

XP sp3

tommydokc wrote:
we're having the exact same problems here on several machines.
I've had to boot to safe mode to get it uninstalled then
everything is back to normal. I would advise to disable the
download of that update at this point.



:

I tested KB969947 on a Windows XP Professional SP3 machine that
is reserved for testing. After installing that update, I could
not log on to it in a Remote Desktop session. In fact, the
machine had frozen and could not even be accessed with its
keyboard or mouse, and the hard drive light flashed in a
repeating pattern over several minutes. However, after restarting
the machine, I could log on to it locally. After uninstalling
that update, RDP sessions were successful. I reinstalled it and
tested again, and RDP sessions failed. After uninstalling, they
worked.

Test this update thoroughly before deploying it! I've notified
Microsoft about the issue, but the help that is available at this
time told me that Microsoft Enterprise will have to deal with it,
and I have to wait until normal business hours tomorrow to
contact them.

I haven't yet tested this update on other versions of Windows,
but I hope no adminstrators have large networks using automatic
updates. I'm just hoping that this isn't the disaster that it
could be.

David Dickinson
eveningstar at mvps dot org

NOTE: This message has been cross-posted to
microsoft.public.windowsupdate, microsoft.public.security,
microsoft.public.microsoft_update_catalog, and
microsoft.public.windowsxp.security_admin.
.
Click to expand...
Click to expand...
Click to expand...
 
I have seen a problem where after installing 969947, the PC will
lockup shortly after you login. I was able to uninstall the update in
safe mode.

This has only occurred on PC's with an ATI Radeon HD 2400 series
cards. Upgrading to the latest version of the driver (9.1, released
10/22/2009) and then reapplying the 969947 update seems to fix the
issue.

Just my .02


You said you had a case open right?  If not ping me and I'll get you
one.  Can you let me know what they say?

David said:
I had considered display driver problems, but that's not it.  With
969947 installed, the machine freezes during RDP logon.  Without 969947,
the machine works fine.  There are absolutely not messages in the event
log relating to this issue.  The security log doesn't even show the
normal logon attempt messages.  As soon as I enter the password to logon
in a remote desktop session, the machine freezes.
Click to expand...
Susan Bradley said:
Recently I had an issue post .net patch that I could not RDP.  It was
due to the monitor card software interaction with 951847.
Look in your event log on the workstations and see if you are getting
that error.
After the install of KB951847 (.net family) I found I could not rdp
into a XP workstation.  Updating the driver didn't work but putting in
the registry key did:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session
Manager\Memory Management]
"SessionImageSize"=dword:00000020
Brad Rutkowski's Blog : \SystemRoot\System32\RDPDD.dll failed to load:
http://blogs.technet.com/brad_rutkowski/archive/2008/01/04/systemroot....
David Dickinson wrote:
I have two XP Pro SP3 test machines.  One has the problem, the other
doesn't.  I haven't been able to isolate the cause yet.  The machines
have significant differences in their configurations, so it will take
some time.
Second machine tested.  Can't repro on second box.
Susan Bradley wrote:
Not repro-ing that here.
XP sp3
tommydokc wrote:
we're having the exact same problems here on several machines.
I've had to boot to safe mode to get it uninstalled then
everything is back to normal.  I would advise to disable the
download of that update at this point.
:
I tested KB969947 on a Windows XP Professional SP3 machine that
is reserved for testing.  After installing that update, I could
not log on to it in a Remote Desktop session.  In fact, the
machine had frozen and could not even be accessed with its
keyboard or mouse, and the hard drive light flashed in a
repeating pattern over several minutes. However, after restarting
the machine, I could log on to it locally. After uninstalling
that update, RDP sessions were successful.  I reinstalled it and
tested again, and RDP sessions failed.  After uninstalling, they
worked.
Test this update thoroughly before deploying it!  I've notified
Microsoft about the issue, but the help that is available at this
time told me that Microsoft Enterprise will have to deal with it,
and I have to wait until normal business hours tomorrow to
contact them.
I haven't yet tested this update on other versions of Windows,
but I hope no adminstrators have large networks using automatic
updates. I'm just hoping that this isn't the disaster that it
could be.
David Dickinson
eveningstar at mvps dot org
NOTE: This message has been cross-posted to
microsoft.public.windowsupdate, microsoft.public.security,
microsoft.public.microsoft_update_catalog, and
microsoft.public.windowsxp.security_admin.
.
Click to expand...
Click to expand...
Click to expand...
 
This machine has an nVidia GeForce 7050. But the symptom you describe is
similar to what this machine experiences. Perhaps there's a problem with
display rendering in an RDP session when this update is installed.

I have seen a problem where after installing 969947, the PC will
lockup shortly after you login. I was able to uninstall the update in
safe mode.

This has only occurred on PC's with an ATI Radeon HD 2400 series
cards. Upgrading to the latest version of the driver (9.1, released
10/22/2009) and then reapplying the 969947 update seems to fix the
issue.

Just my .02


You said you had a case open right? If not ping me and I'll get you
one. Can you let me know what they say?

David said:
I had considered display driver problems, but that's not it. With
969947 installed, the machine freezes during RDP logon. Without 969947,
the machine works fine. There are absolutely not messages in the event
log relating to this issue. The security log doesn't even show the
normal logon attempt messages. As soon as I enter the password to logon
in a remote desktop session, the machine freezes.
Click to expand...
Susan Bradley said:
Recently I had an issue post .net patch that I could not RDP. It was
due to the monitor card software interaction with 951847.
Look in your event log on the workstations and see if you are getting
that error.
After the install of KB951847 (.net family) I found I could not rdp
into a XP workstation. Updating the driver didn't work but putting in
the registry key did:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session
Manager\Memory Management]
"SessionImageSize"=dword:00000020
Brad Rutkowski's Blog : \SystemRoot\System32\RDPDD.dll failed to load:
http://blogs.technet.com/brad_rutkowski/archive/2008/01/04/systemroot...
David Dickinson wrote:
I have two XP Pro SP3 test machines. One has the problem, the other
doesn't. I haven't been able to isolate the cause yet. The machines
have significant differences in their configurations, so it will take
some time.
Second machine tested. Can't repro on second box.
Susan Bradley wrote:
Not repro-ing that here.
XP sp3
tommydokc wrote:
we're having the exact same problems here on several machines.
I've had to boot to safe mode to get it uninstalled then
everything is back to normal. I would advise to disable the
download of that update at this point.
:
I tested KB969947 on a Windows XP Professional SP3 machine that
is reserved for testing. After installing that update, I could
not log on to it in a Remote Desktop session. In fact, the
machine had frozen and could not even be accessed with its
keyboard or mouse, and the hard drive light flashed in a
repeating pattern over several minutes. However, after restarting
the machine, I could log on to it locally. After uninstalling
that update, RDP sessions were successful. I reinstalled it and
tested again, and RDP sessions failed. After uninstalling, they
worked.
Test this update thoroughly before deploying it! I've notified
Microsoft about the issue, but the help that is available at this
time told me that Microsoft Enterprise will have to deal with it,
and I have to wait until normal business hours tomorrow to
contact them.
I haven't yet tested this update on other versions of Windows,
but I hope no adminstrators have large networks using automatic
updates. I'm just hoping that this isn't the disaster that it
could be.
David Dickinson
eveningstar at mvps dot org
NOTE: This message has been cross-posted to
microsoft.public.windowsupdate, microsoft.public.security,
microsoft.public.microsoft_update_catalog, and
microsoft.public.windowsxp.security_admin.
.
Click to expand...
Click to expand...
Click to expand...
 
I spent two hours on the phone, including hold times, with Microsoft while
they transferred me to different departments. PC Safety says its a business
problem since it involves RDP. Business support says its a PC Safety
problem since it involves an update. Then we got disconnected when a guy's
headsets failed. I can't try again until tomorrow. I am not a happy guy.

I'll post an update when I learn something.


Susan Bradley said:
You said you had a case open right? If not ping me and I'll get you one.
Can you let me know what they say?

David said:
I had considered display driver problems, but that's not it. With 969947
installed, the machine freezes during RDP logon. Without 969947, the
machine works fine. There are absolutely not messages in the event log
relating to this issue. The security log doesn't even show the normal
logon attempt messages. As soon as I enter the password to logon in a
remote desktop session, the machine freezes.

Susan Bradley said:
Recently I had an issue post .net patch that I could not RDP. It was
due to the monitor card software interaction with 951847.

Look in your event log on the workstations and see if you are getting
that error.

After the install of KB951847 (.net family) I found I could not rdp into
a XP workstation. Updating the driver didn't work but putting in the
registry key did:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session
Manager\Memory Management]

"SessionImageSize"=dword:00000020



Brad Rutkowski's Blog : \SystemRoot\System32\RDPDD.dll failed to load:
http://blogs.technet.com/brad_rutko...emroot-system32-rdpdd-dll-failed-to-load.aspx

David Dickinson wrote:
I have two XP Pro SP3 test machines. One has the problem, the other
doesn't. I haven't been able to isolate the cause yet. The machines
have significant differences in their configurations, so it will take
some time.


Second machine tested. Can't repro on second box.

Susan Bradley wrote:

Not repro-ing that here.

XP sp3

tommydokc wrote:
we're having the exact same problems here on several machines. I've
had to boot to safe mode to get it uninstalled then everything is
back to normal. I would advise to disable the download of that
update at this point.



:

I tested KB969947 on a Windows XP Professional SP3 machine that is
reserved for testing. After installing that update, I could not
log on to it in a Remote Desktop session. In fact, the machine had
frozen and could not even be accessed with its keyboard or mouse,
and the hard drive light flashed in a repeating pattern over
several minutes. However, after restarting the machine, I could log
on to it locally. After uninstalling that update, RDP sessions were
successful. I reinstalled it and tested again, and RDP sessions
failed. After uninstalling, they worked.

Test this update thoroughly before deploying it! I've notified
Microsoft about the issue, but the help that is available at this
time told me that Microsoft Enterprise will have to deal with it,
and I have to wait until normal business hours tomorrow to contact
them.

I haven't yet tested this update on other versions of Windows, but
I hope no adminstrators have large networks using automatic
updates. I'm just hoping that this isn't the disaster that it could
be.

David Dickinson
eveningstar at mvps dot org

NOTE: This message has been cross-posted to
microsoft.public.windowsupdate, microsoft.public.security,
microsoft.public.microsoft_update_catalog, and
microsoft.public.windowsxp.security_admin.
.
Click to expand...
Click to expand...
Click to expand...
 
David,

Same issue here on a SBS test server. Have not confirmed 100% it is
related only to the 969947 patch. However, I saw the following error
in the event log:

Event Type: Error
Event Source: TermService
Event Category: None
Event ID: 1014
Date: 11/11/2009
Time: 3:32:10 PM
User: N/A
Computer: FSERVER
Description:
Cannot load illegal module: C:\WINDOWS\system32\rdpwsx.DLL.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

I googled it and someone suggested to take another copy of the
rdpwsx.dll and replace it on the sick machine. I rebooted and it
worked.

I can't say any of these events are related, but I thought I share my
experience anyway.

Cox
 
You have a different problem. Try resetting the RDP session with this:

echo yes | reset session RDP-tcp

If it happens a lot, then you've got a corrupted installation. A
repair/reinstall of the OS should fix it. Unfortunately, I don't know of a
better solution.
 
@David: Are you aware of the annual Global Technical Support package benefit
and did you avail yourself of same to get assistance with this? cf.
https://mvp.support.microsoft.com/gp/MVPTechSup
--
~Robear

David said:
I spent two hours on the phone, including hold times, with Microsoft while
they transferred me to different departments. PC Safety says its a
business
problem since it involves RDP. Business support says its a PC Safety
problem since it involves an update. Then we got disconnected when a
guy's
headsets failed. I can't try again until tomorrow. I am not a happy guy.

I'll post an update when I learn something.


Susan Bradley said:
You said you had a case open right? If not ping me and I'll get you one.
Can you let me know what they say?

David said:
I had considered display driver problems, but that's not it. With
969947
installed, the machine freezes during RDP logon. Without 969947, the
machine works fine. There are absolutely not messages in the event log
relating to this issue. The security log doesn't even show the normal
logon attempt messages. As soon as I enter the password to logon in a
remote desktop session, the machine freezes.

Recently I had an issue post .net patch that I could not RDP. It was
due to the monitor card software interaction with 951847.

Look in your event log on the workstations and see if you are getting
that error.

After the install of KB951847 (.net family) I found I could not rdp
into
a XP workstation. Updating the driver didn't work but putting in the
registry key did:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session
Manager\Memory Management]

"SessionImageSize"=dword:00000020



Brad Rutkowski's Blog : \SystemRoot\System32\RDPDD.dll failed to load:
http://blogs.technet.com/brad_rutko...emroot-system32-rdpdd-dll-failed-to-load.aspx

David Dickinson wrote:
I have two XP Pro SP3 test machines. One has the problem, the other
doesn't. I haven't been able to isolate the cause yet. The machines
have significant differences in their configurations, so it will take
some time.


Second machine tested. Can't repro on second box.

Susan Bradley wrote:

Not repro-ing that here.

XP sp3

tommydokc wrote:
we're having the exact same problems here on several machines. I've
had to boot to safe mode to get it uninstalled then everything is
back to normal. I would advise to disable the download of that
update at this point.



:

I tested KB969947 on a Windows XP Professional SP3 machine that is
reserved for testing. After installing that update, I could not
log on to it in a Remote Desktop session. In fact, the machine
had
frozen and could not even be accessed with its keyboard or mouse,
and the hard drive light flashed in a repeating pattern over
several minutes. However, after restarting the machine, I could
log
on to it locally. After uninstalling that update, RDP sessions
were
successful. I reinstalled it and tested again, and RDP sessions
failed. After uninstalling, they worked.

Test this update thoroughly before deploying it! I've notified
Microsoft about the issue, but the help that is available at this
time told me that Microsoft Enterprise will have to deal with it,
and I have to wait until normal business hours tomorrow to contact
them.

I haven't yet tested this update on other versions of Windows, but
I hope no adminstrators have large networks using automatic
updates. I'm just hoping that this isn't the disaster that it
could
be.

David Dickinson
eveningstar at mvps dot org

NOTE: This message has been cross-posted to
microsoft.public.windowsupdate, microsoft.public.security,
microsoft.public.microsoft_update_catalog, and
microsoft.public.windowsxp.security_admin.
.
Click to expand...
Click to expand...
Click to expand...
 
@PA Bear: Yes, thanks, I do know about the benefits. But I haven't been an
MVP since 2002, when my business expanded and I just couldn't keep up with
the forums. Not being an MVP anymore, I don't qualify for the package. But
now that I've been able to delegate some of my more tedious
responsibilities, I hope to have more time to spend here. I'd forgotten how
much I enjoyed it.


PA Bear said:
@David: Are you aware of the annual Global Technical Support package
benefit and did you avail yourself of same to get assistance with this?
cf. https://mvp.support.microsoft.com/gp/MVPTechSup
--
~Robear

David said:
I spent two hours on the phone, including hold times, with Microsoft
while
they transferred me to different departments. PC Safety says its a
business
problem since it involves RDP. Business support says its a PC Safety
problem since it involves an update. Then we got disconnected when a
guy's
headsets failed. I can't try again until tomorrow. I am not a happy
guy.

I'll post an update when I learn something.


Susan Bradley said:
You said you had a case open right? If not ping me and I'll get you
one.
Can you let me know what they say?

David Dickinson wrote:
I had considered display driver problems, but that's not it. With
969947
installed, the machine freezes during RDP logon. Without 969947, the
machine works fine. There are absolutely not messages in the event log
relating to this issue. The security log doesn't even show the normal
logon attempt messages. As soon as I enter the password to logon in a
remote desktop session, the machine freezes.

Recently I had an issue post .net patch that I could not RDP. It was
due to the monitor card software interaction with 951847.

Look in your event log on the workstations and see if you are getting
that error.

After the install of KB951847 (.net family) I found I could not rdp
into
a XP workstation. Updating the driver didn't work but putting in the
registry key did:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session
Manager\Memory Management]

"SessionImageSize"=dword:00000020



Brad Rutkowski's Blog : \SystemRoot\System32\RDPDD.dll failed to load:
http://blogs.technet.com/brad_rutko...emroot-system32-rdpdd-dll-failed-to-load.aspx

David Dickinson wrote:
I have two XP Pro SP3 test machines. One has the problem, the other
doesn't. I haven't been able to isolate the cause yet. The machines
have significant differences in their configurations, so it will take
some time.


Second machine tested. Can't repro on second box.

Susan Bradley wrote:

Not repro-ing that here.

XP sp3

tommydokc wrote:
we're having the exact same problems here on several machines.
I've
had to boot to safe mode to get it uninstalled then everything is
back to normal. I would advise to disable the download of that
update at this point.



:

I tested KB969947 on a Windows XP Professional SP3 machine that
is
reserved for testing. After installing that update, I could not
log on to it in a Remote Desktop session. In fact, the machine
had
frozen and could not even be accessed with its keyboard or mouse,
and the hard drive light flashed in a repeating pattern over
several minutes. However, after restarting the machine, I could
log
on to it locally. After uninstalling that update, RDP sessions
were
successful. I reinstalled it and tested again, and RDP sessions
failed. After uninstalling, they worked.

Test this update thoroughly before deploying it! I've notified
Microsoft about the issue, but the help that is available at this
time told me that Microsoft Enterprise will have to deal with it,
and I have to wait until normal business hours tomorrow to
contact
them.

I haven't yet tested this update on other versions of Windows,
but
I hope no adminstrators have large networks using automatic
updates. I'm just hoping that this isn't the disaster that it
could
be.

David Dickinson
eveningstar at mvps dot org

NOTE: This message has been cross-posted to
microsoft.public.windowsupdate, microsoft.public.security,
microsoft.public.microsoft_update_catalog, and
microsoft.public.windowsxp.security_admin.
.
Click to expand...
Click to expand...
Click to expand...
 
We have a similar problem. If I login (without RDP), the machine
freezes. In safe mode it is possible to uninstall the update. Than the
problem is solved. In this department we have about 20 PC's. Only 4 of
them got this phenomenon. At one of this PC I was unable to start the
safe mode. Only the Recovery Console gave me the possibility to
uninstall the patch.
 
Back
Top