Shulou(Shulou.com)06/03 Report--

Today, win10 Pro upgraded the patch, only to find that the remote Desktop connection with mstsc is no longer available. The connected system is win2012 R2 with the following error:

Follow the prompt to open: https://go.microsoft.com/fwlink/?linkid=866660 link and jump to https://support.microsoft.com/zh-cn/help/4093492/credssp-updates-for-cve-2018-0886-march-13-2018, read Microsoft's introduction for a long time, follow the instructions to modify the local group policy and restore the remote desktop connection.

The operation process is as follows:

Click to start, run, enter gpedit.msc to determine and then enter the local group policy editor, follow the policy path prompted by the article to find the policy.

Policy path: "computer configuration"-> "Administrative templates"-> "system"-> "credential assignment". Setting name: encryption Oracle correction

The default state is not configured, we click enabled, and then the protection level can be modified. There are three levels, so you must choose to be vulnerable.

If the modified level does not take effect, please open the cmd window, run the update / force update policy, and restart if it fails again.

In the test, it is found that the connected system is not affected by this policy if it is win10.

Note: the version number of my win10 upgrade patch:

2018-5-19 add:

Today, connect to the remote desktop with your home version of win10 (see figure 1 below) and find that there is no gpedit.msc group policy feature available (see figure 2 below). Then check that it is not in the function introduction of Microsoft win10 release (see figure 3 below).

At this point, the registry can only be modified. Find the registry path as described in the link article above

[HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows\ CurrentVersion\ Policies\ System]

Create a subkey under this System, named CredSSP, and then another subkey Parameters under CredSSP

Create another DWORD (32-bit) value in Parameters, name: AllowEncryptionOracle,AllowEncryptionOracle

Take 2 of the numerical data (see figure 4 below), please see the link for more information, and finally open the cmd window and enter gpupdate / force to refresh the group policy to use mstsc.

The above self-test is completely available.

Figure 1

Figure 2

Figure 3

Figure 4.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.