Tag Archives: XP

Unable to rdp to Windows2008 SBS server from XP client after KB969084 installed

We had an issue when all of a sudden we were not able to remote desktop to a clients SBS 2008 server using the rdp client and the TSGateway functionality. Remote Web Workplace would work fine and so would Windows7 clients.
After proving this patch was the culprit by removing the patch and finding my saved rdp session would work, I went back and read the kbarticle 969084 on this patch. I hadn’t initially read this (in common with a lot of other people) and also because the patch was pushed down via wsus. It turns out that XP does not turn on CredSSP by default and this is needed to work with the new RDP client. I followed the instructions at kb951608 and after a reboot, going to the control box/About I got the message that Network Level Authentication was supported and I was then able to connect succesfully.
MSTSC showing Network Level Authentication Supported
To summarize you need todo the following.

  1. Click Start , click Run , type regedit , and then press ENTER.
  2. In the navigation pane, locate and then click the following registry subkey:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
  3. In the details pane, right-click Security Packages , and then click Modify .
  4. In the Value data box, type tspkg . Leave any data that is specific to other SSPs, and then click OK .
  5. In the navigation pane, locate and then click the following registry subkey:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders
  6. In the details pane, right-click SecurityProviders, and then click Modify .
  7. In the Value data box, type credssp.dll . Leave any data that is specific to other SSPs, and then click OK .
  8. Exit Registry Editor.
  9. Restart the computer.

Dual boot with WindowsXP, Windows7 and Truecrypt?

Due to a variety of reasons, it is not currently possible to upgrade our work laptops to Windows7 – we’re skipping Vista and want to be ready for Windows7 when it is released in the near future.  As an alternative to using Windows7 as the main host OS I was thinking about dual booting the laptops to the different OS’s but that would mean some messy editing of disk partitions.

However, watching the Microsoft Edge demonstration of installing Windows7 to a VHD and then booting from that I got my hopes up. Unfortunately we use Truecrypt to encrypt out hard disks, and as the video demonstrates, you have to boot from the Windows7DVD which of course is not going to support TrueCrypt enabled drives.

My next thought was to temporarily decrypt the drive, install and then encrypt the drive with Truecrypt again – I think this will work but I was planning on storing the VHD file on a usb drive (for portability and the fact that my laptop hard drive is always full) but it looks like this won’t work according to Scott Hanselman’s post where he talks about doing something similar. So I guess I’ll have to wait until I can get a large hard drive for the laptop 🙁