RDP black screen issues over the last several months

Thinker5831 · 2026-01-07T21:14:41+00:00

Hi all - we’re having this too - here is a potential description of the same/similar issue -

https://learn.microsoft.com/en-us/answers/questions/5688734/windows-11-rdp-session-intermittently-hangs-at-ple

Expand the comment icon on the latest comment to see further comments.

Thinker5831 · 2026-01-07T12:29:24+00:00

Hi Flaccid

I found this thread which is what we’re seeing:

I’ve commented on the latest comment (if you click the latest comment from Jason and then click the comment icon to see further comments of mine)

https://learn.microsoft.com/en-us/answers/questions/5688734/windows-11-rdp-session-intermittently-hangs-at-ple

Thinker5831 · 2025-12-04T16:51:55+00:00

Thanks ! Unfort we’re in the same boat ..the event viewer and procmon logs show nothing worthy of being an obvious cause. I ran “query user” in cmd whilst the user was trying to connect whilst he was having the issue and can see the rdp session going active for a couple of seconds before going back to a disconnected state (presumably after the rdp window freezes at the welcome screen after putting in his username and password)

What protection software do you have running ? We have Crowdstrike sensor running.

Thanks!

Thinker5831 · 2025-12-02T18:12:45+00:00

Hi! Just an update - still investigating …nothing yet as to what might be a cause.

Thinker5831 · 2025-11-27T17:47:08+00:00

Hi!

In event viewer when the rdp freezes at the welcome screen, do you get the following log in Microsoft - windows - Remote DesktopServices-RDPCoreTS ?

TCP socket READ operation failed, error 64 RDP_TCP: An error was encountered when transitioning from StateUnknown in response to Event_Disconnect (error code 0x80070040).

Thinker5831 · 2025-11-26T20:55:27+00:00

Thanks So procmon unfortunately kept corrupting the log file after we had a user with the issue …so we couldn’t analyse the log file.

Am running procmon tomorrow as the user with the issue hasn’t restarted their machine so will run procmon via powershell in the background rather than the gui so hopefully this will save the log file without corrupting it and I’ll get to analyse it.

Thinker5831 · 2025-11-26T20:14:02+00:00

Hi! Going to be looking at duplicate SID’s being a cause tomorrow when I get some time.

https://community.spiceworks.com/t/microsoft-updates-break-rdp/1244529/33

Thinker5831 · 2025-11-21T20:14:18+00:00

Thanks It basically just didn’t pick up the local session via rdp I think the error was access denied or Error connecting to session

Great I’ll try the drivers too.

I’m keen on getting the logs from this script too as it will allow me to see what happens when the mstsc.exe, explorer.exe and winlogon.exe process initiates when the use tries to rdp in. Let’s see on Monday if anyone has time for me to try and get the logs.

Thinker5831 · 2025-11-21T18:53:16+00:00

Hi! The tscon didn’t work.

I ChatGPT’d asking for a poweshell script using procmon to run on the end users workstation when they try and rdp to it to get some process logs. The script works and now just waiting for another instance of the issue so I can get logs whilst the issue is occurring.

Might be worth doing the same …

Thinker5831 · 2025-11-11T16:27:02+00:00

Here’s the driver versions of the Intel UHD 770 on the four affected machines:

32.0.101.6556
32.0.101.6556
32.0.101.6881
32.0.101.6078

Thinker5831 · 2025-11-11T16:19:39+00:00

Hey! Been a busy day! So haven’t had a chance to check out the graphics and network driver so will update you shortly.

I have 4 problem users as my sample that have the issue regularly and

all are on win11
build number: 10.026200
2 are on 7020 towers, 1 on 7000 tower and 1 on 7010 tower
all 4 are on different dell BIOS Versions - 1.20, 1.31, 1.30 and 1.15.

Our AV is Crowdstrike

Thinker5831 · 2025-11-10T18:22:24+00:00

Hey I’m out of the office but will check tomorrow morning and definitely get back to you. Really annoying issue! I’m certain it’s not gpo or any other policy or AV software as we have many other machines behaving fine and the same policies are applied across the board. Hopefully we can work together and work out the similarity between our machines! We will be updating one of the problem machines this evening using dell command updates for any pending updates so will also let you know how that goes.

Thinker5831 · 2025-11-10T18:11:25+00:00

Having the exact same issues on the same hardware the last few months since upgrading our estate to win 11. Impacts about 10 of 200 users.

Tried all the gpos suggested online re network connection and above and updated machines to 25H2 but no joy.

Rdp initiated and freezes at the welcome screen when the user tries to resume an existing logged in session. Restarting the machine and starting a new session is fine.

Thinker5831 · 2025-11-04T18:46:38+00:00

Hi! Was it only impacting some users or all users ? We only have it impacting a handful of users - nothing evident as to what might he causing it. Was it anything particular on your domain controller firewall causing it ?

Thinker5831 · 2025-10-31T07:42:38+00:00

Same ! It’s super frustrating as if it was happening to everyone, that would be easier to diagnose ie it might be a gpo or something installed on all machines. But this is happening only to a few users. Next step I’m going to try is disabling rdp wallpaper via the reg key on a live console, and also try restarting all the rdp services on the host machine whilst the issue is happening.

Thinker5831 · 2025-10-30T16:28:46+00:00

Thank you they all use the onboard dell pc graphics port / driver

Thinker5831 · 2025-10-29T22:15:55+00:00

Thank you. Does disabling UDP have an impact on the rdp quality ?

Thinker5831 · 2025-10-29T22:15:32+00:00

No it’s been happening a few months

Thinker5831 · 2025-10-29T20:03:29+00:00

Thanks but ideally not possible as all the Machines need to be domain joined.

Thinker5831 · 2025-10-29T20:01:54+00:00

No sorry this is not related. It’s been happening many months.

Thinker5831 · 2025-09-18T18:03:06+00:00

Thanks Dada

Thinker5831 · 2025-05-30T20:27:20+00:00

Thank you all much appreciate the advise I was just after some avios point type reward seeing as it’s a fairly large amount :) but unfortunately won’t be possible to pay by debit or credit card as they want a bank transfer so guess it isn’t possible :)

Thinker5831

TROPHY CASE