- Print
- PDF
Support for remote access error (Windows)
- Print
- PDF
Available in VPC
This document describes the symptoms of server remote access errors in Windows, as well as their causes and solutions.
Check Windows server remote access settings
To remotely access the Windows server, ensure that the IP or subnet of the server to access is applied to the ACG. If not applied, see Set ACG and change the ACG settings.
If there is no problem in ACG settings, check the following matters:
Check if the server allows access to SSH/RDP service.
- SSH service: TCP, allowed port 22
- RDP service: TCP, allowed port 3389
NoteIf the port setting on the server has been changed, update the settings accordingly.
Check the port forwarding settings.
- If both public IP and port forwarding are set simultaneously, you cannot communicate through a public IP. When using a public IP, remove the port forward settings.
Even if no problem is found as a result of checking the above, the SSH service port or the RDP service port may not work normally for various reasons. In such cases, the [Server connection console] button is activated in server information of NAVER Cloud Platform. To resolve this issue, see Troubleshooting Windows server remote access errors.
Troubleshooting Windows server remote access problems
If a Windows server remote access error occurs, check the following matters to take action.
- 1. Check if the remote access is allowed
- 2. Check service status
- 3. How to resolve This could be due to CredSSP encryption oracle remediation
- 4. Check firewall
- 5. Check routing
1. Check if the remote access is allowed
Check if the remote access is allowed on the Windows server.
- Click This PC > Properties on the Windows server.
- Click Remote Settings.
- Click the [Remote] tab and click to select the Allow remote connections to this computer of Remote desktop.
The Allow remote connections to this computer > Allow connections only for computers running Remote Desktop with Network Level Authentication (recommended) option is supported only in the same RDP version. Disable this option if you are unable to connect remotely after selecting this option.
- Click the [OK] button.
- The settings are saved.
2. Check service status
Check the status of the Windows server remote access service.
- Run
services.msc
in the cmd window. - From Services, check if Remote Desktop Configuration, Remote Desktop Services, and Remote Desktop Services UserMode port Redirector are Running.
- If they are stopped, after right-clicking, click the start menu to start the service.
- If they are stopped, after right-clicking, click the start menu to start the service.
3. How to resolve This could be due to CredSSP encryption oracle remediation
To resolve the error of This could be due to CredSSP encryption oracle remediation:
Proceed with the following steps in the client you want to RDP access the Windows server.
- Run
gpedit.msc
in the cmd window. - Click Computer Configuration > Administrative Templates > System > Credentials Delegation > Encryption Oracle Remediation, in that order.
- Select Enable, and select Vulnerable in Protection Level.
- Run
gpupdate /force
in the cmd window.
4. Check firewall
By default, the firewall is off. If the firewall is run, add an inbound rule so it can operate normally.
- Run
wf.msc
in the cmd window. - In the [Inbound Rules] tab, select Remote Desktop - User Mode (TCP-In), right-click, and click Enable Rule.
5. Check routing
If there is no default route for the private IP, communication may not work. In VPC, also check the static route for 169.254.0.0/16. Run the route print
command in the cmd window to check the routing table of the Windows server.