mark

I have a server running with terminal server in remote
administration mode.
I can not connect now, get error data encryption error.
(Event Type: Error
Event Source: TermDD
Event ID: 50
Description:
The RDP protocol component "DATA ENCRYPTION" detected an
error in the protocol stream and has disconnected the
client. )

The server has not changed in configuration.
Remote administrator worked fine yesterday.

This I already tried:
-------------
Start Registry Editor.
Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\TermS
ervice\Parameters

Under this registry subkey, delete the following values:
Certificate
X509 Certificate
X509 Certificate ID
Quit Registry Editor, and then restart the server.
---------------

When deleting key Certificate and reboot the registry
shows it's gone.
(other server tried also; the key is generated on that
server after delete!)
The server remains with the problem.

it says win2000 does not require term-server-lic as long
as you operate in remote administration mode, so I guess
that is not the problem

I also did a telnet to port 3389, it does connect so the
port is up and running.

What else can I try?

vera noest [mvp]

Mmm, strange, that should fix it. Did you reboot the server after
deleting the regkeys?

Check here for more tips:

http://www.eventid.net/display.asp?eventid=50&eventno=606
&source=TermDD&phase=1

--
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
--- please respond in newsgroup, NOT by private email ---

mark

Thanks for your reply.

I did reboot the server.
Thanks for the link.
I also tried delete rdp-tcp protocol in terminal server,
and create a new one, did not help also.

There's one thing but I don't know if that could be it.
When I started with this server I may have tried the
terminal server in application mode. (while installing I
maybe tested this mode, don't know for sure)
After this I would have set it back to administration
mode.
Maybe the 90-trail licence for app.mode had become active
because if this. Well it should not be so, because I
uninstalled app-mode, but maybe it is.

Could this message comeup when 90 days trail is over? or
would I get another event-ID?
I'm really stretching my imagination on this one.

The thing is, that server is also exchange server,
reinstalling would take a lot of effort and time.

Mark

server after


-