Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
ASA 5540 - RDP issues with XP SP3, Vista?
- Thread starter kythri
- Start date
- Thread starter
- #2
- Thread starter
- #3
- Thread starter
- #5
As mentioned above, I'm attempting to use the ActiveX RDP client built into SSL VPN.
It works fine under Windows XP Service Pack 2, and Windows Server 2003 SP1 and SP2.
It does not, however, function under XP Service Pack 3, nor does it function under Vista (no SP or SP1).
I'm not mucking with the Secure Desktop stuff right now. I just want to use the ActiveX RDP.
I do have the option to utilize the Java RDP (proper ??), but it has it's limitations. First, when it tries to load the ActiveX RDP, it will fail (red X in the RDP window), and reload the SSL VPN homepage. If I quickly click "Reconnect with Java client" before it reloads the homepage, I do get through, but I'm limited to a 640x480 Java window. I can't go full-screen like the ActiveX allows me to.
It's not an issue with my machine. I've confirmed this on nearly a dozen different systems. If I re-install a system with XP SP2, it works great. I upgrade to SP3, it fails.
It doesn't appear to be IE6/IE7 related, as it works just fine on Server 2K3-SP2 with IE6, and Server 2K3-SP2, 2K3-SP3 with IE7.
It works fine under Windows XP Service Pack 2, and Windows Server 2003 SP1 and SP2.
It does not, however, function under XP Service Pack 3, nor does it function under Vista (no SP or SP1).
I'm not mucking with the Secure Desktop stuff right now. I just want to use the ActiveX RDP.
I do have the option to utilize the Java RDP (proper ??), but it has it's limitations. First, when it tries to load the ActiveX RDP, it will fail (red X in the RDP window), and reload the SSL VPN homepage. If I quickly click "Reconnect with Java client" before it reloads the homepage, I do get through, but I'm limited to a 640x480 Java window. I can't go full-screen like the ActiveX allows me to.
It's not an issue with my machine. I've confirmed this on nearly a dozen different systems. If I re-install a system with XP SP2, it works great. I upgrade to SP3, it fails.
It doesn't appear to be IE6/IE7 related, as it works just fine on Server 2K3-SP2 with IE6, and Server 2K3-SP2, 2K3-SP3 with IE7.
- Thread starter
- #7
I see some fixes relating to Vista in the newer versions, but don't appear to be with RDP over SSL.
The only thing I can think of that XPsp3 and Vista have in common is NLA. You could poke around Microsoft's website to disable this and test to see if that is a workaround.
The only thing I can think of that XPsp3 and Vista have in common is NLA. You could poke around Microsoft's website to disable this and test to see if that is a workaround.
- Thread starter
- #9
Hrmm...
I disabled the NLA (Network Location Awareness) service on both my XP SP3 and Vista SP1 test boxes, with no effect.
Guess I'll look at opening a TAC case on Monday. I'm surprised more people haven't noticed this issue, given how it's a pretty consistent thing with the boxes we've built - I can't find anything on Google about it.
I disabled the NLA (Network Location Awareness) service on both my XP SP3 and Vista SP1 test boxes, with no effect.
Guess I'll look at opening a TAC case on Monday. I'm surprised more people haven't noticed this issue, given how it's a pretty consistent thing with the boxes we've built - I can't find anything on Google about it.
- Thread starter
- #10
bigdaddyevs
Technical User
Did you get a chance to open a TAC case with Cisco? I am seeing the same issue. I've experienced issues with the rdp plugin with Vista before but now I am seeing similar issues with XP sp3. The work around for rdp plugin failing is to create a smart tunnel using mstsc.exe. Then all the users have to do is go to start -> run -> mstsc and it bring is up remote desktop. That's what I have users do when the activeX rdp plugin fails.
- Thread starter
- #12
Haven't been able to open a TAC case yet. We're experiencing "issues" with our SmartNet contract. 
It should be resolved soon, so that we're back under support.
You're saying that you can use the mstsc RDP client in Windows when connected via SSL?
It should be resolved soon, so that we're back under support.
You're saying that you can use the mstsc RDP client in Windows when connected via SSL?
I found that installing XP SP3 disables the Microsoft RDP Client control (redist.) ActiveX control (when using IE7) or the Microsoft Terminal Services Client Control (redist.) (in IE8). When you enable it again (Manage Addons), your ActiveX remote desktop will run fine again.
In IE8 you might have to switch to Show All add-ons to find the disabled Control. There might be several instances of the MS Terminal Services Client Control. Make sure they are all enabled.
In IE8 you might have to switch to Show All add-ons to find the disabled Control. There might be several instances of the MS Terminal Services Client Control. Make sure they are all enabled.
Strange that I found this post. We just resolved this issue today on one of our XP boxes. You are correct, XP SP3 disables the ActiveX you need to run even after it's installed and enabled. You will need to delete 2 registry entries to make this work.
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7390f3d8-0439-4c05-91e3-cf5cb290c3d0}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4eb89ff4-7f78-4a0f-8b8d-2bf02e94e4b2)
See this article for the resolution:
Shon
Network Administrator
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7390f3d8-0439-4c05-91e3-cf5cb290c3d0}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4eb89ff4-7f78-4a0f-8b8d-2bf02e94e4b2)
See this article for the resolution:
Shon
Network Administrator
- Status
Similar threads
- Locked
- Question
- Locked
- Question
