If you've made it this far, it's time to look deeper into the Windows registry. Disclaimer: Editing the registry can be risky. Always export and back up your registry before making any changes.
Unstable network conditions, packet loss, or strict VPN bandwidth throttling can prevent the RDP session from initiating.
: Log into the affected server locally. Open Certificates MMC ( certlm.msc ), navigate to Remote Desktop > Certificates , and delete the expired certificate. If you've made it this far, it's time
The self-signed certificate the host uses to encrypt the connection might have expired or become corrupted, halting the TLS handshake.
Adding a specific transport key can help the client handle modern RDP gateway connections better. Unable to RDP into some Windows Servers - Error code: 0x904 Unstable network conditions, packet loss, or strict VPN
Alternatively, you can manage this through Group Policy ( gpedit.msc ) under Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host -> Security. . 3. Check Antivirus/Firewall Interference
If certificate stores are corrupted—a common issue in virtualized environments like Azure VMs—renaming the MachineKeys folder will force Windows to generate a new, healthy set of keys. The self-signed certificate the host uses to encrypt
Forcing Windows to utilize specific RPC over HTTP components bypasses faulty gateway handshakes. Launch the ( regedit ). Navigate to the following path: HKCURRENT_USER\Software\Microsoft\Terminal Server Client Use code with caution.
Remote Desktop Connection (RDP) is a staple tool for administrators and remote workers, but it can be frustrating when a connection fails. A particularly tricky issue appearing in 2025 and 2026 is the .
If the client and server have mismatched encryption ciphers, forcing a specific security layer can resolve the handshake failure.
Recent builds (22H2+) sometimes struggle with hostname resolution for RDP, throwing this error even when the network is fine.