I Remote Desktop Connection Error Code 0x904 Install Review
If the certificate is expired, right-click it and choose .
When attempting to an update, patch, or feature related to Remote Desktop Connection (mstsc.exe) or when an RDP session initialization triggers an automatic component installation, the system returns:
If using a VPN, disconnect and reconnect to ensure a stable tunnel is established. 4. Special Fix for Azure VMs
Log into your cloud management platform and open the overview dashboard for the affected virtual machine.
| Strategy | Description | When to Use | |:----------|:-------------|:--------------| | | Examine the Windows Event Viewer logs on both client and server to pinpoint the exact failure point. Look under Applications and Services Logs > Microsoft > Windows > TerminalServices-LocalSessionManager for entries around the time of the failed connection. | When you need to differentiate between a network timeout, an authentication failure, or a certificate error. | | Third-Party Tool Conflicts | Temporarily uninstall any third-party remote access tools or RDP wrappers. Tools like RustDesk, TeamViewer, or VNC can sometimes intercept RDP traffic at a low level, replacing expected error codes with 0x904. | When you have recently installed or updated a remote access tool and the problem began after that. | | Reset RDP Configuration | Reset the entire Remote Desktop configuration to its default state. Open an elevated Command Prompt and run: net stop TermService , then del %systemroot%\system32\GroupPolicy\Machine\Registry.pol , and finally net start TermService . You may also need to delete the existing RDP listener configuration by running wmic /namespace:\\root\cimv2\TerminalServices path Win32_TerminalServiceSetting where (__CLASS !="") call SetAllowTSConnections 1 . | When other solutions fail and you suspect deep-seated corruption in the RDP subsystem. | i remote desktop connection error code 0x904 install
Ensure RDP traffic is permitted through the Windows Defender Firewall, specifically checking and Remote Desktop (WebSocket) for both Private and Public networks. For third-party software, explicitly white-list mstsc.exe . 3. Connect via IP Address
Many users find that the Microsoft Remote Desktop app from the Microsoft Store is more resilient to the 0x904 bug than the classic mstsc.exe client.
Open Command Prompt as an administrator and run: restart-service termserv -force . Windows will automatically generate a new certificate. 2. Configure Firewall Exceptions
Check the box to explicitly give the account privileges, then click Apply and exit. 4. Configure Local Firewalls and Whitelist RDP Execution If the certificate is expired, right-click it and choose
Corrupt MachineKeys folders on Azure virtual machines. Step-by-Step Fixes for Error 0x904 1. Renew Expired RDP Certificates
Go to > Add/Remove Snap-in , select Certificates , choose Computer Account , and click Finish . Navigate to Personal > Certificates .
Try connecting using the remote computer's IP address (e.g., 192.168.1.100 ) rather than its name to bypass potential DNS resolution issues.
Rename-Item -Path "C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys" -NewName "MachineKeys_old" Use code with caution. Click to execute the script across the hypervisor. Special Fix for Azure VMs Log into your
Use PowerShell to ensure port 3389 is open: Test-NetConnection [server_name] -Port 3389 . 4. Network and VPN Stability
expand -r *.cab C:\RDPExtract regsvr32 C:\RDPExtract\mstscax.dll
Access the host machine locally or via an alternative remote tool. Certificates MMC snap-in certlm.msc Navigate to Remote Desktop > Certificates
If you are running specific modern versions of Windows 11, the legacy built-in desktop terminal can occasionally face temporary operational regressions after major cumulative updates. System administrators have documented two seamless client-side workarounds to sidestep this platform quirk: Unable to RDP into some Windows Servers - Error code: 0x904
