By following these steps, you should be able to resolve the and restore connectivity.
Open an elevated Command Prompt and restart the remote desktop services to force token regeneration: net stop termservice /y net start termservice Use code with caution. 2. Clear Third-Party Security App Blocks
The table below breaks down the best solutions to isolate and repair the issue depending on your access point. Symptom Category Likely Culprit Target Environment Primary Fix Expired/Corrupted TLS Certificate Windows Server / Azure VM Clear Certificate & Restart TermService Client-Side Block Third-Party Security Suite Windows 11 Local Machine Whitelist mstsc.exe in Firewall Network Protocol UDP Packet Loss / MTU Issue VPN / Global Secure Access Force TCP Only over RDP Handshake Failure Hostname Resolution Bug Updated Windows 11 Clients Connect via IP or use Modern Windows App Step-by-Step Fixes for Error 0x904 1. Regenerate Expired Server RDP Certificates By following these steps, you should be able
Right-click on the right pane, select , and name it fClientDisableUDP . Double-click it and set the Value data to 1 . 3. Clear Cached Remote Desktop Credentials
Understanding and Fixing Remote Desktop Error 0x904 (Extended Error 0x7) Clear Third-Party Security App Blocks The table below
Disable as a temporary test to see if it allows the connection. 4. Increase Connection Outstanding Requests
Ensure the host computer has a reserved static IP address on the local network so the client doesn't lose track of it. Double-click it and set the Value data to 1
If standard RDP continues to fail, users often find success with:
netsh int ip reset netsh winsock reset
If the certificate is not expired, NLA might be causing issues with authentication encryption.
If you have administrative access to the target machine, you can force it to use a more compatible security layer. Open Group Policy Editor ( gpedit.msc ) and navigate to Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host -> Security . Find the policy "Require use of specific security layer for remote (RDP) connections," enable it, and set the "Security Layer" to RDP . This disables Network Level Authentication (NLA) and often bypasses the 0x904 error.