[DISCUSSION] Windows 10 termsrv.dll Patching

Discussion in 'Windows 10' started by Mr Jinje, Oct 2, 2014.

  1. tvcat

    tvcat MDL Novice

    Feb 23, 2011
    23
    8
    0
    Hi, I'm using Windows 10 Pro x64 with termsrv.dll 18362.267
    I had set multi session per user.
    1. User logon locally on the remote server.
    2. Client logon on the remote server and taking over the session of the locally logon user.
    3. Locally user try to logon back and got a new session.

    How do i make sure the client will always logon with a new session?
     
  2. meditation

    meditation MDL Novice

    Apr 25, 2012
    4
    3
    0

    Windows 10 Version 1903 (updated v2)

    Find:


    39 81 3C 06 00 00 0F 84 5D 61 01 00


    Replace With:


    B8 00 01 00 00 89 81 38 06 00 00 90

    Windows 10 Version 1809 (updated)

    Find:


    39 81 3C 06 00 00 0F 84 7F 2C 01 00


    Replace With:


    B8 00 01 00 00 89 81 38 06 00 00 90

    Windows 10 Version 1803

    Find:


    8B 99 3C 06 00 00 8B B9 38 06 00 00


    Replace with:


    B8 00 01 00 00 89 81 38 06 00 00 90

    Windows 10 Version 1709

    Find:


    39 81 3C 06 00 00 0F 84 B1 7D 02 00


    Replace with:


    B8 00 01 00 00 89 81 38 06 00 00 90

    Windows 10 Threshold Wave 2 Update

    Find:

    39 81 3C 06 00 00 0F 84 3F 42 02 00


    Replace with:

    B8 00 01 00 00 89 81 38 06 00 00 90

    Windows 10 RTM 2015

    Find:

    39 81 3C 06 00 00 0F 84 73 42 02 00


    Replace with:

    B8 00 01 00 00 89 81 38 06 00 00 90

    Hope this will help you guys .

    Cheers,
     
  3. bjf2000

    bjf2000 MDL Addicted

    Apr 11, 2008
    990
    149
    30
    The following, from up the thread, also works for the latest version of termsrv.dll (x64): 18362.657:

    39813C0600000F845D610100
    B80001000089813806000090

    58010000FF15F7
    58000000FF15F7

    047411488D1577
    04EB11488D1577
     
  4. Mach1ne

    Mach1ne MDL Novice

    Feb 27, 2020
    3
    0
    0
    hi I just tried on my ver 18363.657 dosent work any other help would be great
     
  5. Mach1ne

    Mach1ne MDL Novice

    Feb 27, 2020
    3
    0
    0
    hi
    I have ver 1909 os 18363.657
    can you help me
     
  6. bjf2000

    bjf2000 MDL Addicted

    Apr 11, 2008
    990
    149
    30
    What specifically doesn't work? Did you double-check the patch?
     
  7. flack

    flack MDL Novice

    Mar 1, 2013
    4
    0
    0
    I can confirm.

    Running Ver. 1909 10.0.18362.657 and after applying KB4532693. This worked for me to enable single session per user:

    Find Hex
    39813C0600000F845D610100

    Replace with
    B80001000089813806000090

    The other two edits suggested on bjf2000's post allowed for multiple sessions on the same user act.
     
  8. vanden

    vanden MDL Junior Member

    Mar 28, 2014
    71
    33
    0
    Thank you ! it works well.
     
  9. Dennisw

    Dennisw MDL Novice

    Dec 4, 2019
    5
    0
    0
    Hi there, just upgraded to 18363.693.

    C:\Windows\system32>takeown.exe /f c:\Windows\System32\termsrv.dll
    Access is denied.

    I found the termsrv.dll timestamp is today.
     
  10. bjf2000

    bjf2000 MDL Addicted

    Apr 11, 2008
    990
    149
    30
    Some time in the last year, MS started timestamping updates in System32 according to when the update is run. It's too bad, but it was part of their efforts to reduce the amount of downloading. Bottom line: ignore dates.

    Code:
        ECHO Taking ownership of %SystemRoot%\System32\termsrv.dll
        takeown /a /f %SystemRoot%\System32\termsrv.dll
        ECHO Granting Administrators rights
        ICACLS %SystemRoot%\System32\termsrv.dll /Grant Administrators:F 
     
  11. Dennisw

    Dennisw MDL Novice

    Dec 4, 2019
    5
    0
    0
    #191 Dennisw, Mar 4, 2020
    Last edited: Mar 4, 2020
    So it is the /a does the trick to take the ownership?

    It worked, just that I had to replace the termsvc.dll in safe mode.


     
  12. Smile2020

    Smile2020 MDL Novice

    Mar 11, 2020
    1
    0
    0
    Hello dear members,

    is there a just a patch for win 10 2004, build 10.0.19041 (insider) - because the hex code from 1903 and 1909 did not work.

    thanks
     
  13. notds

    notds MDL Novice

    Mar 25, 2020
    1
    0
    0
    Same issue with 1909. What is the process for re-figuring it out? Do we need the termsrv from the 1909 windows server build?
     
  14. bjf2000

    bjf2000 MDL Addicted

    Apr 11, 2008
    990
    149
    30
    Which issue are you referring to, the one about Insider? If so, that's not the same issue, since while Insider's DLL is in fact different (and a rapidly-moving target, so pretty impractical to do), the current patch info (see up this page) for 1903/1909 is known and valid.
     
  15. gattolino

    gattolino MDL Novice

    May 26, 2009
    3
    0
    0
    so no solution for insider preview? damn :D
     
  16. bjf2000

    bjf2000 MDL Addicted

    Apr 11, 2008
    990
    149
    30
    Possibly for the Release Preview ring or maybe even Slow, but I doubt anyone keeps up with Fast.