[DISCUSSION] Windows 10 termsrv.dll Patching

Discussion in 'Windows 10' started by Mr Jinje, Oct 2, 2014.

  1. Lucas Rey

    Lucas Rey MDL Member

    Feb 16, 2010
    124
    32
    10
    Never used RDP Wrapper, and I didn't know it had this function. Good to know, even if I still don't understand which can be
    a "street use"
     
  2. Vladimir Bulgaru

    Vladimir Bulgaru MDL Novice

    May 29, 2020
    3
    0
    0
    One typical use case with even default Windows Server setups is the ability for 2 Administrator sessions in parallel. I often find myself logged via hypervisors console (especially when patching the termsrv.dll) and RD app. Another one - when user connected to his account faces a problem and instead of connecting to his terminal via Teamviewer, you can connect directly via RD and check the error or the problem.

    The wrapper had a very good approach to tackling the termsrv.dll. I'd say it's a very elegant and non-intrusive approach: instead of editing the file, it was hooking into it on load and doing the adjustments that we do via TinyHex on the fly. On the other hand, lack of printer forwarding, combined with the possibility of being locked out entirely (vs limited to one session in parallel) were significant bottlenecks. It'd be interesting to see that project picked up at some point, maybe by someone from this community.
     
  3. wyxchari

    wyxchari MDL Novice

    Aug 19, 2018
    13
    11
    0
    #283 wyxchari, Jun 1, 2020
    Last edited: Jun 1, 2020
    Thanks for the help.
    After patching termsrv, I always check that it works both multiuser and multisession and both have always worked for me with all previous versions. I usually always use multiuser so I don't mind multisession not working. It was just strange to me that since 19041.84 it stopped working. Goodbye.
     
  4. sebaxakerhtc

    sebaxakerhtc MDL Novice

    Nov 27, 2018
    38
    17
    0
    I download it and no porblems with Query@CDefPolicy
    The values are the same, as i said you:
    LocalOnlyPatch.x64=1
    LocalOnlyOffset.x64=87611
    LocalOnlyCode.x64=jmpshort
    SingleUserPatch.x64=1
    SingleUserOffset.x64=0BF0C
    SingleUserCode.x64=Zero
    DefPolicyPatch.x64=1
    DefPolicyOffset.x64=17ED5
    DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
     
  5. sebaxakerhtc

    sebaxakerhtc MDL Novice

    Nov 27, 2018
    38
    17
    0
    Can you just try replace patch with next?
    C706010000008BDF<=>C706000000008BDF

    The diference is first patch from CSessionArbitrationHelperMgr, but old instructions share another function CSessionArbitrationHelper
     
  6. wyxchari

    wyxchari MDL Novice

    Aug 19, 2018
    13
    11
    0
  7. sebaxakerhtc

    sebaxakerhtc MDL Novice

    Nov 27, 2018
    38
    17
    0
    #287 sebaxakerhtc, Jun 2, 2020
    Last edited: Jun 2, 2020
    Thats why in my RDPWrap.ini on github i use the second value for newer builds :)
    Now changed for 19041.84

    I'm not shure in wich place better... I hope a second. Can anyone try it???



    - Multi-session: WORKS
    SingleUserOffset.x64 =0C012
    SingleUserCode.x64 =Zero 00
    Search: C706010000008BDF
    Write : ----00----------
    File offset: B412h Write: 00

    OR HERE

    - Multi-session: WORKS
    SingleUserOffset.x64 =0BFE2
    SingleUserCode.x64 =Zero 00
    Search: C70201000000393D
    Write : ----00----------
    File offset: B3E2h Write: 00

     
  8. wyxchari

    wyxchari MDL Novice

    Aug 19, 2018
    13
    11
    0
    Tested together with multi-user. It does NOT work.
     
  9. sebaxakerhtc

    sebaxakerhtc MDL Novice

    Nov 27, 2018
    38
    17
    0
  10. Baiony

    Baiony MDL Novice

    May 23, 2010
    8
    2
    0
    #292 Baiony, Jun 2, 2020
    Last edited: Jun 2, 2020
    Patch for termsrv.dll [10.0.19041.84] - Windows Professional (x64) - version 2004 (OS build 19041.264)
    007444833D46BA <=> 00EB44833D46BA
    EC2033DBC7400801 <=> EC2033DBC7400800
    39813C0600000F84D9510100 <=> B80001000089813806000090​
     
  11. RobrPatty

    RobrPatty MDL Addicted

    Jul 23, 2009
    546
    178
    30
    #293 RobrPatty, Jun 3, 2020
    Last edited: Jun 3, 2020
    Can you make a patch for my Server 2019 17763.1217?

    NVM RDPWrapper works fine.
     
  12. sebaxakerhtc

    sebaxakerhtc MDL Novice

    Nov 27, 2018
    38
    17
    0
    Share your termsrv.dll. I will try
     
  13. sebaxakerhtc

    sebaxakerhtc MDL Novice

    Nov 27, 2018
    38
    17
    0
    It's wrong, as share
    Working patch C706010000008BDF<==>C706000000008BDF
     
  14. RobrPatty

    RobrPatty MDL Addicted

    Jul 23, 2009
    546
    178
    30
    Works great...thx
     
  15. RobrPatty

    RobrPatty MDL Addicted

    Jul 23, 2009
    546
    178
    30
  16. Jainam Shah

    Jainam Shah MDL Novice

    Jun 4, 2020
    1
    0
    0
    How to patch these? any steps please? newbee here..