[DISCUSSION] Windows 10 termsrv.dll Patching

Discussion in 'Windows 10' started by Mr Jinje, Oct 2, 2014.

  1. AlexPar

    AlexPar MDL Novice

    Jul 2, 2020
    2
    0
    0
    #321 AlexPar, Jul 3, 2020
    Last edited: Jul 3, 2020
    Thanks ! Now I've got it.
    But you wrote
    Search: 39813C0600000F84

    maybe you mean
    Search:39 81 3C 06 00 00 0F 84 D9 51 01 00
     
  2. wyxchari

    wyxchari MDL Novice

    Aug 19, 2018
    24
    22
    0
    #322 wyxchari, Jul 4, 2020
    Last edited: Jul 4, 2020
    D9 51 01 00 This part can vary because it is the offset of an assembler jump.

    You don't really need to search: termsrv.dll x64 v2004 10.0.19041.84 11.05.2020
    - Multi-user: File offset: 172D5h Write: B80001000089813806000090
    - Multi-session: File offset: B412h Write: 00
     
  3. pankaj4u

    pankaj4u MDL Novice

    Aug 20, 2018
    1
    0
    0
    #323 pankaj4u, Jul 29, 2020
    Last edited: Jul 30, 2020
    [QUOTE = "qBop, post: 1602365, member: 491645"] with RDS Host settings works great ... thx [USER = 37761] @sebus [/ USER] :)



    Š¢hank you both, will try later only with [USER = 1126303] @wyxchari [/ USER] offered offsets :)[/ QUOTE]

    I am also trying for windows server 2019. What is RDS host setting? Sorry am a newbie ..I tried the RDP wrapper but it shows not supported in red even though diagnostics show all 3 as green..

    my version is 10.0.17763.1369 ....please help
     
  4. bjf2000

    bjf2000 MDL Expert

    Apr 11, 2008
    1,002
    153
    60
    Re 19041.84 x64. There are normally three changes. The first one is similar to what we've seen before:

    39813C0600000F84D9510100
    B80001000089813806000090

    The second, also mentioned in an earlier post, was at a completely different location than the previous version, but other than that the same small change:

    C706010000008BDF
    C706000000008BDF

    But this one was not found above. I based it on what was in the previous version:

    047411488D15F7
    04EB11488D15F7

    It all seems to work, but if there's a problem I'm sure someone will tell me.
     
  5. simplecross45

    simplecross45 MDL Novice

    Oct 10, 2020
    1
    0
    0
    Using x86 Version of termsrv.dll 10.0.19041.84
    Patched with rdpwrapper + autoupdater i get 5 Connections , the 6th Connection crashes.
    is there any Manual pathing neccessary for this Version
    or does anybody have complete patch advice for this Version ?
     
  6. vaasjoe

    vaasjoe MDL Novice

    Jan 30, 2013
    1
    0
    0
    Can you kinldy share Window server 2019 build 1809 modified termsrv.dll
     
  7. MrCaaal

    MrCaaal MDL Novice

    Dec 2, 2020
    1
    0
    0
    #327 MrCaaal, Dec 2, 2020
    Last edited: Dec 19, 2020
    termsrv.dll version 10.0.17763.1613 (Win10 1809. e.g. LTSC), copy of file here:
    Look for a new replacement string?
     
  8. wyxchari

    wyxchari MDL Novice

    Aug 19, 2018
    24
    22
    0
    #328 wyxchari, Dec 4, 2020
    Last edited: Dec 11, 2020
    - termsrv.dll x64 19041.662 01.12.2020 (Windows x64 v20H2 10.0.19042.662)
    - Multi-user: File_offset:17DD5h, Write:B80001000089813806000090
    - Multi-session: File_offset:BF12h, Write:00
     
  9. Dennisw

    Dennisw MDL Novice

    Dec 4, 2019
    8
    0
    0
    Hi,
    termsrv.dll x64 version 19041.662, Windows 10 x64 version 20H2 10.0.19042.685
    I made the change to termsrv.dll for multi-user, then the "Remote Desktop Services" could not be started. I put the original termsrv.dll back again, the service can start. Anybody have same problem? Is there a fix to this?


     
  10. Dennisw

    Dennisw MDL Novice

    Dec 4, 2019
    8
    0
    0
    Huh, I replaced
    39813C0600000F84E95D0100 with
    B80001000089813806000090

    Now it appears working.

     
  11. bjf2000

    bjf2000 MDL Expert

    Apr 11, 2008
    1,002
    153
    60
    Just to have it in one post:

    termsrv.dll x64 19041.662 (for 20H2 19042)

    39813C0600000F84E95D0100
    B80001000089813806000090

    C706010000008BDF
    C706000000008BDF

    047411488D1597
    04EB11488D1597
     
  12. jlp_svk

    jlp_svk MDL Novice

    Feb 4, 2009
    12
    0
    0
    Server 2016 10.0.14393.3986 support??? RDP Wrap with autoupdate not working. :(
     
  13. kabino

    kabino MDL Member

    Nov 13, 2013
    171
    634
    10
    Question
    i have windows server 2019 on my dedicated and only 2 users can use it by rdp session. For another one, someone have to disconnect.
    Is there any workaround to improove this number? At least 3 user at the same time.
    Thank you.
     
  14. wyxchari

    wyxchari MDL Novice

    Aug 19, 2018
    24
    22
    0
    #335 wyxchari, Jan 13, 2021
    Last edited: Feb 28, 2021
    - termsrv.dll x64 19041.746 12.01.2020 (Windows x64 v20H2 10.0.19042.746)
    - Multi-user: File offset: 17E15h. Write: B80001000089813806000090
    - Multi-session: File offset: BF52h. Write: 00
     
  15. andy2112

    andy2112 MDL Novice

    Nov 1, 2008
    25
    3
    0
    This change doesn't work for me. What could be the reason? fSingleSessionPerUser = 0 - need any additional settings?
     
  16. wyxchari

    wyxchari MDL Novice

    Aug 19, 2018
    24
    22
    0
    #337 wyxchari, Jan 13, 2021
    Last edited: Jan 13, 2021
    For multi-user the first change is made. For multi-session you need the 2 changes. If you only do the second one, it won't work.
    Check that the 00 is written where the 01 is and not at the beginning of the search string, or better go to the displacement and write a 00 without searching for anything.
    termsrv.dll x64 19041.746 12.01.2020 (Windows x64 v20H2 10.0.19042.746) easyupload.io/yf9cdj
     
  17. andy2112

    andy2112 MDL Novice

    Nov 1, 2008
    25
    3
    0
    #338 andy2112, Jan 14, 2021
    Last edited: Jan 14, 2021
    these are my changes (match yours):
    fc /b termsrv.dll.bak termsrv.dll
    0000BF52: 01 00
    00017E15: 39 B8
    00017E16: 81 00
    00017E17: 3C 01
    00017E18: 06 00
    00017E1A: 00 89
    00017E1B: 0F 81
    00017E1C: 84 38
    00017E1D: 01 06
    00017E1E: 5E 00
    00017E1F: 01 00
    00017E20: 00 90
     
  18. wyxchari

    wyxchari MDL Novice

    Aug 19, 2018
    24
    22
    0
    #339 wyxchari, Jan 14, 2021
    Last edited: Jan 14, 2021
    The file comparison you have done is correct.
    I confirm that it works. I've checked again. I put the remote desktop and log in with the same user who is already logged in locally.
    I'm sorry it doesn't work for you but it has to be something else. These search strings work from version termsrv.dll:
    19041.84 11.05.2020 27.09.2020 (Windows 10 x64 v2004)
    19041.662 01.12.2020 (Windows x64 v20H2 10.0.19042.662 .685)
    19041.746 12.01.2020 (Windows x64 v20H2 10.0.19042.746)
     
  19. JoNaTaZ

    JoNaTaZ MDL Novice

    Oct 1, 2009
    3
    2
    0
    ===============================
    termsrv.dll (x64) 10.0.19041.746
    ===============================

    39813C0600000F84015E0100
    B80001000089813806000090