[DISCUSSION] Windows 10 termsrv.dll Patching

Discussion in 'Windows 10' started by Mr Jinje, Oct 2, 2014.

  1. vtuyen

    vtuyen MDL Novice

    Jun 18, 2020
    3
    0
    0
    Please help file termsrv.dll windown 10 32bit 10.0.18363.. thanks
     
  2. vtuyen

    vtuyen MDL Novice

    Jun 18, 2020
    3
    0
    0
    Thanks you verymuch
     
  3. Dennisw

    Dennisw MDL Novice

    Dec 4, 2019
    8
    0
    0
    Q1, I still have 18363.900, why is the version 2004 not available for my system?

    Q2, my patched "termsrv.dll" has been working fine, just today it starts to reject remote multi-user. The "termsrv.dll" has patch B80001000089813806000090 and 58000000FF15F7. Anything wrong?
     
  4. AlexPar

    AlexPar MDL Novice

    Jul 2, 2020
    2
    0
    0
    Hi! What about one for Win10 2004 19041.329 version ? There is nothing so far ..
     
  5. wyxchari

    wyxchari MDL Novice

    Aug 19, 2018
    31
    33
    0
    #326 wyxchari, Jul 3, 2020
    Last edited: Feb 28, 2021
    When we talk about versions, it is made from the versions of termsrv.dll, we are not talking about the windows versions.

    - termsrv.dll x64 10.0.19041.84 11.05.2020 is the version in Windows 10 x64 v2004 10.0.19041.329

    - Multiuser:
    IDA: ?Query@CDefPolicy@@UEAAJPEAH@Z proc near
    DefPolicyOffset.x64 =17ED5
    DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx
    Offset file: 172D5h Write: B80001000089813806000090

    - Multi-session:
    IDA: ?IsSingleSessionPerUserEnabled@CSessionArbitrationHelper@@UEAAJPEAH@Z proc near
    SingleUserOffset.x64 =0C012
    SingleUserCode.x64 =Zero
    File offset: B412h Write: 00
     
  6. AlexPar

    AlexPar MDL Novice

    Jul 2, 2020
    2
    0
    0
    #327 AlexPar, Jul 3, 2020
    Last edited: Jul 3, 2020
    Thanks ! Now I've got it.
    But you wrote
    Search: 39813C0600000F84

    maybe you mean
    Search:39 81 3C 06 00 00 0F 84 D9 51 01 00
     
  7. wyxchari

    wyxchari MDL Novice

    Aug 19, 2018
    31
    33
    0
    #328 wyxchari, Jul 4, 2020
    Last edited: Jul 4, 2020
    D9 51 01 00 This part can vary because it is the offset of an assembler jump.

    You don't really need to search: termsrv.dll x64 v2004 10.0.19041.84 11.05.2020
    - Multi-user: File offset: 172D5h Write: B80001000089813806000090
    - Multi-session: File offset: B412h Write: 00
     
  8. pankaj4u

    pankaj4u MDL Novice

    Aug 20, 2018
    1
    0
    0
    #329 pankaj4u, Jul 29, 2020
    Last edited: Jul 30, 2020
    [QUOTE = "qBop, post: 1602365, member: 491645"] with RDS Host settings works great ... thx [USER = 37761] @sebus [/ USER] :)



    Š¢hank you both, will try later only with [USER = 1126303] @wyxchari [/ USER] offered offsets :)[/ QUOTE]

    I am also trying for windows server 2019. What is RDS host setting? Sorry am a newbie ..I tried the RDP wrapper but it shows not supported in red even though diagnostics show all 3 as green..

    my version is 10.0.17763.1369 ....please help
     
  9. bjf2000

    bjf2000 MDL Expert

    Apr 11, 2008
    1,087
    198
    60
    Re 19041.84 x64. There are normally three changes. The first one is similar to what we've seen before:

    39813C0600000F84D9510100
    B80001000089813806000090

    The second, also mentioned in an earlier post, was at a completely different location than the previous version, but other than that the same small change:

    C706010000008BDF
    C706000000008BDF

    But this one was not found above. I based it on what was in the previous version:

    047411488D15F7
    04EB11488D15F7

    It all seems to work, but if there's a problem I'm sure someone will tell me.
     
  10. simplecross45

    simplecross45 MDL Novice

    Oct 10, 2020
    1
    0
    0
    Using x86 Version of termsrv.dll 10.0.19041.84
    Patched with rdpwrapper + autoupdater i get 5 Connections , the 6th Connection crashes.
    is there any Manual pathing neccessary for this Version
    or does anybody have complete patch advice for this Version ?
     
  11. vaasjoe

    vaasjoe MDL Novice

    Jan 30, 2013
    1
    0
    0
    Can you kinldy share Window server 2019 build 1809 modified termsrv.dll
     
  12. MrCaaal

    MrCaaal MDL Novice

    Dec 2, 2020
    3
    1
    0
    #333 MrCaaal, Dec 2, 2020
    Last edited: Dec 19, 2020
    termsrv.dll version 10.0.17763.1613 (Win10 1809. e.g. LTSC), copy of file here:
    Look for a new replacement string?
     
  13. wyxchari

    wyxchari MDL Novice

    Aug 19, 2018
    31
    33
    0
    #334 wyxchari, Dec 4, 2020
    Last edited: Dec 11, 2020
    - termsrv.dll x64 19041.662 01.12.2020 (Windows x64 v20H2 10.0.19042.662)
    - Multi-user: File_offset:17DD5h, Write:B80001000089813806000090
    - Multi-session: File_offset:BF12h, Write:00
     
  14. Dennisw

    Dennisw MDL Novice

    Dec 4, 2019
    8
    0
    0
    Hi,
    termsrv.dll x64 version 19041.662, Windows 10 x64 version 20H2 10.0.19042.685
    I made the change to termsrv.dll for multi-user, then the "Remote Desktop Services" could not be started. I put the original termsrv.dll back again, the service can start. Anybody have same problem? Is there a fix to this?


     
  15. Dennisw

    Dennisw MDL Novice

    Dec 4, 2019
    8
    0
    0
    Huh, I replaced
    39813C0600000F84E95D0100 with
    B80001000089813806000090

    Now it appears working.

     
  16. bjf2000

    bjf2000 MDL Expert

    Apr 11, 2008
    1,087
    198
    60
    Just to have it in one post:

    termsrv.dll x64 19041.662 (for 20H2 19042)

    39813C0600000F84E95D0100
    B80001000089813806000090

    C706010000008BDF
    C706000000008BDF

    047411488D1597
    04EB11488D1597
     
  17. jlp_svk

    jlp_svk MDL Novice

    Feb 4, 2009
    12
    0
    0
    Server 2016 10.0.14393.3986 support??? RDP Wrap with autoupdate not working. :(
     
  18. kabino

    kabino MDL Member

    Nov 13, 2013
    175
    634
    10
    Question
    i have windows server 2019 on my dedicated and only 2 users can use it by rdp session. For another one, someone have to disconnect.
    Is there any workaround to improove this number? At least 3 user at the same time.
    Thank you.