Hello to everyone! On a github page of rdp wrapper I found information that I can have up to 15 concurrent connections (the actual limitation depends on your hardware and OS version). What does this actually mean? I need 20+ connection. Everything is working fine on Win7 with wrapper. I was thinking to upgrade OS to Win10 but I'm not sure what to do now. Any advice? Thank you.
Hi everyone, I downloaded the latest rdpwrap.ini (Updated=2023-09-09, Edited by sebaxakerhtc) just to double check my IdaPro skills. I think there is an error in SingleUserOffset.x64. Termsrv.dll version is 10.0.22621.2070. [10.0.22621.2070] ; no x86 section LocalOnlyPatch.x64 =1 LocalOnlyOffset.x64 =9BBA1 LocalOnlyCode.x64 =jmpshort SingleUserPatch.x64 =1 SingleUserOffset.x64 =1CC29 <--- according to IdaPro should be 18602 SingleUserCode.x64 =Zero DefPolicyPatch.x64 =1 DefPolicyOffset.x64 =1C045 DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx SLInitHook.x64 =1 SLInitOffset.x64 =28BA0 SLInitFunc.x64 =New_CSLQuery_Initialize Strangely enough the correct offset is just a few lines above (in 10.0.22621.2066 section): [10.0.22621.2066] ; no x86 section LocalOnlyPatch.x64 =1 LocalOnlyOffset.x64 =9BBA1 LocalOnlyCode.x64 =jmpshort SingleUserPatch.x64 =1 SingleUserOffset.x64 =18602 <--- right one for ver 10.0.22621.2070 SingleUserCode.x64 =Zero DefPolicyPatch.x64 =1 DefPolicyOffset.x64 =1C045 DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx SLInitHook.x64 =1 SLInitOffset.x64 =28BA0 SLInitFunc.x64 =New_CSLQuery_Initialize Furthermore, the remaining offsets in 10.0.22621.2066...they are exactly the same as those of ver 10.0.22621.2070. Is it possible? I don't have termsrv.dll ver 10.0.22621.2066 to check it out... Someone (human error?) or something (automated tools? autohotkey?...) must have messed things up.
Windows 10 Pro Version: 22H2 OS Build: 19045.3516 =================================== termsrv.dll (x64): 10.0.19041.3516 =================================== Offset: 1E715 Search: 39 81 3C 06 00 00 0F 84 F7 40 01 00 Replace: B8 00 01 00 00 89 81 38 06 00 00 90
Windows 10 Pro Version: 22H2 OS Build: 19045.3636 =================================== termsrv.dll (x64): 10.0.19041.3636 =================================== Offset: 1E710 Search: 39 81 3C 06 00 00 0F 84 F7 40 01 00 Replace: B8 00 01 00 00 89 81 38 06 00 00 90
termsrv.dll (x64): 10.0.19041.3570 =============================== Search: 39 81 3C 06 00 00 0F 84 F7 40 01 00 Replace: B8 00 01 00 00 89 81 38 06 00 00 90
v10.0.22621.2861 Find: (regel 1C04A) 39 81 3C 06 00 00 0F 84 DF 89 01 00 Replace With: (Multi-User) B8 00 01 00 00 89 81 38 06 00 00 90
Windows 10 Pro Version: 22H2 OS Build: 19045.4291 =================================== termsrv.dll (x64): 10.0.19041.4239 =================================== Offset: 1E6D5 Search : 39 81 3C 06 00 00 0F 84 A7 3A 01 00 Replace: B8 00 01 00 00 89 81 38 06 00 00 90
Windows 10 Pro Version: 22H2 OS Build: 19045.4355 =================================== termsrv.dll (x64): 10.0.19041.4355 =================================== Offset: 1E775 Search : 39 81 3C 06 00 00 0F 84 67 42 01 00 Replace: B8 00 01 00 00 89 81 38 06 00 00 90
Windows 10 Pro Version: 22H2 OS Build: 19045.4474 =================================== termsrv.dll (x64): 10.0.19041.4474 =================================== Offset: 1E855 Search : 39 81 3C 06 00 00 0F 84 A7 67 01 00 Replace: B8 00 01 00 00 89 81 38 06 00 00 90
I've used the patchs here and also the termsrv_rdp_patch.ps1 to patch the termsrv.dll, but with both I now face an issue when logging onto an RDP session that was first opened with rdp, the session closes upon logging and open another fresh one, but if the session was first opened in the console instead the behavior is as expected (it takes control of the disconnected session) even multiple times. any idea why this happens ? It's strange I can't find anyone with the same issue as me as it's a very blatant one
Windows Server 2022 termsrv.dll x64 v10.0.20348.2652 Multi-User: Offset: 1C975 Search : 39 81 3C 06 00 00 0F 84 2D 7B 01 00 Replace : B8 00 01 00 00 89 81 38 06 00 00 90 Windows Server 2022 termsrv.dll x64 v10.0.20348.1906 Multi-User: Offset: 1C945 Search : 39 81 3C 06 00 00 0F 84 89 53 01 00 Replace : B8 00 01 00 00 89 81 38 06 00 00 90 Windows Server 2019 termsrv.dll x64 v10.0.17763.5830 Multi-User: Offset: 1F835 Search : 39 81 3C 06 00 00 0F 84 DD 93 01 00 Replace : B8 00 01 00 00 89 81 38 06 00 00 90 Windows Server 2019 termsrv.dll x64 v10.0.17763.1971 Multi-User: Offset: 17475 Search : 39 81 3C 06 00 00 0F 84 E3 2B 01 00 Replace : B8 00 01 00 00 89 81 38 06 00 00 90