Bug in Remote Desktop Client and/or Certificate Revocation Check?

one of our branch locations has been implementing split network configuration, part of network behind proxy server.

to effect, have proxy-auto-config set (i think using wpad.dat) , computers not behind proxy set not try proxy-auto-config.

99% of problems people have connecting new computer network can fixed unchecking box in "control panel->internet options->connections->lan settings->automattically detect settings".

the problem have found remote desktop client tries use proxy anyway perform certificate revocation check on terminal services certificate. prevents users connecting ts unless move them on proxy network, because rdp client considers missing revocation information fatal error.

 

i not sure if rdp client bug, underlying system bug (or else).

is there other workaround this? there soemwhere else rdp client looks proxy configuration info?

hi,

when rdp client performs crl check, use winhttp proxy settings. if winhttp proxy configuration not set manually,  retrieve static proxy or direct configuration registry not inherit browser proxy settings. winhttp not share proxy settings internet explorer.

the winhttp proxy configuration set 1 of these mechanisms.

•the proxycfg.exe utility on windows xp , windows server 2003 or earlier.
•the netsh.exe utility on windows vista , windows server 2008 or later.
•winhttpsetdefaultproxyconfiguration on platforms.

if “netsh winhttp show proxy” command not return anything, winhttp try auto detect proxy settings running wpad protocol (contact dns/dhcp, download & compile proxy pac script etc). in  scenario, may consider bypassing wpad protocol altogether putting url in bypass list of winhttp proxy settings.

netsh winhttp set proxy proxy-server="proxyservername" bypass-list="*.<yourdomain>.<com>"

please replace proxyservername , bypass list appropriate one.

netsh commands windows hypertext transfer protocol (winhttp)
http://technet.microsoft.com/en-us/library/cc731131(ws.10).aspx#bkmk_5

---

shaon shan |technet subscriber support in forum |if have feedback on our support, please contact tngfb@microsoft.com

Windows Server  >  Remote Desktop Services (Terminal Services)