Recent Windows Server updates break VPN, RDP, RRAS connections

Question

Hi Team,

We see there are multiple post patching issues identified for June-2022 patches released by MS.
These reports related to these problems coming in since Patch Tuesday have a common theme: losing Remote Desktop and VPN connectivity to servers with Routing and Remote Access Service (RRAS) enabled where the June Windows Server Updates have been installed.

Please let us know if MS has identified any similar issue and remediation / workaround available.

We would like to make sure, RDP is not broken on our servers post patching.

Appreciate your comments on the same.

Refer this article for details -- https://www.bleepingcomputer.com/news/microsoft/recent-windows-server-updates-break-vpn-rdp-rras-connections/

Answer 1

Hi@Dhanashekaran, Mohan Raj

We are sorry that Microsoft has not yet confirmed this issue and provided any fixes.
Currently the only solution is to uninstall KB5014678 and the corresponding cumulative update.
Practice shows that the problem goes away after a rollback until a fix is released.

Looking forward to your feedback,

Best Regards,

Answer 2

Hello @Dhanashekaran, Mohan Raj

Thank you for your feedback.

I would like to share with you the following info below:

Here is the link as well.

https://learn.microsoft.com/en-us/windows/release-health/status-windows-server-2022

Looking forward to your feedback,

Best Regards,

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 3

This drove me crazy back in 2022 for about 2 months until I found the cause and a work around....to clarify my answer is specific to VPN clients connecting in over VPN and trying to access remote resources.

I have found that navigating to:

C:\Users\Username\AppData\Roaming\Microsoft\Network\Connections\Pbk

and modifying the "rasphone" file (using notepad) can fix these issues by simply changing the UseRasCredentials from "1" to "0".

It would appear that the new default behavior (post the June 2022 update) is for the OS to try and use the VPN user credentials in place of any local user accounts or domain accounts on the machine being connected to. So, turning this off allows the system to use the credentials you want.

NOTE:

The rasphone file could be in a different location depending on how the VPN connection was setup, but it is usually in that folder.