RDP client crashes

Question

Hello Community,

Recenty I upgraded to Widows 1803 (OS BUILD 17134.228)

Ever since this upgrade, I am unable to RDP to my machine from any other device, running different versions of Windows. The only thing that happens is the Login prompt comes up, I logon, I see a black screen and the RDP client crashes.

What I can see on the device itself, is that my user gets logged-off instead of disconnected (apparently not even in the right way, because all Files and browsers are in 'error' recovery as soon as I logon locally.

The only actual error messages I can find are these as below:

Faulting application name: dwm.exe, version: 10.0.17134.1, time stamp: 0xf5178e97

Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000

Exception code: 0xe0464645

Fault offset: 0x0000000000000000

Faulting process ID: 0x1b8c

Faulting application start time: 0x01d43925908593d1

Faulting application path: C:\WINDOWS\system32\dwm.exe

Faulting module path: unknown

Report ID: 07895248-92eb-4877-a0a6-9e5f8f74e384

Faulting package full name:

Faulting package-relative application ID:

=================================================

Fault bucket , type 0

Event Name: APPCRASH

Response: Not available

Cab Id: 0

Problem signature:

P1: dwm.exe

P2: 10.0.17134.1

P3: f5178e97

P4: StackHash_1d2f

P5: 0.0.0.0

P6: 00000000

P7: e0464645

P8: PCH_79_FROM_KERNELBASE+0x00000000000EBBDE

P9:

P10:

Attached files:

These files may be available here:

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_dwm.exe_11eae83448e43565fc4a38776f4559cc6555bb_a2bcf5bb_268f69b7

Analysis symbol:

Rechecking for solution: 0

Report Id: 8c8b0070-e211-452f-989b-e16019300c5b

Report Status: 4

Hashed bucket:

Cab Guid: 0

================================================

and:

The Desktop Window Manager process has exited. (Process exit code: 0x000000ff, Restart count: 6, Primary display device ID: Intel(R) HD Graphics)

I tried updating the device again, but to no avail. I have tried SFC /Scannow which found some corrupt files it couldn't handle,

I then tried the dism /online scan-healt (dunno the exact command) but that ran and corrected things, but that's it. Still broken.

Anyone has any clues for any further steps?

Answer 1

Yes, with that setting only dwm.exe will create dump files.

Answer 2

Hi! Auggy

Thanks for your reply, I've enabled the userdmp.

I've installed Hyper-V on the device this morning so that I could still connect to a device from the office at home, and started using that device. However, I wanted to try to crash dwm.exe, and off course, that doesn't happen anymore..

Am I correct into thinking that the only process that creates dumps now is dwm.exe and that I can safely keep it on?

Answer 3

Hi Malik,

I am able to connect to the device, and logon and even get that far that the current user is being disconnected (or logged of), I've verified if all the checkmarks are still what they should be (allow remote connection/assistance, and disabled Secure RDP checkmark). That was the case (as expected).

Answer 4

If the issue persists consider capturing a user mode dump of the crash which will give the most information on the crash.

You can configure Windows to create user-mode dumps. Create a System Restore Point first.

If you copy and paste the following in Notepad and save as a .reg file (save with the .reg extension and give it any name such as dump.reg), then right-click the .reg file and select "Merge" to add to the registry, a .dmp file at the time dwm.exe crashes should be created in the C:\CrashDumps folder:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\dwm.exe]

"DumpFolder"=hex(2):43,00,3a,00,5c,00,43,00,72,00,61,00,73,00,68,00,44,00,75,\

00,6d,00,70,00,73,00,00,00

After dwm.exe crashes, can you then make the .dmp file available (provide link) via a public folder on OneDrive or similar site?

Here's a link on using OneDrive:

http://windows.microsoft.com/en-ca/onedrive/sha...

More info on collecting user-mode dumps:

http://msdn.microsoft.com/en-us/library/bb787181(VS.85).aspx

To stop the creation of the user mode dump files run the following registry file:

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\dwm.exe]

You can delete the C:\CrashDumps folder anytime.

Answer 5

Hi,

Sorry for the inconvenience caused to you, Thank you so much for your valuable question please, If my understanding is right, I would suggest you to please see the below mentioned thread once please (if not tried before) and see it if it helps. I am hopeful that your query will be resolved, If the issue persists or if my understanding is different from your concern, kindly do let me know,waiting for your kind reply please. Please check the solution given by Jessen P

https://answers.microsoft.com/en-us/windows/for...

Please let me know, if that helps and feel free to ask back any question.

Kind Regards:

Yasir