Forum Discussion

MatthieuM's avatar
MatthieuM
Copper Contributor
Jun 19, 2025

RDP black screen

Hello everyone,

On several Windows server 2022 ,up to date, attached to a domain, when domain users initiate an RDP connection they end up with a black screen and mouse cursor only.
I don't have this problem with local machine administrator accounts.
The problem only occurs on Windows server 2022, not on 2019.

On the server, the user who initiated the connection has only 4 processes, and they're always the same:

 

 

In the server logs, we can see that several processes have been blocked by SRP:

 

The problem is that I haven't defined anything like that...

 

I don't encounter this problem with local administrators on the machine.
What's more, it happens randomly.
I can have the problem for several days and then nothing for several weeks.

 

Does anyone have any idea what it could be? Have you encountered this problem before?

 

Thank you in advance for your help.

Matthieu

 

4 Replies

  • MatthieuM's avatar
    MatthieuM
    Copper Contributor

    L_Youtell_974​

    Many thanks for your feedback

    I had checked all the GPOs but only to verify that the GPO number indicated in the logs of the machines concerned corresponded to one of them at the domain level. I even checked locally but it didn't give me anything.

    On the other hand, with your indication, I looked at the configuration of each GPO and found one that was misconfigured and impacting a user group that shouldn't be.

    I removed the group from the Security Filtering section and the problem was solved.

    However, I can't explain why this GPO was only impacting Windows server 2022 and not 2019... Any ideas? Could a GPO apply to a particular version of Windows and not another?

     

  • Hi,

    did you check if nobody creates some rules in the domain gpo or local?

     

    • MatthieuM's avatar
      MatthieuM
      Copper Contributor

       

      Hi L_Youtell_974​ 

      Many thanks for your feedback

      I had checked all the GPOs but only to verify that the GPO number indicated in the logs of the machines concerned corresponded to one of them at the domain level. I even checked locally but it didn't give me anything.

      On the other hand, with your indication, I looked at the configuration of each GPO and found one that was misconfigured and impacting a user group that shouldn't be.

      I removed the group from the Security Filtering section and the problem was solved.

      However, I can't explain why this GPO was only impacting Windows server 2022 and not 2019... Any ideas? Could a GPO apply to a particular version of Windows and not another?

      Translated with DeepL.com (free version)

      • L_Youtell_974's avatar
        L_Youtell_974
        Iron Contributor

        Unfortunatly i can't answer to your question because all depend on your environment. The best way to check GPO on a computer or server is to execute rsop.msc or gpresult and check the result and see which one is apply on the server.

Resources