Can’t access TS with error
Because of protocol error
detected at the client (code 0x1104)
Situation: The client has been RDC to access their Terminal Server for
years. Since last week, he can't access the TS any more.
Troubleshooting: 1. Telnet port 3389 from the Internet,
receive this result: ╙├╗º╩²▓╗╣╗ú¼╟δ╙δ╥ú╓╛╚φ╝■┴¬╧╡╣║┬≥
2. Telnet port 3389 inside, it is normal.
3. If using RDC to access TS, you will receive this message: "Because of
protocol error detected at the client (code 0x1104), this session will be
4. If we run netstat –no, the port 3389 is connecting to
18.104.22.168 and PID 3396. The PID 3396 is spoolsv.exe.
Case 1: Someone changed the port 3389 to 2288. Fixing it
by change the router forward port from 3389 to 2288.
Case 2: New installed software changed the port from 3389
Case 3: The RDP-Tcp folder was deleted from regedit:
Case 4: It could be virus or spyware. More information can
be found this post:
What's the spoolsv.exe
Post your questions, comments, feedbacks and suggestions
Contact a consultant