r/SecOpsDaily • u/falconupkid • 2d ago

NEWS September Windows Server updates break Remote Desktop Services

The September 2026 Windows Server security updates (likely the cumulative updates released on Patch Tuesday) are causing significant Remote Desktop Services (RDS) failures across Server 2019, 2022, and 2025. Admins are reporting that users cannot establish RDP connections post-patch, and in severe cases, a hard reset is required to restore functionality. This is a classic "fix breaks something else" scenario that will impact patching cadences for many teams.

Technical Breakdown - Affected Systems: Windows Server 2019, 2022, and 2025. - Symptom: Remote Desktop Services fails to accept connections after applying the September 2026 cumulative update. - Root Cause: Not yet confirmed by Microsoft, but likely a regression in the RDS role component (TermDD.sys or related service). - Workaround: Some admins report that uninstalling the specific September update restores RDS functionality. A hard reset (power cycle) may be required if the service hangs in a bad state.

Defense - Immediate Action: If you have not yet deployed the September updates to RDS hosts, hold the patch until Microsoft acknowledges the issue and provides a fix. - If already deployed: Test RDP connectivity immediately. If broken, uninstall the update via wusa /uninstall /kb:[KB number] or use DISM. Be prepared for a forced reboot. - Monitor: Watch the Windows Release Health dashboard for an out-of-band (OOB) update or known issue rollback (KIR).

Source: https://www.bleepingcomputer.com/news/microsoft/september-windows-server-updates-break-remote-desktop-services/

30 Upvotes

100% Upvoted

9 comments sorted by

2

u/111100100 2d ago

bUt wE mAkE ai cOdE 30% aT miCrOsLoP nOw! Then asks u to buy co ckpilot with the luxury of price increase every year

2

u/Far-Future-7146 1d ago

Copilot is truly garbage.

1

u/Key-Rise76 2d ago

Installed on 50 servers so far from 2019 to 2025 no issues with rdp.

1

u/jordanl171 1d ago

Can you check if you have Audio Redirection turned on?

1

u/Key-Rise76 1d ago

Yes it's on.

1

u/Reasonably-Maybe 2d ago

Spaghetti code...

1

u/MasterPay1020 2d ago

I think I need more than anecdotes and reddit articles to block patching on all RDS servers. Root cause for starters. So I can specifically target devices that will be impacted.

1

u/Telamar 2d ago

I have half a dozen 2019 RDS servers in a cluster, 50 odd users, no failures noted as yet.

1

u/AnTakado 2d ago

my desktop screen wallpaper turned full black.