1# RDP Service and Configuration Issues
2 
3VM is reachable but the RDP service itself is broken or misconfigured.
4 
5## Symptoms → Solutions
6 
7| Symptom                                | Solution                                                               | Documentation                                                                                                                                    |
8| -------------------------------------- | ---------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------ |
9| TermService not running                | Start the service and set to Automatic                                 | [Reset RDP service](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/reset-rdp)                                     |
10| RDP port changed from 3389             | Reset port or update NSG to allow the custom port                      | [Detailed RDP troubleshooting](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/detailed-troubleshoot-rdp)          |
11| RDP disabled (fDenyTSConnections = 1)  | Reset RDP config via CLI or Portal                                     | [Reset RDP service](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/reset-rdp)                                     |
12| TLS/SSL certificate expired or corrupt | Delete cert and restart TermService to regenerate                      | [RDP internal error](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-internal-error)              |
13| NLA/Security Layer mismatch            | Temporarily disable NLA for recovery                                   | [RDP general error](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-general-error)                |
14| GPO overriding local RDP settings      | Check `HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services` | [Detailed RDP troubleshooting](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/detailed-troubleshoot-rdp)          |
15| RDS licensing expired                  | Remove RDSH role or configure license server                           | [Specific RDP errors](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-specific-rdp-errors#rdplicense) |
16 
17## Quick Commands
18 
19> ⚠️ **Warning:** Commands marked with ⚡ use the VM agent/extensions. Run [Pre-Flight Safety Checks](cannot-connect-to-vm.md#pre-flight-safety-checks) before using them.
20 
21```bash
22# ⚡ Reset all RDP configuration to defaults
23az vm user reset-remote-desktop --name <vm-name> -g <resource-group>
24 
25# ⚡ Check TermService status via Run Command
26az vm run-command invoke --name <vm-name> -g <resource-group> \
27  --command-id RunPowerShellScript --scripts "Get-Service TermService | Select-Object Status, StartType"
28 
29# Restart VM (if RDP service is unrecoverable — requires user approval)
30az vm restart --name <vm-name> -g <resource-group>
31 
32# Redeploy VM (moves to new host — last resort, requires user approval)
33az vm redeploy --name <vm-name> -g <resource-group>
34```
35