Introduction
In February 2025, Microsoft released security update KB5051987 for Windows 11 version 24H2 and Windows Server 2025. While intended to enhance system security, this update inadvertently introduced a critical issue: Remote Desktop Protocol (RDP) sessions began freezing shortly after connection, rendering mouse and keyboard inputs unresponsive. This disruption has significantly impacted IT professionals and organizations relying on remote administration tools.
Background on KB5051987
Release Details:- Date Released: February 11, 2025
- Applicable Systems: Windows 11 version 24H2, Windows Server 2025
- Primary Purpose: Address security vulnerabilities within the operating system
- Remote Desktop Freezing: Users reported that RDP sessions would freeze shortly after establishing a connection, necessitating repeated disconnections and reconnections.
- Unresponsive Input Devices: Within the frozen sessions, both mouse and keyboard inputs became unresponsive, further complicating remote management tasks.
Microsoft acknowledged these issues, stating that after installing the February 2025 Security update (KB5051987) and subsequent updates, Windows Server 2025 devices might experience RDP sessions freezing shortly after connection. When this issue occurs, mouse and keyboard input become unresponsive within the session, requiring users to disconnect and reconnect. (bleepingcomputer.com)
Implications and Impact
The freezing of RDP sessions has had several significant repercussions:
- Operational Disruptions: Organizations relying on RDP for remote management faced interruptions, leading to decreased productivity and potential delays in critical operations.
- Increased Support Burden: IT support teams experienced a surge in troubleshooting requests related to RDP connectivity issues.
- Security Concerns: Some administrators considered uninstalling the update to restore functionality, potentially exposing systems to the vulnerabilities that KB5051987 aimed to address.
Technical Details and Workarounds
Community-Reported Workarounds:- Modifying Group Policy Settings:
- Access Group Policy Editor:
- Press INLINECODE0 , type INLINECODE1 , and press Enter.
- Navigate to the Appropriate Policy:
- Go to INLINECODE2 > INLINECODE3 > INLINECODE4 > INLINECODE5 > INLINECODE6 > INLINECODE7 .
- Enable the Policy:
- Find the policy named "Select network detection on the server," set it to INLINECODE8 , and choose "Use both Connect Time Detect and Continuous Network Detect."
- Apply and Reboot:
- Apply the changes and restart the server to ensure the new settings take effect.
This adjustment ensures that RDP sessions properly detect network conditions, which can mitigate the freezing issue experienced during login. (help.trugrid.com)
- Disabling UDP for RDP:
- Open Group Policy Editor:
- Press INLINECODE9 , type INLINECODE10 , and press Enter.
- Navigate to the Policy:
- Go to INLINECODE11 > INLINECODE12 > INLINECODE13 > INLINECODE14 > INLINECODE15 > INLINECODE16 .
- Modify Transport Protocols:
- Enable the policy "Select RDP transport protocols" and set it to "Use only TCP."
- Restart the Server:
- Restart the server to apply the changes.
Disabling UDP can stabilize RDP sessions, especially in environments where UDP traffic is prone to issues. (learn.microsoft.com)
- Uninstalling the Problematic Update:
- Uninstall the Update:
- Open PowerShell or Command Prompt as an administrator and run INLINECODE17 .
- Restart the Server:
- After uninstallation, restart the server.
While this approach can restore RDP functionality, it also removes the security fixes provided by the update, potentially exposing the system to vulnerabilities. (learn.microsoft.com)
Microsoft's Response and Resolution
Microsoft acknowledged the issue and released subsequent updates to address the problem:
- Windows 11 Version 24H2:
- Update Released: February 25, 2025
- KB Number: KB5052093
- Resolution: This update addressed the RDP freezing issue for Windows 11 users. (bleepingcomputer.com)
- Windows Server 2025:
- Update Released: April 8, 2025
- KB Number: KB5055523
- Resolution: This cumulative update resolved the RDP freezing issue for Windows Server 2025 devices. (bleepingcomputer.com)
Recommendations for Administrators
To mitigate the impact of such issues in the future, administrators are advised to:
- Implement Staged Rollouts:
- Deploy updates in a controlled manner, starting with test environments before full-scale implementation.
- Monitor Official Communications:
- Regularly check Microsoft's official channels for updates and advisories related to known issues and their resolutions.
- Develop Rollback Procedures:
- Establish clear procedures for rolling back problematic updates to minimize downtime and operational disruptions.
Conclusion
The RDP freezing issue caused by Windows Update KB5051987 underscores the complexities involved in maintaining secure and stable IT environments. While the update aimed to enhance security, the unintended side effects highlight the importance of thorough testing and prompt communication from vendors. Administrators should remain vigilant, apply interim solutions as necessary, and monitor official channels for updates to ensure the continued reliability of their systems.