All Products
Search

This Product

    :What do I do if an RDP connection to a Windows instance is automatically disconnected after I enter a password to establish the connection but the corresponding logon and logoff records are stored in the system logs?

    Document Center

    :What do I do if an RDP connection to a Windows instance is automatically disconnected after I enter a password to establish the connection but the corresponding logon and logoff records are stored in the system logs?

    Last Updated:Mar 18, 2025

    This topic describes how to resolve the following issue: When you use Remote Desktop Protocol (RDP) to connect to a Windows Elastic Compute Service (ECS) instance, the connection is automatically disconnected after you enter the password of the instance to establish the connection. However, the logon and logoff records for the connection are stored in the system logs of the instance.

    Problem description

    When you use RDP to connect to a Windows ECS instance, the connection is automatically disconnected after you enter the password of the instance to establish the connection. However, the logon and logoff records for the connection are stored in the system logs of the instance.

    For information about how to view the system logs of an instance, see View system logs and screenshots.

    Causes

    In most cases, the WUDFHost.exe process calls the C:\Windows\System32\drivers\UMDF\RDPidd.dll file when an RDP connection is established, which requires the permissions that are granted to the Users group or the Local Service account. If the process does not have the preceding permissions, RDP connections cannot be sustained once established. The preceding issue may also occur when BT-Panel is installed on the system disk of the Windows ECS instance.

    Relationship between the RDPidd.dll file and the WUDFHost.exe process

    The RDPidd.dll file is a part of Windows User-Mode Driver Framework (WUDF) and is designed to serve RDP connections. The WUDFHost.exe process is a main component of WUDF and is designed to manage and run user-mode drivers. When an RDP connection is established, the WUDFHost.exe process may call the RDPidd.dll file to support the operations that are performed over the RDP connection.

    Solution

    To resolve the preceding issue, you can restore the permissions of the Users group on the system disk. In the following example, the Windows Server 2019 64-bit operating system is used. The configurations may vary based on the operating system version. For more information, see the official documentation for the version of the operating system that you use.

    1. Connect to the Windows ECS instance by using Virtual Network Computing (VNC).

      For more information, see Connect to an instance by using VNC.

    2. Right-click Local Disk (C:) and select Properties. In the Local Disk (C:) Properties dialog box, click Edit... on the Security tab.

    3. In the Permissions for Local Disk (C:) dialog box, click Add...

    4. In the Select Users or Groups dialog box, click Advanced... > Find Now.

    5. In the Search results section, select Users and then click OK.

    6. Make sure that the Users group is granted the following permissions and then click OK: Read and execute data, list folder contents, and read data.

    7. Use RDP to reconnect to the Windows ECS instance. If the connection is not automatically disconnected after it is established, the preceding issue is resolved.