Welcome to Andrewblock.net A tech tip a day keeps the Geek Squad away.

23Feb/10102

Enable Remote Desktop On Windows 7 Home Premium – 64 & 32 Bit

SP1 Update: A lot of users report that this hack is broken after Windows 7 SP1. If you have SP1, try running the hack and then replacing termsrv.dll and rdpclip.exe with the latest versions from a Windows 7 SP1 PC that has these features. Here is a ZIP file with rdpclip.exe and termsrv.dll from Windows 7 Ultimate 64-bit SP1. You'd need to run the hack, and then copy both files from the ZIP into your C:\Windows\System32 directory (note: your system drive may not be C:\). that may do the trick.

Finally found a link to (what appears to be) a reliable forum for the Windows 7 Home Premium desktop hack. The forum is here.

For the brave, a direct link to the file.

Sound off if it works for you, since I don't have Windows 7 Home Premium.

By the way, did you find this article through Google? I also encourage you to come back to my home page regularly; I'm constantly adding new tech tips to this site. Thanks for stopping by.

Comments (102) Trackbacks (6)
  1. This worked perfectly, thank you! Pretty crappy of microsoft to remove features that have always been available in previous versions of their os, just so they can charge for them.

  2. @Rob,

    I agree. I hate it when products are artificially crippled. Glad it worked for you!

  3. Seems to work, Thanks!

  4. Worked first time perfectly, thank you very much!

    And…. what Rob said… (2nd sentence!) LOL

  5. Thank you so much! It’s really a cool program and feature, I wish Microsoft would have enabled it from the start.

  6. Just updated Windows 7 with SP1 and now cannot connect to my Windows 7 machine remotely. Am guessing that part of the SP1 update was a new termsrv.dll file? Any ideas on how to fix? I downloaded and ran this same file (link in original forum post) and it still doesn’t work :(

  7. Never mind… followed the link to the actual forum whence came the original patcher EXE file and downloaded the EXE file instead. Ran it and it “patched” my system – and now I can connect again. Hurrah! :)

  8. Matt C,

    Glad you got it working. I wouldn’t be surprised if SP1 had a new termsrv file, but looks like you figured it out.

  9. Matt C,

    I ran into the same problem after updating Win7 with SP1: unable to connect to my Win7 machine remotely. It’s not completely clear to me what you did to fix this. Did you just run the original patch file again or some other EXE file. Where can I find the latter? Thanks!

  10. Bill, see my SP1 update in the post.

  11. I just tried the ver 1.1 on Win 7 Home Premium. and it works great for getting into the system remotely while another account is logged on.

    Many Thanks!

  12. Hi Andrew,

    Great website and thorough walk-throughs. I’m having trouble get this hack to work.

    I have a Win 7 HP 64-bit desktop with SP1. I’ve run the hack, replaced termsrv.dll and rdpclip.exe and even turned off the firewall. Whereas before it didn’t connect at all, now it asks for creditials, accepts them, opens the RD window and shows the blue “Welcome” / logon screen… and then disconnects saying that it can’t connect. Which is strange because it was just connecting.

    Any thoughts or help here would be incredibly helpful.

  13. Hello Andrew,

    Your update above states “try running the hack and then replacing termsrv.dll and rdpclip.exe with the latest versions from a Windows 7 SP1 PC that has these features.”

    Sorry but I am little confused. Where do I find the hack that I need to run first before replacing rdpclip.exe and termsrv.dll?

    Thanks,
    Paresh.

  14. Hello,
    I’m a relatively new Windows user and recently upgraded to Windows 7 64-bit Home Premium on my laptop.
    I do not want to advertise which user accounts are available on my laptop and would prefer the standard Ctl-Alt-Del
    method of logging in.
    I tried the various steps of accessing password management, went to the Advanced tab, but the “Require
    users to press Ctrl-Alt-Delete” check box is grayed out.
    I am the administrator on this lap top, so I am at a loss.
    Is this not possible with Home Premium?
    Am I missing something?
    Thanks in advance,

    Ken Reed

  15. Hey Ken,

    I am not sure, but I Googled and found this: http://www.sevenforums.com/tutorials/612-secure-logon-press-ctrl-alt-delete-log.html. Looks like there are several methods to try.

  16. Matt – are you able to remote connect to the aforementioned PC via another computer?

  17. Works perfectly for windows 7 home premium 64-bit swedish edition.
    Thank’s a lot!

  18. I downloaded the hack and ran the install.cmd as administrator and it FAILED saying it couldn’t find the offset after upgrading to SP1.

    In the NFO for the hack, the HEX offsets are there for both 32-bit and 64-bit so I just followed that guide – HOWEVER the first HEX address has been changed it seems, or perhaps my previous termserv.dll file was already modified. For X64 I had to search for 8B873806000039873C0600000F as the next 5 bytes were different. This was the only found entry in the file for this set of numbers so I knew I had the right one. Just make sure to replace the same number of bytes and it should work fine.

    The other hex numbers all match.

  19. thanks works great but it does not like username/password from an XP machine, is there a way to run it with reduced authentication settings?

  20. got it going, for some reason the username required is the original windows admin user name(user-000) not the user name that I have changed it to. Thanks again

  21. Worked for me, except the remote sound is not working…..

  22. worked perfectly …. Thank you very much

  23. Hey Guuz – a lot of people have noted the remote sound thing doesn’t work. If I come across a fix, I’ll let you know.

  24. rodriformiga – thanks for reading.

  25. Thanks for posting Mark. Good to know!

  26. Cannot replace termsvr.dll. Windows says I need trusted installer permission?

  27. Paul – try taking ownership of the DLL file. Do you know how to do this?

  28. I am super chuffed! I’d installed the RDP patch a long time ago but always had the problem I couldn’t copy anything from the clipboard to the remote PC. The solution in your article worked a treat, as soon as I placed the rdpclip.exe in the system folder it began to work. Many thanks. A lifesaver.

  29. Andrew – That worked, cannot believe I did not even think about taking ownership. I give you my MCSA for today; I obviously am not using it properly. :)

  30. Hey guys
    I have installed the hack and replaced both files and can not connect Im getting the message “The credentials that were used to connect did not work” any ideas I have it set up to allow more than one user and must have password.

  31. When running the install file on the hack, I’m getting stuck at Checking if Service is listening. What do i do?

  32. Perfect! I’d already done the patch but then the computer had been updated to SP1.

    Re-running the original patch.exe didn’t work as the checkboxes were greyed out and it said something along the lines of “windows 7 termsrv.dll has an unknown checksum”

    Re-downloading the patch from the link above and re-running worked amazingly and now I can RPD in.

    Thanks!

  33. Hi guys, anyone founda way to get the ‘play sound on remote computer’ working?

  34. Adger, I haven’t found any solutions to the sound on the remote computer issue. :(

  35. I am experiencing the same issue as Jack, “Checking if service is listening on port 3389, service is not listening. Done” “Press any key to continue”… What needs to be done? THX!

  36. Just ran concurrent RDP from download on a new W7Home Premium PC, replaced the 2 files as indicated above but cannot remote in. The client works to other PC’s but not this one. It goes through the motions, even asks for a user/password and if I am sure I want to connect, after that nothing. The RDT screen just sits there. Tried over a LAN, tried turning Firewall off. Tried opening inbound and outbound TCP port 3389. Service appears to be running. Any suggestions?

  37. hi when i connect it shows my log on screen and says logged in but asks for my password but then says its incorrect when i type it in plz help.

  38. ok i sorted it my keyboard wouldnt do lower case for some reason but its sorted now.ps it would be awesome with sound.

  39. I downloaded the hack file that you provided a link to and also the zip file to my Windows7 home premium (64 bit) pc. I installed the hack and copied the two files into c:/windows/system32/ as you stated above.
    I then tried to remote desktop into my Windows7 pc via my laptop pc (which is running Windows XP) but it would not connect??? Do I have to do something to my laptop computer as well? Any thoughts would be greatly appreciated. Thanks.

  40. Hi
    I tried and copied the files (t*.dll; r*.exe) .
    But while copying to c:\windows\system32 it is not allowing to copy the t*.dll any idea as why..

  41. Iam getting error like ‘you need permission to perform this action’ even run as administrator .

  42. You say ‘run the hack’, but I don’t see any code to run. What are you talking about? All I see are the files to download and copy. Is that what you mean when you say ‘run the hack’. Is there a batch file I’m supposed to be running? fyi, I’m trying to do this on windows 7 home premium sp1 which I cannot remote desktop to.

  43. tom, yes it’s a batch file that is included in the ZIP.

  44. Hi,
    I am a begginer on win7 32bit therefore a bit thick about things although i have worked as a network admin for years.

    my problem is i downloaded your files and when i tried to run the exe file it gives me the message that says the file version is not compatible

  45. sorry pressed the submit button before saying thanks for the help

  46. I recently bought a computer that came with Windows 7 Home Premium. I am now not able to remotely connect to my work PC (XP Professional), something that I was able to do previously with Vista.

    Can anyone help?

    Thanks.

  47. is there anyway to add a specific non admin user to have permissions after using this hack on windows 7 home premium? it works great for the admin user, but i need to add a non admin user, and of course the remote desktop users group doesnt exist. I created it via cmd line but it not assigned to the remote desktop and of course all of the normal GUI’s are not available. any help would be appreciated.

  48. Sorry if this has been asked before, I see the first line says “A lot of users report that this hack is broken ” Am I missing something? is it simply a case of replacing the 2 files with your versions or do you have to make changes to the registry?

    Like I said, sorry for asking a question that has probably been asked before but I found this page via a google search but cant for the life of me find anything about the “hack”

    Cheers All, Happy new year!

  49. Hi Andy – it has been a while since I’ve really actively supported this “hack” but in theory, you’re just supposed to replace the two files. It doesn’t always work that cleanly, and I no longer have Home Premium on which to test! :)

  50. jeremy, it only works for admins, to my knowledge.

  51. Debs, did you apply the hack from this site?

  52. Has anyone noted any extra activity on their firewall since running the patch? I noticed a lot of activity on my Symantec firewall for a service to get out that was constantly being denied. Also, after two hours of the installed patch working, windows disabled the terminal services as it was not a recognized program. Any thoughts?

  53. I’m confused about running the hack. Found the termsrv.dll and rdpclip.exe files in the zip file, but no .bat file.

  54. Hack failes due to a checksum error, service never gets started (no port opening). Replaced the two files as advised above but still no luck. Don’t know where to go from here.

  55. I know it is not as fun as a hack but you can get RDP access via the tools available free in Widnows Live Essentials.

    http://explore.live.com/windows-live-essentials?os=other

  56. I tried this method and it works! Although the current link on this site results in a checksum error like others have mentioned.

    Question, I can get any user who is an administrator to remote in but standard users don’t have access. How can I give the standard users access to remote logins as well? I’ve tried a Group Policy plugin for Win7 Home Premium and added the Users group to the ‘Allow log on through Remote Desktop Services’ under Computer Configuration/Security Settings/Local Policies/User Rights Assignment but that doesn’t work.

  57. I’ve noticed that I don’t have the same System settings with the hack that I do with standard Windows 7 RDP. Specifically, I only have the Remote Assistance settings under System/Remote and not the Remote Desktop settings. Therefore, I don’t know how to assign remote desktop users. Any suggestions?

  58. I downloaded and installed the hack – no problem. However, I cannot complete the setup, because the “Remote Desktop” section of the “Remote Settings” window is missing, and has always been missing. The version numbers of termsrv.dl and rdpclip.exe are the same version in Windows 7 Home Premium after installing the hack, and in your “SP1 Update” and in my other computer running W7 Ultimate. Any idea how I get the Remote Desktop portion of the Remote Setting window to display so I can get to Select Users in the setup? Thanks in advance for any suggestions.

  59. “Andrew Block says:
    September 7, 2011 at 11:05 pm
    Paul – try taking ownership of the DLL file. Do you know how to do this?”

    What if Paul didn’t know how to take ownership?? :)
    When I try to replace the file, it says I need permission. I tried changing the permissions in the “properties>>security” panel, but it doesn’t let me. Any thoughts? Thank you :)

  60. It sounds like Greg and I are having the same problem – cannot complete the setup because the Remote Settings window has no link to the “Select Users” window, like it does in Ultimate. Why???

  61. Thanks for sharing a very technical article.

  62. Has anyone had any trouble redirecting printers? I can connect just fine but my local printers will not redirect to the host machine.

  63. Remote Desktop could be enabled on Home Premium using RDP Patch, but with two limitations:
    1. You can not pass the clipboard contents between computers;
    2. You can not work remotely as an ordinary user. You have to be an administrator. There is no interface to assign Remote Desktop access rights to users, and administrators have this access by default.

  64. Works Perfectly! Thanks fro Brasil :D

  65. I have tried getting this to work on W7 home premium 64 for the past 3 hours with no luck. Not sure what I am missing.

    The link from the windows forum does not work:
    http://www.multiupload.com/Q2UUOYW0Y6

    I tried copying the termsrv.dll and rdpclip.exe from my version of Windows 7 64. I tried copying the patch files (I replaced the .dll with patch files) tried running the 64_rdpclip.exe and bspatch.exe (although not sure if I need to pass in a parameter or move those to a different location before running)

    after each try when i run the install.cmd I get an error:

    Error:Unknown checksum.

    If someone could outline the steps I would greatly appreciate it.

  66. I noticed mention of a batch file in the zip download. Both zip downloads linked to on this page don’t contain and files ending in .bat. Sorry if I am being dense. Is that what I should be looking for?

  67. I downloaded the file from this post: http://experts.windows.com/frms/windows_entertainment_and_connected_home/f/114/t/79427.aspx
    It worked on a french version of Edition Familiale Premium!

  68. It worked like a charm even after 2 years. I was about to reinstall win7-ultimate but figured out there are some applications like power dvd & roxio that I need to reinstall, so I decided to use your instructions.
    Thank you for sharing

  69. Steve – I checked, it’s a ZIP file.

  70. First of all, thank you for supporting this effort for well over a year now! So I ran the install and replaced the two files in my win32 folder. What happens after this? I assumed I could just go to my other computer (winxp) and go through the usual remote desktop gui but I get the same error when I put in the ip address of the windows 7 machine as ever: “This computer can’t connect to the remote computer”
    Should this work? Or is there something else I was supposed to do? I would really appreciate any time and help you can give me.

    Sincerely,
    -Matt

  71. Hi Andrew, Thanks so much for this. When I attempt to paste the two files into windows/system32 folder it says “folder is in use, close folder and try again” but I cannot figure out where it is oopen. Any help would be greatly appreciated. Thanks again

  72. Ok got it to work. Thank you. Now my problem is everybody else’s:

    No AUDIO!!!!!! NOOOOOOOO!!!!!!!!!!

    If that ever changes please let us know!

    Thanks

  73. Hi Andrew,
    Thanks for running this terrific forum. I have a laptop running Windows Vista 64 bit home premium and a desktop with Win 7 64 bit home premium. About 6 months ago, I followed the instructions above to get remote desktop connection to work on my desktop (i.e. connect from DT to LT). For the last one week the remote desktop connection seemed to stop working. Not sure what happened. Nor do I know how to debut. Any pointers will be deeply appreciated
    Many thanks
    RA

  74. Hi Darcy, try rebooting and trying the operation right away. Or if that doesn’t work, you can try the operation in “Safe Mode.” Hit F8 when your computer starts up, and then choose Safe Mode.

  75. Hey Matt – the audio thing has always been an issue. I don’t think I’ve ever heard of a fix. :(

  76. Matt – did you enable the appropriate port forwarding on your router?

  77. MRDP was working on my laptop until SP1. Then the RDP client would connect but was not reliable and the PC would lock. Tried applying the patch and copying the files from the page (in safe mode) but still had the same errors. After a million tries, what worked for me was to copy the termsrv.dll and rdpclip.exe from a W7 64bit PRO to the W7 home 64 bit (under safe mode) and then applied the patch. Now it’s working 100%

  78. Installed it on a Win7 Home Premium 64 bit (pre-sp1) and it worked. For some reason, SP1 kept failing to install on this particular PC (Gateway DS4831 w/ i3 cpu, 6gb ram, etc.), but this works for me now.

  79. I installed this patch on an windows 7 home premium PC and seems to work fine. I am now going to upgrade the PC to Windows 7 Professional. It was recommended that I remove this patch prior to the upgrade. How would I go about doing that?

  80. Patch worked for me on Windows 7 Home Premium x64. Remote Destktop and multiple sessions now enabled. Many thanks.

  81. Hey guys,
    I wonder if you could possibly help. I’m a student trying to figure this out for my professor. This patch ran without a problem, but I’m at a loss to test it. I access Remote Settings, but Remote Desktop is still not an option. What to do now?

    Thanks soooo much!
    -Tiffany

  82. Thank you very much, works like a charm on Windows 7 64 with SP1.

    L.

  83. Tiffany, just go to programs – accessories and it’ll now be there

    Luke

  84. Hey Tiffany – did Luke’s suggestion work?

  85. Hello, I have run the above patch and when I try to remotely connect to the machine from work, it does not work. I get the generic, remote desktop is unable to connect to the server.

    Am I missing a step here?

  86. I used the little application on the forum website linked to above to patch the termsrv.dll. It will also ‘unpatch’ if you need to. Works fine for me on an updated Windows 7 Home Premium 64.

    PS – I’m connecting to my PC using MS’s Macintosh RDC client.

  87. Installed on 32 Bit Home premium SP1 and not able to connect, when installing script running say checksum error then port 3389 not listening, I have tried installing this three times now – any ideas?

  88. OK. Here’s how to enable the missing groups (Remote Desktop Users) etc.

    Get psexec from here http://technet.microsoft.com/en-us/sysinternals/bb897553.aspx

    Save this file to “fix.reg” Subtract the BEGIN FILE and END FILE. Or don’t. It won’t work if you don’t though.

    BEGIN FILE
    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\Aliases0000243]
    “C”=hex:43,02,00,00,00,00,00,00,b0,00,00,00,02,00,01,00,b0,00,00,00,46,00,00,\
    00,00,00,00,00,f8,00,00,00,e2,00,00,00,00,00,00,00,dc,01,00,00,00,00,00,00,\
    00,00,00,00,01,00,14,80,90,00,00,00,a0,00,00,00,14,00,00,00,44,00,00,00,02,\
    00,30,00,02,00,00,00,02,c0,14,00,13,00,05,01,01,01,00,00,00,00,00,01,00,00,\
    00,00,02,c0,14,00,ff,ff,1f,00,01,01,00,00,00,00,00,05,07,00,00,00,02,00,4c,\
    00,03,00,00,00,00,00,14,00,0c,00,02,00,01,01,00,00,00,00,00,01,00,00,00,00,\
    00,00,18,00,1f,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,\
    00,18,00,1f,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,24,02,00,00,01,02,\
    00,00,00,00,00,05,20,00,00,00,20,02,00,00,01,02,00,00,00,00,00,05,20,00,00,\
    00,20,02,00,00,41,00,63,00,63,00,65,00,73,00,73,00,20,00,43,00,6f,00,6e,00,\
    74,00,72,00,6f,00,6c,00,20,00,41,00,73,00,73,00,69,00,73,00,74,00,61,00,6e,\
    00,63,00,65,00,20,00,4f,00,70,00,65,00,72,00,61,00,74,00,6f,00,72,00,73,00,\
    00,00,4d,00,65,00,6d,00,62,00,65,00,72,00,73,00,20,00,6f,00,66,00,20,00,74,\
    00,68,00,69,00,73,00,20,00,67,00,72,00,6f,00,75,00,70,00,20,00,63,00,61,00,\
    6e,00,20,00,72,00,65,00,6d,00,6f,00,74,00,65,00,6c,00,79,00,20,00,71,00,75,\
    00,65,00,72,00,79,00,20,00,61,00,75,00,74,00,68,00,6f,00,72,00,69,00,7a,00,\
    61,00,74,00,69,00,6f,00,6e,00,20,00,61,00,74,00,74,00,72,00,69,00,62,00,75,\
    00,74,00,65,00,73,00,20,00,61,00,6e,00,64,00,20,00,70,00,65,00,72,00,6d,00,\
    69,00,73,00,73,00,69,00,6f,00,6e,00,73,00,20,00,66,00,6f,00,72,00,20,00,72,\
    00,65,00,73,00,6f,00,75,00,72,00,63,00,65,00,73,00,20,00,6f,00,6e,00,20,00,\
    74,00,68,00,69,00,73,00,20,00,63,00,6f,00,6d,00,70,00,75,00,74,00,65,00,72,\
    00,2e,00,00,00

    [HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\Aliases0000227]
    “C”=hex:27,02,00,00,00,00,00,00,b0,00,00,00,02,00,01,00,b0,00,00,00,20,00,00,\
    00,00,00,00,00,d0,00,00,00,d2,00,00,00,00,00,00,00,a4,01,00,00,00,00,00,00,\
    00,00,00,00,01,00,14,80,90,00,00,00,a0,00,00,00,14,00,00,00,44,00,00,00,02,\
    00,30,00,02,00,00,00,02,c0,14,00,13,00,05,01,01,01,00,00,00,00,00,01,00,00,\
    00,00,02,c0,14,00,ff,ff,1f,00,01,01,00,00,00,00,00,05,07,00,00,00,02,00,4c,\
    00,03,00,00,00,00,00,14,00,0c,00,02,00,01,01,00,00,00,00,00,01,00,00,00,00,\
    00,00,18,00,1f,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,\
    00,18,00,1f,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,24,02,00,00,01,02,\
    00,00,00,00,00,05,20,00,00,00,20,02,00,00,01,02,00,00,00,00,00,05,20,00,00,\
    00,20,02,00,00,42,00,61,00,63,00,6b,00,75,00,70,00,20,00,4f,00,70,00,65,00,\
    72,00,61,00,74,00,6f,00,72,00,73,00,42,00,61,00,63,00,6b,00,75,00,70,00,20,\
    00,4f,00,70,00,65,00,72,00,61,00,74,00,6f,00,72,00,73,00,20,00,63,00,61,00,\
    6e,00,20,00,6f,00,76,00,65,00,72,00,72,00,69,00,64,00,65,00,20,00,73,00,65,\
    00,63,00,75,00,72,00,69,00,74,00,79,00,20,00,72,00,65,00,73,00,74,00,72,00,\
    69,00,63,00,74,00,69,00,6f,00,6e,00,73,00,20,00,66,00,6f,00,72,00,20,00,74,\
    00,68,00,65,00,20,00,73,00,6f,00,6c,00,65,00,20,00,70,00,75,00,72,00,70,00,\
    6f,00,73,00,65,00,20,00,6f,00,66,00,20,00,62,00,61,00,63,00,6b,00,69,00,6e,\
    00,67,00,20,00,75,00,70,00,20,00,6f,00,72,00,20,00,72,00,65,00,73,00,74,00,\
    6f,00,72,00,69,00,6e,00,67,00,20,00,66,00,69,00,6c,00,65,00,73,00,00,00

    [HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\Aliases0000239]
    “C”=hex:39,02,00,00,00,00,00,00,b0,00,00,00,02,00,01,00,b0,00,00,00,2e,00,00,\
    00,00,00,00,00,e0,00,00,00,76,00,00,00,00,00,00,00,58,01,00,00,00,00,00,00,\
    00,00,00,00,01,00,14,80,90,00,00,00,a0,00,00,00,14,00,00,00,44,00,00,00,02,\
    00,30,00,02,00,00,00,02,c0,14,00,13,00,05,01,01,01,00,00,00,00,00,01,00,00,\
    00,00,02,c0,14,00,ff,ff,1f,00,01,01,00,00,00,00,00,05,07,00,00,00,02,00,4c,\
    00,03,00,00,00,00,00,14,00,0c,00,02,00,01,01,00,00,00,00,00,01,00,00,00,00,\
    00,00,18,00,1f,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,\
    00,18,00,1f,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,24,02,00,00,01,02,\
    00,00,00,00,00,05,20,00,00,00,20,02,00,00,01,02,00,00,00,00,00,05,20,00,00,\
    00,20,02,00,00,43,00,72,00,79,00,70,00,74,00,6f,00,67,00,72,00,61,00,70,00,\
    68,00,69,00,63,00,20,00,4f,00,70,00,65,00,72,00,61,00,74,00,6f,00,72,00,73,\
    00,00,00,4d,00,65,00,6d,00,62,00,65,00,72,00,73,00,20,00,61,00,72,00,65,00,\
    20,00,61,00,75,00,74,00,68,00,6f,00,72,00,69,00,7a,00,65,00,64,00,20,00,74,\
    00,6f,00,20,00,70,00,65,00,72,00,66,00,6f,00,72,00,6d,00,20,00,63,00,72,00,\
    79,00,70,00,74,00,6f,00,67,00,72,00,61,00,70,00,68,00,69,00,63,00,20,00,6f,\
    00,70,00,65,00,72,00,61,00,74,00,69,00,6f,00,6e,00,73,00,2e,00,00,00

    [HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\Aliases0000242]
    “C”=hex:42,02,00,00,00,00,00,00,b0,00,00,00,02,00,01,00,b0,00,00,00,2c,00,00,\
    00,00,00,00,00,dc,00,00,00,ae,00,00,00,00,00,00,00,8c,01,00,00,00,00,00,00,\
    00,00,00,00,01,00,14,80,90,00,00,00,a0,00,00,00,14,00,00,00,44,00,00,00,02,\
    00,30,00,02,00,00,00,02,c0,14,00,13,00,05,01,01,01,00,00,00,00,00,01,00,00,\
    00,00,02,c0,14,00,ff,ff,1f,00,01,01,00,00,00,00,00,05,07,00,00,00,02,00,4c,\
    00,03,00,00,00,00,00,14,00,0c,00,02,00,01,01,00,00,00,00,00,01,00,00,00,00,\
    00,00,18,00,1f,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,\
    00,18,00,1f,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,24,02,00,00,01,02,\
    00,00,00,00,00,05,20,00,00,00,20,02,00,00,01,02,00,00,00,00,00,05,20,00,00,\
    00,20,02,00,00,48,00,79,00,70,00,65,00,72,00,2d,00,56,00,20,00,41,00,64,00,\
    6d,00,69,00,6e,00,69,00,73,00,74,00,72,00,61,00,74,00,6f,00,72,00,73,00,4d,\
    00,65,00,6d,00,62,00,65,00,72,00,73,00,20,00,6f,00,66,00,20,00,74,00,68,00,\
    69,00,73,00,20,00,67,00,72,00,6f,00,75,00,70,00,20,00,68,00,61,00,76,00,65,\
    00,20,00,63,00,6f,00,6d,00,70,00,6c,00,65,00,74,00,65,00,20,00,61,00,6e,00,\
    64,00,20,00,75,00,6e,00,72,00,65,00,73,00,74,00,72,00,69,00,63,00,74,00,65,\
    00,64,00,20,00,61,00,63,00,63,00,65,00,73,00,73,00,20,00,74,00,6f,00,20,00,\
    61,00,6c,00,6c,00,20,00,66,00,65,00,61,00,74,00,75,00,72,00,65,00,73,00,20,\
    00,6f,00,66,00,20,00,48,00,79,00,70,00,65,00,72,00,2d,00,56,00,2e,00,00,00

    [HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\Aliases000022C]
    “C”=hex:2c,02,00,00,00,00,00,00,b0,00,00,00,02,00,01,00,b0,00,00,00,3e,00,00,\
    00,00,00,00,00,f0,00,00,00,d8,00,00,00,00,00,00,00,c8,01,00,00,00,00,00,00,\
    00,00,00,00,01,00,14,80,90,00,00,00,a0,00,00,00,14,00,00,00,44,00,00,00,02,\
    00,30,00,02,00,00,00,02,c0,14,00,13,00,05,01,01,01,00,00,00,00,00,01,00,00,\
    00,00,02,c0,14,00,ff,ff,1f,00,01,01,00,00,00,00,00,05,07,00,00,00,02,00,4c,\
    00,03,00,00,00,00,00,14,00,0c,00,02,00,01,01,00,00,00,00,00,01,00,00,00,00,\
    00,00,18,00,1f,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,\
    00,18,00,1f,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,24,02,00,00,01,02,\
    00,00,00,00,00,05,20,00,00,00,20,02,00,00,01,02,00,00,00,00,00,05,20,00,00,\
    00,20,02,00,00,4e,00,65,00,74,00,77,00,6f,00,72,00,6b,00,20,00,43,00,6f,00,\
    6e,00,66,00,69,00,67,00,75,00,72,00,61,00,74,00,69,00,6f,00,6e,00,20,00,4f,\
    00,70,00,65,00,72,00,61,00,74,00,6f,00,72,00,73,00,00,00,4d,00,65,00,6d,00,\
    62,00,65,00,72,00,73,00,20,00,69,00,6e,00,20,00,74,00,68,00,69,00,73,00,20,\
    00,67,00,72,00,6f,00,75,00,70,00,20,00,63,00,61,00,6e,00,20,00,68,00,61,00,\
    76,00,65,00,20,00,73,00,6f,00,6d,00,65,00,20,00,61,00,64,00,6d,00,69,00,6e,\
    00,69,00,73,00,74,00,72,00,61,00,74,00,69,00,76,00,65,00,20,00,70,00,72,00,\
    69,00,76,00,69,00,6c,00,65,00,67,00,65,00,73,00,20,00,74,00,6f,00,20,00,6d,\
    00,61,00,6e,00,61,00,67,00,65,00,20,00,63,00,6f,00,6e,00,66,00,69,00,67,00,\
    75,00,72,00,61,00,74,00,69,00,6f,00,6e,00,20,00,6f,00,66,00,20,00,6e,00,65,\
    00,74,00,77,00,6f,00,72,00,6b,00,69,00,6e,00,67,00,20,00,66,00,65,00,61,00,\
    74,00,75,00,72,00,65,00,73,00

    [HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\Aliases0000223]
    “C”=hex:23,02,00,00,00,00,00,00,b0,00,00,00,02,00,01,00,b0,00,00,00,16,00,00,\
    00,00,00,00,00,c8,00,00,00,bc,00,00,00,00,00,00,00,84,01,00,00,00,00,00,00,\
    00,00,00,00,01,00,14,80,90,00,00,00,a0,00,00,00,14,00,00,00,44,00,00,00,02,\
    00,30,00,02,00,00,00,02,c0,14,00,13,00,05,01,01,01,00,00,00,00,00,01,00,00,\
    00,00,02,c0,14,00,ff,ff,1f,00,01,01,00,00,00,00,00,05,07,00,00,00,02,00,4c,\
    00,03,00,00,00,00,00,14,00,0c,00,02,00,01,01,00,00,00,00,00,01,00,00,00,00,\
    00,00,18,00,1f,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,\
    00,18,00,1f,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,24,02,00,00,01,02,\
    00,00,00,00,00,05,20,00,00,00,20,02,00,00,01,02,00,00,00,00,00,05,20,00,00,\
    00,20,02,00,00,50,00,6f,00,77,00,65,00,72,00,20,00,55,00,73,00,65,00,72,00,\
    73,00,00,00,50,00,6f,00,77,00,65,00,72,00,20,00,55,00,73,00,65,00,72,00,73,\
    00,20,00,61,00,72,00,65,00,20,00,69,00,6e,00,63,00,6c,00,75,00,64,00,65,00,\
    64,00,20,00,66,00,6f,00,72,00,20,00,62,00,61,00,63,00,6b,00,77,00,61,00,72,\
    00,64,00,73,00,20,00,63,00,6f,00,6d,00,70,00,61,00,74,00,69,00,62,00,69,00,\
    6c,00,69,00,74,00,79,00,20,00,61,00,6e,00,64,00,20,00,70,00,6f,00,73,00,73,\
    00,65,00,73,00,73,00,20,00,6c,00,69,00,6d,00,69,00,74,00,65,00,64,00,20,00,\
    61,00,64,00,6d,00,69,00,6e,00,69,00,73,00,74,00,72,00,61,00,74,00,69,00,76,\
    00,65,00,20,00,70,00,6f,00,77,00,65,00,72,00,73,00

    [HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\Aliases000022B]
    “C”=hex:2b,02,00,00,00,00,00,00,b0,00,00,00,02,00,01,00,b0,00,00,00,28,00,00,\
    00,00,00,00,00,d8,00,00,00,7a,00,00,00,00,00,00,00,54,01,00,00,00,00,00,00,\
    00,00,00,00,01,00,14,80,90,00,00,00,a0,00,00,00,14,00,00,00,44,00,00,00,02,\
    00,30,00,02,00,00,00,02,c0,14,00,13,00,05,01,01,01,00,00,00,00,00,01,00,00,\
    00,00,02,c0,14,00,ff,ff,1f,00,01,01,00,00,00,00,00,05,07,00,00,00,02,00,4c,\
    00,03,00,00,00,00,00,14,00,0c,00,02,00,01,01,00,00,00,00,00,01,00,00,00,00,\
    00,00,18,00,1f,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,\
    00,18,00,1f,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,24,02,00,00,01,02,\
    00,00,00,00,00,05,20,00,00,00,20,02,00,00,01,02,00,00,00,00,00,05,20,00,00,\
    00,20,02,00,00,52,00,65,00,6d,00,6f,00,74,00,65,00,20,00,44,00,65,00,73,00,\
    6b,00,74,00,6f,00,70,00,20,00,55,00,73,00,65,00,72,00,73,00,4d,00,65,00,6d,\
    00,62,00,65,00,72,00,73,00,20,00,69,00,6e,00,20,00,74,00,68,00,69,00,73,00,\
    20,00,67,00,72,00,6f,00,75,00,70,00,20,00,61,00,72,00,65,00,20,00,67,00,72,\
    00,61,00,6e,00,74,00,65,00,64,00,20,00,74,00,68,00,65,00,20,00,72,00,69,00,\
    67,00,68,00,74,00,20,00,74,00,6f,00,20,00,6c,00,6f,00,67,00,6f,00,6e,00,20,\
    00,72,00,65,00,6d,00,6f,00,74,00,65,00,6c,00,79,00,00,00

    [HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\Aliases0000228]
    “C”=hex:28,02,00,00,00,00,00,00,b0,00,00,00,02,00,01,00,b0,00,00,00,14,00,00,\
    00,00,00,00,00,c4,00,00,00,4a,00,00,00,00,00,00,00,10,01,00,00,00,00,00,00,\
    00,00,00,00,01,00,14,80,90,00,00,00,a0,00,00,00,14,00,00,00,44,00,00,00,02,\
    00,30,00,02,00,00,00,02,c0,14,00,13,00,05,01,01,01,00,00,00,00,00,01,00,00,\
    00,00,02,c0,14,00,ff,ff,1f,00,01,01,00,00,00,00,00,05,07,00,00,00,02,00,4c,\
    00,03,00,00,00,00,00,14,00,0c,00,02,00,01,01,00,00,00,00,00,01,00,00,00,00,\
    00,00,18,00,1f,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,\
    00,18,00,1f,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,24,02,00,00,01,02,\
    00,00,00,00,00,05,20,00,00,00,20,02,00,00,01,02,00,00,00,00,00,05,20,00,00,\
    00,20,02,00,00,52,00,65,00,70,00,6c,00,69,00,63,00,61,00,74,00,6f,00,72,00,\
    53,00,75,00,70,00,70,00,6f,00,72,00,74,00,73,00,20,00,66,00,69,00,6c,00,65,\
    00,20,00,72,00,65,00,70,00,6c,00,69,00,63,00,61,00,74,00,69,00,6f,00,6e,00,\
    20,00,69,00,6e,00,20,00,61,00,20,00,64,00,6f,00,6d,00,61,00,69,00,6e,00,00,\
    00

    [HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\Aliases\Names\Access Control Assistance Operators]
    @=hex(243):

    [HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\Aliases\Names\Backup Operators]
    @=hex(227):

    [HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\Aliases\Names\Cryptographic Operators]
    @=hex(239):

    [HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\Aliases\Names\Hyper-V Administrators]
    @=hex(242):

    [HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\Aliases\Names\Network Configuration Operators]
    @=hex(22c):

    [HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\Aliases\Names\Power Users]
    @=hex(223):

    [HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\Aliases\Names\Remote Desktop Users]
    @=hex(22b):

    [HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\Aliases\Names\Replicator]
    @=hex(228):
    END FILE

    Run this command as administrator, from the directory you saved psexec too. Or add it to your environment variables. Or include the full path. You know the drill. If you don’t know the drill, you should go do something else.

    psexec -s -i regedit.exe

    From regedit import fix.reg

    OK. Add users to the Remote Desktop Users group. All set.

    You’re welcome.

  89. Oh, if you’ve added a bogus Remote Desktop Users group, delete it first.

  90. brandoncomputer – that rocks. I may have to update the post with your procedure. Is that cool?

  91. Er.. correction to my handle. Yes, that’s cool!

  92. For all current users, this is the utility you should use, the link to the file above appears to be an older version, the link here works on all Windows Home Premium SP1 machines

    http://www.mediafire.com/?q5kbp4bfoa0riwq

  93. Seems like rvadi’s link is to a trojan, don’t download.

  94. Worked fine on a Toshiba Windows 7×64 home edition. Thanks for the tip


Close