Use DNS name resolution when a single-label domain name is used, by appending different registered DNS suffixes, if the AllowSingleLabelDnsDomain setting is not enabled. (I don't remember the exact error message.) Use WDDM graphics display driver for Remote Desktop Connections (Disabled) I have also ran the NVIDIA OpenGL RDP enabler tool so I can run applications that use OpenGL through RDP, but I removed the NVIDIA driver database where this setting is stored to disable it and determined that the problem is not related to OpenGL support state. set the policy "Use WDDM graphics display driver for Remote Desktop Connections" to DISABLED. "Use WDDM graphics display driver for Remote Desktop . - go to Computer Configuration > Policies >Windows Settings >Administrative Templates >Windows Components >Remote Desktop Services >Remote Desktop Session Host >Remote Session Environment], - set the Policy [Use WDDM graphics display driver for Remote Desktop Connections] to Disabled. XPDM and WDDM display drivers cannot co-reside; all graphics adapters in a system must use the same display driver model. When the Optiplex is the client in a remote desktop session and the host executes a restart, after . Background Intelligent Transfer Service (BITS), Microsoft Peer-to-Peer Networking Services, Windows Resource Exhaustion Detection and Resolution, Windows Standby/Resume Performance Diagnostics, Windows System Responsiveness Performance Diagnostics, Periodic check for updates to Internet Explorer and Internet Tools, Microsoft Secondary Authentication Factor, Windows Customer Experience Improvement Program, Resultant Set of Policy snap-in extensions, Search in Group Policy Administrative Templates, Force a specific background and accent color, Force a specific default lock screen and logon image, Prevent changing lock screen and logon image, Allow users to enable online speech recognition services, Force selected system UI language to overwrite the user UI language, Restricts the UI language Windows uses for all logged users, Apply the default user logon picture to all users, Do not allow the BITS client to use Windows Branch Cache, Do not allow the computer to act as a BITS Peercaching client, Do not allow the computer to act as a BITS Peercaching server, Limit the age of files in the BITS Peercache, Limit the maximum network bandwidth for BITS background transfers, Limit the maximum network bandwidth used for Peercaching, Limit the maximum number of BITS jobs for each user, Limit the maximum number of BITS jobs for this computer, Limit the maximum number of files allowed in a BITS job, Limit the maximum number of ranges that can be added to the file in a BITS job, Set default download behavior for BITS jobs on costed networks, Set up a maintenance schedule to limit the maximum network bandwidth used for BITS background transfers, Set up a work schedule to limit the maximum network bandwidth used for BITS background transfers, Configure Client BranchCache Version Support, Enable Automatic Hosted Cache Discovery by Service Connection Point, Set percentage of disk space used for client computer cache, Allow DNS suffix appending to unqualified multi-label name queries, Allow NetBT queries for fully qualified domain names, Prefer link local responses over DNS when received over a network with higher precedence, Register DNS records with connection-specific DNS suffix, Turn off smart multi-homed name resolution, Handle Caching on Continuous Availability Shares, Offline Files Availability on Continuous Availability Shares, Disable password strength validation for Peer Grouping, Turn off Microsoft Peer-to-Peer Networking Services, Windows Defender Firewall: Allow ICMP exceptions, Windows Defender Firewall: Allow inbound file and printer sharing exception, Windows Defender Firewall: Allow inbound remote administration exception, Windows Defender Firewall: Allow inbound Remote Desktop exceptions, Windows Defender Firewall: Allow inbound UPnP framework exceptions, Windows Defender Firewall: Allow local port exceptions, Windows Defender Firewall: Allow local program exceptions, Windows Defender Firewall: Define inbound port exceptions, Windows Defender Firewall: Define inbound program exceptions, Windows Defender Firewall: Do not allow exceptions, Windows Defender Firewall: Prohibit notifications, Windows Defender Firewall: Prohibit unicast response to multicast or broadcast requests, Windows Defender Firewall: Protect all network connections, Windows Defender Firewall: Allow authenticated IPsec bypass, Do not show the "local access only" network icon, Prohibit installation and configuration of Network Bridge on your DNS domain network, Prohibit use of Internet Connection Firewall on your DNS domain network, Prohibit use of Internet Connection Sharing on your DNS domain network, Require domain users to elevate when setting a network's location, Route all traffic through the internal network, Specify domain location determination URL, Domains categorized as both work and personal, Enterprise resource domains hosted in the cloud, Allow or Disallow use of the Offline Files feature, At logoff, delete local copy of user's offline files, Enable file synchronization on costed networks, Prohibit user configuration of Offline Files, Remove "Make Available Offline" for these files and folders, Specify administratively assigned Offline Files, Synchronize all offline files before logging off, Synchronize all offline files when logging on, Turn on economical application of administratively assigned Offline Files, Set IP Stateless Autoconfiguration Limits State, Disable power management in connected standby mode, Enable Windows to soft-disconnect a computer from a network, Minimize the number of simultaneous connections to the Internet or a Windows Domain, Prohibit connection to non-domain networks when connected to domain authenticated network, Prohibit connection to roaming Mobile Broadband networks, Configuration of wireless settings using Windows Connect Now, Prohibit access of the Windows Connect Now wizards, Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services, Set Per-App Cellular Access UI Visibility, Sets how often a DFS Client discovers DC's, Add Printer wizard - Network scan page (Managed network), Add Printer wizard - Network scan page (Unmanaged network), Allow Print Spooler to accept client connections, Always rasterize content to be printed using a software rasterizer, Automatically publish new printers in Active Directory, Change Microsoft XPS Document Writer (MXDW) default output format to the legacy Microsoft XPS format (*.xps), Custom support URL in the Printers folder's left pane, Disallow installation of printers using kernel-mode drivers, Do not allow v4 printer drivers to show printer extensions, Enable Device Control Printing Restrictions, Execute print drivers in isolated processes, Extend Point and Print connection to search Windows Update, Limits print driver installation to Administrators, List of Approved USB-connected print devices, Override print driver execution compatibility setting reported by print driver, Package Point and print - Approved servers, Pre-populate printer search location text, Prune printers that are not automatically republished, Remove "Recently added" list from Start Menu, Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands, Customize message for Access Denied errors, Enable access-denied assistance on client for all file types, Microsoft Customer Experience Improvement Program (CEIP), Enable automatic cleanup of unused appv packages, Enable background sync to server when on battery power, Allow First Time Application Launches if on a High Cost Windows 8 Metered Connection, Specify what to load in background (aka AutoLoad), Include command line in process creation events, Allow delegating default credentials with NTLM-only server authentication, Allow delegating fresh credentials with NTLM-only server authentication, Allow delegating saved credentials with NTLM-only server authentication, Remote host allows delegation of non-exportable credentials, Restrict delegation of credentials to remote servers, Deploy Windows Defender Application Control, Enable Device Health Attestation Monitoring and Reporting, Allow administrators to override Device Installation Restriction policies, Allow installation of devices that match any of these device IDs, Allow installation of devices that match any of these device instance IDs, Allow installation of devices using drivers that match these device setup classes, Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria, Display a custom message title when device installation is prevented by a policy setting, Display a custom message when installation is prevented by a policy setting, Prevent installation of devices not described by other policy settings, Prevent installation of devices that match any of these device IDs, Prevent installation of devices that match any of these device instance IDs, Prevent installation of devices using drivers that match these device setup classes, Prevent installation of removable devices, Time (in seconds) to force reboot when required for policy changes to take effect, Allow remote access to the Plug and Play interface, Do not send a Windows error report when a generic driver is installed on a device, Prevent creation of a system restore point during device activity that would normally prompt creation of a restore point, Prevent device metadata retrieval from the Internet, Prevent Windows from sending an error report when a device driver requests additional software during installation, Prioritize all digitally signed drivers equally during the driver ranking and selection process, Specify search order for device driver source locations, Specify the search server for device driver updates, Turn off "Found New Hardware" balloons during device installation, Prevent redirection of devices that match any of these device Ids, Log event when quota warning level exceeded, Configure Per-Process System DPI settings, Allow local activation security check exemptions, Define Activation Security Check exemptions, Allow non-administrators to install drivers for these device setup classes, Turn off Windows Update device driver search prompt, Allow only USB root hub connected Enhanced Storage devices, Configure list of Enhanced Storage devices usable on your computer, Configure list of IEEE 1667 silos usable on your computer, Do not allow non-Enhanced Storage removable devices, Do not allow password authentication of Enhanced Storage devices, Do not allow Windows to activate Enhanced Storage devices, Lock Enhanced Storage when the computer is locked, File Classification Infrastructure: Display Classification tab in File Explorer, File Classification Infrastructure: Specify classification properties list, Configure maximum age of file server shadow copies. Remove frequent programs list from the Start Menu, Remove links and access to Windows Update, Remove Network Connections from Start Menu, Remove pinned programs list from the Start Menu, Remove See More Results / Search Everywhere link, Remove the "Undock PC" button from the Start Menu, Remove user's folders from the Start Menu, Show "Run as different user" command on Start, Show Start on the display the user is using when they press the Windows logo key, Show the Apps view automatically when the user goes to Start, Turn off automatic promotion of notification icons to the taskbar, Turn off feature advertisement balloon notifications, Do not automatically make all redirected folders available offline, Do not automatically make specific redirected folders available offline, Enable optimized move of contents in Offline Files cache on Folder Redirection server path change, Configure Group Policy domain controller selection, Create new Group Policy Object links disabled by default, Set default name for new Group Policy objects, Set Group Policy refresh interval for users, Turn off Help Experience Improvement Program, Prompt for password on resume from hibernate/suspend, Connect home directory to root of the share, Specify network directories to sync at logon/logoff time only, Do not preserve zone information in file attachments, Hide mechanisms to remove zone information, Inclusion list for moderate risk file types, Notify antivirus programs when opening attachments, Configure Windows spotlight on lock screen, Do not suggest third-party content in Windows spotlight, Do not use diagnostic data for tailored experiences, Turn off Windows Spotlight on Action Center, Do not show recent apps when the mouse is pointing to the upper-left corner of the screen, Prevent users from replacing the Command Prompt with Windows PowerShell in the menu they see when they right-click the lower-left corner or press the Windows logo key+X, Search, Share, Start, Devices, and Settings don't appear when the mouse is pointing to the upper-right corner of the screen, Allow only per user or approved shell extensions, Display confirmation dialog when deleting files, Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon, Do not display the Welcome Center at user logon, Do not move deleted files to the Recycle Bin, Do not track Shell shortcuts during roaming, Hides the Manage item on the File Explorer context menu, Hide these specified drives in My Computer, No Computers Near Me in Network Locations, Pin Internet search sites to the "Search again" links and the Start menu, Pin Libraries or Search Connectors to the "Search again" links and the Start menu, Prevent access to drives from My Computer. Specifically, those with onboard + Nvidia Quadro cards. Configure the system to use legacy Dictionary Attack Prevention Parameters setting for TPM 2.0. Configure additional sources for untrusted files in Windows Defender Application Guard. Then navigate to Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Remote Session Environment. (found at Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Remote Session Environment) This thread is locked. Do not reinitialize a pre-existing roamed user profile when it is loaded on a machine for the first time, Do not show the 'new application installed' notification. Have a question about this project? The WDDM graphics display driver for Remote Desktop Connection which is enabled by default in Windows 10 v2004 and above needs to be disabled as it is not supported by the Citrix VDA. To delegate administration of this GPO to Citrix Admins: On the right, switch to the Delegation tab, and click Add. From what I understand, it isn't just the display adapter that causes the issue with affected chipsets, so putting a new video card in the machine or using a generic driver won't help (and it didn't for me). Go to Use WDDM graphics display driver for Remote Desktop Connections, double-click it and choose Disabled . Location where all default Library definition files for users/machines reside. Environment Release : 3.3 Component : PRIVILEGED ACCESS MANAGEMENT Resolution There is no impact. Disable the built-in graphics card will force the system to use a single card. On the left, click the Citrix VDA Non-Admin Users GPO to highlight it. To solve "Your Remote Desktop Service session has ended. In this case, the Remote Desktop Connections will use XDDM graphics display driver. Do not allow pinning programs to the Taskbar, Do not allow pinning Store app to the Taskbar, Do not allow taskbars on more than one display, Do not display any custom toolbars in the taskbar, Do not display or track items in Jump Lists from remote locations, Do not keep history of recently opened documents, Do not search programs and Control Panel items, Do not use the search-based method when resolving shell shortcuts, Do not use the tracking-based method when resolving shell shortcuts, Force Start to be either full screen size or menu size, Go to the desktop instead of Start when signing in, Gray unavailable Windows Installer programs Start Menu shortcuts, Prevent changes to Taskbar and Start Menu Settings, Prevent users from adding or removing toolbars, Prevent users from customizing their Start Screen, Prevent users from moving taskbar to another screen dock location, Prevent users from uninstalling applications from Start, Remove access to the context menus for the taskbar, Remove All Programs list from the Start menu, Remove Clock from the system notification area, Remove common program groups from Start Menu. If you disable this policy setting, Remote Desktop Connections will NOT use WDDM graphics display driver. Use WDDM graphics display driver for Remote Desktop Connections to DISABLED . Workaround: Set "Use WDDM graphics display driver for Remote Desktop Connections" to Disabled in group policy. Select the Enabledradio button entry and then click on the [OK]button. Step 1: Select an appropriate GPU optimized Azure virtual machine size Change Group Policy processing to run asynchronously when a slow network connection is detected. Use WDDM graphics display driver for Remote Desktop Connections to DISABLED This forces RDP to use the old (and now deprecated XDDM drivers) After rebooting, behaviour returns to normal and after disconnecting from an RDP session the RDP host (target machine) no longer shows DWM.EXE consuming CPU. Sign up for a free GitHub account to open an issue and contact its maintainers and the community. Configure Applications preference extension policy processing, Configure Data Sources preference extension policy processing, Configure Devices preference extension policy processing, Configure Direct Access connections as a fast network connection, Configure Drive Maps preference extension policy processing, Configure Environment preference extension policy processing, Configure Files preference extension policy processing, Configure Folder Options preference extension policy processing, Configure folder redirection policy processing, Configure Folders preference extension policy processing, Configure Group Policy slow link detection, Configure Ini Files preference extension policy processing, Configure Internet Explorer Maintenance policy processing, Configure Internet Settings preference extension policy processing, Configure Local Users and Groups preference extension policy processing, Configure Network Options preference extension policy processing, Configure Network Shares preference extension policy processing, Configure Power Options preference extension policy processing, Configure Printers preference extension policy processing, Configure Regional Options preference extension policy processing, Configure Registry preference extension policy processing, Configure Scheduled Tasks preference extension policy processing, Configure Services preference extension policy processing, Configure Shortcuts preference extension policy processing, Configure software Installation policy processing, Configure Start Menu preference extension policy processing, Configure user Group Policy loopback processing mode, Configure web-to-app linking with app URI handlers, Determine if interactive users can generate Resultant Set of Policy data, Enable AD/DFS domain controller synchronization during policy refresh, Remove users' ability to invoke machine policy refresh, Set Group Policy refresh interval for computers, Set Group Policy refresh interval for domain controllers, Specify startup policy processing wait time, Specify workplace connectivity wait time for policy processing, Turn off background refresh of Group Policy, Turn off Group Policy Client Service AOAC optimization, Turn off Local Group Policy Objects processing, Turn off access to all Windows Update features, Turn off Automatic Root Certificates Update, Turn off downloading of print drivers over HTTP, Turn off handwriting personalization data sharing, Turn off handwriting recognition error reporting, Turn off Help and Support Center "Did you know?" On the affected machine, in Group Policy Editor, under Remote Desktop Session Host -> Remote Session Environment . Disable showing balloon notifications as toasts. Save or just connect, but now you should utilize all your monitors. Turn off storage and display of search history, Prevent removable media source for any installation, Specify the order in which Windows Installer searches for installation files, Set action to take when logon hours expire, Prevent CD and DVD Media Information Retrieval, Prevent Music File Media Information Retrieval, Enables the use of Token Broker for AD FS authentication, SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services. WDDM graphic driver is an important feature in Windows 10. You must restart the VM after enabling the WDDM graphics display driver for the changes to take effect. Step 4: Launch the program or game. Step 6. Disable binding directly to IPropertySetStorage without intermediate layers. For this, double the option, select ' Disable '. If you are using Windows 10 pro v1909, disable 'Use WDDM graphics display driver for Remote Desktop Connection'. Right-click on Windows key and select Device Manager from the list of options available. Send all sites not included in the Enterprise Mode Site List to Microsoft Edge. Use the branch: Computer Configuration->Policies->Windows Settings->Administrative Templates->Windows Components->Remote Desktop Services->Remote Desktop Session Host->Remote Session Environment, set the Policy Use WDDM graphics display driver for Remote Desktop Connections to Disabled. If you enable or do not configure this policy setting, Remote Desktop Connections will use WDDM graphics display driver. Step 2: Expand the Display adapters and right-click on the built-in graphics device. Step-By-Step Guide Step 1. Facebook Twitter LinkedIn No side affects that I see. The six solutions for the errors are presented in the following content, select the proper ones. In the Use WDDM graphics display driver for Remote Desktop Connections dialog, select Disabled. If you have Windows 10 Pro, run gpedit.msc and navigate to the following: Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Remote Session Environment Set the Use WDDM graphics display driver for Remote Desktop Connections policy to Disabled Can confirm this works around the issue for me as well (only had to reconnect RDP, not reboot though). The Windows Vista* operating system supports two driver models: WDDM: Drivers based on WDDM provide the 3D graphical Windows Aero* user interface experience. Another way to launch the device manager is by pressing Windows + R to launch the Run application and typing "devmgmt.msc". . Ignore the default list of blocked TPM commands, Ignore the local list of blocked TPM commands, Standard User Individual Lockout Threshold, Turn on TPM backup to Active Directory Domain Services, Add the Administrators security group to roaming user profiles, Control slow network connection timeout for user profiles, Delete user profiles older than a specified number of days on system restart, Disable detection of slow network connections, Do not check for user ownership of Roaming Profile Folders, Do not forcefully unload the users registry at user logoff, Do not log users on with temporary profiles, Download roaming profiles on primary computers only, Leave Windows Installer and Group Policy Software Installation Data, Maximum retries to unload and update user profile, Prevent Roaming Profile changes from propagating to the server, Prompt user when a slow network connection is detected, Set maximum wait time for the network if a user has a roaming user profile or remote home directory, Set roaming profile path for all users logging onto this computer, Set the schedule for background upload of a roaming user profile's registry file while user is logged on, User management of sharing user name, account picture, and domain information with apps (not desktop apps), Specify Windows File Protection cache location, Activate Shutdown Event Tracker System State Data feature, Allow Distributed Link Tracking clients to use domain resources, Do not automatically encrypt files moved to encrypted folders, Do not display Manage Your Server page at logon. . Block launching Universal Windows apps with Windows Runtime API access from hosted content. Set a default associations configuration file, Start File Explorer with ribbon minimized, Turn off Data Execution Prevention for Explorer, Turn off numerical sorting in File Explorer, Verify old and new Folder Redirection targets point to the same share before redirecting, Turn off tracking of last play time of games in the Games folder, Prevent the computer from joining a homegroup, Restrict Accelerators to those deployed through Group Policy, Bypass prompting for Clipboard access for scripts running in any process, Bypass prompting for Clipboard access for scripts running in the Internet Explorer process, Define applications and processes that can access the Clipboard without prompting, Turn off the ability to launch report site problems using a menu option, Include updated website lists from Microsoft, Turn on Internet Explorer 7 Standards Mode, Turn on Internet Explorer Standards Mode for local intranet, Use Policy List of Internet Explorer 7 sites, Prevent specifying the code download path for each computer, Prevent access to Delete Browsing History, Prevent deleting ActiveX Filtering, Tracking Protection, and Do Not Track data, Prevent deleting InPrivate Filtering data, Prevent deleting temporary Internet files, Prevent deleting websites that the user has visited, Prevent the deletion of temporary Internet files and cookies, Allow active content from CDs to run on user machines, Allow Install On Demand (except Internet Explorer), Allow Install On Demand (Internet Explorer), Allow Internet Explorer to use the HTTP2 network protocol, Allow Internet Explorer to use the SPDY/3 network protocol, Allow software to run or install even if the signature is invalid, Automatically check for Internet Explorer updates, Check for signatures on downloaded programs, Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled, Do not allow resetting Internet Explorer settings, Empty Temporary Internet Files folder when browser is closed, Turn off loading websites and content in the background to optimize performance, Turn off sending UTF-8 query strings for URLs, Turn off the flip ahead with page prediction feature, Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows, Allow websites to store application caches on client computers, Allow websites to store indexed databases on client computers, Set application caches expiration time limit for individual domains, Set application cache storage limits for individual domains, Set indexed database storage limits for individual domains, Set maximum application cache individual resource size, Set maximum application cache resource list size, Set maximum application caches storage limit for all domains, Set maximum indexed database storage limit for all domains, Start Internet Explorer with tabs from last browsing session, Allow active content over restricted protocols to access my computer, Allow cut, copy or paste operations from the clipboard via script, Allow drag and drop or copy and paste files, Allow loading of XAML Browser Applications, Allow only approved domains to use ActiveX controls without prompt, Allow only approved domains to use the TDC ActiveX control, Allow OpenSearch queries in File Explorer, Allow previewing and custom thumbnails of OpenSearch query results in File Explorer, Allow script-initiated windows without size or position constraints, Allow scripting of Internet Explorer WebBrowser controls, Allow VBScript to run in Internet Explorer, Allow video and animation on a webpage that uses an older media player, Allow websites to open windows without status bar or Address bar, Allow websites to prompt for information by using scripted windows, Don't run antimalware programs against ActiveX controls. This is a known Vista/Windows 7 limitation. (Image-2) Version of WDDM of the GPU driver on The Windows System Back to the top Info: Under Setting, right-click Use WDDM graphics display driver for Remote Desktop Connections, and click Edit. Configure the system to clear the TPM if it is not in a ready state. Begin your Remote Desktop connection, but before you select connect, select Show Options. set the policy "Use WDDM graphics display driver for Remote Desktop Connections" to DISABLED. Disconnecting from remote desktop session then causes hangs in OpenDL device enumeration. Prevent users from sharing files within their profile. Configure telemetry opt-in setting user interface. Step 1: Right-click on the Windows icon and click on the Device Manager. Click on the "Display" tab and look to the right under " Driver Model" under the Driver group box. WDDM is an acronym for the Windows* Display Driver Model. Turn on dynamic Content URI Rules for Windows store apps, Prevent backing up to optical media (CD/DVD), Prevent the user from running the Backup Status and Configuration program, Turn off the ability to back up data files, Turn off the ability to create a system image, Disallow locally attached storage as backup target, Allow domain users to log on using biometrics, Specify timeout for fast user switching events, Allow access to BitLocker-protected fixed data drives from earlier versions of Windows, Choose how BitLocker-protected fixed drives can be recovered, Configure use of hardware-based encryption for fixed data drives, Configure use of passwords for fixed data drives, Configure use of smart cards on fixed data drives, Deny write access to fixed drives not protected by BitLocker, Enforce drive encryption type on fixed data drives.