Location where all default Library definition files for users/machines reside. "Use WDDM graphics display driver for Remote Desktop . Step 2: Expand the Display adapters and right-click on the built-in graphics device. Spice (1) flag Report. No side affects that I see. Easy fix! The Windows Display Driver Model (WDDM) requires that a graphics hardware vendor supply a paired user-mode display driver and kernel-mode display driver (or display miniport driver ). Step 1: Right-click on the Windows icon and click on the Device Manager. For this, double the option, select ' Disable '. Check the status of RDP Services in Services In Windows 10 v1903 and later, there is a bug in the WDDM (Windows Display Driver Model) that prevents remote desktop sessions from connecting multiple times. Environment Release : 3.3 Component : PRIVILEGED ACCESS MANAGEMENT Resolution There is no impact. From what I understand, it isn't just the display adapter that causes the issue with affected chipsets, so putting a new video card in the machine or using a generic driver won't help (and it didn't for me). Turn off storage and display of search history, Prevent removable media source for any installation, Specify the order in which Windows Installer searches for installation files, Set action to take when logon hours expire, Prevent CD and DVD Media Information Retrieval, Prevent Music File Media Information Retrieval, Enables the use of Token Broker for AD FS authentication, SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services. This is the new best answer. Disconnecting from remote desktop session then causes hangs in OpenDL device enumeration. If you enable or do not configure this policy setting, Remote Desktop Connections will use WDDM graphics display driver. set the policy "Use WDDM graphics display driver for Remote Desktop Connections" to DISABLED. Block launching desktop apps associated with a file. Reboot your virtual machine. On the VM RDP connections are going to: Local Group Policy Editor (Phys svr is not part of a domain) ->Local Computer Policy -> Computer Configuration -> Administrative Templates -> All Settings -> Use WDDM graphics display driver for Remote Desktop Connections -> Disabled Reboot VM On Windows 10 Start the Group Policy Editor by clicking the Windows button and typing gpedit.msc then under Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host -> Remote Session Environment : 1. Configure the system to clear the TPM if it is not in a ready state. Hide the TPM Firmware Update recommendation. You must restart the VM after enabling the WDDM graphics display driver for the changes to take effect. . Show message when opening sites in Microsoft Edge using Enterprise Mode, Specify use of ActiveX Installer Service for installation of ActiveX controls, Turn off ability to pin sites in Internet Explorer on the desktop, Turn off add-on performance notifications, Turn off configuration of pop-up windows in tabbed browsing, Turn off Managing SmartScreen Filter for Internet Explorer 8, Turn off suggestions for all user-installed providers, Turn off the auto-complete feature for web addresses, Turn off the Security Settings Check feature, Automatic Maintenance Activation Boundary, Turn off Automatic Download and Update of Map Data, Turn off unsolicited network traffic on the Offline Maps settings page, Enable automatic MDM enrollment using default Azure AD credentials, Block all consumer Microsoft account user authentication, Display additional text to clients when they need to perform an action, Configure local setting override for reporting to Microsoft MAPS, Configure the 'Block at First Sight' feature, Send file samples when further analysis is required, Exclude files and paths from Attack Surface Reduction Rules, Prevent users and apps from accessing dangerous websites, Define the rate of detection events for logging, Specify additional definition sets for network traffic inspection, Configure local setting override for the removal of items from Quarantine folder, Configure removal of items from Quarantine folder, Configure local setting override for monitoring file and program activity on your computer, Configure local setting override for monitoring for incoming and outgoing file activity, Configure local setting override for scanning all downloaded files and attachments, Configure local setting override for turn on behavior monitoring, Configure local setting override to turn off Intrusion Prevention System, Configure local setting override to turn on real-time protection, Configure monitoring for incoming and outgoing file and program activity, Define the maximum size of downloaded files and attachments to be scanned, Monitor file and program activity on your computer, Scan all downloaded files and attachments, Turn on network protection against exploits of known vulnerabilities, Turn on process scanning whenever real-time protection is enabled, Configure local setting override for the time of day to run a scheduled full scan to complete remediation, Specify the day of the week to run a scheduled full scan to complete remediation, Specify the time of day to run a scheduled full scan to complete remediation, Configure time out for detections in critically failed state, Configure time out for detections in non-critical failed state, Configure time out for detections in recently remediated state, Configure time out for detections requiring additional action, Configure Windows software trace preprocessor components, Check for the latest virus and spyware security intelligence before running a scheduled scan, Configure local setting override for maximum percentage of CPU utilization, Configure local setting override for scheduled quick scan time, Configure local setting override for scheduled scan time, Configure local setting override for schedule scan day, Configure local setting override for the scan type to use for a scheduled scan, Configure low CPU priority for scheduled scans, Define the number of days after which a catch-up scan is forced, Specify the day of the week to run a scheduled scan, Specify the interval to run quick scans per day, Specify the maximum depth to scan archive files, Specify the maximum percentage of CPU utilization during a scan, Specify the maximum size of archive files to be scanned, Specify the scan type to use for a scheduled scan, Specify the time of day to run a scheduled scan, Start the scheduled scan only when computer is on but not in use, Turn on removal of items from scan history folder, Allow notifications to disable security intelligence based reports to Microsoft MAPS, Allow real-time security intelligence updates based on reports to Microsoft MAPS, Allow security intelligence updates from Microsoft Update, Allow security intelligence updates when running on battery power, Check for the latest virus and spyware security intelligence on startup, Define file shares for downloading security intelligence updates. Configure the system to use legacy Dictionary Attack Prevention Parameters setting for TPM 2.0. Use WDDM graphics display driver for Remote Desktop Connections This policy setting lets you enable WDDM graphics display driver for Remote Desktop Connections. For this change to take effect, you must restart Windows. Configure Applications preference extension policy processing, Configure Data Sources preference extension policy processing, Configure Devices preference extension policy processing, Configure Direct Access connections as a fast network connection, Configure Drive Maps preference extension policy processing, Configure Environment preference extension policy processing, Configure Files preference extension policy processing, Configure Folder Options preference extension policy processing, Configure folder redirection policy processing, Configure Folders preference extension policy processing, Configure Group Policy slow link detection, Configure Ini Files preference extension policy processing, Configure Internet Explorer Maintenance policy processing, Configure Internet Settings preference extension policy processing, Configure Local Users and Groups preference extension policy processing, Configure Network Options preference extension policy processing, Configure Network Shares preference extension policy processing, Configure Power Options preference extension policy processing, Configure Printers preference extension policy processing, Configure Regional Options preference extension policy processing, Configure Registry preference extension policy processing, Configure Scheduled Tasks preference extension policy processing, Configure Services preference extension policy processing, Configure Shortcuts preference extension policy processing, Configure software Installation policy processing, Configure Start Menu preference extension policy processing, Configure user Group Policy loopback processing mode, Configure web-to-app linking with app URI handlers, Determine if interactive users can generate Resultant Set of Policy data, Enable AD/DFS domain controller synchronization during policy refresh, Remove users' ability to invoke machine policy refresh, Set Group Policy refresh interval for computers, Set Group Policy refresh interval for domain controllers, Specify startup policy processing wait time, Specify workplace connectivity wait time for policy processing, Turn off background refresh of Group Policy, Turn off Group Policy Client Service AOAC optimization, Turn off Local Group Policy Objects processing, Turn off access to all Windows Update features, Turn off Automatic Root Certificates Update, Turn off downloading of print drivers over HTTP, Turn off handwriting personalization data sharing, Turn off handwriting recognition error reporting, Turn off Help and Support Center "Did you know?" On the left, click the Citrix VDA Non-Admin Users GPO to highlight it. Then navigate to Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Remote Session Environment. Double-click Use WDDM graphics display driver for Remote Desktop Connections (available for Windows 10 version 1903 and newer Windows versions). Configure telemetry opt-in change notifications. (I don't remember the exact error message.) Workaround: Set "Use WDDM graphics display driver for Remote Desktop Connections" to Disabled in group policy. In the main window, double-click Use WDDM graphics display driver for remote Desktop Connections. content, Turn off Help and Support Center Microsoft Knowledge Base search, Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com, Turn off Internet download for Web publishing and online ordering wizards, Turn off Internet File Association service, Turn off Registration if URL connection is referring to Microsoft.com, Turn off Search Companion content file updates, Turn off the "Publish to Web" task for files and folders, Turn off the Windows Messenger Customer Experience Improvement Program, Turn off Windows Customer Experience Improvement Program, Turn off Windows Network Connectivity Status Indicator active tests, Turn off Windows Update device driver searching, Do not allow changes to initiator iqn name, Do not allow changes to initiator CHAP secret, Do not allow sessions without mutual CHAP, Do not allow sessions without one way CHAP, Do not allow adding new targets via manual configuration, Do not allow manual configuration of discovered targets, Do not allow manual configuration of iSNS servers, Do not allow manual configuration of target portals, KDC support for claims, compound authentication and Kerberos armoring, KDC support for PKInit Freshness Extension, Provide information about previous logons to client computers, Allow retrieving the cloud kerberos ticket during the logon, Always send compound authentication first, Define host name-to-Kerberos realm mappings, Define interoperable Kerberos V5 realm settings, Disable revocation checking for the SSL certificate of KDC proxy servers, Fail authentication requests when Kerberos armoring is not available, Kerberos client support for claims, compound authentication and Kerberos armoring, Require strict target SPN match on remote procedure calls, Set maximum Kerberos SSPI context token buffer size, Specify KDC proxy servers for Kerberos clients, Support device authentication using certificate, Enumeration policy for external devices incompatible with Kernel DMA Protection, Disallow copying of user input methods to the system account for sign-in, Disallow user override of locale settings, Allow users to select when a password is required when resuming from connected standby, Always wait for the network at computer startup and logon, Block user from showing account details on sign-in, Do not display the Getting Started welcome screen at logon, Do not enumerate connected users on domain-joined computers, Enumerate local users on domain-joined computers, Hide entry points for Fast User Switching, Turn off app notifications on the lock screen, Do not process incoming mailslot messages used for domain controller location based on NetBIOS domain names, Do not use NetBIOS-based discovery for domain controller location when DNS-based discovery fails, Set Priority in the DC Locator DNS SRV records, Set Weight in the DC Locator DNS SRV records, Specify address lookup behavior for DC locator ping, Specify DC Locator DNS records not registered by the DCs, Specify dynamic registration of the DC Locator DNS Records, Specify Refresh Interval of the DC Locator DNS records, Specify sites covered by the application directory partition DC Locator DNS SRV records, Specify sites covered by the DC Locator DNS SRV records, Specify sites covered by the GC Locator DNS SRV Records, Use automated site coverage by the DC Locator DNS SRV Records. Begin your Remote Desktop connection, but before you select connect, select Show Options. Resolution 2: If the first resolution does not work, try following these instructions: On your local computer, open an explorer window and paste this into the location . - go to Computer Configuration > Policies >Windows Settings >Administrative Templates >Windows Components >Remote Desktop Services >Remote Desktop Session Host >Remote Session Environment], - set the Policy [Use WDDM graphics display driver for Remote Desktop Connections] to Disabled. Another way to launch the device manager is by pressing Windows + R to launch the Run application and typing "devmgmt.msc". Go to Use WDDM graphics display driver for Remote Desktop Connections, double-click it and choose Disabled . Use DNS name resolution with a single-label domain name instead of NetBIOS name resolution to locate the DC, Allow cryptography algorithms compatible with Windows NT 4.0, Specify negative DC Discovery cache setting, Specify positive periodic DC Cache refresh for non-background callers, Use final DC discovery retry setting for background callers, Use initial DC discovery retry setting for background callers, Use maximum DC discovery retry interval setting for background callers, Use positive periodic DC cache refresh for background callers, Use urgent mode when pinging domain controllers, Allow Clipboard synchronization across devices, Select the lid switch action (on battery), Select the lid switch action (plugged in), Select the Power button action (on battery), Select the Power button action (plugged in), Select the Sleep button action (on battery), Select the Sleep button action (plugged in), Select the Start menu Power button action (on battery), Select the Start menu Power button action (plugged in), Energy Saver Battery Threshold (on battery), Energy Saver Battery Threshold (plugged in), Allow applications to prevent automatic sleep (on battery), Allow applications to prevent automatic sleep (plugged in), Allow automatic sleep with Open Network Files (on battery), Allow automatic sleep with Open Network Files (plugged in), Allow network connectivity during connected-standby (on battery), Allow network connectivity during connected-standby (plugged in), Allow standby states (S1-S3) when sleeping (on battery), Allow standby states (S1-S3) when sleeping (plugged in), Require a password when a computer wakes (on battery), Require a password when a computer wakes (plugged in), Specify the system hibernate timeout (on battery), Specify the system hibernate timeout (plugged in), Specify the system sleep timeout (on battery), Specify the system sleep timeout (plugged in), Specify the unattended sleep timeout (on battery), Specify the unattended sleep timeout (plugged in), Turn on the ability for applications to prevent sleep transitions (on battery), Turn on the ability for applications to prevent sleep transitions (plugged in), Specify the display dim brightness (on battery), Specify the display dim brightness (plugged in), Turn off adaptive display timeout (on battery), Turn off adaptive display timeout (plugged in), Turn on desktop background slideshow (on battery), Turn on desktop background slideshow (plugged in), Minimum Idle Connection Timeout for RPC/HTTP connections, Propagation of extended error information, Restrictions for Unauthenticated RPC clients, RPC Endpoint Mapper Client Authentication, All Removable Storage: Allow direct access in remote sessions, All Removable Storage classes: Deny all access, Allow logon scripts when NetBIOS or WINS is disabled, Maximum wait time for Group Policy scripts, Run Windows PowerShell scripts first at computer startup, shutdown, Run Windows PowerShell scripts first at user logon, logoff, Configure the refresh interval for Server Manager, Do not display Initial Configuration Tasks window automatically at logon, Do not display Server Manager automatically at logon, Turn off automatic termination of applications that block or cancel shutdown, Allow downloading updates to the Disk Failure Prediction Model, Allow Storage Sense Temporary Files cleanup, Configure Storage Sense Cloud Content dehydration threshold, Configure Storage Sense Recycle Bin cleanup threshold, Configure Storage Storage Downloads cleanup threshold, Detect application failures caused by deprecated COM objects, Detect application failures caused by deprecated Windows DLLs, Detect application installers that need to be run as administrator, Detect applications unable to launch installers under UAC, Detect compatibility issues for applications and drivers, Configure Corrupted File Recovery Behavior, Disk Diagnostic: Configure custom alert text, Disk Diagnostic: Configure execution level, Microsoft Support Diagnostic Tool: Configure execution level, Microsoft Support Diagnostic Tool: Restrict tool download, Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider, Troubleshooting: Allow users to access recommended troubleshooting for known problems, Configure MSI Corrupted File Recovery Behavior, Configure Security Policy for Scripted Diagnostics, Troubleshooting: Allow users to access and run Troubleshooting Wizards, Troubleshooting: Allow users to access online troubleshooting content on Microsoft servers from the Troubleshooting Control Panel (via the Windows Online Troubleshooting Service - WOTS), Diagnostics: Configure scenario execution level, Diagnostics: Configure scenario retention, Configure the level of TPM owner authorization information available to the operating system, Configure the list of blocked TPM commands. * Right-click the current Graphics item in Device manager, and select "Update driver". On the displayed panel, right-click the Use the hardware default graphics adapter for all Remote Desktop Services sessionsentry and then select Editfrom the displayed context menu. Then click on Browse my computer for driver software > Let me pick from a list of device drivers > Microsoft Basic Display Adapter, and click OK button." Share Improve this answer Follow answered Jun 12, 2019 at 22:39 BadKitty 1 Add a comment Use the Windows + R key and the dxdiag command, then press Enter to type and then press Enter to open the DirectX Diagnostic Tool. Block launching desktop apps associated with a URI scheme. The "fix" forces the old XDDM driver to be used. start Hyper-V manager go to Hyper-V Settings > Physical GPUs select your GPU check the box Use this GPU with RemoteFX click OK select your virtual machine click Settings click Add Hardware > RemoteFX 3D Video Adapter click Add update RemoteFX settings for your needs click OK That is. Click on the "Display" tab and look to the right under " Driver Model" under the Driver group box. Use WDDM graphics display driver for Remote Desktop Connections = Disabled. If you enable or do not configure this policy setting, Remote Desktop Connections will use WDDM graphics display driver. The problem is that Vic-3D 9 requires OpenGL 2.0 and the normal Remote Desktop graphics adapter supplies 1.1. . Always prompt for password upon connection; Do not allow local administrators to customize permissions WDDM 1.2 compatible driver . If you are using Windows 10 pro v1909, disable 'Use WDDM graphics display driver for Remote Desktop Connection'. XPDM and WDDM display drivers cannot co-reside; all graphics adapters in a system must use the same display driver model. Configure additional sources for untrusted files in Windows Defender Application Guard. Workaround: Set "Use WDDM graphics display driver for Remote Desktop Connections" to Disabled in group policy. Do not allow pinning programs to the Taskbar, Do not allow pinning Store app to the Taskbar, Do not allow taskbars on more than one display, Do not display any custom toolbars in the taskbar, Do not display or track items in Jump Lists from remote locations, Do not keep history of recently opened documents, Do not search programs and Control Panel items, Do not use the search-based method when resolving shell shortcuts, Do not use the tracking-based method when resolving shell shortcuts, Force Start to be either full screen size or menu size, Go to the desktop instead of Start when signing in, Gray unavailable Windows Installer programs Start Menu shortcuts, Prevent changes to Taskbar and Start Menu Settings, Prevent users from adding or removing toolbars, Prevent users from customizing their Start Screen, Prevent users from moving taskbar to another screen dock location, Prevent users from uninstalling applications from Start, Remove access to the context menus for the taskbar, Remove All Programs list from the Start menu, Remove Clock from the system notification area, Remove common program groups from Start Menu. - Use WDDM graphics display driver for Remote Desktop Connections Background: PAM was experiencing slowness in opening RDP session for some Windows target device The issue was solved after turn off this group policy for Windows target device side. Allow or Disallow use of encryption to protect the RPC protocol messages between File Share Shadow Copy Provider running on application server and File Share Shadow Copy Agent running on the file servers. Configure Microsoft Defender Application Guard clipboard settings, Configure Microsoft Defender Application Guard print settings, Prevent enterprise websites from loading non-enterprise content in Microsoft Edge and Internet Explorer, Turn on Microsoft Defender Application Guard in Managed Mode, Use a common set of exploit protection settings, Allow Address bar drop-down list suggestions, Allow configuration updates for the Books Library, Allow extended telemetry for the Books tab, Allow Microsoft Edge to pre-launch at Windows startup, when the system is idle, and each time Microsoft Edge is closed, Allow Microsoft Edge to start and load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed, Always show the Books Library in Microsoft Edge, Configure search suggestions in Address bar, Configure the Adobe Flash Click-to-Run setting. set the policy "Use WDDM graphics display driver for Remote Desktop Connections" to DISABLED. If you enable or do not configure this policy setting, Remote Desktop Connections will use WDDM graphics display driver. The Primary Machine is a Windows PC, laptop or Surface Pro tablet. Press the ' Apply . Can confirm this works around the issue for me as well (only had to reconnect RDP, not reboot though). As the VDA cannot load the display driver, it would not be able to remote using HDX. This is a known Vista/Windows 7 limitation. On the affected machine, in Group Policy Editor, under Remote Desktop Session Host -> Remote Session Environment . XP Display Driver Model (XPDM or XDDM): XPDM drivers supply a user interface that visually resembles the Windows XP*/2000* user . By typing gpedit.msc in the Start menu or Run box (Win+R) Browse to: Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment Find the item "Use WDDM graphics display driver for Remote Desktop Connections" and disable it. For others and for clarity, it is actually: Edit Group Policy . Step 1: Select an appropriate GPU optimized Azure virtual machine size Use GPO to force use of XDDM rather than WDDM. To do it, open the Local Group Policy Editor (gpedit.msc) and set Use WDDM graphics display driver for Remote Desktop Connections = Disabled in Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host -> Remote Session Environment (or the same in the registry: reg add . The WDDM graphics display driver for Remote Desktop Connection which is enabled by default in Windows 10 v2004 and above needs to be disabled as it is not supported by the Citrix VDA. Find your Citrix Admins group, and click OK. For PDF files that have both landscape and portrait pages, print each in its own orientation. (Image-2) Version of WDDM of the GPU driver on The Windows System Back to the top Info: In the VM, set a codec that is appropriate for the anticipated end-user workloads. Turn off the display of thumbnails and only display icons on network folders, Turn off Windows Libraries features that rely on indexed file data, Allow Windows Runtime apps to revoke enterprise data, Configure Traditional Chinese IME version, Do not include Non-Publishing Standard Glyph in the candidate list, Restrict character code range of conversion, Turn on misconversion logging for misconversion report, Custom Instant Search Internet search provider, File menu: Disable closing the browser and Explorer windows, File menu: Disable Save As menu option, File menu: Disable Save As Web Page Complete, Help menu: Remove 'For Netscape Users' menu option, Help menu: Remove 'Send Feedback' menu option, Help menu: Remove 'Tip of the Day' menu option, Tools menu: Disable Internet Options menu option, View menu: Disable Full Screen menu option, Hide the button (next to the New Tab button) that opens Microsoft Edge, Turn off details in messages about Internet connection problems, Start the Internet Connection Wizard automatically, Allow the display of image download placeholders, Turn on printing of background colors and images, Turn off inline AutoComplete in File Explorer, Prevent specifying the color of links that have already been clicked, Prevent specifying the color of links that have not yet been clicked, Disable adding schedules for offline pages, Disable channel user interface completely, Disable downloading of site subscription content, Disable editing and creating of schedule groups, Disable editing schedules for offline pages, Disable removing schedules for offline pages, File size limits for Restricted Sites zone, Turn off automatic download of the ActiveX VersionList, Disable customizing browser toolbar buttons, Disable changing Calendar and Contact settings, Disable changing Profile Assistant settings, Disable changing Temporary Internet files settings, Disable external branding of Internet Explorer, Display error message on proxy script download failure, Identity Manager: Prevent users from using Identities, Notify users if Internet Explorer is not the default web browser, Position the menu bar above the navigation bar, Search: Disable Find Files via F3 within the browser, Turn on the auto-complete feature for user names and passwords on forms, Use Automatic Detection for dial-up connections, Permit use of Applications preference extension, Permit use of Control Panel Settings (Computers), Permit use of Control Panel Settings (Users), Permit use of Data Sources preference extension, Permit use of Devices preference extension, Permit use of Drive Maps preference extension, Permit use of Environment preference extension, Permit use of Folder Options preference extension, Permit use of Folders preference extension, Permit use of Ini Files preference extension, Permit use of Internet Settings preference extension, Permit use of Local Users and Groups preference extension, Permit use of Network Options preference extension, Permit use of Network Shares preference extension, Permit use of Power Options preference extension, Permit use of Printers preference extension, Permit use of Regional Options preference extension, Permit use of Registry preference extension, Permit use of Scheduled Tasks preference extension, Permit use of Services preference extension, Permit use of Shortcuts preference extension, Permit use of Start Menu preference extension, Group Policy tab for Active Directory Tools, Restrict the user from entering author mode, Restrict users to the explicitly permitted list of snap-ins, Configure the inclusion of Microsoft Edge tabs into Alt-Tab, Prevent Application Sharing in true color, Prevent changing DirectSound Audio setting, Allow persisting automatic acceptance of Calls.