Hi there,
for a customer we're in charge of maintaining their servers. In the past we have set up 2 single environments, a production and a test, both on 2008 R2 that also had issues with the Windows Mobile 6.5.
All we had to do there was disable NLA, set the security layer to RDP Security Layer and the Encryption level to client compatible.
For the new environment we set up there are 2 terminal servers that *were* connected to a broker. These also have NLA disabled and the RDP Security and client compatible settings set. From our perspective they should be identical thus. Because they kept having issues connecting with it we removed the broker. But unfortunately they're still not able to connect whilst the same device connects fine to both old environments.
The vendor from the Windows Mobile device also has an article that it might have issues with a 2048 encryption key. We haven't imported certificates, so the default auto generated one is used and some quick connections with openssl's s_client module to all the servers teaches us they're all running with a 2048 bit key. So basically that's no difference either.
So for the question, does anyone have any idea why the windows mobile 6.5 won't connect (they give a security error)? I'm suspecting the fact that they were configured in a broker might have changed some low level settings not visible from the GUI that's causing the clients to throw the security error now. Otherwise I have no idea what could be different. Changing the security layer and encryption level on the other hosts, which never have been part of a farm, was sufficient right away.
Unfortunately we don't have any Windows Mobile 6.5 devices ourselves. According to their supplier they have fully updated the WM6.5 clients. If there's a RDP client, preferably from MS itself, that does fully support 2008 and 2012 that would be great too. So far I haven't been able to find one (from MS, there are several apps from other vendors that claim they support this RDP version fully - maybe we should just go with those but there's quite a few handhelds and with it quite a few client licenses :)).
Thanks in advance.