Graphic issues on Windows 11 client with mstsc RDP after applying Windows patch level 24H2 or PAM Native client when PAM Client installed on Linux or MAC OS.

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

When connecting to any Windows server through the PAM client using mstsc.exe on a Windows 11 client we are seeing GUI issues making the RDP connection useless. This only started after updating Windows 11 to version 24H2. This problem does not affect using the PAM Access RDP Applet. It does affect using mstsc.exe with both the PAM TCP/UDP services and new PAM 4.2 feature for Windows Gateway services (see PAM Gateway for RDP).

This kind of behavior also can happen with PAM Client installed on Linux Ubuntu or MAC OS and using PAM Native Client to RDP to Windows 11 machines.

 

 

Environment

PAM Client 4.2.1 installed on Windows 11, version 24H2.
PAM Client 4.2.1 installed on Linux  22.04.2 or MAC OS.

Cause

The Windows 11 patch version 24H2 removed a version of bitmap encoding support from mstsc.exe that was utilized by our RDP proxy service. 

Resolution

Applying Windows patch March 11, 2025—KB5053598 should resolve this problem. If you continue to have problems with the March, or a later, monthly patch applied to Windows 11 24H2, open a case with PAM Support. This resolved the issue for mstsc sessions and for PAM Client native rdp under MAC OS.

For Ubuntu version 22.04.2 on PAM Client side was having the issue because the Ubuntu was with old version. After upgraded Ubuntu 24 this issue disappeared.