Ran into this problem this morning when installing Service Pack 1 for Windows 2008 R2.
Service Pack installs successfully, but after we couldn’t login via remote desktop services.

Checked the eventlog remotely and found the following in the application log.
Event ID: 1000 reports an application error…

Faulting application name: svchost.exe_TermService, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: rdpcorekmts.dll, version: 6.1.7600.16952, time stamp: 0x4f1f9e66
Exception code: 0xc0000005
Fault offset: 0x000000000000a793
Faulting process id: 0x1810
Faulting application start time: 0x01cda141e1e73a0d
Faulting application path: C:\Windows\System32\svchost.exe
Faulting module path: C:\Windows\system32\rdpcorekmts.dll
Report Id: 7b98872b-0d35-11e2-bbf8-2c768aaa6162

After a quick G-search I found the following thread;


And the following fix:

You need to run this with a user that is an admin on the target system.
Copy PsExec and rdpcorekmts.dll (the new version) to a folder.
Create a file named servernames.txt and add the name of the server(s) you want to fix.
Create a start.cmd file edit it and add the following:

@echo off
Echo ****************************************************
echo * This process will update and change the file rdpcorekmts. *
echo * If you don’t want to do that, ‘X’ out now                 *
echo ***************************************************

:stop remote desktop services for /f %%i in (servernames.txt) do psexec \\%%i net stop “Remote Desktop Services” /y

:Take Ownership for /f %%i in (servernames.txt) do psexec \\%%i takeown /F c:\windows\system32\rdpcorekmts.dll

:Change permissions to full for /f %%i in (servernames.txt) do psexec \\%%i icacls c:\windows\system32\rdpcorekmts.dll /grant administrators:F

:Copy in newer version for /f %%i in (servernames.txt) do copy rdpcorekmts.dll \\%%i\c$\windows\system32\

:Change permissions back to read-only for /f %%i in (servernames.txt) do psexec \\%%i icacls c:\windows\system32\rdpcorekmts.dll /grant administrators:R

:start the service back up for /f %%i in (servernames.txt) do psexec \\%%i net start “Remote Desktop Services” /y

echo * Remove the names of the affected servers in the file Servernames *

Echo *Should be all done now. *
echo **************************

pause exit

Doubleclick start.cmd

You should now be able to login to your server.