Chromium Updates Disrupt Microsoft Remote Desktop Access
Technology outlet NeoWin recently reported a critical issue for enterprise networks. Microsoft urgently notified organizations about an impending browser change. Specifically, an upcoming Chromium browser update breaks Windows Server RD Web Access over 0.02% traffic. Chromium-based browsers will likely disrupt Windows Server Remote Desktop Web Access (RD Web Access) after their November update.
The End of XSLT Support
Google recently announced a major shift for Chromium browsers. These applications will officially drop client-side XSLT support by mid-November 2026. XSLT stands for Extensible Stylesheet Language Transformations. Essentially, it functions as a rule-based language. It transforms XML documents into alternative formats or structures.
Web pages frequently use browser-side XSLT to process XML data. This process ultimately generates visible content for users. Microsoft’s Remote Desktop Services portal heavily relies on this specific technology to render pages. Therefore, disabling this feature will prevent users from accessing the portal correctly.
Why Google is Making This Change
Google highlighted two primary reasons for deprecating XSLT. First, overall adoption remains remarkably low. Client-side XSLT usage currently accounts for merely 0.02 percent of total web traffic. Second, substantial security risks influence this decision.
Chromium currently utilizes libxslt for these operations. Unfortunately, this component represents a complex and aging C/C++ codebase. Consequently, such outdated code inherently harbors memory safety vulnerabilities. Hackers often exploit similar flaws through buffer overflows.
Workarounds for System Administrators
Microsoft quickly responded by releasing the KB5130993 update. Administrators can easily implement temporary workarounds using this patch. Furthermore, they can restore client-side XSLT processing through group policies or the Windows registry. IT teams simply need to set the XSLTEnabled value to 1 for Microsoft Edge or Google Chrome.
Alternative Solutions Provided by Microsoft
Microsoft also proposed an HTML5 Web client solution. Users can seamlessly launch a remote desktop session directly within their browser after authenticating. Alternatively, they can download a standard RDP file.
Another practical approach involves utilizing Microsoft Edge. Administrators can activate IE mode and whitelist the RD Web address. During the initial launch, Edge might request permission to enable ActiveX features. Ultimately, this prompt ensures smooth single sign-on capabilities using active user credentials.
