Hello Andrew Hansford,
The black screen with RDP error 0x3:0xf combined with the “Windows Remote Display Adapter” failing to load with Code 31 points to a driver initialization failure in the Remote Desktop stack. In Windows 11, the Remote Display Adapter is a virtual device that gets enumerated when an RDP session is established. If it cannot load, the session will fail before the remote system even registers the connection, which explains why the target machine shows no lock screen activity.
To answer your direct question: yes, you can look at logs to determine why the driver fails. The primary source is the System log in Event Viewer (eventvwr.msc). Navigate to Windows Logs > System and filter for Source = Kernel-PnP and Source = RemoteDesktopServices-RdpCoreTS. Kernel-PnP will log detailed driver load failures, including the exact error code and whether the INF file or catalog signature was rejected. RdpCoreTS will log session initialization errors that correspond to the 0x3:0xf failure.
Additionally, check the DriverFrameworks-UserMode log under Applications and Services Logs > Microsoft > Windows > DriverFrameworks-UserMode > Operational. This log records UMDF driver load attempts and failures, including the Remote Display Adapter. If Code 31 is being thrown because of a dependency or signature issue, you will see it here.
For deeper analysis, you can enable Analytic and Debug logs for Remote Desktop. In Event Viewer, right‑click Applications and Services Logs > Microsoft > Windows > RemoteDesktopServices-RdpCoreTS > Analytic, select Enable Log, then reproduce the connection attempt. This will capture low‑level RDP stack events.
If you want to trace the driver load sequence, you can also use Procmon from Sysinternals with a filter on Process Name = svchost.exe and Operation = Load Image or RegOpenKey for the Remote Display Adapter driver. This will show you exactly which registry keys and files are being accessed. The driver is registered under:
HKLM\SYSTEM\CurrentControlSet\Services\RdpVideoMiniport
and its binaries are located in %SystemRoot%\System32\drivers\rdpvideominiport.sys. If the file is missing, corrupted, or mismatched with the OS build, Code 31 will occur.
In short, the logs you should check are: System (Kernel-PnP, RdpCoreTS), DriverFrameworks-UserMode Operational, and optionally the Analytic logs for RdpCoreTS. These will tell you why Windows cannot load the Microsoft‑provided driver. If the driver binary itself is corrupted or mismatched, the supported fix is to run sfc /scannow and DISM /Online /Cleanup-Image /RestoreHealth to repair system components. If that does not resolve it, an in‑place upgrade repair of Windows 11 is the only way to restore the Remote Display Adapter driver.
I hope you've found something useful here. If it helps you get more insight into the issue, it's appreciated to accept the answer. Should you have more questions, feel free to leave a message. Have a nice day!
Domic Vo.