R
R
Rinsewind2019-11-20 10:53:47
RDP
Rinsewind, 2019-11-20 10:53:47

Why are RPD clients constantly reconnecting?

Good afternoon, there is a WS2016 server.
Some clients, when working on it, constantly reconnect every ~30 seconds. In the logs you can see:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft-Windows-RemoteDesktopServices-RdpCoreTS" Guid="{1139C61B-B549-4251-8ED3-27250A1EDEC8}" /> 
  <EventID>132</EventID> 
  <Version>0</Version> 
  <Level>4</Level> 
  <Task>4</Task> 
  <Opcode>15</Opcode> 
  <Keywords>0x4000000000000000</Keywords> 
  <TimeCreated SystemTime="2019-11-20T07:37:33.843382000Z" /> 
  <EventRecordID>1713750</EventRecordID> 
  <Correlation ActivityID="{F420548B-C22F-4470-A4DA-195AB6590000}" /> 
  <Execution ProcessID="1320" ThreadID="3348" /> 
  <Channel>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational</Channel> 
  <Computer>++++</Computer> 
  <Security UserID="S-1-5-20" /> 
  </System>
  <EventData>
  <Data Name="ChannelName">XPSRD</Data> 
  <Data Name="TunnelID">0</Data> 
  </EventData>
  </Event>

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft-Windows-RemoteDesktopServices-RdpCoreTS" Guid="{1139C61B-B549-4251-8ED3-27250A1EDEC8}" /> 
  <EventID>143</EventID> 
  <Version>0</Version> 
  <Level>3</Level> 
  <Task>4</Task> 
  <Opcode>15</Opcode> 
  <Keywords>0x4000000000000000</Keywords> 
  <TimeCreated SystemTime="2019-11-20T07:37:33.845232800Z" /> 
  <EventRecordID>1713751</EventRecordID> 
  <Correlation ActivityID="{F4201942-07DB-43A4-B1CA-D2FB81670000}" /> 
  <Execution ProcessID="1320" ThreadID="3348" /> 
  <Channel>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational</Channel> 
  <Computer>++++</Computer> 
  <Security UserID="S-1-5-20" /> 
  </System>
- <EventData>
  <Data Name="error">64</Data> 
  </EventData>
  </Event>

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft-Windows-RemoteDesktopServices-RdpCoreTS" Guid="{1139C61B-B549-4251-8ED3-27250A1EDEC8}" /> 
  <EventID>226</EventID> 
  <Version>0</Version> 
  <Level>3</Level> 
  <Task>4</Task> 
  <Opcode>19</Opcode> 
  <Keywords>0x4000000000000000</Keywords> 
  <TimeCreated SystemTime="2019-11-20T07:37:33.845258300Z" /> 
  <EventRecordID>1713752</EventRecordID> 
  <Correlation ActivityID="{F4201942-07DB-43A4-B1CA-D2FB81670000}" /> 
  <Execution ProcessID="1320" ThreadID="3348" /> 
  <Channel>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational</Channel> 
  <Computer>++++</Computer> 
  <Security UserID="S-1-5-20" /> 
  </System>
- <EventData>
  <Data Name="StateTransition">RDP_TCP</Data> 
  <Data Name="PreviousState">23</Data> 
  <Data Name="PreviousStateName">StateUnknown</Data> 
  <Data Name="NewState">21</Data> 
  <Data Name="NewStateName">StateDisconnected</Data> 
  <Data Name="Event">43</Data> 
  <Data Name="EventName">Event_Disconnect</Data> 
  <Data Name="ErrorCode">0x80070040</Data> 
  </EventData>
  </Event>

Then the reconnect happens. Perhaps, who faced?

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question