Answer the question
In order to leave comments, you need to log in
Why are RPD clients constantly reconnecting?
Good afternoon, there is a WS2016 server.
Some clients, when working on it, constantly reconnect every ~30 seconds. In the logs you can see:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-RemoteDesktopServices-RdpCoreTS" Guid="{1139C61B-B549-4251-8ED3-27250A1EDEC8}" />
<EventID>132</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>4</Task>
<Opcode>15</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2019-11-20T07:37:33.843382000Z" />
<EventRecordID>1713750</EventRecordID>
<Correlation ActivityID="{F420548B-C22F-4470-A4DA-195AB6590000}" />
<Execution ProcessID="1320" ThreadID="3348" />
<Channel>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational</Channel>
<Computer>++++</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="ChannelName">XPSRD</Data>
<Data Name="TunnelID">0</Data>
</EventData>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-RemoteDesktopServices-RdpCoreTS" Guid="{1139C61B-B549-4251-8ED3-27250A1EDEC8}" />
<EventID>143</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>4</Task>
<Opcode>15</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2019-11-20T07:37:33.845232800Z" />
<EventRecordID>1713751</EventRecordID>
<Correlation ActivityID="{F4201942-07DB-43A4-B1CA-D2FB81670000}" />
<Execution ProcessID="1320" ThreadID="3348" />
<Channel>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational</Channel>
<Computer>++++</Computer>
<Security UserID="S-1-5-20" />
</System>
- <EventData>
<Data Name="error">64</Data>
</EventData>
</Event>
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-RemoteDesktopServices-RdpCoreTS" Guid="{1139C61B-B549-4251-8ED3-27250A1EDEC8}" />
<EventID>226</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>4</Task>
<Opcode>19</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2019-11-20T07:37:33.845258300Z" />
<EventRecordID>1713752</EventRecordID>
<Correlation ActivityID="{F4201942-07DB-43A4-B1CA-D2FB81670000}" />
<Execution ProcessID="1320" ThreadID="3348" />
<Channel>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational</Channel>
<Computer>++++</Computer>
<Security UserID="S-1-5-20" />
</System>
- <EventData>
<Data Name="StateTransition">RDP_TCP</Data>
<Data Name="PreviousState">23</Data>
<Data Name="PreviousStateName">StateUnknown</Data>
<Data Name="NewState">21</Data>
<Data Name="NewStateName">StateDisconnected</Data>
<Data Name="Event">43</Data>
<Data Name="EventName">Event_Disconnect</Data>
<Data Name="ErrorCode">0x80070040</Data>
</EventData>
</Event>
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question