Why can the rdp connection fall off?

Question

Computer networks

Hello, the situation is this: there is a server 2012 domain controller, clients connect to it, from the outside of the network and from the inside, everything works stably from the inside, periodically from the outside (there is no system, it can work stably for a couple of days) the connection falls off and immediately connects back. Everything is fine with the Internet, the network is full of other servers, to which the connection is stable from the outside. The cable, ports, network cards changed, there is no result. This server has a problem, it does not receive the address via dhcp, it works only with the manually registered address. It also has a "limited" icon. I got it for service from a not very contact person. There is an opinion that the problem was created by him artificially. Taking it all down and putting it back together is a hassle. What will be the thoughts how to catch the glitch? What to filter in wireshark?

Answer 1

If done artificially, then look at what's in the logs, look for scripts. In wireshark, most likely nothing will happen. Another option, for example, is to compare the registry branches of the new and old OSes responsible for rdp. Try to log in under the account of another user and see if the network disappears or not, maybe the timeout is set