Hi all, I have a Remote Desktop Session Host installed in a Citrix Server, every thing works fine for almost 3 months and then the users lost the ability to log into the server.
I go for the usual suspect the licensing server, but everything seems fine in that end. I check that using PowerShell
$obj = gwmi -namespace "Root/CIMV2/TerminalServices" Win32_TerminalServiceSetting
$obj.GetSpecifiedLicenseServerList()
And verifying the group policy and the Licensing Diagnosis in Remote Desktop Session Host Configuration.
The only thing that I found strange in the event viewer, is that with every attempt to connection after the session close event this event show up
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System><Provider Name="Microsoft-Windows-TerminalServices-LocalSessionManager" Guid="{5D896912-022D-40AA-A3A8-4FA5515C76D7}" /><EventID>40</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x1000000000000000</Keywords><TimeCreated SystemTime="2015-08-28T12:07:18.608801000Z" /><EventRecordID>1784</EventRecordID><Correlation ActivityID="{F440142F-FB97-4B4F-A4A2-1C1AF0170000}" /><Execution ProcessID="760" ThreadID="6440" /><Channel>Microsoft-Windows-TerminalServices-LocalSessionManager/Operational</Channel><Computer>xxxxx.xxx.xxx</Computer><Security UserID="S-1-5-18" /></System>
- <UserData>
- <EventXML xmlns="Event_NS"><Session>2</Session><Reason>12</Reason></EventXML></UserData></Event>I can connect with RDP using an admin account but any attempt to connect using RDP with a user account, ends in the screen loading the user and closing the connection after two seconds.