Users getting kick off 2008 x64 TS server - event ID 4005 - source: Winlogon

-

hi everyone,

have new win 2008 x64 ts server install win updates installed on it. periodically individual users getting disconnected, seems not users. when user knock off in application event log (on server) error event id 4005 advising 'the windows logon process has unexpectedly terminated'. (nothing shows in pc event logs)

user can reconnect , programs still open , running. happening approximately 2-4 times day 1/2 of users. not seem matter if working in sessions or locked or idle.

here have tried:

1) switched ports in switch both client , server
2) installed 6.0 of msrdp client on stations
3) installed sp3 on system (all xp pro)
4) ran updates on ts server
5) updated broadcom quad nic card drivers latest version on dell site
6) ensure broadcom firmware date nic cards
7) setup triple team (load balancing) of nic cards onto same switch running gigabit - issue happening before teaming

clients running 1x 100btx , server running 3x 1000bt. have couple of systems have never been booted out majority have. systems have never been booted out had sp3 , msrdp 6.0 client why updated other systems problem persists.

replacing win 2k3 r2 ts server , issue did not exist on old server.

search forums , google error seem pertain vista bsod issues - not having.

thought , suggestions appreciated,

thanks,

thesonic1

hi all

just wanted let know issue resolved installing intel pt 1000 dual nic card , disabling 3 broadcomm nic ports (1 on-board , 1 dual nic pcie card) came dell server.

i did complete of suggestions listed above including upgrading rdp client 6.1 , installed suse enterprise desktop linux on test system , replaced 1 of users system having issue - same issues occured unsing linux client knew issue server related @ point.

not sure if ended being driver issue or conflict seems there no issues intel nic @ all.

thus in case $200 nic card have prevented 100's of hours spent on trying resolve issue.

i have not tried nic team yet afraid recreate issue single 1000bt connection seems handling user load no slow downs , 0 disconnected , error messages.

also aside have had little success 2008 x64 ts servers in virtual environment. seems vm esx or esxi network drivers not robust enough or configured have multiple rdp connections (never have issue rdp'ing in administrator on normal server.

you try downloading , installing latest drivers intel (i know not recommended did vm esxi 4 ts server built client) , seemed resolve of issues; ended building ts server on bare metal resolved issues. (this time native intel nic!!)

hope info helpful others - responses.

 

thesonic1



Windows Server  >  Remote Desktop Services (Terminal Services)



Comments

Post a Comment

Popular posts from this blog

some help on Event 540

-
does event 540 me distinguish between user , administrator access?    this event generated ypon successfull logon, logon exactly? successful logon on system?   is there other way log administrator access system using event viewer?   thank valuable response   georges hi,   as far know, cannot distinguish between user , administrator access event 540. more information, please refer to:   event id: 540 http://www.microsoft.com/technet/support/ee/transform.aspx?prodname=windows+operating+system&prodver=5.0&evtid=540&evtsrc=security&lcid=1033   events 528 , 540 http://blogs.msdn.com/b/ericfitz/archive/2004/12/09/279282.aspx   regards, bruce this posting provided "as is" no warranties, , confers no rights. please remember click "mark answer" on post helps you, , click "unmark answer" if marked post not answer question. can beneficial other community members reading thread.
Read more

WMI Repository 4GB limit - Win 2003 Ent Question

-
Image
hi there, i've question size limit on wmi repository (being 4gb). if isn't correct place post this, apologies , can let me know wheere post this? i've come across few servers running citrix have reached limit on wmi repository size , need install ibm director agent hw monitoring. during install getting 'out of disk space' errors entered in mofcomp.log: "(mon apr 02 04:10:36 2012.172843) : error occurred while processing item 4: (mon apr 02 04:10:36 2012.172843) : error number: 0x8004103b, facility: wmi description: out of disk space" when error number http://msdn.microsoft.com/en-us/library/windows/desktop/aa394559%28v=vs.85%29.aspx i see this: wbem_e_out_of_disk_space 2147749947 (0x8004103b) disk out of space or 4 gb limit on wmi repository (cim repository) size reached. windows xp , windows 2000/nt:   disk out of space. i'm wondering if there reason why limit set 4gb or can increase needs be? can't seem find reas
Read more

Event ID 1302 (error 1307) DFS replication service encountered an error while writing to the debug log file

-
Image
hello. we @ step 0 of migration frs dfsr sysvol replication on windows 2008r2 dc. every time run powershell dfsrmig / getmigrationstate says: "unable create dfsr migration log file. error 1307. all domain controllers have migrated global state 'start'. migration has reached consistent state on domain controllers. succeeded." it creates event id 1302 in "dfs replication" event log, explaining error 1307 means: "this security id may not assigned ownder of object ". i already checked space limits, quotas, permissions on c:\windows\debug according microsoft support article unable fix it. although, there new entries added dfsr00095.txt log file despite error. dfsrxxxx file has not been archived .gz format, and, beleive, contains dfsr diagnostics , events. here of latest entries: 20150908 08:47:27.867 11616 sysm  3354 migration::sysvolmigration::getsysvolreadyflag [mig] sysvol ready 20150908 08:47:27.867 11616 sysm   456 migrati
Read more