We are experiencing semi-regular disconnects of the guacamole-server (guacd) while a user is interacting with a remote machine. Attached are the DEBUG-level guacd logs, which we see every time we experience the disconnects. I'm not sure how to further debug this issue.
I am also attaching the MS Event Logs for the `RemoteDesktop*` and `TerminalServices*` log sources. We see this exact same pattern of messages in all 3 services each time it disconnects.
Feb 8 14:46:21 ip-172-16-10-253 journal: guacd[148]: DEBUG:#011Clipboard data received. Reporting availability of clipboard data to RDP server. Feb 8 14:46:24 ip-172-16-10-253 journal: guacd[84]: DEBUG:#011Clipboard data received. Reporting availability of clipboard data to RDP server. Feb 8 14:46:41 ip-172-16-10-253 journal: guacd[148]: DEBUG:#011Clipboard data received. Reporting availability of clipboard data to RDP server. Feb 8 14:47:13 ip-172-16-10-253 journal: guacd[148]: DEBUG:#011Clipboard data received. Reporting availability of clipboard data to RDP server. Feb 8 14:47:22 ip-172-16-10-253 journal: guacd[148]: DEBUG:#011Clipboard data received. Reporting availability of clipboard data to RDP server. Feb 8 14:47:22 ip-172-16-10-253 journal: guacd[148]: DEBUG:#011ERRINFO_DECRYPT_FAILED (0x00001192):(a) Decryption using Standard RDP Security mechanisms (section 5.3.6) failed. Feb 8 14:47:22 ip-172-16-10-253 journal: (b) Session key creation using Standard RDP Security mechanisms (section 5.3.5) failed. Feb 8 14:47:22 ip-172-16-10-253 journal: guacd[148]: DEBUG:#011BIO_read returned a system error 104: Connection reset by peer Feb 8 14:47:22 ip-172-16-10-253 journal: guacd[148]: ERROR:#011Connection closed. Feb 8 14:47:22 ip-172-16-10-253 journal: guacd[148]: DEBUG:#011Unloading device 0 (Remote Access Filesystem) Feb 8 14:47:22 ip-172-16-10-253 journal: guacd[148]: DEBUG:#011SVC "rdpdr" disconnected. Feb 8 14:47:22 ip-172-16-10-253 journal: guacd[148]: DEBUG:#011SVC "rdpsnd" disconnected. Feb 8 14:47:22 ip-172-16-10-253 journal: guacd[148]: INFO:#011Internal RDP client disconnected Feb 8 14:47:22 ip-172-16-10-253 journal: guacd[148]: INFO:#011User "@5dd34373-1e17-4091-9670-c00fc2d68684" disconnected (0 users remain) Feb 8 14:47:22 ip-172-16-10-253 journal: guacd[148]: INFO:#011Last user of connection "$60bea827-60a1-403b-84b8-3c7358f490ee" disconnected Feb 8 14:47:22 ip-172-16-10-253 journal: guacd[148]: DEBUG:#011Requesting termination of client... Feb 8 14:47:22 ip-172-16-10-253 journal: guacd[148]: DEBUG:#011Client terminated successfully. Feb 8 14:47:22 ip-172-16-10-253 journal: guacd[8]: INFO:#011Connection "$60bea827-60a1-403b-84b8-3c7358f490ee" removed.
Level Date and Time Source Event ID Task Category Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 258 RemoteFX module The connection is not using advanced RemoteFX RemoteApp graphics Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 258 RemoteFX module The connection is not using advanced RemoteFX RemoteApp graphics Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel cliprdr has been connected between the server and the client using transport tunnel: 0. Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel Microsoft::Windows::RDS::DisplayControl has been closed between the server and the client on transport tunnel: 0. Error 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 227 RemoteFX module 'Failed CreateVirtualChannel call on this Connections Stack' in CUMRDPConnection::CreateVirtualChannel at 2349 err=[0x80070032] Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel Microsoft::Windows::RDS::DisplayControl has been connected between the server and the client using transport tunnel: 0. Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel rdpsnd has been connected between the server and the client using transport tunnel: 0. Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel AUDIO_PLAYBACK_DVC has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel AUDIO_PLAYBACK_DVC has been closed between the server and the client on transport tunnel: 0. Error 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 227 RemoteFX module 'Failed CreateVirtualChannel call on this Connections Stack' in CUMRDPConnection::CreateVirtualChannel at 2349 err=[0x80070032] Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel AUDIO_PLAYBACK_DVC has been connected between the server and the client using transport tunnel: 0. Error 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 227 RemoteFX module 'Failed CreateVirtualChannel call on this Connections Stack' in CUMRDPConnection::CreateVirtualChannel at 2349 err=[0x80070032] Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel AUDIO_PLAYBACK_DVC has been connected between the server and the client using transport tunnel: 0. Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel rdpdr has been connected between the server and the client using transport tunnel: 0. Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel Microsoft::Windows::RDS::Geometry::v08.01 has been closed between the server and the client on transport tunnel: 0. Error 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 227 RemoteFX module 'Failed CreateVirtualChannel call on this Connections Stack' in CUMRDPConnection::CreateVirtualChannel at 2349 err=[0x80070032] Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel Microsoft::Windows::RDS::Geometry::v08.01 has been connected between the server and the client using transport tunnel: 0. Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel Microsoft::Windows::RDS::Geometry::v08.01 has been closed between the server and the client on transport tunnel: 0. Error 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 227 RemoteFX module 'Failed CreateVirtualChannel call on this Connections Stack' in CUMRDPConnection::CreateVirtualChannel at 2349 err=[0x80070032] Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel Microsoft::Windows::RDS::Geometry::v08.01 has been connected between the server and the client using transport tunnel: 0. Error 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 227 RemoteFX module 'Failed CreateVirtualChannel call on this Connections Stack' in CUMRDPConnection::CreateVirtualChannel at 2349 err=[0x80070032] Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel Microsoft::Windows::RDS::Input has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel Microsoft::Windows::RDS::Input has been connected between the server and the client using transport tunnel: 0. Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: LogonNotify(SessionId=3) Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: ConnectNotify(SessionId=3) Error 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 227 RemoteFX module 'Failed CreateVirtualChannel call on this Connections Stack' in CUMRDPConnection::CreateVirtualChannel at 2349 err=[0x80070032] Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel Microsoft::Windows::RDS::Geometry::v08.01 has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel Microsoft::Windows::RDS::Geometry::v08.01 has been connected between the server and the client using transport tunnel: 0. Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 66 RemoteFX module The connection RDP-Tcp#29 was assigned to session 3 Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel rdpsnd has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel rdpdr has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: GetServerAutoReconnectInfo Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: DisconnectNotify Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: SetErrorInfo(0x0) Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: PreDisconnect(0) Warning 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 228 RemoteFX module Disconnect trace:CUMRDPConnection Disconnect trace:'calling spGfxPlugin->PreDisconnect()' in CUMRDPConnection::PreDisconnect at 4457 err=[0x0], Error code:0x0 Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel rdpsnd has been connected between the server and the client using transport tunnel: 0. Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel AUDIO_PLAYBACK_DVC has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel AUDIO_PLAYBACK_DVC has been closed between the server and the client on transport tunnel: 0. Error 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 227 RemoteFX module 'Failed CreateVirtualChannel call on this Connections Stack' in CUMRDPConnection::CreateVirtualChannel at 2349 err=[0x80070032] Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel AUDIO_PLAYBACK_DVC has been connected between the server and the client using transport tunnel: 0. Error 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 227 RemoteFX module 'Failed CreateVirtualChannel call on this Connections Stack' in CUMRDPConnection::CreateVirtualChannel at 2349 err=[0x80070032] Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel AUDIO_PLAYBACK_DVC has been connected between the server and the client using transport tunnel: 0. Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel rdpdr has been connected between the server and the client using transport tunnel: 0. Error 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 227 RemoteFX module 'Connection doesn't support logon error redirector' in CUMRDPConnection::GetLogonErrorRedirector at 4053 err=[0x80004001] Information 2/8/2021 4:00:00 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 258 RemoteFX module The connection is not using advanced RemoteFX RemoteApp graphics Error 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 227 RemoteFX module 'Failed GetConnectionProperty' in CUMRDPConnection::QueryProperty at 2735 err=[0x80004001] Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 258 RemoteFX module The connection is not using advanced RemoteFX RemoteApp graphics Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: ConnectNotify(SessionId=4) Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel Microsoft::Windows::RDS::Geometry::v08.01 has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel Microsoft::Windows::RDS::Video::Control::v08.01 has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel Microsoft::Windows::RDS::Video::Data::v08.01 has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel Microsoft::Windows::RDS::Geometry::v08.01 has been connected between the server and the client using transport tunnel: 0. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel Microsoft::Windows::RDS::Video::Data::v08.01 has been connected between the server and the client using transport tunnel: 0. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel Microsoft::Windows::RDS::Video::Control::v08.01 has been connected between the server and the client using transport tunnel: 0. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: OnReady Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: OnConnected Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 163 RemoteFX module The client supports RDP 7.1 or lower protocol. Server: DR138587V0 Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 169 RemoteFX module The client operating system type is (0, 0). Server: DR138587V0 Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel ECHO has been connected between the server and the client using transport tunnel: 0. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel Microsoft::Windows::RDS::Telemetry has been connected between the server and the client using transport tunnel: 0. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel rdpinpt has been connected between the server and the client using transport tunnel: 0. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel rdpgrfx has been connected between the server and the client using transport tunnel: 0. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 33 RemoteFX module Remote Desktop Protocol will use the RemoteFX guest mode module to connect to the client computer. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 66 RemoteFX module The connection RDP-Tcp#29 was assigned to session 4 Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: PreCreate Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: AuthenticateClientToSession Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 135 RemoteFX module The multi-transport connection finished for tunnel: 3, its transport type set to TCP: Reason Code: 2 (Forced by Server Configuration). Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 135 RemoteFX module The multi-transport connection finished for tunnel: 1, its transport type set to TCP: Reason Code: 1 (No Client UDP Support). Warning 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 101 RemoteFX module The network characteristics detection function has been disabled because of Reason Code: 1(Client not supported).. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 100 RemoteFX module The server has confirmed that the client's multi-transport capability. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 98 RemoteFX module A TCP connection has been successfully established. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: ProtocolComplete Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: SendClientLicense Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: GetSecurityFilterCreds Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 104 RemoteFX module Client timezone is [0] hour from UTC; Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: AcceptConnection Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: OnStartLicensing Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel rdpcmd has been connected between the server and the client using transport tunnel: 0. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 132 RemoteFX module A channel rdplic has been connected between the server and the client using transport tunnel: 0. Warning 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 101 RemoteFX module The network characteristics detection function has been disabled because of Reason Code: 2(Server Configuration).. Warning 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 105 RemoteFX module The server's security layer setting allows it to use native RDP encryption, which is no longer recommended. Consider changing the server security layer to require SSL. You can change this setting in Group Policy. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 141 RemoteFX module PerfCounter session started with instance ID 29 Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: SendPolicyData Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: PrepareForAccept Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 65 RemoteFX module Connection RDP-Tcp#29 created Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 131 RemoteFX module The server accepted a new TCP connection from client 172.16.10.253:38204. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 103 RemoteFX module The disconnect reason is 14 Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel rdplic has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel rdpcmd has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel rdpinpt has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 145 RemoteFX module During this connection, server has not sent data or graphics update for 0 seconds (Idle1: 0, Idle2: 0). Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 102 RemoteFX module The server has terminated main RDP connection with the client. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: OnDisconnected Warning 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 144 RemoteFX module TCP socket was gracefully terminated Warning 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 105 RemoteFX module The server's security layer setting allows it to use native RDP encryption, which is no longer recommended. Consider changing the server security layer to require SSL. You can change this setting in Group Policy. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 141 RemoteFX module PerfCounter session started with instance ID 28 Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: SendPolicyData Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: PrepareForAccept Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 65 RemoteFX module Connection RDP-Tcp#28 created Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 131 RemoteFX module The server accepted a new TCP connection from client 172.16.10.253:38202. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 103 RemoteFX module The disconnect reason is 14 Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel rdplic has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel rdpcmd has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel rdpinpt has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 145 RemoteFX module During this connection, server has not sent data or graphics update for 0 seconds (Idle1: 0, Idle2: 0). Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 102 RemoteFX module The server has terminated main RDP connection with the client. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: OnDisconnected Warning 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 144 RemoteFX module TCP socket was gracefully terminated Warning 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 105 RemoteFX module The server's security layer setting allows it to use native RDP encryption, which is no longer recommended. Consider changing the server security layer to require SSL. You can change this setting in Group Policy. Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 141 RemoteFX module PerfCounter session started with instance ID 27 Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: SendPolicyData Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: PrepareForAccept Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 65 RemoteFX module Connection RDP-Tcp#27 created Information 2/8/2021 3:59:59 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 131 RemoteFX module The server accepted a new TCP connection from client 172.16.10.253:38200. Information 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 103 RemoteFX module The disconnect reason is 0 Error 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 227 RemoteFX module 'Failed to get property Disconnect Reason' in CUMRDPConnection::Close at 2212 err=[0x80070057] Information 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: GetServerAutoReconnectInfo Information 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: GetServerAutoReconnectInfo Information 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: DisconnectNotify Information 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel rdpsnd has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel rdpdr has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel cliprdr has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: SetErrorInfo(0x0) Information 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: PreDisconnect(0) Warning 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 228 RemoteFX module Disconnect trace:CUMRDPConnection Disconnect trace:'calling spGfxPlugin->PreDisconnect()' in CUMRDPConnection::PreDisconnect at 4457 err=[0x0], Error code:0x0 Information 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel ECHO has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel Microsoft::Windows::RDS::Graphics has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel Microsoft::Windows::RDS::Frame_Buffer::Control::v08.01 has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel rdpgrfx has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel Microsoft::Windows::RDS::Telemetry has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel rdplic has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel rdpcmd has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 148 RemoteFX module Channel rdpinpt has been closed between the server and the client on transport tunnel: 0. Information 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 145 RemoteFX module During this connection, server has not sent data or graphics update for 0 seconds (Idle1: 0, Idle2: 0). Information 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 102 RemoteFX module The server has terminated main RDP connection with the client. Information 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 72 RemoteFX module Interface method called: OnDisconnected(server initiated) Warning 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 143 RemoteFX module TCP socket WRITE operation failed, error 995 Warning 2/8/2021 3:59:44 PM Microsoft-Windows-RemoteDesktopServices-RdpCoreTS 97 RemoteFX module "The RDP protocol component ""DATA ENCRYPTION"" detected an error (402) in the protocol stream and the client was disconnected."
Level Date and Time Source Event ID Task Category Information 2/8/2021 4:00:00 PM Microsoft-Windows-TerminalServices-LocalSessionManager 42 None "End session arbitration: User: DR138587V0\Administrator Session ID: 4" Information 2/8/2021 4:00:00 PM Microsoft-Windows-TerminalServices-LocalSessionManager 25 None "Remote Desktop Services: Session reconnection succeeded: User: DR138587V0\Administrator Session ID: 3 Source Network Address: 172.16.10.253" Information 2/8/2021 4:00:00 PM Microsoft-Windows-TerminalServices-LocalSessionManager 40 None Session 3 has been disconnected, reason code 5 Information 2/8/2021 4:00:00 PM Microsoft-Windows-TerminalServices-LocalSessionManager 40 None Session 4 has been disconnected, reason code 0 Information 2/8/2021 4:00:00 PM Microsoft-Windows-TerminalServices-RemoteConnectionManager 20521 None User config info will be loaded from local machine for this RDP-Tcp connection Information 2/8/2021 4:00:00 PM Microsoft-Windows-TerminalServices-LocalSessionManager 41 None "Begin session arbitration: User: DR138587V0\Administrator Session ID: 4" Information 2/8/2021 3:59:59 PM Microsoft-Windows-TerminalServices-RemoteConnectionManager 1158 None Remote Desktop Services accepted a connection from IP address 172.16.10.253. Information 2/8/2021 3:59:59 PM Microsoft-Windows-TerminalServices-RemoteConnectionManager 261 None Listener RDP-Tcp received a connection Information 2/8/2021 3:59:59 PM Microsoft-Windows-TerminalServices-RemoteConnectionManager 261 None Listener RDP-Tcp received a connection Information 2/8/2021 3:59:59 PM Microsoft-Windows-TerminalServices-RemoteConnectionManager 261 None Listener RDP-Tcp received a connection Information 2/8/2021 3:59:44 PM Microsoft-Windows-TerminalServices-LocalSessionManager 24 None "Remote Desktop Services: Session has been disconnected: User: DR138587V0\Administrator Session ID: 3 Source Network Address: 172.16.10.253" Information 2/8/2021 3:59:44 PM Microsoft-Windows-TerminalServices-LocalSessionManager 40 None Session 3 has been disconnected, reason code 0
--------------------------------------------------------------------- To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
