When I checked the event viewer again, the cause was that Tssdis (Remote Desktop Connection Broker) had moved to stop after execution. We do not know the detailed cause, but we would like to review the startup settings of the Tssdis (Remote Desktop Connection Broker) service. Thank you for all the research you have done for us.
2023年3月11日(土) 10:00 Michael Jumper <[email protected]>: > From the logs: > > INFO: RDP server closed/refused connection: Access denied by server > (account locked/disabled?) > > I would check whether the account used by that connection is locked or > disabled, and whether any of the credentials being used for that account > are incorrect and lead to it being locked. > > - Mike > > > On Fri, Mar 10, 2023 at 12:33 AM Ken <[email protected]> wrote: > >> Thanks for the reply. >> The guacd log is available here. >> >> 2023-03-05T12:56:42.143+09:00 guacd[7]: INFO: Creating new client for >> protocol "rdp" >> 2023-03-05T12:56:42.144+09:00 guacd[7]: INFO: Connection ID is >> "$1c297fdc-967e-4d5e-8d60-14b1724c8d05" >> 2023-03-05T12:56:42.205+09:00 guacd[29024]: INFO: No security mode >> specified. Defaulting to security mode negotiation with server. >> 2023-03-05T12:56:42.205+09:00 guacd[29024]: INFO: Resize method: none >> 2023-03-05T12:56:42.205+09:00 guacd[29024]: INFO: User >> "@c60ccc08-9c96-42dd-ae57-befd8c667a6a" joined connection >> "$1c297fdc-967e-4d5e-8d60-14b1724c8d05" (1 users now present) >> 2023-03-05T12:56:42.208+09:00 guacd[29024]: INFO: Loading keymap "base" >> 2023-03-05T12:56:42.208+09:00 guacd[29024]: INFO: Loading keymap >> "ja-jp-qwerty" >> 2023-03-05T12:56:43.904+09:00 guacd[29024]: INFO: RDP server >> closed/refused connection: Access denied by server (account >> locked/disabled?) >> 2023-03-05T12:56:43.947+09:00 guacd[29024]: INFO: User >> "@c60ccc08-9c96-42dd-ae57-befd8c667a6a" disconnected (0 users remain) >> 2023-03-05T12:56:43.947+09:00 guacd[29024]: INFO: Last user of connection >> "$1c297fdc-967e-4d5e-8d60-14b1724c8d05" disconnected >> 2023-03-05T12:56:43.950+09:00 guacd[7]: INFO: Connection >> "$1c297fdc-967e-4d5e-8d60-14b1724c8d05" removed. >> >> Once I was able to connect, I checked the Windows Server event viewer and >> confirmed that the service I probably needed for RDP was running. >> Confirmed Services: >> RpcSs(Remote Procedure Call (RPC)) >> TermService(Remote Desktop Service) >> UmRdpService(Remote Desktop Services UserMode Port Redirector) >> SessionEnv(Remote Desktop Configuration) >> RasMan(Remote Desktop Connection Manager) >> TermServLicensing(Remote Desktop Licensing) >> Tssdis(Remote Desktop Connection Broker) >> TScPubRPC(RemoteApp and Desktop Connection Management) >> Remote Desktop Management >> >> Do you know what else we need to check besides this service? >> If you know, it would be helpful to know. >> >> 2023年3月10日(金) 16:58 Michael Jumper <[email protected]>: >> >>> Can you provide the guacd logs? >>> >>> - Mike >>> >>> On Thu, Mar 9, 2023, 11:51 PM Ken <[email protected]> wrote: >>> >>>> Hello. >>>> >>>> I tried to make an RDP connection to Windows Server 2019 from a >>>> Guacamole 1.3.0 environment built with Docker, but could not connect. >>>> >>>> This is what was logged when the connection could not be made. >>>> >>>> After restarting the Windows Server, I was able to connect, but when I >>>> could not connect, there was a log like this. >>>> >>>> What do these logs indicate? >>>> >>>> Please let me know. Thank you in advance. >>>> >>>> >>>> >>>> 2023-03-05T12:56:43.948+09:00 Exception in thread "Thread-2322" >>>> java.lang.IllegalStateException: Message will not be sent because the >>>> WebSocket session has been closed >>>> >>>> 2023-03-05T12:56:43.948+09:00 at >>>> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:441) >>>> >>>> 2023-03-05T12:56:43.948+09:00 at >>>> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:314) >>>> >>>> 2023-03-05T12:56:43.948+09:00 at >>>> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:254) >>>> >>>> 2023-03-05T12:56:43.948+09:00 at >>>> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:195) >>>> >>>> 2023-03-05T12:56:43.948+09:00 at >>>> org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37) >>>> >>>> 2023-03-05T12:56:43.948+09:00 at >>>> org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152) >>>> >>>> 2023-03-05T12:56:43.948+09:00 at >>>> org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53) >>>> >>>> 2023-03-05T12:56:43.949+09:00 at >>>> org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253) >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> Windows の メール <https://go.microsoft.com/fwlink/?LinkId=550986> から送信 >>>> >>>> >>>> --------------------------------------------------------------------- >>>> To unsubscribe, e-mail: [email protected] For >>>> additional commands, e-mail: [email protected] >>> >>>
