Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Auto Logoff after RDP to 2003 TS "Start program on connection" has stopped working

Posted on 2012-08-15
8
Medium Priority
?
1,960 Views
Last Modified: 2012-08-25
For the past 3-4 years, we've had users with RDP shortcuts set up to point to a terminal server, either via the use of MSTSC, with the "Start the following program on connection" or via a bookmark using our Sonicwall SSLVPN 2000 device. (which uses the mstsc program as an underlying script/base program).

When users launch, the RDP session connects to one of our terminal servers, and launches only that particular program. Users do not see the Start Menu, desktop, taskbar, etc. (see image 1)  When the user would exit the program, the RDP session would log itself out ... sometimes within seconds, sometimes within a minute or two.

As of last week, this auto logoff process has just stopped working. The RDP window just hangs there, with a blank blue or gray background screen, and never closes. If the user closes the window, it leaves behind a "disconnected" session on the terminal server. (see attached image #2)

Often, users need to log back in, and they go right back into that "disconnected" session (this is designed on purpose, as users often simply get disconnected and need to reconnect into their work).

I believe this stopped working properly when there was a power outage last Wednesday and many servers went through an ungraceful shutdown. I've rebooted the terminal servers, and domain controllers and have not had any luck. 2008R2 supposedly has some process called syswow64, but that is not applicable to 2003. Group Policy has not changed. I have not installed any Windows Updates either, since that power outage, nor really for a few weeks before.

Any help would be appreciated.
image-1---rdp-program.JPG
image-2---log-off-blank-screen.JPG
0
Comment
Question by:HornAlum
  • 6
  • 2
8 Comments
 
LVL 5

Assisted Solution

by:nazg82
nazg82 earned 600 total points
ID: 38296593
Are there any processes still running under the user account, when the user has closed the program? You can check this thru task manager.
0
 
LVL 5

Author Comment

by:HornAlum
ID: 38296664
So, before the user logs off and is running the program, they are running these processes (for that particular program)

prowin32.exe (this is the program you see)
rdpclip.exe
ccSvcHst.exe (we use Symantec Endpoint Protection)
userinit.exe

Upon log off, user is left with two processes:

rdpclip.exe
ccSvcHst.exe
0
 
LVL 5

Author Comment

by:HornAlum
ID: 38296701
Hmm, I killed the ccSvcHst processes and it logged it off. It's possible that Symantec process is causing issues. I did a little research and some people were having issues with that version (12.1 RU1). Supposedly MP1 had some fixes.

I'll have to investigate installing that update.
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 
LVL 5

Author Comment

by:HornAlum
ID: 38296811
tried a different TS and that server, it leaves behind the userinit.exe as well, which also has to be killed off to force the log off
0
 
LVL 5

Expert Comment

by:nazg82
ID: 38303846
I think that userinit.exe will hang if another service or process isn't shutting down properly. Solving the problem with ccSvcHst process will also solve the userinit.exe problem.
0
 
LVL 5

Author Comment

by:HornAlum
ID: 38304569
I believe I solved the userinit problem by going through the proper steps of disabling ctfmon. I'm upgrading Symantec 12 to MP1 this weekend across the network to attempt to resolve the ccSvcHst process
0
 
LVL 5

Accepted Solution

by:
HornAlum earned 0 total points
ID: 38312127
Symantec 12.1 RU1 MP1 patch resolved the issue, per release notes:

"Ending program… please wait" on ccSvcHst.exe during shutdown
Fix ID: 2607378
Symptom: Symantec Endpoint Protection client machines (workstations) are unable to shutdown gracefully. The message "Ending program... please wait" displays on ccSvcHst.exe but will not continue shutting down until "End Now" is selected.
Solution: The email session helper plugin (SavEmailSesHlp.dll) was modified to prevent a hang on shutdown.


Thanks for the help!
0
 
LVL 5

Author Closing Comment

by:HornAlum
ID: 38332096
found the ccSvcHst.exe process was still running when application was closed. Found 12.1 RU1 MP1 from Symantec resolved this bug
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
Loops Section Overview
Screencast - Getting to Know the Pipeline

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question