Solved

RDP ClientActiveX Has Been Disconnected

Posted on 2013-07-01
8
6,000 Views
Last Modified: 2013-07-17
We have a Citrix XenApp 6.5 server (we'll call it Citrix01) running on Server 2008 R2 that is kicking users off their remote desktop connections when connecting through a Citrix Access Gateway server. They get a message saying the Administrator has disconnected your session. This is logged in the event viewer on Citrix01 when it occurs:
 
Event ID: 1026
Source: TerminalServices-ClientActiveXCore
RDP ClientActiveX has been disconnected (Reason=3)

Event ID: 1105
TerminalServices-ClientActiveXCore
The multi-transport connection has been disconnected.
 
I've found lots of other reason codes for this error, however, I'm hoping someone can tell me what Reason 3 is as I have not been able to find it. On the user's computer, the event viewer only lists that the connection was disconnected but does not indicate that is terminated unexpectedly.

If you need anymore information regarding this error or the environment, please reply and I'll get it to you.
0
Comment
Question by:onlineofmq
  • 4
  • 2
  • 2
8 Comments
 
LVL 29

Expert Comment

by:Sudeep Sharma
ID: 39294184
Are the drivers and firmware of the NIC upto date?

Sudeep
0
 
LVL 4

Accepted Solution

by:
Tushar_Darwatkar earned 250 total points
ID: 39295544
0
 
LVL 1

Author Comment

by:onlineofmq
ID: 39296537
I forgot to mention, this is a virtual server (ESXi 5.0). When the users are kicked off, they can reconnect right away, no problem. It happens randomly. One user said it can happen anywhere from 5 minutes to 2 hours after logging in.

Tushar_Darwatkar, I will try uninstalling the update and have the users report back. It may take a few days due to the upcoming holiday, but I will report back if we continue to have issues or not. Thank you for this information.
0
 
LVL 29

Assisted Solution

by:Sudeep Sharma
Sudeep Sharma earned 250 total points
ID: 39297691
So have you installed VMTools on the server?

Which NIC type is selected on the Server. We generally select VMXNET3 where heavy network activity is required on the server.

Sudeep
0
Promote certifications in your email signature

Has your company recently won an award or achieved a certification? They'll no doubt want to show it off. Email signature images used to promote certifications & awards can instantly establish credibility with a recipient and provide you with numerous benefits.

 
LVL 1

Author Comment

by:onlineofmq
ID: 39297857
The current NIC type is E1000. I will try a VMXNET3 adapter after testing the uninstalled Windows update as suggested earlier.
0
 
LVL 4

Expert Comment

by:Tushar_Darwatkar
ID: 39298787
Sure no problem.... Waiting to hear from you in this regards...  :)
0
 
LVL 1

Author Comment

by:onlineofmq
ID: 39319208
Ok, thanks for being patient. I had a user get kicked off today. The previous event is not being logged with the same details, I'm guessing because the update was removed, which provided the information for that event ID. Now it just shows the following events from the Security log:

4648     Logon was attempted
4624     Logon was successful
4634     Account was logged off. Logon type 3. Event is generated when a logon session is destroyed.

It does this twice (two sets of the above messages), and they occur all at the same time (down to the second). However, the Logon IDs listed in each set are different. The user was logged on for approximately 2 hours when they were kicked off and the above was logged.

That's the only thing that strikes me as odd, two sets of successfull log on/log off, but the events were created when they were disconnected. I will be looking into changing the VMNic type during a maintenance period the next few days unless someone has another idea.
0
 
LVL 1

Author Comment

by:onlineofmq
ID: 39333223
Well, I changed the VMNic type and a user still had a disconnect. I'm going to continue to look into and split the points between you two for giving me some ideas at least. Thanks again, I'll continue looking.
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

#Citrix #Citrix Netscaler #HTTP Compression #Load Balance
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now