Event ID 50 TermDD x.224

Hi Experts, I have an SBS2011 server that gets hundreds of Event 50 TermDD x.224 events logged. Specifically the text is shown below. I've read this can be related to RDP and it refers to it in the event, but no one accesses this server via RDP, this example below was at 3:48AM but it happens all throughout the day and night. Right now the only user who is enabled to use RDP is administrator.

Has anyone experienced this and any suggestions on where to look to fix this?


Log Name:      System
Source:        TermDD
Date:          8/30/2015 3:48:30 AM
Event ID:      50
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      servername.domainname.local
Description:
The RDP protocol component X.224 detected an error in the protocol stream and has disconnected the client.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="TermDD" />
    <EventID Qualifiers="49162">50</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-08-30T08:48:30.190337900Z" />
    <EventRecordID>5608964</EventRecordID>
    <Channel>System</Channel>
    <Computer>servername.domainname.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>\Device\Termdd</Data>
    <Data>X.224</Data>
    <Binary>00AB0800020030000000000032000AC00000000032000AC0000000000000000000000000000000002200000000000000</Binary>
  </EventData>
</Event>
LVL 2
ChiITAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Toni UranjekConsultant/TrainerCommented:
Do you have any 3rd party software installed on thus computer, like AV?
Do you have latest network card drivers installed?
ChiITAuthor Commented:
yes I do have an AV installed. NIC drivers probably need an update...
Toni UranjekConsultant/TrainerCommented:
Is it possible, that error times correlate with AV scanning, or is it cimpletley random?
Is it possible to update the drivers?
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

ChiITAuthor Commented:
It is random, definitely not related to AV scanning. I can update the drivers but can't until the weekend as its a production server that can't go down during the week.
Toni UranjekConsultant/TrainerCommented:
Server wouldn't have expired certificate installed?

You can also delete RDP-Tcp connection and create new one.
ChiITAuthor Commented:
Hi All, I ended up fixing this by going into the RDC Manager and unchecking "allow connections only from computers running RD with network authentication

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ChiITAuthor Commented:
I found the answer myself and applied, the problem has not reoccured since
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SBS

From novice to tech pro — start learning today.