asked on

Admins intermittently unable to RDP to server in Azure

We connect from on-prem to servers in our Azure environment via a site-site VPN tunnel. This works fine, except on one server various users (admins) are unable to connect - receiving a generic 'Internal Error' on the client.
This morning a single admin was able to connect (no others are showing as logged in). We are seeing the following event hourly (source = TS Connection Manager).

The RD Session Host server received large number of incomplete connections. The system may be under attack.

Note that we do not allow connections from the public IP, and monitoring traffic from our private network at our firewall shoes minimal traffic.

We have yet to reset the VM (this time) as it is in use otherwise and we'd like to get to the root of the problem.

Has anyone seen this issue and found a definite solution?

Bembi

I guess you should - as far as you can connect - inpect the security log of this machine to get aware, what is going on and if you can see logon attemps and where they are coming from.

Also netstat (or even the resource monitor) may show active connections, you may see, which sources you can identify.

If you can identify a source, you know were you have to continue to investigate.
I can have a RDP client software in my mind which tries to reconnect.

This question needs an answer!

Become an EE member today

7 DAY FREE TRIAL

Members can start a 7-Day Free trial then enjoy unlimited access to the platform.

View membership options

Learn why we charge membership fees

We get it - no one likes a content blocker. Take one extra minute and find out why we block content.