We have this week, started having an issue on one or two of our remote desktop session host servers running 2012 R2, whereby when a user attempts to login, they are stuck on one of the login messages such as "processing group policy settings", "applying group policy printers policy" etc. This has happened to 3 different users, once each on three different days this week. It has only been seen to happen in the morning, and only once each day.
We then see on that server, a session with no user name, which is disconnected and stuck in a "signing out" state (confirmed by connecting to the session through task manager).
We can also see two locks on their user profile disk on our file server, locked by this same server. The user is unable to login at all. If we close the open files for their UPD, and they attempt to login again, they will instead get a message saying they couldn't be logged in because the remote desktop services service is busy (presumably signing out this phantom session).
Our only workaround, is to manually log them into a different specific server from our pool, and then have them connect to that session remotely.
Looking at events, I can see them in this order for this users first login attempt:
(Not unusual to see this, as we get one of these for almost every single user, on almost every single login, successful or otherwise).
I can then see many more login attempts by this user, each going through a set of events, ending with a disconnect with reason code 12 as below:
Anyone any thoughts on why this login attempt creates this rogue session, and how we can correct it?
Cheers
Eds
