MS TS 2008 - Event ID 56 - TermDD (Investigation)

Log Name: System
Source: TermDD
Date: 14/09/2010 18:59:18
Event ID: 56
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: *******.domain.com
Description:
The Terminal Server security layer detected an error in the protocol stream and has disconnected the client.
Event Xml:



56
2
0
0x80000000000000

211564
System
******************



\Device\Termdd
00000400010000000000000038000AC00000000038000AC00000000000000000000000000000000032000AD0



______________________________________________________________________

Checks:

* Setup RDP v.7 on workstation
* Check Proliant Support Pack for Windows 2008 R2
* Update PowerShell to version 2
* Run continious ping to the server
* reinstall network driver/update network driver
* check that all devices have been installed correctly

http://h20000.www2.hp.com/bc/docs/support/SupportManual/c01639594/c01639594.pdf
http://www.petri.co.il/analyze-windows-performance-logs.htm
http://support.microsoft.com/kb/950086/en-us

disable RSS