detection.wiki

Microsoft-Windows-TerminalServices-SessionBroker-Client

22 events across 4 channels

Event IDTitleChannel
1013The server failed to retrieve the local computer netbios name.Operational
1014The server failed to retrieve the local computer FQDN.Operational
1015This Remote Desktop Session Host server cannot participate in RD Connection …Admin
1280Remote Desktop Services failed to join the Connection Broker on server param1.Operational
1281Remote Desktop Services successfully joined a farm on the Connection Broker …Operational
1282Remote Desktop Services failed while leaving the Connection Broker on server …Operational
1283Remote Desktop Services successfully left a farm on the Connection Broker server …Operational
1284Remote Desktop Connection Broker Client failed to initialize while joining the …Operational
1296Remote Desktop Connection Broker Client failed while getting redirection packet …Operational
1297Remote Desktop Connection Broker Client successfully received redirection packet …Analytic
1298Remote Desktop Connection Broker on server param1 failed to repopulate sessions.Operational
1299Remote Desktop Connection Broker on server param1 returned error on param2 …Operational
1300Remote Desktop Connection Broker Client rejected a call from an unauthorized ip …Operational
1301Remote Desktop Connection Broker Client received request for redirection.Operational
1302param2 existing sessions were successfully repopulated on Remote Desktop …Analytic
1303Remote Desktop Connection Broker on server param1 failed to get Cluster …Debug
1304Remote Desktop Connection Broker client successfully retrieved Cluster …Debug
1305RPC Connection with Remote Desktop Connection Broker on server param1 has been …Debug
1306Remote Desktop Connection Broker Client failed to redirect the user …Operational
1307Remote Desktop Connection Broker Client successfully redirected the user …Operational
1308User param1\param2 will be logged on to the local redirector machine (assuming …Operational
1309Remote Desktop Connection Broker Client failed to initialize Session Arbitration …Analytic

Event ID 1013 — The server failed to retrieve the local computer netbios name.

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Operational
Task
ConnectionBrokerClientstartup
Opcode
Readdata

Description

The server failed to retrieve the local computer netbios name.

Message #

The server failed to retrieve the local computer netbios name.
Error: %1

Fields #

NameDescription
param1 UnicodeString—

Event ID 1014 — The server failed to retrieve the local computer FQDN.

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Operational
Task
ConnectionBrokerClientstartup
Opcode
Readdata

Description

The server failed to retrieve the local computer FQDN.

Message #

The server failed to retrieve the local computer FQDN.
Error: %1

Fields #

NameDescription
param1 UnicodeString—

Event ID 1015 — This Remote Desktop Session Host server cannot participate in RD Connection Broker load balancing because the server is configured to use a Microso...

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Admin
Task
ConnectionBrokerClientstartup

Message #

This Remote Desktop Session Host server cannot participate in RD Connection Broker load balancing because the server is configured to use a Microsoft Windows Server 2003-based Session Directory server %1. The Session Directory feature in Windows Server 2003 does not support Remote Desktop Connection Broker load balancing.

Fields #

NameDescription
param1 UnicodeString—

Event ID 1280 — Remote Desktop Services failed to join the Connection Broker on server param1.

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Operational
Task
ConnectionBrokerClientstartup
Opcode
JoinRDConnectionBroker

Description

Remote Desktop Services failed to join the Connection Broker on server param1.

Message #

Remote Desktop Services failed to join the Connection Broker on server %1.
Error: %2

Fields #

NameDescription
param1 UnicodeString—
param2 UnicodeString—

Event ID 1281 — Remote Desktop Services successfully joined a farm on the Connection Broker server param1.

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Operational
Task
ConnectionBrokerClientstartup
Opcode
JoinRDConnectionBroker

Description

Remote Desktop Services successfully joined a farm on the Connection Broker server param1.

Message #

Remote Desktop Services successfully joined a farm on the Connection Broker server %1.

Fields #

NameDescription
param1 UnicodeString—

Event ID 1282 — Remote Desktop Services failed while leaving the Connection Broker on server param1.

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Operational
Task
ConnectionBrokerClientterminate
Opcode
LeaveRDConnectionBroker

Description

Remote Desktop Services failed while leaving the Connection Broker on server param1.

Message #

Remote Desktop Services failed while leaving the Connection Broker on server %1.
HRESULT = %2

Fields #

NameDescription
param1 UnicodeString—
param2 HexInt32—

Event ID 1283 — Remote Desktop Services successfully left a farm on the Connection Broker server param1.

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Operational
Task
ConnectionBrokerClientterminate
Opcode
LeaveRDConnectionBroker

Description

Remote Desktop Services successfully left a farm on the Connection Broker server param1.

Message #

Remote Desktop Services successfully left a farm on the Connection Broker server %1.

Fields #

NameDescription
param1 UnicodeString—

Event ID 1284 — Remote Desktop Connection Broker Client failed to initialize while joining the Connection Broker on server param1.

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Operational
Task
ConnectionBrokerClientstartup
Opcode
Initialization

Description

Remote Desktop Connection Broker Client failed to initialize while joining the Connection Broker on server param1.

Message #

Remote Desktop Connection Broker Client failed to initialize while joining the Connection Broker on server %1.
Error: %2

Fields #

NameDescription
param1 UnicodeString—
param2 UnicodeString—

Event ID 1296 — Remote Desktop Connection Broker Client failed while getting redirection packet from Connection Broker.

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Operational
Task
RDConnectionBrokerClientprocessesrequestfromauser
Opcode
ProcessRequest

Description

Remote Desktop Connection Broker Client failed while getting redirection packet from Connection Broker.

Message #

Remote Desktop Connection Broker Client failed while getting redirection packet from Connection Broker.
User : %1\%2 
Error: %3

Fields #

NameDescription
param1 UnicodeString—
param2 UnicodeString—
param3 UnicodeString—

Event ID 1297 — Remote Desktop Connection Broker Client successfully received redirection packet from Connection Broker.

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Analytic
Task
RDConnectionBrokerClientprocessesrequestfromauser
Opcode
ProcessRequest

Description

Remote Desktop Connection Broker Client successfully received redirection packet from Connection Broker.

Message #

Remote Desktop Connection Broker Client successfully received redirection packet from Connection Broker. 
User : %1\%2

Fields #

NameDescription
param1 UnicodeString—
param2 UnicodeString—

Event ID 1298 — Remote Desktop Connection Broker on server param1 failed to repopulate sessions.

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Operational
Task
ConnectionBrokerClientstartup
Opcode
ProcessRequest

Description

Remote Desktop Connection Broker on server param1 failed to repopulate sessions.

Message #

Remote Desktop Connection Broker on server %1 failed to repopulate sessions.
HRESULT = %2

Fields #

NameDescription
param1 UnicodeString—
param2 HexInt32—

Event ID 1299 — Remote Desktop Connection Broker on server param1 returned error on param2 notification.

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Operational
Task
RemoteDesktopServicessessionstatechangesarenotifiedtoRDConnectionBroker
Opcode
NotifyRDConnectionBroker

Description

Remote Desktop Connection Broker on server param1 returned error on param2 notification.

Message #

Remote Desktop Connection Broker on server %1 returned error on %2 notification.
Session Id : %3 
Error: %4

Fields #

NameDescription
param1 UnicodeString—
param2 UnicodeString—
param3 Int32—
param4 UnicodeString—

Event ID 1300 — Remote Desktop Connection Broker Client rejected a call from an unauthorized ip address param1.

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Operational
Task
RDConnectionBrokerClientprocessesrequestfromauser
Opcode
ProcessRequest

Description

Remote Desktop Connection Broker Client rejected a call from an unauthorized ip address param1.

Message #

Remote Desktop Connection Broker Client rejected a call from an unauthorized ip address %1.
HRESULT = %2

Fields #

NameDescription
param1 UnicodeString—
param2 HexInt32—

Event ID 1301 — Remote Desktop Connection Broker Client received request for redirection.

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Operational
Task
RDConnectionBrokerClientprocessesrequestfromauser
Opcode
ProcessRequest

Description

Remote Desktop Connection Broker Client received request for redirection.

Message #

Remote Desktop Connection Broker Client received request for redirection. 
User : %1\%2 
RDP Client Version : %3

Fields #

NameDescription
param1 UnicodeString—
param2 UnicodeString—
param3 Int32—

Event ID 1302 — param2 existing sessions were successfully repopulated on Remote Desktop Connection Broker server (param1).

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Analytic
Task
RDConnectionBrokerClientprocessesrequestfromauser
Opcode
ProcessRequest

Description

param2 existing sessions were successfully repopulated on Remote Desktop Connection Broker server (param1).

Message #

%2 existing sessions were successfully repopulated on Remote Desktop Connection Broker server (%1).

Fields #

NameDescription
param1 UnicodeString—
param2 Int32—

Event ID 1303 — Remote Desktop Connection Broker on server param1 failed to get Cluster credentials.

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Debug
Task
RDConnectionBrokerClientprocessesrequestfromauser
Opcode
ProcessRequest

Description

Remote Desktop Connection Broker on server param1 failed to get Cluster credentials.

Message #

Remote Desktop Connection Broker on server %1 failed to get Cluster credentials.
HRESULT = %2

Fields #

NameDescription
param1 UnicodeString—
param2 HexInt32—

Event ID 1304 — Remote Desktop Connection Broker client successfully retrieved Cluster credentials from Connection broker (param1).

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Debug
Task
RDConnectionBrokerClientprocessesrequestfromauser
Opcode
ProcessRequest

Description

Remote Desktop Connection Broker client successfully retrieved Cluster credentials from Connection broker (param1).

Message #

Remote Desktop Connection Broker client successfully retrieved Cluster credentials from Connection broker (%1).

Fields #

NameDescription
param1 UnicodeString—

Event ID 1305 — RPC Connection with Remote Desktop Connection Broker on server param1 has been lost.

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Debug
Task
RDConnectionBrokerClientprocessesrequestfromauser
Opcode
ProcessRequest

Description

RPC Connection with Remote Desktop Connection Broker on server param1 has been lost. We will try to reestablish connection.

Message #

RPC Connection with Remote Desktop Connection Broker on server %1 has been lost. We will try to reestablish connection.

Fields #

NameDescription
param1 UnicodeString—

Event ID 1306 — Remote Desktop Connection Broker Client failed to redirect the user param1\param2.

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Operational
Task
RDConnectionBrokerClientprocessesrequestfromauser
Opcode
ProcessRequest

Description

Remote Desktop Connection Broker Client failed to redirect the user param1\param2.

Message #

Remote Desktop Connection Broker Client failed to redirect the user %1\%2. 
Error: %3

Fields #

NameDescription
param1 UnicodeString—
param2 UnicodeString—
param3 UnicodeString—

Event ID 1307 — Remote Desktop Connection Broker Client successfully redirected the user param1\param2 to the endpoint param3.

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Operational
Task
RDConnectionBrokerClientprocessesrequestfromauser
Opcode
ProcessRequest

Description

Remote Desktop Connection Broker Client successfully redirected the user param1\param2 to the endpoint param3.

Message #

Remote Desktop Connection Broker Client successfully redirected the user %1\%2 to the endpoint %3. 
Ip Address of the end point = %4

Fields #

NameDescription
param1 UnicodeString—
param2 UnicodeString—
param3 UnicodeString—
param4 UnicodeString—

Event ID 1308 — User param1\param2 will be logged on to the local redirector machine (assuming TS Farm scenario).

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Operational
Task
RDConnectionBrokerClientprocessesrequestfromauser
Opcode
ProcessRequest

Description

User param1\param2 will be logged on to the local redirector machine (assuming TS Farm scenario). Sending local IP address to the client in the redirection packet.

Message #

User %1\%2 will be logged on to the local redirector machine (assuming TS Farm scenario). Sending local IP address to the client in the redirection packet.

Fields #

NameDescription
param1 UnicodeString—
param2 UnicodeString—

Event ID 1309 — Remote Desktop Connection Broker Client failed to initialize Session Arbitration Helper object for user param1.

Provider
Microsoft-Windows-TerminalServices-SessionBroker-Client
Channel
Analytic
Task
RDConnectionBrokerClientprocessesrequestfromauser
Opcode
ProcessRequest

Description

Remote Desktop Connection Broker Client failed to initialize Session Arbitration Helper object for user param1.

Message #

Remote Desktop Connection Broker Client failed to initialize Session Arbitration Helper object for user %1.
%2 
Error: %3

Fields #

NameDescription
param1 UnicodeString—
param2 UnicodeString—
param3 UnicodeString—