Event ID 1012 — Terminal Server Connections

Updated: January 5, 2012

Applies To: Windows Server 2008

green

Users can connect to a terminal server to run programs, save files, and use network resources on that server. When a user disconnects from a session, all processes running in the session, including applications, will continue to run on the terminal server.

The user logon mode on the terminal server can be configured to prevent new user sessions from being created on the terminal server. You might want to prevent new user sessions from being created on the terminal server when you are planning to take the terminal server offline for maintenance or to install new applications.

Event Details

Product: Windows Operating System
ID: 1012
Source: Microsoft-Windows-TerminalServices-RemoteConnectionManager
Version: 6.0
Symbolic Name: EVENT_EXCEEDED_MAX_LOGON_ATTEMPTS
Message: Remote session from client name %1 exceeded the maximum allowed failed logon attempts. The session was forcibly terminated.

Resolve

This is a normal condition. No further action is required.

Related Management Information

Terminal Server Connections

Terminal Services

Community Additions

ADD
Show: