Event ID 1021 — TS Session Broker Security Group Configuration

  • Article

Applies To: Windows Server 2008

The Terminal Services Session Broker (TS Session Broker) server will not accept any connections from a terminal server whose computer account is not a member of the Session Directory Computers local group on the TS Session Broker server. By default, the Terminal Services Session Broker service creates the local group, but the group is initially empty.

Note:  TS Session Broker was formerly called Terminal Services Session Directory.

Event Details

Product: Windows Operating System
ID: 1021
Source: Microsoft-Windows-TerminalServices-SessionBroker
Version: 6.0
Symbolic Name: EVENT_SD_GROUP_NOTEXIST
Message: The %1 group does not exist. To create the group, run the command tssdis.exe -install.

Resolve

Create the Session Directory Computers group

To resolve this issue, create the Session Directory Computers local group on the TS Session Broker server.

To perform this procedure, you must have membership in the local Administrators group, or you must have been delegated the appropriate authority.

To create the Session Directory Computers local group:

  1. On the TS Session Broker server, open an elevated Command Prompt window. To open an elevated Command Prompt window, click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
  2. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  3. In the elevated Command Prompt window, type tssdis.exe -install and then press ENTER.

Verify

To verify that the Session Directory Computers local group on the TS Session Broker server is configured correctly, ensure both of the following:

  • The Session Directory Computers local group exists on the TS Session Broker server.
  • The computer accounts of the terminal servers that use the TS Session Broker server are members of the group.

To perform this procedure, you must have membership in the local Administrators group, or you must have been delegated the appropriate authority.

To check the configuration of the Session Directory Computers local group:

  1. On the TS Session Broker server, open the Local Users and Groups snap-in. To open Local Users and Groups, click Start, click Run, type lusrmgr.msc, and then click OK.
  2. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  3. In the left pane, click Groups. Ensure that the Session Directory Computers group is listed.
  4. In the right pane, right-click the Session Directory Computers group, and then click Properties.
  5. Under Members, ensure that the computer accounts for all the terminal servers that use the TS Session Broker server are listed.

TS Session Broker Security Group Configuration

Terminal Services