TS Session Broker Security Group Configuration

  • Article

Applies To: Windows Server 2008

The Terminal Services Session Broker (TS Session Broker) server will not accept any connections from a terminal server whose computer account is not a member of the Session Directory Computers local group on the TS Session Broker server. By default, the Terminal Services Session Broker service creates the local group, but the group is initially empty.

Note:  TS Session Broker was formerly called Terminal Services Session Directory.

Events

Event ID Source Message

1016

Microsoft-Windows-TerminalServices-SessionBroker

 The TS Session Broker service denied the remote procedure call (RPC) from an unauthorized computer %1.

1020

Microsoft-Windows-TerminalServices-SessionBroker

 The %1 group is empty. For the Terminal Services Session Broker service to work correctly, you must add the computer accounts of terminal servers to this group.

1021

Microsoft-Windows-TerminalServices-SessionBroker

 The %1 group does not exist. To create the group, run the command tssdis.exe -install.

TS Session Broker

Terminal Services