TS Session Broker Security Group Configuration

Updated: January 5, 2012

Applies To: Windows Server 2008

The Terminal Services Session Broker (TS Session Broker) server will not accept any connections from a terminal server whose computer account is not a member of the Session Directory Computers local group on the TS Session Broker server. By default, the Terminal Services Session Broker service creates the local group, but the group is initially empty.

Note:  TS Session Broker was formerly called Terminal Services Session Directory.

Events

Event ID Source Message

1016

Microsoft-Windows-TerminalServices-SessionBroker

The TS Session Broker service denied the remote procedure call (RPC) from an unauthorized computer %1.

1020

Microsoft-Windows-TerminalServices-SessionBroker

The %1 group is empty. For the Terminal Services Session Broker service to work correctly, you must add the computer accounts of terminal servers to this group.

1021

Microsoft-Windows-TerminalServices-SessionBroker

The %1 group does not exist. To create the group, run the command tssdis.exe -install.

Related Management Information

TS Session Broker

Terminal Services

Community Additions

ADD
Show: