Event ID 1012 — Remote Desktop Session Host Connections

  • Article

Applies To: Windows Server 2008 R2

Users can connect to an RD Session Host server to run programs, save files, and use network resources on that server. When a user disconnects from a session, all processes running in the session, including applications, will continue to run on the RD Session Host server.

The user logon mode on the RD Session Host server can be configured to prevent new user sessions from being created on the RD Session Host server. You might want to prevent new user sessions from being created on the RD Session Host server when you are planning to take the RD Session Host server offline for maintenance or to install new applications.

Event Details

Product: Windows Operating System
ID: 1012
Source: Microsoft-Windows-TerminalServices-RemoteConnectionManager
Version: 6.1
Symbolic Name: EVENT_EXCEEDED_MAX_LOGON_ATTEMPTS
Message: Remote session from client name %1 exceeded the maximum allowed failed logon attempts. The session was forcibly terminated.

Resolve

This is a normal condition. No further action is required.

Remote Desktop Session Host Connections

Remote Desktop Services