Forum Discussion

ExceedKevin's avatar
ExceedKevin
Copper Contributor
Jul 07, 2022

Login failure from tssdis.exe on RDS server

Remote desktop server in AD environment [Windows Server 2019 standard, running RDweb, RDG, and session host, etc] periodically has service tssdis.exe (remote desktop session broker) failing to login,...
RDS
Thomas_001's avatar
Thomas_001
Copper Contributor
Sep 18, 2023
Hey, possibly too early to tell, but wondering if this made an difference?
mjdavison's avatar
mjdavison
Copper Contributor
Oct 28, 2023

Hi,

 

We're in the middle of deploying NTLM blocking on our network, and this is very similar to an issue we encountered with the tssdis service during this process.

 

Brokers use kerberos correctly when first started, but would randomly switch to NTLM fallback about once a month, after which the service needed restarting.

 

It turned out that these correlate perfectly with the Connection Broker server *changing it's machine account password in AD*.

 

We've had some success with a scheduled task triggered off NetLogon event ID 5823 (the machine account password) which restarts the tssdis service.

  • Jo_Lambrecht's avatar
    Jo_Lambrecht
    Copper Contributor
    Nov 03, 2023

    mjdavison 

    Hi, i've been struggelling with this issue for months. Can you describe in a liitle more in depth what you are doing to "(re)start" the hanging tssdis service or to prevent it from hanging.

    Thank you.

     

      • mjdavison's avatar
        mjdavison
        Copper Contributor
        Nov 08, 2023

        Jo_Lambrecht 

         

        In our scenario, the issue was resolved by creating a scheduled task on the connection broker to restart the tssdis service, with a trigger on NETLOGON event ID 5823. (Begin the task: On an Event). This causes the connection broker service to restart whenever the machine account password was changed. We used a delay of one minute on the task so that the password change had been replicated to all DCs in the site prior to restarting the connection broker service.

         

        This has resolved the issues we were having.