Home
  •  

Serviços de Terminal negaram solicitação de reconexão automática do cliente

TS_denied_client_auto_reconnection_request_2003 (Rule)

Knowledge Base article:

Resumo

O Terminal Server do Microsoft® Windows Server™ 2003 negou uma solicitação de reconexão automática de cliente. Normalmente, isso ocorre quando há falha na autenticação do cliente no servidor de terminal.

Esta regra cobre os seguintes IDs de eventos:

1041

Outras informações

O IDs de eventos descritos neste tópico aplicam-se apenas aos sistemas operacionais Windows Server 2003.

Causas

Possíveis causas:

Resoluções

Possíveis resoluções:

Element properties:

TargetMicrosoft.Windows.Server.2003.TerminalServerRole
CategoryEventCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
Serviços de Terminal negaram solicitação de reconexão automática do cliente
{0}
Event LogSystem
CommentMom2005ID='{73971140-4975-40A6-BD58-20F1B085669D}'

Member Modules:

ID Module Type TypeId RunAs 
Event_Data_Source DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="TS_denied_client_auto_reconnection_request_2003" Target="Microsoft.Windows.Server.2003.TerminalServerRole" Enabled="onEssentialMonitoring" Remotable="true" Comment="Mom2005ID='{73971140-4975-40A6-BD58-20F1B085669D}'">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="Event_Data_Source" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>System</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>TermService</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>EventNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>-1073740783</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>1</Severity>

      <AlertOwner>$Data/PublisherName$</AlertOwner>

      <AlertMessageId>$MPElement[Name="TS_denied_client_auto_reconnection_request_2003.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDescription$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue/>

      </Suppression>

    </WriteAction>

  </WriteActions>

</Rule>