Windows terminal server 2022 svchost_usermanager crashing

Question

Hello,

Ever since update KB5033118 we are experiencing a strange issue on our RDS farms, randomly when a user logs in svchost.exe_Usermanager.exe will crash and this causes a chain effect that the server becomes unresponsive for 10-15 minutes. Users that are already logged in will notice that Outlook freezes and that explorer become unresponsive. Users that try to login will be greeted with the Welcome and eventually will receive wrong username or password error.

The farm has 5 session hosts, and each host will eventually have this error, there are days where there are no crashes, alhough rare... and there are days that every RDS throws this error.

This started happening after update KB5033118 and is happening on 2 different RDS farms, the temporary fix was to uninstall KB5033118. Unfortunately we cannot rollback this far on this RDS farm.

Specifications:

Windows server 2022 fully patched to KB5037422

FSLogix version 2.9.8784.63912

Profiles are hosted on a server 2022 fileserver that is also fully patched.

This week we installed a new session host from scratch and added it to the farm but unfortunately the issue is still present.

Anyone else experiencing this issue ? and how do we go about troubleshooting it ?

Any help is greatly appreciated!

System log:

Application log:

Answer 1

Hello,

User Manager provides the runtime components required for multi-user interaction. If this service is stopped, some applications may not operate correctly.

The system has been installed the latest security update. I consider that we could try to perform a clean boot to check.

How to perform a clean boot in Windows - Microsoft Support

Meanwhile, according to your description, it seems that there is a problem with the connection between the user account and the domain. If we change a new user account to log on still has this issue. I consider that you may try to analyze WER log about service crash. It's better to open a phone tickect to help analyze.

Contact Us - Microsoft Support

Best Regards,

Hania Lian

========================================

f the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

Hi,

Did you made proper exclusions for the windows defender, analyze with WER would be a good start .https://learn.microsoft.com/en-us/windows/win32/wer/windows-error-reporting Seeing these connection freezes is everything in the same domain and what about AD connect seems as soon as you leaving the server with the AD cred. if goes wrong. Investigate the authentication flow. Also test the smb flow from rds to fileserver using smb3 See if you get decent speeds. My bet is that you have an authentication issue hope you are not using ADFS anymore.

Also I assume there are no other event errors in fslogix or eventlogs

Best Regards,

Robert

==

if the Answer is helpful, please click "Accept Answer" and upvote it.