Windows terminal server 2022 svchost_usermanager crashing

DavioM 1 Reputation point


Ever since update KB5033118 we are experiencing a strange issue on our RDS farms, randomly when a user logs in svchost.exe_Usermanager.exe will crash and this causes a chain effect that the server becomes unresponsive for 10-15 minutes. Users that are already logged in will notice that Outlook freezes and that explorer become unresponsive. Users that try to login will be greeted with the Welcome and eventually will receive wrong username or password error.

The farm has 5 session hosts, and each host will eventually have this error, there are days where there are no crashes, alhough rare... and there are days that every RDS throws this error.

This started happening after update KB5033118 and is happening on 2 different RDS farms, the temporary fix was to uninstall KB5033118. Unfortunately we cannot rollback this far on this RDS farm.


Windows server 2022 fully patched to KB5037422

FSLogix version 2.9.8784.63912

Profiles are hosted on a server 2022 fileserver that is also fully patched.

This week we installed a new session host from scratch and added it to the farm but unfortunately the issue is still present.

Anyone else experiencing this issue ? and how do we go about troubleshooting it ?

Any help is greatly appreciated!

System log:

User's image

Application log:

User's image

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,049 questions
Remote Desktop
Remote Desktop
A Microsoft app that connects remotely to computers and to virtual apps and desktops.
4,220 questions
A set of solutions that enhance, enable, and simplify non-persistent Windows computing environments and may also be used to create more portable computing sessions when using physical devices.
462 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Hania Lian 7,551 Reputation points Microsoft Vendor


    User Manager provides the runtime components required for multi-user interaction. If this service is stopped, some applications may not operate correctly.

    The system has been installed the latest security update. I consider that we could try to perform a clean boot to check.

    How to perform a clean boot in Windows - Microsoft Support

    Meanwhile, according to your description, it seems that there is a problem with the connection between the user account and the domain. If we change a new user account to log on still has this issue. I consider that you may try to analyze WER log about service crash. It's better to open a phone tickect to help analyze.

    Contact Us - Microsoft Support

    Best Regards,

    Hania Lian


    f the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments No comments