SCCM Remote Control - Detected severed network connection or abnormal disconnection of the viewer

Question

Hi,

We're using SCCM CB 2010. Having the below issue when trying to initiate SCCM Remote Control Viewer session for a specific user. The User gets the prompt to accept/allow the incoming remote control session. But once user accepts the connection gets established and then immediately disconnects at the same time logging the user off and locking her desktop. Had seen such a behaviour in the past when trying to add a printer on the user machine, but this is something new. We're having SCCM Remote Control working fine for the most part, except for such a scenario like this. Below is the exported log snippet (IPs and User names sanitized). From a network perspective this is a normal user connected from home over VPN like everyone else. No specialized software etc. Appreciate any advice, please.

======> A connection has been established. (OnConnectionEstablished) CmRcService 5/27/2021 7:59:18 AM 13112 (0x3338)
Incoming connection IP address: 10.10.10.10 Port: 56077 IsLocationConnection: false CmRcService 5/27/2021 7:59:18 AM 13112 (0x3338)
Ready to start the security handshake. CmRcService 5/27/2021 7:59:18 AM 13112 (0x3338)
=== Starting security handshake === CmRcService 5/27/2021 7:59:18 AM 13112 (0x3338)
=== Security handshake completed [0x00000000] === CmRcService 5/27/2021 7:59:19 AM 13112 (0x3338)
The user(Domain\user1) is authorized for Remote Control CmRcService 5/27/2021 7:59:19 AM 13112 (0x3338)
Session allowed: Full Control CmRcService 5/27/2021 7:59:19 AM 13112 (0x3338)
=== Session Info === CmRcService 5/27/2021 7:59:19 AM 13112 (0x3338)
Authorized viewer user: Domain\user1 CmRcService 5/27/2021 7:59:19 AM 13112 (0x3338)
Viewer address: 10.10.10.10:56077 CmRcService 5/27/2021 7:59:19 AM 13112 (0x3338)
Host address: 10.10.20.20:2701 CmRcService 5/27/2021 7:59:19 AM 13112 (0x3338)
Media disconnect occurred at MSNdis_StatusMediaDisconnect via class Intel(R) Ethernet Connection (4) I219-LM CmRcService 5/27/2021 7:59:21 AM 8292 (0x2064)
A connector error has occurred. (OnConnectorError).
An existing connection was forcibly closed by the remote host. (Error: 80072746; Source: Windows) CmRcService 5/27/2021 7:59:21 AM 8292 (0x2064)
Locking Desktop... Detected severed network connection or abnormal disconnection of the viewer. CmRcService 5/27/2021 7:59:21 AM 8292 (0x2064)
Connection completed (ID = 1) (OnConnectionCompleted) CmRcService 5/27/2021 7:59:33 AM 9368 (0x2498)
Create a process application Name=C:\Windows\CCM\SCToastNotification.exe, with lpCommandLine=SCToastNotification.exe /MOSH_ONLY "Configuration Manager Remote Control" "Administrator is requesting to remote control your computer. Click to check request." CmRcService 5/27/2021 7:59:35 AM 14456 (0x3878)
Media disconnect occurred at MSNdis_StatusMediaDisconnect via class Intel(R) Ethernet Connection (4) I219-LM CmRcService 5/27/2021 7:59:36 AM 3116 (0x0C2C)
A connector error has occurred. (OnConnectorError).
An existing connection was forcibly closed by the remote host. (Error: 80072746; Source: Windows) CmRcService 5/27/2021 7:59:36 AM 3116 (0x0C2C)
Locking Desktop... Detected severed network connection or abnormal disconnection of the viewer. CmRcService 5/27/2021 7:59:36 AM 3116 (0x0C2C)
Disconnecting the connection.
An existing connection was forcibly closed by the remote host. (Error: 80072746; Source: Windows) CmRcService 5/27/2021 7:59:37 AM 20376 (0x4F98)
=== The remote control session has been terminated === CmRcService 5/27/2021 7:59:38 AM 19148 (0x4ACC)
The remote control viewer has disconnected from the session (OnViewerDisconnected) CmRcService 5/27/2021 7:59:38 AM 19148 (0x4ACC)
Remote control session lasted 1248 minutes. CmRcService 5/27/2021 7:59:38 AM 19148 (0x4ACC)
OnConnectionTerminated event was not fired within 3 seconds CmRcService 5/27/2021 7:59:40 AM 3116 (0x0C2C)
OnConnectionTerminated event was not fired within 3 seconds CmRcService 5/27/2021 7:59:43 AM 3116 (0x0C2C)
OnConnectionTerminated event was not fired within 3 seconds CmRcService 5/27/2021 7:59:46 AM 3116 (0x0C2C)
OnConnectionTerminated event was not fired within 3 seconds CmRcService 5/27/2021 7:59:49 AM 3116 (0x0C2C)
OnConnectionTerminated event was not fired within 3 seconds CmRcService 5/27/2021 7:59:52 AM 3116 (0x0C2C)
OnConnectionTerminated event was not fired within 3 seconds CmRcService 5/27/2021 7:59:55 AM 3116 (0x0C2C)
OnConnectionTerminated event was not fired within 3 seconds CmRcService 5/27/2021 7:59:58 AM 3116 (0x0C2C)
OnConnectionTerminated event was not fired within 3 seconds CmRcService 5/27/2021 8:00:01 AM 3116 (0x0C2C)
OnConnectionTerminated event was not fired within 3 seconds CmRcService 5/27/2021 8:00:04 AM 3116 (0x0C2C)
OnConnectionTerminated event was not fired within 3 seconds CmRcService 5/27/2021 8:00:07 AM 3116 (0x0C2C)
Media Disconnect event is successfully processed. CmRcService 5/27/2021 8:00:07 AM 3116 (0x0C2C)
Media disconnect occurred at MSNdis_StatusMediaDisconnect via class Intel(R) Ethernet Connection (4) I219-LM CmRcService 5/27/2021 8:00:07 AM 3116 (0x0C2C)
A connector error has occurred. (OnConnectorError).
An existing connection was forcibly closed by the remote host. (Error: 80072746; Source: Windows) CmRcService 5/27/2021 8:00:07 AM 3116 (0x0C2C)
Locking Desktop... Detected severed network connection or abnormal disconnection of the viewer. CmRcService 5/27/2021 8:00:07 AM 3116 (0x0C2C)
Media Disconnect event is successfully processed. CmRcService 5/27/2021 8:00:07 AM 3116 (0x0C2C)
Media disconnect occurred at MSNdis_StatusMediaDisconnect via class Intel(R) Ethernet Connection (4) I219-LM CmRcService 5/27/2021 8:00:07 AM 3116 (0x0C2C)
A connector error has occurred. (OnConnectorError).
An existing connection was forcibly closed by the remote host. (Error: 80072746; Source: Windows) CmRcService 5/27/2021 8:00:07 AM 3116 (0x0C2C)
Locking Desktop... Detected severed network connection or abnormal disconnection of the viewer. CmRcService 5/27/2021 8:00:07 AM 3116 (0x0C2C)
Media Disconnect event is successfully processed. CmRcService 5/27/2021 8:00:07 AM 3116 (0x0C2C)

Answer 1

Hi, @SAMUEL VALAPARLA
Thank you for posting in Microsoft Q&A forum.
Have you configured permitted viewers in client setting, you may check below blog for troubleshooting:
http://eskonr.com/2020/01/sccm-remote-control-failed-to-do-handshake-in-server-an-existing-connection-was-forcibly-closed-by-the-remote-host-error-80072746/
(Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.)

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.