Remote Desktop Services stopping automatically

Question

I have a Windows Server 2016 configured with Remote Desktop Services Session Broker with an application published as a RemoteApp.

The configuration is almost 1 year old with no issues, we launch the remote apps using preconfigured .rdp files. Today, all of a sudden, whenever a user tries to launch a session, we get an "Internal error has occurred" message and then directly after, the Remote Desktop Service stops (it is set to Automatic).

From Event Viewer we see this error every time that happens:

Faulting application name: svchost.exe_TermService, version: 10.0.14393.0, time stamp: 0x57899b1c  
Faulting module name: ucrtbase.dll, version: 10.0.14393.0, time stamp: 0x578997b5  
Exception code: 0xc0000409  
Fault offset: 0x000000000006d5b8  
Faulting process id: 0x3ec  
Faulting application start time: 0x01d8beebdbfe18ce  
Faulting application path: C:\Windows\System32\svchost.exe  
Faulting module path: C:\Windows\System32\ucrtbase.dll  
Report Id: 8e416dc9-a975-49df-b141-67232aae9ee8  
Faulting package full name:   
Faulting package-relative application ID:   
  
  
  
- System   
  
  - Provider   
  
   [ Name]  Application Error   
   
  - EventID 1000   
  
   [ Qualifiers]  0   
   
   Level 2   
   
   Task 100   
   
   Keywords 0x80000000000000   
   
  - TimeCreated   
  
   [ SystemTime]  2022-09-02T16:50:20.053882100Z   
   
   EventRecordID 8240   
   
   Channel Application   
   
   Computer DEMO-RDS.demo.local   
   
   Security   
   
  
- EventData   
  
   svchost.exe_TermService   
   10.0.14393.0   
   57899b1c   
   ucrtbase.dll   
   10.0.14393.0   
   578997b5   
   c0000409   
   000000000006d5b8   
   3ec   
   01d8beebdbfe18ce   
   C:\Windows\System32\svchost.exe   
   C:\Windows\System32\ucrtbase.dll   
   8e416dc9-a975-49df-b141-67232aae9ee8   
      
     
  
  

Answer 1

Hi,

Any recent updates on the server or policy changes related to security settings? What is the source Operating system? What is the settings in the .rdp file?