Event ID 1012 — Terminal Server Connections
Applies To: Windows Server 2008 R2
.jpg "green")
Users can connect to a terminal server to run programs, save files, and use network resources on that server. When a user disconnects from a session, all processes running in the session, including applications, will continue to run on the terminal server.
The user logon mode on the terminal server can be configured to prevent new user sessions from being created on the terminal server. You might want to prevent new user sessions from being created on the terminal server when you are planning to take the terminal server offline for maintenance or to install new applications.
Event Details
| Product: | Windows Operating System |
| ID: | 1012 |
| Source: | Microsoft-Windows-TerminalServices-RemoteConnectionManager |
| Version: | 6.1 |
| Symbolic Name: | EVENT_EXCEEDED_MAX_LOGON_ATTEMPTS |
| Message: | Remote session from client name %1 exceeded the maximum allowed failed logon attempts. The session was forcibly terminated. |
Resolve
This is a normal condition. No further action is required.