Event ID 1012 — Remote Desktop Session Host Connections
Applies To: Windows Server 2008 R2
.jpg)
Users can connect to an RD Session Host server to run programs, save files, and use network resources on that server. When a user disconnects from a session, all processes running in the session, including applications, will continue to run on the RD Session Host server.
The user logon mode on the RD Session Host server can be configured to prevent new user sessions from being created on the RD Session Host server. You might want to prevent new user sessions from being created on the RD Session Host server when you are planning to take the RD Session Host server offline for maintenance or to install new applications.
Event Details
| Product: | Windows Operating System |
| ID: | 1012 |
| Source: | Microsoft-Windows-TerminalServices-RemoteConnectionManager |
| Version: | 6.1 |
| Symbolic Name: | EVENT_EXCEEDED_MAX_LOGON_ATTEMPTS |
| Message: | Remote session from client name %1 exceeded the maximum allowed failed logon attempts. The session was forcibly terminated. |
Resolve
This is a normal condition. No further action is required.