ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    RDS / Outlook interactions causing crashes?

    IT Discussion
    rds outlook edgerouter
    7
    39
    4.7k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DashrenderD
      Dashrender @art_of_shred
      last edited by

      @art_of_shred said in RDS / Outlook interactions causing crashes?:

      @wirestyle22 said in RDS / Outlook interactions causing crashes?:

      @art_of_shred said in RDS / Outlook interactions causing crashes?:

      @IRJ said in RDS / Outlook interactions causing crashes?:

      @art_of_shred said in RDS / Outlook interactions causing crashes?:

      @IRJ said in RDS / Outlook interactions causing crashes?:

      I feel like part of the story is missing. Do you have any logs to prove this?

      Logs to prove what? That the RDS session is dropping out?

      So no errors just a dropped connection? That doesn't make sense

      The RDS server has these that seem likely to correspond to the drops:
      Windowss logs/System:

      A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 1203.

      That's a security check issue.

      Go to Computer Configuration > Administrative Templates > System > Distributed COM > Application Compatibility and enable "Allow local activation security check exemptions".

      Where is that? I can't find it anywhere...

      That looks like GPO

      art_of_shredA 1 Reply Last reply Reply Quote 0
      • art_of_shredA
        art_of_shred Banned @Dashrender
        last edited by

        @Dashrender said in RDS / Outlook interactions causing crashes?:

        @art_of_shred said in RDS / Outlook interactions causing crashes?:

        @wirestyle22 said in RDS / Outlook interactions causing crashes?:

        @art_of_shred said in RDS / Outlook interactions causing crashes?:

        @IRJ said in RDS / Outlook interactions causing crashes?:

        @art_of_shred said in RDS / Outlook interactions causing crashes?:

        @IRJ said in RDS / Outlook interactions causing crashes?:

        I feel like part of the story is missing. Do you have any logs to prove this?

        Logs to prove what? That the RDS session is dropping out?

        So no errors just a dropped connection? That doesn't make sense

        The RDS server has these that seem likely to correspond to the drops:
        Windowss logs/System:

        A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 1203.

        That's a security check issue.

        Go to Computer Configuration > Administrative Templates > System > Distributed COM > Application Compatibility and enable "Allow local activation security check exemptions".

        Where is that? I can't find it anywhere...

        That looks like GPO

        I'm in local security policies, tried local group policies...

        DashrenderD art_of_shredA 2 Replies Last reply Reply Quote 0
        • DashrenderD
          Dashrender @art_of_shred
          last edited by

          @art_of_shred said in RDS / Outlook interactions causing crashes?:

          @Dashrender said in RDS / Outlook interactions causing crashes?:

          @art_of_shred said in RDS / Outlook interactions causing crashes?:

          @wirestyle22 said in RDS / Outlook interactions causing crashes?:

          @art_of_shred said in RDS / Outlook interactions causing crashes?:

          @IRJ said in RDS / Outlook interactions causing crashes?:

          @art_of_shred said in RDS / Outlook interactions causing crashes?:

          @IRJ said in RDS / Outlook interactions causing crashes?:

          I feel like part of the story is missing. Do you have any logs to prove this?

          Logs to prove what? That the RDS session is dropping out?

          So no errors just a dropped connection? That doesn't make sense

          The RDS server has these that seem likely to correspond to the drops:
          Windowss logs/System:

          A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 1203.

          That's a security check issue.

          Go to Computer Configuration > Administrative Templates > System > Distributed COM > Application Compatibility and enable "Allow local activation security check exemptions".

          Where is that? I can't find it anywhere...

          That looks like GPO

          I'm in local security policies, tried local group policies...

          Perhaps you need to install newer ADMX updates?

          1 Reply Last reply Reply Quote 0
          • art_of_shredA
            art_of_shred Banned @art_of_shred
            last edited by

            @art_of_shred said in RDS / Outlook interactions causing crashes?:

            @Dashrender said in RDS / Outlook interactions causing crashes?:

            @art_of_shred said in RDS / Outlook interactions causing crashes?:

            @wirestyle22 said in RDS / Outlook interactions causing crashes?:

            @art_of_shred said in RDS / Outlook interactions causing crashes?:

            @IRJ said in RDS / Outlook interactions causing crashes?:

            @art_of_shred said in RDS / Outlook interactions causing crashes?:

            @IRJ said in RDS / Outlook interactions causing crashes?:

            I feel like part of the story is missing. Do you have any logs to prove this?

            Logs to prove what? That the RDS session is dropping out?

            So no errors just a dropped connection? That doesn't make sense

            The RDS server has these that seem likely to correspond to the drops:
            Windowss logs/System:

            A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 1203.

            That's a security check issue.

            Go to Computer Configuration > Administrative Templates > System > Distributed COM > Application Compatibility and enable "Allow local activation security check exemptions".

            Where is that? I can't find it anywhere...

            That looks like GPO

            I'm in local security policies, tried local group policies...

            There is no local group policy editor installed on the RDS server. At least not that I can find.

            DashrenderD 1 Reply Last reply Reply Quote 0
            • DashrenderD
              Dashrender @art_of_shred
              last edited by

              @art_of_shred said in RDS / Outlook interactions causing crashes?:

              @art_of_shred said in RDS / Outlook interactions causing crashes?:

              @Dashrender said in RDS / Outlook interactions causing crashes?:

              @art_of_shred said in RDS / Outlook interactions causing crashes?:

              @wirestyle22 said in RDS / Outlook interactions causing crashes?:

              @art_of_shred said in RDS / Outlook interactions causing crashes?:

              @IRJ said in RDS / Outlook interactions causing crashes?:

              @art_of_shred said in RDS / Outlook interactions causing crashes?:

              @IRJ said in RDS / Outlook interactions causing crashes?:

              I feel like part of the story is missing. Do you have any logs to prove this?

              Logs to prove what? That the RDS session is dropping out?

              So no errors just a dropped connection? That doesn't make sense

              The RDS server has these that seem likely to correspond to the drops:
              Windowss logs/System:

              A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 1203.

              That's a security check issue.

              Go to Computer Configuration > Administrative Templates > System > Distributed COM > Application Compatibility and enable "Allow local activation security check exemptions".

              Where is that? I can't find it anywhere...

              That looks like GPO

              I'm in local security policies, tried local group policies...

              There is no local group policy editor installed on the RDS server. At least not that I can find.

              That's not what I mean. Group Policy manager should be run from either an admin workstation in that domain, or from a DC itself. Modern Group Policy uses a central store for ADMX files so everyone see the same settings. These settings get updated by installing new version of the ADMX files from MS. Each new version of Windows means you need to download and install the newest ADMX pack to the central store.

              art_of_shredA 1 Reply Last reply Reply Quote 1
              • art_of_shredA
                art_of_shred Banned @Dashrender
                last edited by

                @Dashrender said in RDS / Outlook interactions causing crashes?:

                @art_of_shred said in RDS / Outlook interactions causing crashes?:

                @art_of_shred said in RDS / Outlook interactions causing crashes?:

                @Dashrender said in RDS / Outlook interactions causing crashes?:

                @art_of_shred said in RDS / Outlook interactions causing crashes?:

                @wirestyle22 said in RDS / Outlook interactions causing crashes?:

                @art_of_shred said in RDS / Outlook interactions causing crashes?:

                @IRJ said in RDS / Outlook interactions causing crashes?:

                @art_of_shred said in RDS / Outlook interactions causing crashes?:

                @IRJ said in RDS / Outlook interactions causing crashes?:

                I feel like part of the story is missing. Do you have any logs to prove this?

                Logs to prove what? That the RDS session is dropping out?

                So no errors just a dropped connection? That doesn't make sense

                The RDS server has these that seem likely to correspond to the drops:
                Windowss logs/System:

                A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 1203.

                That's a security check issue.

                Go to Computer Configuration > Administrative Templates > System > Distributed COM > Application Compatibility and enable "Allow local activation security check exemptions".

                Where is that? I can't find it anywhere...

                That looks like GPO

                I'm in local security policies, tried local group policies...

                There is no local group policy editor installed on the RDS server. At least not that I can find.

                That's not what I mean. Group Policy manager should be run from either an admin workstation in that domain, or from a DC itself. Modern Group Policy uses a central store for ADMX files so everyone see the same settings. These settings get updated by installing new version of the ADMX files from MS. Each new version of Windows means you need to download and install the newest ADMX pack to the central store.

                I searched group policy management up and down (on the DC) and can't find computer configuration anywhere.

                1 Reply Last reply Reply Quote 0
                • DashrenderD
                  Dashrender
                  last edited by

                  Maybe this is what you're missing?

                  https://i.imgur.com/lXXuPJR.png

                  1 Reply Last reply Reply Quote 0
                  • wirestyle22W
                    wirestyle22
                    last edited by

                    @art_of_shred Dashrender's screenshot is correct

                    1 Reply Last reply Reply Quote 0
                    • DashrenderD
                      Dashrender
                      last edited by

                      any luck?

                      1 Reply Last reply Reply Quote 0
                      • Minion QueenM
                        Minion Queen Banned
                        last edited by

                        @art_of_shred is stuck on another client issue right now

                        1 Reply Last reply Reply Quote 0
                        • art_of_shredA
                          art_of_shred Banned
                          last edited by

                          Got pulled away for an emergency. I'll check it out and report back. Thanks!

                          1 Reply Last reply Reply Quote 1
                          • IRJI
                            IRJ
                            last edited by

                            I am not convinced that Outlook is causing the issue. It seems like something is trying to launch with remote privileges. I would look at your DCOM settings.

                            wirestyle22W 1 Reply Last reply Reply Quote 0
                            • wirestyle22W
                              wirestyle22 @IRJ
                              last edited by

                              @IRJ Agreed

                              1 Reply Last reply Reply Quote 0
                              • scottalanmillerS
                                scottalanmiller
                                last edited by

                                Same here, I'd say 70% that Outlook is just the common trigger, not the actual problem.

                                1 Reply Last reply Reply Quote 1
                                • IRJI
                                  IRJ
                                  last edited by

                                  How often is this happening? If it is very common, you could try adding the domain user group to your DCOM settings to see if it fixes it. Best practice is to give least privilege, so you may not want to use the domain users group as a permanent solution. It will help with testing, though.

                                  1 Reply Last reply Reply Quote 0
                                  • art_of_shredA
                                    art_of_shred Banned
                                    last edited by

                                    The policy setting was applied. We'll see what happens. This has been happening (according to what I've been told- the event log seems to agree) sometimes as much as 10-15 times over the course of a day.

                                    wirestyle22W 1 Reply Last reply Reply Quote 1
                                    • wirestyle22W
                                      wirestyle22 @art_of_shred
                                      last edited by

                                      @art_of_shred Any update?

                                      scottalanmillerS 1 Reply Last reply Reply Quote 0
                                      • scottalanmillerS
                                        scottalanmiller @wirestyle22
                                        last edited by

                                        @wirestyle22 said in RDS / Outlook interactions causing crashes?:

                                        @art_of_shred Any update?

                                        I think he took the day off.

                                        1 Reply Last reply Reply Quote 0
                                        • art_of_shredA
                                          art_of_shred Banned
                                          last edited by

                                          I'm working... which is why I don't have the ability to reply to posts here all day long!

                                          No feedback yet.

                                          1 Reply Last reply Reply Quote 0
                                          • 1
                                          • 2
                                          • 2 / 2
                                          • First post
                                            Last post