Citrix & Term Services sessions drop in 3 minutes

[pvision1]

We have an "interesting" problem on a WIN2K server sp3 installed. The problem is happening with both ICA and RDP sessions.

If someone logs on with a profile that is a member of the administrators group then all sessions are disconnected every 90 - 180 seconds. As long as only non-administrators are logged on then all connections are perfectly stable!!

This problem occurs whether the administrator logs on locally at the server or through Term Services or Citrix. The problem occurs with the "administrator" user ID and with any ID that is a memeber of the administrator group.

Now that we have isolated the problem to this, it is perfectly recreatable and quite predictable.

Any and all suggestions would be greatly appreciated.

Thanks

 

[ChuckieO]

Are all users disconnected or logged off, and what is required for them to get back on again? Do any services fail, or are there any relevant System or Application EVENTLOG entries.

It sounds like there is a process/program/service which requires local administrative rights to cause the symptoms.

Look in the usual places where programs start (Registry entry hklm\sw\ms\win\cv\run... , Startup groups, WIN.INI etc) for unrecognisable/unrequired programs. Look in Task Manager to see if any new processes start after the logon of a user with administrative rights.

Also ensure that the system is completely virus/free.

If there is nothing obvious in the above searches, I'm afraid you may need to enable auditing.

 

[wilsona]

I presume you've looked at the various timeouts, in particular "active session limit" in user manager? Could also be an errant group policy... In any case, it looks deliberate. An April fool, perhaps?

 

[pvision1]

Thank you for your responses.

There are no messages in the event log that look remotely relevant.

Users are disconnected, the ICA or Term Server client times out waits its 30 seconds to reconnect and then connects back to the same session.

I suppose it may be virus related, but otherwise only my partner and I have touched the system (set up for a client who has no technical expertise and doesn't try either).

I will check to see if anything is running at startup.