Terminal Services getting TermDD errors

[Guest]

I have posted this problem on this site once before however the problem is
getting worse

Problem
Getting TermDD errors in the log files
error ID 50 X.224 protocol failure every few minutes
A Phantom connect Query is comming up in the Terminal services
management screen with no infomation about it except connect query
We have lived with this for 6 months now when we cut over the network to
subnets of one address and onto a CISCO router via a fibre link
This is now getting to a point where we have 50 of these Phantom RDP queries
at a time this almost makes it inpossible to connect to the server it wil
happen all through the day and night even when no one is on the system and
the logs are filling up with TermDD errors there are no other errors ocuring
in the log

I have tried all the patches microsoft has recomended our Rdpwd.sys is
version 5.0.2195.7055 and Instrdp.dll is version 5.0.2195.6701 all patches
are up to date

We bought the CiSCO link down last night and let it drop back to the Snap
Gear link (Backup link at 512m) this minimised the problem and the link is
flowing a lot better we now get only about 6 Phantom sessions at ilregular
intervials and termDD has dropped back to about 8 errors an hour

Has anyone got any idears as to what is causing this problem

Also we are about to cut over to the new server Win2k3 it has been live now
for the last 4 months it also has TermDD problems at 1 hour intervils and no
one is logging onto it at this stage this also goes on through the night

Thanks for your help Ted Cogger

 

[Vera Noest [MVP]]

Have you deleted the certificates on the Terminal Server?

329896 - Error Message: Because of a Security Error, the Client
Could Not Connect to the Terminal Server
http://support.microsoft.com/?kbid=329896

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
*----------- Please reply in newsgroup -------------*

 

[Guest]

Thanks for the prompt reply I have deleted the certificates from the win2k3
server as this server is not in use yet I am Trying to get the time to do the
same for the win2k server but the problem was still there when I reactivated
the server
I monitored the win2k server over night with only me on the system TermDD
poped up at regular intervials

 

[Guest]

removed the certificates from the 2k0 Server yesterday deactivated and then
reactivated the server and still have the problem Im lost at what to do now
Could this be some malware causing packet protocol hits on the system

 

[Vera Noest [MVP]]

Have you monitored the traffic to and from the server, with
Network Monitor?

812953 - HOW TO: Use Network Monitor to Capture Network Traffic
http://support.microsoft.com/?kbid=812953

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
*----------- Please reply in newsgroup -------------*