The RDP protocol component X.224 detected an error in the protocol stream and has disconnected the c

[peter.loerns]

I am getting the above error in the system log of my Windows 2000
domain controller at random intervals. It is not set up as a terminal
server other than for remote administrators by the domain admins group.
We do not have any remote/off site users and do not have any terminal
server clients..It throws up event id 50. Any ideas.

 

[Vera Noest [MVP]]

Which SP are you currently running on your W2K DC? This error is
supposed to be fixed in SP3. Basically, it was harmless and could be
ignored. Documented here:

An incorrect X.224 protocol error message is logged
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q312313

If you are running SP3 or SP4, check if one of your remote
administrtaors actually has been disconnected at the time the event
occurs.
If not, you can probably safely ignore this Event. If they *are*
disconnected or have sometimes problems to connect, then have a look
at 2 similar cases, and their (identical) solution:

329896 - Error Message: Because of a Security Error, the Client Could
Not Connect to the Terminal Server
http://support.microsoft.com/?kbid=329896

323497 - Error Message: The RDP Protocol Component "DATA ENCRYPTION"
Detected an Error...
http://support.microsoft.com/?kbid=323497

_________________________________________________________
Vera Noest
MCSE,CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
*----------- Please reply in newsgroup -------------*

 

[peter.loerns]

Hi

Both the servers that this seems to be happening on are on SP4 with all
the latest security updates. The messages seem to occur at really
obscure times of day and when nobody is trying to access the servers
remotely..An odd one