Per MS, the issue indeed extends to both listeners, ICA and RDP. There has not been a security hotfix for Termsrv.dll for years. A couple of supporting components got hotfixed in March, but termsrv.dll was left out. Either of the two articles below fix the issue. I use the newer one (977629) as it has tested without issue and might keep me out of hot water down the road. http://support.microsoft.com/kb/977629 http://support.microsoft.com/kb/958476 Here is the Citrix writeup: http://support.citrix.com/article/CTX133141 Here is Microsoft's writeup: http://support.microsoft.com/kb/2653956 This is good info to keep on file for anyone dealing with Citrix/Terminal Services on 2003. Patrick Coughlin CCIA, MCSE.... On Tue, Nov 13, 2012 at 7:45 AM, Andrew Wood <andrew.wood@xxxxxxxxxxxxxxxx>wrote: > Alan, > > > > Makes sense to me. > > > > I only ever experienced the issue in a full TS environment (well XenApp > actually). But it could happen either to RDP or ICA connections. Rarely > both at the same time – so you could be limping along with RDP broken and > ICA fine, or vice versa. In the event log there would be an error message > along the lines of an RDP (or ICA) component (a .dll) was > missing/corrupt/illegal – so the service was unavailable. There was a > suggestion in other KB articles that AV was modifying the file in some way > and it should be excluded. This was not the case. > > > > I found the only way to fix the problem was to rebuild up until I came > across the patch. > > > > hth > > > > > > *From:* thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] *On > Behalf Of *Hutchinson, Alan > *Sent:* 13 November 2012 12:10 > > *To:* thin@xxxxxxxxxxxxx > *Subject:* [THIN] Re: Session Down State > > > > Does this apply to any server (Windows 2003)? i.e. terminal services as > opposed to a pure terminal server. We're occasionally seeing a down RDP-Tcp > listener after a reboot but not just on terminal servers. Curiously those > that are terminal servers usually have the ICA-Tcp listener up !!. Seems to > happen more on our VMs (VMware) but last week I had it on a physical box. > It's not 100% clear from the KB below. > > > > Let me know if any of that didn't make any sense. > > > > Regards, > > > > Alan. > > > ------------------------------ > > *From:* thin-bounce@xxxxxxxxxxxxx > [mailto:thin-bounce@xxxxxxxxxxxxx<thin-bounce@xxxxxxxxxxxxx>] > *On Behalf Of *Andrew Wood > *Sent:* 12 November 2012 17:15 > *To:* thin@xxxxxxxxxxxxx > *Subject:* [THIN] Re: Session Down State > > ..was just typing **this will be it** .. then I see Ronnie has already > replied. > > > > *From:* thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] *On > Behalf Of *Raffensberger, Stephen D > *Sent:* 07 November 2012 13:14 > *To:* thin@xxxxxxxxxxxxx > *Subject:* [THIN] Re: Session Down State > > > > Ronnie, > > > > Try this…http://support.microsoft.com/kb/958476 > > > > *Steve Raffensberger* > > Produban US > > sraffens@xxxxxxxxxxx > > *From:* thin-bounce@xxxxxxxxxxxxx > [mailto:thin-bounce@xxxxxxxxxxxxx<thin-bounce@xxxxxxxxxxxxx>] > *On Behalf Of *Hamilton, Ronnie > *Sent:* Wednesday, November 07, 2012 5:36 AM > *To:* thin@xxxxxxxxxxxxx > *Subject:* [THIN] Session Down State > > > > Hi, > > > > Just been patching my Windows 203 Servers with the last 3 months windows > patches, I was my doubts but have now proved that when I put these patches > on every time I reboot I get a session down. > > > > I have just finished rebuilding a couple of servers and have one still to > do. > > > > So I tried patching another one and same problem, has anyone identified > the patch or had similar issues lately. > > > > This there were 30 patches in all, going to have to try and identify which > one. > > > > Thanks > > Ronnie > > > > *Ronnie Hamilton* > Senior Network Engineer > > > Lufthansa Technik Airmotive Ireland > > IT Department > Naas Road, Rathcoole > > Co. Dublin, Ireland > Phone: +353 1 401 1253 > E-mail: ronnie.hamilton@xxxxxxx > > www.ltai.ie > > > > > > > > > > Visit our website : www.ltai.ie > > __________________________________________ > > Lufthansa Technik Airmotive Ireland Limited. Registered in Ireland. Reg. > No. 45999. Registered Office: Naas Road, Rathcoole, Co.Dublin. > > Lufthansa Technik Airmotive Ireland Leasing Limited. Registered in > Ireland. Reg. No. 140891. Registered Office: Naas Road, Rathcoole, > Co.Dublin. > > __________________________________________ > > The information in this email and in any attachments is confidential and > may be privileged. If you are not the intended recipient, please destroy > this message, delete any copies held on your systems and notify the sender > by return email. You should not read, retain, copy, disseminate, > distribute, disclose or use this email or its contents in any way. Any such > action is strictly prohibited. Thank you. > > > > >