Hi Pat Can you confirm your server load goes to 10000 when this occurs. I have an issue where session is in a down state and load=10000 Just want to reconfirm before applying these hotfixes. Like you the down state issue occurred after patching.. ThanksAng Date: Tue, 13 Nov 2012 22:56:47 -0500 Subject: [THIN] Re: Session Down State From: strangedog@xxxxxxxxx To: thin@xxxxxxxxxxxxx Per MS, the issue indeed extends to both listeners, ICA and RDP. There has not been a security hotfix for Termsrv.dll for years. A couple of supporting components got hotfixed in March, but termsrv.dll was left out. Either of the two articles below fix the issue. I use the newer one (977629) as it has tested without issue and might keep me out of hot water down the road. http://support.microsoft.com/kb/977629 http://support.microsoft.com/kb/958476 Here is the Citrix writeup: http://support.citrix.com/article/CTX133141Here is Microsoft's writeup: http://support.microsoft.com/kb/2653956 This is good info to keep on file for anyone dealing with Citrix/Terminal Services on 2003. Patrick CoughlinCCIA, MCSE.... On Tue, Nov 13, 2012 at 7:45 AM, Andrew Wood <andrew.wood@xxxxxxxxxxxxxxxx> wrote: Alan, Makes sense to me. I only ever experienced the issue in a full TS environment (well XenApp actually). But it could happen either to RDP or ICA connections. Rarely both at the same time – so you could be limping along with RDP broken and ICA fine, or vice versa. In the event log there would be an error message along the lines of an RDP (or ICA) component (a .dll) was missing/corrupt/illegal – so the service was unavailable. There was a suggestion in other KB articles that AV was modifying the file in some way and it should be excluded. This was not the case. I found the only way to fix the problem was to rebuild up until I came across the patch. hth From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Hutchinson, Alan Sent: 13 November 2012 12:10 To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Session Down State Does this apply to any server (Windows 2003)? i.e. terminal services as opposed to a pure terminal server. We're occasionally seeing a down RDP-Tcp listener after a reboot but not just on terminal servers. Curiously those that are terminal servers usually have the ICA-Tcp listener up !!. Seems to happen more on our VMs (VMware) but last week I had it on a physical box. It's not 100% clear from the KB below. Let me know if any of that didn't make any sense. Regards, Alan. From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Andrew Wood Sent: 12 November 2012 17:15 To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Session Down State ..was just typing *this will be it* .. then I see Ronnie has already replied. From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Raffensberger, Stephen D Sent: 07 November 2012 13:14 To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Session Down State Ronnie, Try this…http://support.microsoft.com/kb/958476 Steve Raffensberger Produban USsraffens@xxxxxxxxxxx From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Hamilton, Ronnie Sent: Wednesday, November 07, 2012 5:36 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Session Down State Hi, Just been patching my Windows 203 Servers with the last 3 months windows patches, I was my doubts but have now proved that when I put these patches on every time I reboot I get a session down. I have just finished rebuilding a couple of servers and have one still to do. So I tried patching another one and same problem, has anyone identified the patch or had similar issues lately. This there were 30 patches in all, going to have to try and identify which one. Thanks Ronnie Ronnie Hamilton Senior Network Engineer Lufthansa Technik Airmotive Ireland IT Department Naas Road, Rathcoole Co. Dublin, Ireland Phone: +353 1 401 1253 E-mail: ronnie.hamilton@xxxxxxx www.ltai.ie Visit our website : www.ltai.ie __________________________________________ Lufthansa Technik Airmotive Ireland Limited. Registered in Ireland. Reg. No. 45999. Registered Office: Naas Road, Rathcoole, Co.Dublin. Lufthansa Technik Airmotive Ireland Leasing Limited. Registered in Ireland. Reg. No. 140891. Registered Office: Naas Road, Rathcoole, Co.Dublin. __________________________________________The information in this email and in any attachments is confidential and may be privileged. If you are not the intended recipient, please destroy this message, delete any copies held on your systems and notify the sender by return email. You should not read, retain, copy, disseminate, distribute, disclose or use this email or its contents in any way. Any such action is strictly prohibited. Thank you.