Yes, we had a similar situation in which a customer was using an older imaging tool. The print monitor for that program did not play well with the Citrix Printing Service. As a result, the sessions would end up in a down state and the problem you've described would ensue. Sorry, no resolution. The customer learned to live with the problem as they are migrating to a new imaging tool and did not want to spend anymore money fixing the issue. If it's network related, you could try disabling Receive Side Scaling and Task Offloads as they are known to cause the same/and other issue(s). Joe _____ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Richard Wykes Sent: Monday, December 31, 2007 4:44 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Terminal Services stops responding to new connections Hi all, Hopefully someone on here will be able to help. DL360G4p servers running Windows 2003 SP2 / Citrix PS4 R04 We have a problem with our PS4 servers stopping responding to new rdp or ica connections. Also, if you try and logon at the console it lets you enter your username and password then just sits there on a blank screen and never logs in. Users on the server at the time work fine but no new users can connect. The only thing we can do is wait until all the users are off the server and physically power cycle the server. Then, it will last a few more days and it will happen again. Has anyone seen anything like this before? The only thing I've found so far is the following error in the event log: Event Type: Error Event Source: TermService Event Category: None Event ID: 1006 Date: 31/12/2007 Time: 07:52:17 User: N/A Computer: *********** Description: The terminal server received large number of incomplete connections. The system may be under attack. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 7f 00 00 01 ... Cheers Richard This is an email from the CPP Group Plc, Holgate Park, York, YO26 4GA; telephone +44 (0)1904 544500. This message may contain information that is confidential. If you are not the intended recipient, you may not peruse, use, disseminate, distribute or copy this message. If you have received this message in error, please notify the sender immediately by email, facsimile or telephone and either return or destroy the original message. The CPP Group Plc accepts no responsibility for any changes made to this message after it has been sent by the original author. This email has been scanned for all viruses by the MessageLabs Email Security System.