From: Craig_B on
I have a Windows Server 2003 SP2 machine that I can not connect to using
MSTSC. All machines are on the same subnet. No other computers can connect,
though this machine can connect to others. No Firewall running, Anti-Virus
is ok, Services are ok, nothing in the Event logs. I did a packet capture and
see the intial T125 connections, then after the SecurityExchangePDU
Encrypted, I get a T125:Disconnect Provider Ultimatum, rn-user-requested.
Based on this it appears my client is disconnecting however I can connect to
all other machines and it seems something is wrong with this server as
nothing can connect to it. Does anyone have any ideas or troubleshooting
tips?

Thanks,
Craig
From: Silvia Doomra [MSFT] on
Can you confirm that you never get a Licensing PDU or Demand Active from the
server?

Thanks
Silvia

"Craig_B" wrote:

> I have a Windows Server 2003 SP2 machine that I can not connect to using
> MSTSC. All machines are on the same subnet. No other computers can connect,
> though this machine can connect to others. No Firewall running, Anti-Virus
> is ok, Services are ok, nothing in the Event logs. I did a packet capture and
> see the intial T125 connections, then after the SecurityExchangePDU
> Encrypted, I get a T125:Disconnect Provider Ultimatum, rn-user-requested.
> Based on this it appears my client is disconnecting however I can connect to
> all other machines and it seems something is wrong with this server as
> nothing can connect to it. Does anyone have any ideas or troubleshooting
> tips?
>
> Thanks,
> Craig
From: Craig_B on


"Silvia Doomra [MSFT]" wrote:

> Can you confirm that you never get a Licensing PDU or Demand Active from the
> server?
>
> Thanks
> Silvia

Here's my capture, at packet 77 I see a disconnect.

2 0.000000 {TCP:2, IPv4:1} MyPC 2003-Svr TCP TCP: [Bad
CheckSum]Flags=......S., SrcPort=52124, DstPort=MS WBT Server(3389),
PayloadLen=0, Seq=4028489127, Ack=0, Win=8192 ( Negotiating scale factor 0x2
) = 8192
3 0.000000 {TCP:2, IPv4:1} 2003-Svr MyPC TCP TCP:Flags=...A..S., SrcPort=MS
WBT Server(3389), DstPort=52124, PayloadLen=0, Seq=2113917352,
Ack=4028489128, Win=16384 ( Negotiated scale factor 0x0 ) = 16384
4 0.000000 {TCP:2, IPv4:1} MyPC 2003-Svr TCP TCP: [Bad
CheckSum]Flags=...A...., SrcPort=52124, DstPort=MS WBT Server(3389),
PayloadLen=0, Seq=4028489128, Ack=2113917353, Win=16425 (scale factor 0x2) =
65700
5 0.000000 {ISOTS:3, TCP:2, IPv4:1} MyPC 2003-Svr X224 X224:Connection
Request
6 0.000000 {ISOTS:3, TCP:2, IPv4:1} 2003-Svr MyPC X224 X224:Connection
Confirm
7 0.000000 {TCP:2, IPv4:1} MyPC 2003-Svr TCP TCP: [Bad
CheckSum]Flags=...A...F, SrcPort=52124, DstPort=MS WBT Server(3389),
PayloadLen=0, Seq=4028489147, Ack=2113917372, Win=16420 (scale factor 0x2) =
65680
8 0.010000 {TCP:2, IPv4:1} 2003-Svr MyPC TCP TCP:Flags=...A...., SrcPort=MS
WBT Server(3389), DstPort=52124, PayloadLen=0, Seq=2113917372,
Ack=4028489148, Win=65516 (scale factor 0x0) = 65516
9 0.010000 {TCP:2, IPv4:1} 2003-Svr MyPC TCP TCP:Flags=...A.R.., SrcPort=MS
WBT Server(3389), DstPort=52124, PayloadLen=0, Seq=2113917372,
Ack=4028489148, Win=0 (scale factor 0x0) = 0
10 0.020000 {TCP:4, IPv4:1} MyPC 2003-Svr TCP TCP: [Bad
CheckSum]Flags=......S., SrcPort=52125, DstPort=MS WBT Server(3389),
PayloadLen=0, Seq=2971088670, Ack=0, Win=8192 ( Negotiating scale factor 0x2
) = 8192
11 0.020000 {TCP:4, IPv4:1} 2003-Svr MyPC TCP TCP:Flags=...A..S.,
SrcPort=MS WBT Server(3389), DstPort=52125, PayloadLen=0, Seq=3838897548,
Ack=2971088671, Win=16384 ( Negotiated scale factor 0x0 ) = 16384
12 0.020000 {TCP:4, IPv4:1} MyPC 2003-Svr TCP TCP: [Bad
CheckSum]Flags=...A...., SrcPort=52125, DstPort=MS WBT Server(3389),
PayloadLen=0, Seq=2971088671, Ack=3838897549, Win=16425 (scale factor 0x2) =
65700
13 0.020000 {ISOTS:5, TCP:4, IPv4:1} MyPC 2003-Svr X224 X224:Connection
Request
14 0.030000 {ISOTS:5, TCP:4, IPv4:1} 2003-Svr MyPC X224 X224:Connection
Confirm
15 0.030000 {T125:6, ISOTS:5, TCP:4,
IPv4:1} MyPC 2003-Svr T125 T125:MCSConnect Initial
16 0.030000 {T125:6, ISOTS:5, TCP:4,
IPv4:1} 2003-Svr MyPC T125 T125:MCSConnect Response
17 0.030000 {T125:6, ISOTS:5, TCP:4, IPv4:1} MyPC 2003-Svr T125 T125:Erect
Domain Request, SubHeight = 0, SubInterval = 0
18 0.030000 {T125:6, ISOTS:5, TCP:4, IPv4:1} MyPC 2003-Svr T125 T125:Attach
User Request
19 0.030000 {TCP:4, IPv4:1} 2003-Svr MyPC TCP TCP:Flags=...A....,
SrcPort=MS WBT Server(3389), DstPort=52125, PayloadLen=0, Seq=3838897905,
Ack=2971089138, Win=65068 (scale factor 0x0) = 65068
20 0.030000 {T125:6, ISOTS:5, TCP:4, IPv4:1} 2003-Svr MyPC T125 T125:Attach
User Confirm, Result = rt-successful, Indicator = 0x3f0
21 0.030000 {T125:6, ISOTS:5, TCP:4,
IPv4:1} MyPC 2003-Svr T125 T125:Channel Join Request, UserID =
0x3f0,ChannelId = 0x3f0
22 0.030000 {T125:6, ISOTS:5, TCP:4,
IPv4:1} 2003-Svr MyPC T125 T125:Channel Join Confirm, ChannelId = 1008,
Result = rt-successful
23 0.030000 {T125:6, ISOTS:5, TCP:4,
IPv4:1} MyPC 2003-Svr T125 T125:Channel Join Request, UserID =
0x3f0,ChannelId = 0x3eb
24 0.030000 {T125:6, ISOTS:5, TCP:4,
IPv4:1} 2003-Svr MyPC T125 T125:Channel Join Confirm, ChannelId = 1003,
Result = rt-successful
25 0.030000 {T125:6, ISOTS:5, TCP:4,
IPv4:1} MyPC 2003-Svr T125 T125:Channel Join Request, UserID =
0x3f0,ChannelId = 0x3ec
26 0.030000 {T125:6, ISOTS:5, TCP:4,
IPv4:1} 2003-Svr MyPC T125 T125:Channel Join Confirm, ChannelId = 1004,
Result = rt-successful
27 0.030000 {T125:6, ISOTS:5, TCP:4,
IPv4:1} MyPC 2003-Svr T125 T125:Channel Join Request, UserID =
0x3f0,ChannelId = 0x3ed
28 0.040000 {T125:6, ISOTS:5, TCP:4,
IPv4:1} 2003-Svr MyPC T125 T125:Channel Join Confirm, ChannelId = 1005,
Result = rt-successful
29 0.040000 {T125:6, ISOTS:5, TCP:4,
IPv4:1} MyPC 2003-Svr T125 T125:Channel Join Request, UserID =
0x3f0,ChannelId = 0x3ee
30 0.040000 {T125:6, ISOTS:5, TCP:4,
IPv4:1} 2003-Svr MyPC T125 T125:Channel Join Confirm, ChannelId = 1006,
Result = rt-successful
31 0.040000 {T125:6, ISOTS:5, TCP:4,
IPv4:1} MyPC 2003-Svr T125 T125:Channel Join Request, UserID =
0x3f0,ChannelId = 0x3ef
32 0.040000 {T125:6, ISOTS:5, TCP:4,
IPv4:1} 2003-Svr MyPC T125 T125:Channel Join Confirm, ChannelId = 1007,
Result = rt-successful
33 0.080000 {RDPBCGR:7, T125:6, ISOTS:5, TCP:4,
IPv4:1} MyPC 2003-Svr RDPBCGR RDPBCGR:TsClientSecurityExchangePDU
34 0.080000 {RDPBCGR:7, T125:6, ISOTS:5, TCP:4,
IPv4:1} MyPC 2003-Svr RDPBCGR RDPBCGR:TsClientSecurityExchangePDU Encrypted
35 0.080000 {TCP:4, IPv4:1} 2003-Svr MyPC TCP TCP:Flags=...A....,
SrcPort=MS WBT Server(3389), DstPort=52125, PayloadLen=0, Seq=3838898006,
Ack=2971089641, Win=64565 (scale factor 0x0) = 64565
36 0.080000 {RDPBCGR:7, T125:6, ISOTS:5, TCP:4,
IPv4:1} 2003-Svr MyPC RDPELE RDPELE:Encrypted
37 0.110000 {T125:6, ISOTS:5, TCP:4,
IPv4:1} 2003-Svr MyPC T125 T125:Disconnect Provider Ultimatum,
rn-user-requested
38 0.110000 {TCP:4, IPv4:1} MyPC 2003-Svr TCP TCP: [Bad
CheckSum]Flags=...A...., SrcPort=52125, DstPort=MS WBT Server(3389),
PayloadLen=0, Seq=2971089641, Ack=3838898057, Win=16298 (scale factor 0x2) =
65192
39 0.110000 {TCP:4, IPv4:1} MyPC 2003-Svr TCP TCP: [Bad
CheckSum]Flags=...A...F, SrcPort=52125, DstPort=MS WBT Server(3389),
PayloadLen=0, Seq=2971089641, Ack=3838898057, Win=16298 (scale factor 0x2) =
65192
40 0.110000 {TCP:4, IPv4:1} 2003-Svr MyPC TCP TCP:Flags=...A....,
SrcPort=MS WBT Server(3389), DstPort=52125, PayloadLen=0, Seq=3838898057,
Ack=2971089642, Win=64565 (scale factor 0x0) = 64565
41 0.110000 {TCP:4, IPv4:1} 2003-Svr MyPC TCP TCP:Flags=...A.R..,
SrcPort=MS WBT Server(3389), DstPort=52125, PayloadLen=0, Seq=3838898057,
Ack=2971089642, Win=0 (scale factor 0x0) = 0
42 3.920005 {TCP:8, IPv4:1} MyPC 2003-Svr TCP TCP: [Bad
CheckSum]Flags=......S., SrcPort=52126, DstPort=MS WBT Server(3389),
PayloadLen=0, Seq=1051071223, Ack=0, Win=8192 ( Negotiating scale factor 0x2
) = 8192
43 3.920005 {TCP:8, IPv4:1} 2003-Svr MyPC TCP TCP:Flags=...A..S.,
SrcPort=MS WBT Server(3389), DstPort=52126, PayloadLen=0, Seq=1733062295,
Ack=1051071224, Win=16384 ( Negotiated scale factor 0x0 ) = 16384
44 3.920005 {TCP:8, IPv4:1} MyPC 2003-Svr TCP TCP: [Bad
CheckSum]Flags=...A...., SrcPort=52126, DstPort=MS WBT Server(3389),
PayloadLen=0, Seq=1051071224, Ack=1733062296, Win=16425 (scale factor 0x2) =
65700
45 3.920005 {ISOTS:9, TCP:8, IPv4:1} MyPC 2003-Svr X224 X224:Connection
Request
46 3.920005 {ISOTS:9, TCP:8, IPv4:1} 2003-Svr MyPC X224 X224:Connection
Confirm
47 3.920005 {TCP:8, IPv4:1} MyPC 2003-Svr TCP TCP: [Bad
CheckSum]Flags=...A...F, SrcPort=52126, DstPort=MS WBT Server(3389),
PayloadLen=0, Seq=1051071243, Ack=1733062315, Win=16420 (scale factor 0x2) =
65680
48 3.930005 {TCP:8, IPv4:1} 2003-Svr MyPC TCP TCP:Flags=...A....,
SrcPort=MS WBT Server(3389), DstPort=52126, PayloadLen=0, Seq=1733062315,
Ack=1051071244, Win=65516 (scale factor 0x0) = 65516
49 3.930005 {TCP:8, IPv4:1} 2003-Svr MyPC TCP TCP:Flags=...A.R..,
SrcPort=MS WBT Server(3389), DstPort=52126, PayloadLen=0, Seq=1733062315,
Ack=1051071244, Win=0 (scale factor 0x0) = 0
50 3.940005 {TCP:10, IPv4:1} MyPC 2003-Svr TCP TCP: [Bad
CheckSum]Flags=......S., SrcPort=52127, DstPort=MS WBT Server(3389),
PayloadLen=0, Seq=4280819496, Ack=0, Win=8192 ( Negotiating scale factor 0x2
) = 8192
51 3.940005 {TCP:10, IPv4:1} 2003-Svr MyPC TCP TCP:Flags=...A..S.,
SrcPort=MS WBT Server(3389), DstPort=52127, PayloadLen=0, Seq=2057362201,
Ack=4280819497, Win=16384 ( Negotiated scale factor 0x0 ) = 16384
52 3.940005 {TCP:10, IPv4:1} MyPC 2003-Svr TCP TCP: [Bad
CheckSum]Flags=...A...., SrcPort=52127, DstPort=MS WBT Server(3389),
PayloadLen=0, Seq=4280819497, Ack=2057362202, Win=16425 (scale factor 0x2) =
65700
53 3.940005 {ISOTS:11, TCP:10, IPv4:1} MyPC 2003-Svr X224 X224:Connection
Request
54 3.940005 {ISOTS:11, TCP:10, IPv4:1} 2003-Svr MyPC X224 X224:Connection
Confirm
55 3.940005 {T125:12, ISOTS:11, TCP:10,
IPv4:1} MyPC 2003-Svr T125 T125:MCSConnect Initial
56 3.940005 {T125:12, ISOTS:11, TCP:10,
IPv4:1} 2003-Svr MyPC T125 T125:MCSConnect Response
57 3.940005 {T125:12, ISOTS:11, TCP:10,
IPv4:1} MyPC 2003-Svr T125 T125:Erect Domain Request, SubHeight = 0,
SubInterval = 0
58 3.940005 {T125:12, ISOTS:11, TCP:10,
IPv4:1} MyPC 2003-Svr T125 T125:Attach User Request
59 3.940005 {TCP:10, IPv4:1} 2003-Svr MyPC TCP TCP:Flags=...A....,
SrcPort=MS WBT Server(3389), DstPort=52127, PayloadLen=0, Seq=2057362558,
Ack=4280819964, Win=65068 (scale factor 0x0) = 65068
60 3.940005 {T125:12, ISOTS:11, TCP:10,
IPv4:1} 2003-Svr MyPC T125 T125:Attach User Confirm, Result = rt-successful,
Indicator = 0x3f0
61 3.950005 {T125:12, ISOTS:11, TCP:10,
IPv4:1} MyPC 2003-Svr T125 T125:Channel Join Request, UserID =
0x3f0,ChannelId = 0x3f0
62 3.950005 {T125:12, ISOTS:11, TCP:10,
IPv4:1} 2003-Svr MyPC T125 T125:Channel Join Confirm, ChannelId = 1008,
Result = rt-successful
63 3.950005 {T125:12, ISOTS:11, TCP:10,
IPv4:1} MyPC 2003-Svr T125 T125:Channel Join Request, UserID =
0x3f0,ChannelId = 0x3eb
64 3.950005 {T125:12, ISOTS:11, TCP:10,
IPv4:1} 2003-Svr MyPC T125 T125:Channel Join Confirm, ChannelId = 1003,
Result = rt-successful
65 3.950005 {T125:12, ISOTS:11, TCP:10,
IPv4:1} MyPC 2003-Svr T125 T125:Channel Join Request, UserID =
0x3f0,ChannelId = 0x3ec
66 3.950005 {T125:12, ISOTS:11, TCP:10,
IPv4:1} 2003-Svr MyPC T125 T125:Channel Join Confirm, ChannelId = 1004,
Result = rt-successful
67 3.950005 {T125:12, ISOTS:11, TCP:10,
IPv4:1} MyPC 2003-Svr T125 T125:Channel Join Request, UserID =
0x3f0,ChannelId = 0x3ed
68 3.950005 {T125:12, ISOTS:11, TCP:10,
IPv4:1} 2003-Svr MyPC T125 T125:Channel Join Confirm, ChannelId = 1005,
Result = rt-successful
69 3.950005 {T125:12, ISOTS:11, TCP:10,
IPv4:1} MyPC 2003-Svr T125 T125:Channel Join Request, UserID =
0x3f0,ChannelId = 0x3ee
70 3.950005 {T125:12, ISOTS:11, TCP:10,
IPv4:1} 2003-Svr MyPC T125 T125:Channel Join Confirm, ChannelId = 1006,
Result = rt-successful
71 3.950005 {T125:12, ISOTS:11, TCP:10,
IPv4:1} MyPC 2003-Svr T125 T125:Channel Join Request, UserID =
0x3f0,ChannelId = 0x3ef
72 3.950005 {T125:12, ISOTS:11, TCP:10,
IPv4:1} 2003-Svr MyPC T125 T125:Channel Join Confirm, ChannelId = 1007,
Result = rt-successful
73 3.960005 {RDPBCGR:13, T125:12, ISOTS:11, TCP:10,
IPv4:1} MyPC 2003-Svr RDPBCGR RDPBCGR:TsClientSecurityExchangePDU
74 3.960005 {RDPBCGR:13, T125:12, ISOTS:11, TCP:10,
IPv4:1} MyPC 2003-Svr RDPBCGR RDPBCGR:TsClientSecurityExchangePDU Encrypted
75 3.960005 {TCP:10, IPv4:1} 2003-Svr MyPC TCP TCP:Flags=...A....,
SrcPort=MS WBT Server(3389), DstPort=52127, PayloadLen=0, Seq=2057362659,
Ack=4280820467, Win=64565 (scale factor 0x0) = 64565
76 3.960005 {RDPBCGR:13, T125:12, ISOTS:11, TCP:10,
IPv4:1} 2003-Svr MyPC RDPELE RDPELE:Encrypted
77 3.990005 {T125:12, ISOTS:11, TCP:10,
IPv4:1} 2003-Svr MyPC T125 T125:Disconnect Provider Ultimatum,
rn-user-requested
78 3.990005 {TCP:10, IPv4:1} MyPC 2003-Svr TCP TCP: [Bad
CheckSum]Flags=...A...., SrcPort=52127, DstPort=MS WBT Server(3389),
PayloadLen=0, Seq=4280820467, Ack=2057362710, Win=16298 (scale factor 0x2) =
65192
79 3.990005 {TCP:10, IPv4:1} MyPC 2003-Svr TCP TCP: [Bad
CheckSum]Flags=...A...F, SrcPort=52127, DstPort=MS WBT Server(3389),
PayloadLen=0, Seq=4280820467, Ack=2057362710, Win=16298 (scale factor 0x2) =
65192
80 3.990005 {TCP:10, IPv4:1} 2003-Svr MyPC TCP TCP:Flags=...A....,
SrcPort=MS WBT Server(3389), DstPort=52127, PayloadLen=0, Seq=2057362710,
Ack=4280820468, Win=64565 (scale factor 0x0) = 64565
81 3.990005 {TCP:10, IPv4:1} 2003-Svr MyPC TCP TCP:Flags=...A.R..,
SrcPort=MS WBT Server(3389), DstPort=52127, PayloadLen=0, Seq=2057362710,
Ack=4280820468, Win=0 (scale factor 0x0) = 0

Any help would be appreciated.
Thanks,
Craig