Return
-
Title
Managed accounts getting locked out in Active Directory -
Description
RDP sessions are failing to connect through Safeguard with the error below:
"An Internal Error Occurred"
When checking the Events viewer > System logs > the following TermDD error ID 56 appears:
"The Terminal Server security layer detected an error in the protocol stream and has disconnected the client. Client IP:
-
Cause
The managed account used for the RDP session got locked because it had existing disconnected RDP sessions that remained on target machines while Safeguard attempted to change the password after the request was checked in. -
Resolution
RESOLUTION:
To avoid account lockouts while Safeguard is changing the managed account passwords:
- Users should log off the target asset after completing the RDP sessions rather than just closing the window.
- Force Terminal Services connections to "End a disconnected session" in order to avoid account lockouts while passwords are changing. For more information on this, please see the Microsoft article here.