PSM session disconnects error: "A logon or reconnect event has not been received within 45" (4252224)

PSM session disconnects error: "A logon or reconnect event has not been received within 45"

PSM sessions terminate after 45 seconds with the error. "A logon or reconnect event has not been received within 45 seconds. Your session has been terminated.", in the Session Log you see the Event / Bookmark details "Killing session - logon/reconnect event not received within 45 seconds".

This occurs when you've indicated to capture events for this session, but the configuration requirements on the Windows system have not been met.  The event capture code is monitoring Windows events to determine when a logon session begins and ends, and enables TPAM to determine if commands executed on the Windows system are started within that specific logon session.  If we don't get a logon or reconnect event from the Windows system within 45 seconds, we kill the session.

Windows events requirements

The event capture code must be able to track the beginning and end of a specific Windows login session.  This is accomplished by monitoring specific Windows logon and logoff events,  Therefore, events indicating successful logon or reconnect and logoff or disconnect must be generated by the Windows system.  The IDs of the specific events required to be generated by the Windows system and where to configure generation of the events are as follows.

Ensure auditing successful logon events on the Windows machine is enable. To enable success logon event logging using local security policy