| Event Id | 1070 |
| Source | Microsoft-Windows-TerminalServices-RemoteConnectionManager |
| Description | A logon request was denied because the terminal server is currently in drain mode and therefore not accepting new user logons. To configure the server to allow new user logons, use the Terminal Services Configuration tool. |
| Event Information | According to Microsoft : Cause : This event is logged when a logon request was denied. Resolution : Configure the terminal server to allow new user logons To resolve this issue, configure the terminal server to allow new user logons by using Terminal Services Configuration. To perform this procedure, you must have membership in the local Administrators group, or you must have been delegated the appropriate authority. To allow new user logons: 1.On the terminal server, open Terminal Services Configuration. To open Terminal Services Confiiguration, click Start, point to Administrative Tools, point to Terminal Services, and then click Terminal Services Configuration. 2.If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue. 3.Under General, double-click User logon mode. 4.Under User logon mode, select Allow all connections, and then click OK. Verify : To verify that connections to the terminal server are working properly, establish a remote session with the terminal server. |
| Reference Links | Event ID 1070 from Source Microsoft-Windows-TerminalServices-RemoteConnectionManager |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.