| Event Id | 20050 |
| Source | RemoteAccess |
| Description | The user %1<machine\username> connected on COM port %2 <port> on %3<date\time> disconnected on %4 <date\time>. The user was active %5 minutes. %6 bytes were %7 <sent|received>. Disconnected at %8<USER|ADMIN> request. |
| Event Information | According to Microsoft: CAUSE: This error is caused by one of the routers requesting a bad IP address. In this case, the router is requesting an address of <IP Address>and the routers are using a subnet mask of <subnet mask>. Using a mask of 252 results in the following configuration: <IP Address> - Network ID <IP Address> - First Host ID <IP Address> - Second Host ID <IP Address> - Subnet Broadcast ID Therefore, the IP address being requested is a Network ID and not a Host ID. The same error will occur if the Subnet Broadcast ID <IP Address> were requested. RESOLUTION: Change the demand dial interface to request a valid Host Address or to use an IP address assigned by remote router. When a Remote Access Service (RAS) client dials into your Windows NT RAS server running remote access server, the client may be disconnected during the authentication process or shortly thereafter. The cause of this problem may be a duplicate IP address on the network. For more information refer the below given MS article "Duplicate IP Address in RAS Pool Causes Event ID 20050" ------------------------------------------------------------------------------ Your Windows NT RAS or RRAS Server computer running the Point to Point Tunneling Protocol (PPTP) intermittently refuses client connections over a Remote Access Service (RRAS) connection with an event description: "The user Domain\User connected to port VPNx has been disconnected because the computer could not be projected onto the network." Microsoft recommends an update for WindowsNT 4.0 for this problem. Refer the below given MS article "Remote Access Logs Event ID 20050 When PPTP Connection Is Refused", for more information. ------------------------------------------------------------------------------ Event Description: ...The reason for disconnecting was hardware failure. Refer the MS ar |
| Reference Links | Demand-dial Connection Fails with Event 20050
Duplicate IP Address in RAS Pool Causes Event ID 20050 Remote Access Logs Event ID 20050 When PPTP Connection Is Refused RAS Disconnects Due to Line Noise When Using Multitech Modems MultiTech MT2834 Modem Incorrectly Reports Hardware Error |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.