Microsoft-Windows-TerminalServices-SessionBroker-Client
Event ID 1013: The server failed to retrieve the local computer netbios name.
#Event ID 1014: The server failed to retrieve the local computer FQDN.
#Event ID 1015: This Remote Desktop Session Host server cannot participate in RD Connection Broker load balancing because the server is configured to use a Microso...
#Description
This Remote Desktop Session Host server cannot participate in RD Connection Broker load balancing because the server is configured to use a Microsoft Windows Server 2003-based Session Directory server param1. The Session Directory feature in Windows Server 2003 does not support Remote Desktop Connection Broker load balancing.
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 1280: Remote Desktop Services failed to join the Connection Broker on server param1.
#Event ID 1281: Remote Desktop Services successfully joined a farm on the Connection Broker server param1.
#Message #
Fields #
| Name | Description |
|---|---|
EventXML.param1 UnicodeString | |
param1 UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-TerminalServices-SessionBroker-Client",
"guid": "{2184B5C9-1C83-4304-9C58-A9E76F718993}",
"event_source_name": "",
"event_id": 1281,
"version": 0,
"level": 4,
"task": 100,
"opcode": 10,
"keywords": 2305843009213693952,
"time_created": "2026-06-13T13:42:24.4817115+00:00",
"event_record_id": 3,
"correlation": {},
"execution": {
"process_id": 1208,
"thread_id": 1652
},
"channel": "Microsoft-Windows-TerminalServices-SessionBroker-Client/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-20"
}
},
"user_data": {
"EventXML": {
"param1": "telemetry-DC-d.cell-d.ludus.domain"
}
},
"message": "Remote Desktop Services successfully joined a farm on the Connection Broker server telemetry-DC-d.cell-d.ludus.domain."
}
Event ID 1282: Remote Desktop Services failed while leaving the Connection Broker on server param1.
#Event ID 1283: Remote Desktop Services successfully left a farm on the Connection Broker server param1.
#Message #
Fields #
| Name | Description |
|---|---|
EventXML.param1 UnicodeString | |
param1 UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-TerminalServices-SessionBroker-Client",
"guid": "{2184B5C9-1C83-4304-9C58-A9E76F718993}",
"event_source_name": "",
"event_id": 1283,
"version": 0,
"level": 4,
"task": 102,
"opcode": 11,
"keywords": 2305843009213693952,
"time_created": "2026-06-13T13:41:02.2677747+00:00",
"event_record_id": 2,
"correlation": {},
"execution": {
"process_id": 1196,
"thread_id": 1528
},
"channel": "Microsoft-Windows-TerminalServices-SessionBroker-Client/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-20"
}
},
"user_data": {
"EventXML": {
"param1": "telemetry-DC-d.cell-d.ludus.domain"
}
},
"message": "Remote Desktop Services successfully left a farm on the Connection Broker server telemetry-DC-d.cell-d.ludus.domain."
}
Event ID 1284: Remote Desktop Connection Broker Client failed to initialize while joining the Connection Broker on server param1.
#Event ID 1296: Remote Desktop Connection Broker Client failed while getting redirection packet from Connection Broker.
#Event ID 1297: Remote Desktop Connection Broker Client successfully received redirection packet from Connection Broker.
#Event ID 1298: Remote Desktop Connection Broker on server param1 failed to repopulate sessions.
#Event ID 1299: Remote Desktop Connection Broker on server param1 returned error on param2 notification.
#Event ID 1300: Remote Desktop Connection Broker Client rejected a call from an unauthorized ip address param1.
#Event ID 1301: Remote Desktop Connection Broker Client received request for redirection.
#Event ID 1302: param2 existing sessions were successfully repopulated on Remote Desktop Connection Broker server (param1).
#Event ID 1303: Remote Desktop Connection Broker on server param1 failed to get Cluster credentials.
#Event ID 1304: Remote Desktop Connection Broker client successfully retrieved Cluster credentials from Connection broker (param1).
#Event ID 1305: RPC Connection with Remote Desktop Connection Broker on server param1 has been lost.
#Event ID 1306: Remote Desktop Connection Broker Client failed to redirect the user param1\param2.
#Event ID 1307: Remote Desktop Connection Broker Client successfully redirected the user param1\param2 to the endpoint param3.
#Event ID 1308: User param1\param2 will be logged on to the local redirector machine (assuming TS Farm scenario).
#Provenance
ETW provider GUID 2184b5c9-1c83-4304-9c58-a9e76f718993
Defined in tssdjet.dll, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB