Hi,
I have a cluster of Windows 2016 RDS servers that get a random problem about once a week.
Users report that they cannot reload Chrome after they close it and Skype For Business stops working as well.
After much digging we find that a svchost.exe process has jammed which is the Windows Audio Service. This is stopping all RDS users from closing Chrome properly and Skype for Business starting.
If we manually end the process, all users sessions return to normal and it may not happen again for another week.
I have a feeling that this is something to do with the fact that the RDS servers are Hyper-V machines.
We see the following in the event log:
Log Name: System
Source: Service Control Manager
Date: 02/04/2019 08:29:21
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: ServerName
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Audiosrv service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2019-04-02T07:29:21.664468600Z" />
<EventRecordID>36692</EventRecordID>
<Correlation />
<Execution ProcessID="1172" ThreadID="80608" />
<Channel>System</Channel>
<Computer>ServerName</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">Audiosrv</Data>
</EventData>
</Event>