Hello!
After windows update last weekend our user complains about freezing RDS sessions. After some investigation in the application logs on the RDS session host (windows 2016 server standard) i can see that the Windows Desktop Manager restarts for the users repeatedly. Sometimes as often as every 5 minutes.
The windows update was KB4343884. I have tried rolling back, but the problem remains.
I have checked the version of the local dwmcore.dll and its 10.0.14393.1715.
On the other servers that are patched the version is 10.0.14393.2457
Its really annoying for the users, anyone had this problem? Any ideas what to do?
Keywords: dwmcore.dll dwm.exe windows server 2016 rds connection freeze flicker
Here is copy of application logs:
Log Name: Application
Source: Application Error
Date: 2018-09-13 08:27:22
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: XX
Description:
Faulting application name: dwm.exe, version: 10.0.14393.0, time stamp: 0x578999ab
Faulting module name: dwmcore.dll, version: 10.0.14393.1715, time stamp: 0x59b0d15f
Exception code: 0xc0000225
Fault offset: 0x0000000000045fec
Faulting process id: 0x2c50
Faulting application start time: 0x01d44b2a8598084b
Faulting application path: C:\Windows\system32\dwm.exe
Faulting module path: C:\Windows\system32\dwmcore.dll
Report Id: 609bd1cf-1c2e-4ad6-ba08-7f21f2a1786d
Faulting package full name:
Faulting package-relative application ID:
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-09-13T06:27:22.409448600Z" />
<EventRecordID>67809</EventRecordID>
<Channel>Application</Channel>
<Computer>XXXXX</Computer>
<Security />
</System>
<EventData>
<Data>dwm.exe</Data>
<Data>10.0.14393.0</Data>
<Data>578999ab</Data>
<Data>dwmcore.dll</Data>
<Data>10.0.14393.1715</Data>
<Data>59b0d15f</Data>
<Data>c0000225</Data>
<Data>0000000000045fec</Data>
<Data>2c50</Data>
<Data>01d44b2a8598084b</Data>
<Data>C:\Windows\system32\dwm.exe</Data>
<Data>C:\Windows\system32\dwmcore.dll</Data>
<Data>609bd1cf-1c2e-4ad6-ba08-7f21f2a1786d</Data>
<Data>
</Data>
<Data>
</Data>
</EventData>
</Event>
Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0
Problem signature:
P1: dwm.exe
P2: 10.0.14393.0
P3: 578999ab
P4: dwmcore.dll
P5: 10.0.14393.2273
P6: 5ae409d5
P7: c0000225
P8: 0000000000045fec
P9:
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_dwm.exe_4fd69b8d2b46a52b527b3b87e68145f26d420ac_e69b2600_1448af53
Analysis symbol:
Rechecking for solution: 0
Report Id: 802acf33-3a79-49d9-8475-4630a1686a75
Report Status: 4
Hashed bucket:
The Desktop Window Manager process has exited. (Process exit code: 0x000000ff, Restart count: 1, Primary display device ID: RDPUDD Chained DD)
The Desktop Window Manager has registered the session port.