question

SAMUELVALAPARLA-3110 avatar image
0 Votes"
SAMUELVALAPARLA-3110 asked SAMUELVALAPARLA-3110 commented

SCCM Remote Control - Detected severed network connection or abnormal disconnection of the viewer

Hi,

We're using SCCM CB 2010. Having the below issue when trying to initiate SCCM Remote Control Viewer session for a specific user. The User gets the prompt to accept/allow the incoming remote control session. But once user accepts the connection gets established and then immediately disconnects at the same time logging the user off and locking her desktop. Had seen such a behaviour in the past when trying to add a printer on the user machine, but this is something new. We're having SCCM Remote Control working fine for the most part, except for such a scenario like this. Below is the exported log snippet (IPs and User names sanitized). From a network perspective this is a normal user connected from home over VPN like everyone else. No specialized software etc. Appreciate any advice, please.


======> A connection has been established. (OnConnectionEstablished) CmRcService 5/27/2021 7:59:18 AM 13112 (0x3338)
Incoming connection IP address: 10.10.10.10 Port: 56077 IsLocationConnection: false CmRcService 5/27/2021 7:59:18 AM 13112 (0x3338)
Ready to start the security handshake. CmRcService 5/27/2021 7:59:18 AM 13112 (0x3338)
=== Starting security handshake === CmRcService 5/27/2021 7:59:18 AM 13112 (0x3338)
=== Security handshake completed [0x00000000] === CmRcService 5/27/2021 7:59:19 AM 13112 (0x3338)
The user(Domain\user1) is authorized for Remote Control CmRcService 5/27/2021 7:59:19 AM 13112 (0x3338)
Session allowed: Full Control CmRcService 5/27/2021 7:59:19 AM 13112 (0x3338)
=== Session Info === CmRcService 5/27/2021 7:59:19 AM 13112 (0x3338)
Authorized viewer user: Domain\user1 CmRcService 5/27/2021 7:59:19 AM 13112 (0x3338)
Viewer address: 10.10.10.10:56077 CmRcService 5/27/2021 7:59:19 AM 13112 (0x3338)
Host address: 10.10.20.20:2701 CmRcService 5/27/2021 7:59:19 AM 13112 (0x3338)
Media disconnect occurred at MSNdis_StatusMediaDisconnect via class Intel(R) Ethernet Connection (4) I219-LM CmRcService 5/27/2021 7:59:21 AM 8292 (0x2064)
A connector error has occurred. (OnConnectorError).
An existing connection was forcibly closed by the remote host. (Error: 80072746; Source: Windows) CmRcService 5/27/2021 7:59:21 AM 8292 (0x2064)
Locking Desktop... Detected severed network connection or abnormal disconnection of the viewer. CmRcService 5/27/2021 7:59:21 AM 8292 (0x2064)
Connection completed (ID = 1) (OnConnectionCompleted) CmRcService 5/27/2021 7:59:33 AM 9368 (0x2498)
Create a process application Name=C:\Windows\CCM\SCToastNotification.exe, with lpCommandLine=SCToastNotification.exe /MOSH_ONLY "Configuration Manager Remote Control" "Administrator is requesting to remote control your computer. Click to check request." CmRcService 5/27/2021 7:59:35 AM 14456 (0x3878)
Media disconnect occurred at MSNdis_StatusMediaDisconnect via class Intel(R) Ethernet Connection (4) I219-LM CmRcService 5/27/2021 7:59:36 AM 3116 (0x0C2C)
A connector error has occurred. (OnConnectorError).
An existing connection was forcibly closed by the remote host. (Error: 80072746; Source: Windows) CmRcService 5/27/2021 7:59:36 AM 3116 (0x0C2C)
Locking Desktop... Detected severed network connection or abnormal disconnection of the viewer. CmRcService 5/27/2021 7:59:36 AM 3116 (0x0C2C)
Disconnecting the connection.
An existing connection was forcibly closed by the remote host. (Error: 80072746; Source: Windows) CmRcService 5/27/2021 7:59:37 AM 20376 (0x4F98)
=== The remote control session has been terminated === CmRcService 5/27/2021 7:59:38 AM 19148 (0x4ACC)
The remote control viewer has disconnected from the session (OnViewerDisconnected) CmRcService 5/27/2021 7:59:38 AM 19148 (0x4ACC)
Remote control session lasted 1248 minutes. CmRcService 5/27/2021 7:59:38 AM 19148 (0x4ACC)
OnConnectionTerminated event was not fired within 3 seconds CmRcService 5/27/2021 7:59:40 AM 3116 (0x0C2C)
OnConnectionTerminated event was not fired within 3 seconds CmRcService 5/27/2021 7:59:43 AM 3116 (0x0C2C)
OnConnectionTerminated event was not fired within 3 seconds CmRcService 5/27/2021 7:59:46 AM 3116 (0x0C2C)
OnConnectionTerminated event was not fired within 3 seconds CmRcService 5/27/2021 7:59:49 AM 3116 (0x0C2C)
OnConnectionTerminated event was not fired within 3 seconds CmRcService 5/27/2021 7:59:52 AM 3116 (0x0C2C)
OnConnectionTerminated event was not fired within 3 seconds CmRcService 5/27/2021 7:59:55 AM 3116 (0x0C2C)
OnConnectionTerminated event was not fired within 3 seconds CmRcService 5/27/2021 7:59:58 AM 3116 (0x0C2C)
OnConnectionTerminated event was not fired within 3 seconds CmRcService 5/27/2021 8:00:01 AM 3116 (0x0C2C)
OnConnectionTerminated event was not fired within 3 seconds CmRcService 5/27/2021 8:00:04 AM 3116 (0x0C2C)
OnConnectionTerminated event was not fired within 3 seconds CmRcService 5/27/2021 8:00:07 AM 3116 (0x0C2C)
Media Disconnect event is successfully processed. CmRcService 5/27/2021 8:00:07 AM 3116 (0x0C2C)
Media disconnect occurred at MSNdis_StatusMediaDisconnect via class Intel(R) Ethernet Connection (4) I219-LM CmRcService 5/27/2021 8:00:07 AM 3116 (0x0C2C)
A connector error has occurred. (OnConnectorError).
An existing connection was forcibly closed by the remote host. (Error: 80072746; Source: Windows) CmRcService 5/27/2021 8:00:07 AM 3116 (0x0C2C)
Locking Desktop... Detected severed network connection or abnormal disconnection of the viewer. CmRcService 5/27/2021 8:00:07 AM 3116 (0x0C2C)
Media Disconnect event is successfully processed. CmRcService 5/27/2021 8:00:07 AM 3116 (0x0C2C)
Media disconnect occurred at MSNdis_StatusMediaDisconnect via class Intel(R) Ethernet Connection (4) I219-LM CmRcService 5/27/2021 8:00:07 AM 3116 (0x0C2C)
A connector error has occurred. (OnConnectorError).
An existing connection was forcibly closed by the remote host. (Error: 80072746; Source: Windows) CmRcService 5/27/2021 8:00:07 AM 3116 (0x0C2C)
Locking Desktop... Detected severed network connection or abnormal disconnection of the viewer. CmRcService 5/27/2021 8:00:07 AM 3116 (0x0C2C)
Media Disconnect event is successfully processed. CmRcService 5/27/2021 8:00:07 AM 3116 (0x0C2C)


mem-cm-general
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

AllenLiu-MSFT avatar image
0 Votes"
AllenLiu-MSFT answered SAMUELVALAPARLA-3110 commented

Hi, @SAMUELVALAPARLA-3110
Thank you for posting in Microsoft Q&A forum.
Have you configured permitted viewers in client setting, you may check below blog for troubleshooting:
http://eskonr.com/2020/01/sccm-remote-control-failed-to-do-handshake-in-server-an-existing-connection-was-forcibly-closed-by-the-remote-host-error-80072746/
(Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.)


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi AllenLiu-MSFT,

Thank You much for getting back. Yes I already checked and validated the information in mentioned article and also the Permitted Viewers on the Client Setting. Please note that this issue is limited to a specific client in question. Also there is no handshake failure happening which had been cited in the article. The connection gets established but then terminated. Have already compared the Resultant Client Settings from the affected user to a working scenario and there is no difference absolutely. Looking for further pointers on this issue, please. Thank You.

0 Votes 0 ·

Hi, @SAMUELVALAPARLA-3110
I found an old thread, it has the similar issue, try to disable antivirus and tools to see if it work, and try to start remote control stand alone with the IP address to see if it helps.
https://social.technet.microsoft.com/Forums/office/en-US/9aa0b0ff-059d-4b32-aa83-3867f1924b12/sccm-remote-tool-keeps-disconnecting?forum=configmgrgeneral

0 Votes 0 ·

Hi @AllenLiu-MSFT. Thank You for your advice. Had tried to start remote control in a stand alone way, as mentioned in the old thread but there wasn't any difference in the outcome. :(

Snippet below from CMRcService.log



An existing connection was forcibly closed by the remote host. (Error: 80072746; Source: Windows) CmRcService 7/9/2021 8:03:49 AM 11424 (0x2CA0)
Locking Desktop... Detected severed network connection or abnormal disconnection of the viewer. CmRcService 7/9/2021 8:03:49 AM 11424 (0x2CA0)
Connection completed (ID = 1) (OnConnectionCompleted) CmRcService 7/9/2021 8:03:53 AM 9544 (0x2548)
Create a process application Name=C:\Windows\CCM\SCToastNotification.exe, with lpCommandLine=SCToastNotification.exe /MOSH_ONLY "Configuration Manager Remote Control" "Administrator is requesting to remote control your computer. Click to check request." CmRcService 7/9/2021 8:03:58 AM 1872 (0x0750)
An existing connection was forcibly closed by the remote host. (Error: 80072746; Source: Windows) CmRcService 7/9/2021 8:04:00 AM 11424 (0x2CA0)
Locking Desktop... Detected severed network connection or abnormal disconnection of the viewer. CmRcService 7/9/2021 8:04:00 AM 11424 (0x2CA0)
Disconnecting the connection.
An existing connection was forcibly closed by the remote host. (Error: 80072746; Source: Windows) CmRcService 7/9/2021 8:04:01 AM 9344 (0x2480)
=== The remote control session has been terminated === CmRcService 7/9/2021 8:04:01 AM 7448 (0x1D18)*




0 Votes 0 ·
Show more comments