TS Session Broker Security Group Configuration

Updated: January 5, 2012

Applies To: Windows Server 2008

The Terminal Services Session Broker (TS Session Broker) server will not accept any connections from a terminal server whose computer account is not a member of the Session Directory Computers local group on the TS Session Broker server. By default, the Terminal Services Session Broker service creates the local group, but the group is initially empty.

Note: TS Session Broker was formerly called Terminal Services Session Directory.


Event ID Source Message



The TS Session Broker service denied the remote procedure call (RPC) from an unauthorized computer %1.



The %1 group is empty. For the Terminal Services Session Broker service to work correctly, you must add the computer accounts of terminal servers to this group.



The %1 group does not exist. To create the group, run the command tssdis.exe -install.

TS Session Broker

Terminal Services