Ctrl + k

Users

All Posts (6)

aarchival

My RDM crashes.

My RDM crashes.

Published 2 years ago

hey Sebastien,

I've got the MsRdpEx_RDM.log but unable to upload it. lemme know if there's any specific info from the logs you need.

Thanks!

My RDM crashes.

My RDM crashes.

Published 2 years ago

Could you try setting "Enable API hooking" to Disabled in Settings / Sessions / Remote Desktop (RDP)? We would like to isolate if the issues you are seeing are related to this option or not.
https://docs.devolutions.net/rdm/kb/troubleshooting-articles/rdp-session-troubleshooting/#disable-rdp-api-hooking

hey Sebastien,

it unfortunately froze again

Log Name: Application

Source: Windows Error Reporting

Date: 29/10/2024 11:52:40 AM

Event ID: 1001

Task Category: None

Level: Information

Keywords:

User: SYSTEM

Computer: MNABCBPG1B3

Description:

Fault bucket , type 0

Event Name: AppHangB1

Response: Not available

Cab Id: 0

Problem signature:

P1: RemoteDesktopManager.exe

P2: 2024.3.13.0

P3: 66960000

P4: 230d

P5: 67247104

P6:

P7:

P8:

P9:

P10:

Attached files:

\\?\C:\Users\P816637\AppData\Local\Temp\WER.9b58c0e9-6ce8-4a0c-8dcb-8cd787405f46.tmp.version.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.21f98807-03af-4106-b087-f2a1caf6336c.tmp.WERInternalMetadata.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_RemoteDesktopMan_5aaff1288e9af06648af6bd14f392a708bba482f_5e95f839_cab_a895b046-46e9-4e3a-bf49-060579a754f9\WPR_initiated_DiagTrackMiniLogger_OneTrace_User_Logger_20241008_1_EC_0_inject.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.efbf2b81-35b8-425b-af8e-d96270b862a2.tmp.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_RemoteDesktopMan_5aaff1288e9af06648af6bd14f392a708bba482f_5e95f839_cab_a895b046-46e9-4e3a-bf49-060579a754f9\WPR_initiated_DiagTrackMiniLogger_WPR System Collector_inject.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.a00e3613-4a9f-4311-b9d4-f3287fccff0a.tmp.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.d7a039bd-1f49-4e1e-8efc-f8d5413b3a64.tmp.csv

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.a04115e6-90e5-4380-9a67-57f344641bcd.tmp.txt

\\?\C:\Users\P816637\AppData\Local\Temp\WER.3afe1ac4-6d89-409f-a459-743a83b77646.tmp.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.1a6f3ad3-ff85-486b-bee0-6b44febb5ad6.tmp.xml

WERGenerationLog.txt

These files may be available here:

\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_RemoteDesktopMan_5aaff1288e9af06648af6bd14f392a708bba482f_5e95f839_cab_a895b046-46e9-4e3a-bf49-060579a754f9

Analysis symbol:

Rechecking for solution: 0

Report Id: 0d1140ca-8077-4e50-907e-89f5d9fdd243

Report Status: 524390

Hashed bucket:

Cab Guid: 0

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Windows Error Reporting" Guid="{0ead09bd-2157-539a-8d6d-c87f95b64d70}" />

<EventID>1001</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2024-10-29T00:52:40.0618216Z" />

<EventRecordID>63715</EventRecordID>

<Correlation />

<Execution ProcessID="15456" ThreadID="10948" />

<Channel>Application</Channel>

<Computer>MNABCBPG1B3</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData>

<Data Name="Bucket">

</Data>

<Data Name="BucketType">0</Data>

<Data Name="EventName">AppHangB1</Data>

<Data Name="Response">Not available</Data>

<Data Name="CabId">0</Data>

<Data Name="P1">RemoteDesktopManager.exe</Data>

<Data Name="P2">2024.3.13.0</Data>

<Data Name="P3">66960000</Data>

<Data Name="P4">230d</Data>

<Data Name="P5">67247104</Data>

<Data Name="P6">

</Data>

<Data Name="P7">

</Data>

<Data Name="P8">

</Data>

<Data Name="P9">

</Data>

<Data Name="P10">

</Data>

<Data Name="AttachedFiles">

\\?\C:\Users\P816637\AppData\Local\Temp\WER.9b58c0e9-6ce8-4a0c-8dcb-8cd787405f46.tmp.version.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.21f98807-03af-4106-b087-f2a1caf6336c.tmp.WERInternalMetadata.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_RemoteDesktopMan_5aaff1288e9af06648af6bd14f392a708bba482f_5e95f839_cab_a895b046-46e9-4e3a-bf49-060579a754f9\WPR_initiated_DiagTrackMiniLogger_OneTrace_User_Logger_20241008_1_EC_0_inject.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.efbf2b81-35b8-425b-af8e-d96270b862a2.tmp.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_RemoteDesktopMan_5aaff1288e9af06648af6bd14f392a708bba482f_5e95f839_cab_a895b046-46e9-4e3a-bf49-060579a754f9\WPR_initiated_DiagTrackMiniLogger_WPR System Collector_inject.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.a00e3613-4a9f-4311-b9d4-f3287fccff0a.tmp.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.d7a039bd-1f49-4e1e-8efc-f8d5413b3a64.tmp.csv

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.a04115e6-90e5-4380-9a67-57f344641bcd.tmp.txt

\\?\C:\Users\P816637\AppData\Local\Temp\WER.3afe1ac4-6d89-409f-a459-743a83b77646.tmp.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.1a6f3ad3-ff85-486b-bee0-6b44febb5ad6.tmp.xml

WERGenerationLog.txt</Data>

<Data Name="StorePath">\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_RemoteDesktopMan_5aaff1288e9af06648af6bd14f392a708bba482f_5e95f839_cab_a895b046-46e9-4e3a-bf49-060579a754f9</Data>

<Data Name="AnalysisSymbol">

</Data>

<Data Name="Rechecking">0</Data>

<Data Name="ReportId">0d1140ca-8077-4e50-907e-89f5d9fdd243</Data>

<Data Name="ReportStatus">524390</Data>

<Data Name="HashedBucket">

</Data>

<Data Name="CabGuid">0</Data>

</EventData>

</Event>

My RDM crashes.

My RDM crashes.

Published 2 years ago

thanks Sebastien. just did that and I'll continue to monitor

My RDM crashes.

My RDM crashes.

Published 2 years ago

Hello,
Thank you for providing the logs. Based on the information, it appears the crash is related to the mstscax.dll module, which is a component of the Microsoft Terminal Services ActiveX control used for Remote Desktop connections.
Could you confirm the full version of Windows you are currently using? Additionally, could you try running the command `sfc /scannow` as an administrator to see if it resolves the issue?
Best regards,

hey Carl,

I'm running Windows 11 Version 23H2 (OS Build 22631.4317)

just before I ran sfc /scannow this morning, RDM crashed again and the logs are below. I'm currently running RDM as of this writing and will see if it still crashes after the scan.

Log Name: Application

Source: Windows Error Reporting

Date: 29/10/2024 9:05:27 AM

Event ID: 1001

Task Category: None

Level: Information

Keywords:

User: SYSTEM

Computer: MNABCBPG1B3

Description:

Fault bucket , type 0

Event Name: AppHangB1

Response: Not available

Cab Id: 0

Problem signature:

P1: RemoteDesktopManager.exe

P2: 2024.3.13.0

P3: 66960000

P4: 230d

P5: 67247104

P6:

P7:

P8:

P9:

P10:

Attached files:

\\?\C:\Users\P816637\AppData\Local\Temp\WER.9b58c0e9-6ce8-4a0c-8dcb-8cd787405f46.tmp.version.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.21f98807-03af-4106-b087-f2a1caf6336c.tmp.WERInternalMetadata.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_RemoteDesktopMan_5aaff1288e9af06648af6bd14f392a708bba482f_5e95f839_cab_a895b046-46e9-4e3a-bf49-060579a754f9\WPR_initiated_DiagTrackMiniLogger_OneTrace_User_Logger_20241008_1_EC_0_inject.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.efbf2b81-35b8-425b-af8e-d96270b862a2.tmp.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_RemoteDesktopMan_5aaff1288e9af06648af6bd14f392a708bba482f_5e95f839_cab_a895b046-46e9-4e3a-bf49-060579a754f9\WPR_initiated_DiagTrackMiniLogger_WPR System Collector_inject.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.a00e3613-4a9f-4311-b9d4-f3287fccff0a.tmp.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.d7a039bd-1f49-4e1e-8efc-f8d5413b3a64.tmp.csv

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.a04115e6-90e5-4380-9a67-57f344641bcd.tmp.txt

\\?\C:\Users\P816637\AppData\Local\Temp\WER.3afe1ac4-6d89-409f-a459-743a83b77646.tmp.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.1a6f3ad3-ff85-486b-bee0-6b44febb5ad6.tmp.xml

WERGenerationLog.txt

These files may be available here:

\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_RemoteDesktopMan_5aaff1288e9af06648af6bd14f392a708bba482f_5e95f839_cab_a895b046-46e9-4e3a-bf49-060579a754f9

Analysis symbol:

Rechecking for solution: 0

Report Id: 0d1140ca-8077-4e50-907e-89f5d9fdd243

Report Status: 524390

Hashed bucket:

Cab Guid: 0

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Windows Error Reporting" Guid="{0ead09bd-2157-539a-8d6d-c87f95b64d70}" />

<EventID>1001</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2024-10-28T22:05:27.3174756Z" />

<EventRecordID>63659</EventRecordID>

<Correlation />

<Execution ProcessID="12384" ThreadID="8332" />

<Channel>Application</Channel>

<Computer>MNABCBPG1B3</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData>

<Data Name="Bucket">

</Data>

<Data Name="BucketType">0</Data>

<Data Name="EventName">AppHangB1</Data>

<Data Name="Response">Not available</Data>

<Data Name="CabId">0</Data>

<Data Name="P1">RemoteDesktopManager.exe</Data>

<Data Name="P2">2024.3.13.0</Data>

<Data Name="P3">66960000</Data>

<Data Name="P4">230d</Data>

<Data Name="P5">67247104</Data>

<Data Name="P6">

</Data>

<Data Name="P7">

</Data>

<Data Name="P8">

</Data>

<Data Name="P9">

</Data>

<Data Name="P10">

</Data>

<Data Name="AttachedFiles">

\\?\C:\Users\P816637\AppData\Local\Temp\WER.9b58c0e9-6ce8-4a0c-8dcb-8cd787405f46.tmp.version.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.21f98807-03af-4106-b087-f2a1caf6336c.tmp.WERInternalMetadata.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_RemoteDesktopMan_5aaff1288e9af06648af6bd14f392a708bba482f_5e95f839_cab_a895b046-46e9-4e3a-bf49-060579a754f9\WPR_initiated_DiagTrackMiniLogger_OneTrace_User_Logger_20241008_1_EC_0_inject.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.efbf2b81-35b8-425b-af8e-d96270b862a2.tmp.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_RemoteDesktopMan_5aaff1288e9af06648af6bd14f392a708bba482f_5e95f839_cab_a895b046-46e9-4e3a-bf49-060579a754f9\WPR_initiated_DiagTrackMiniLogger_WPR System Collector_inject.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.a00e3613-4a9f-4311-b9d4-f3287fccff0a.tmp.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.d7a039bd-1f49-4e1e-8efc-f8d5413b3a64.tmp.csv

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.a04115e6-90e5-4380-9a67-57f344641bcd.tmp.txt

\\?\C:\Users\P816637\AppData\Local\Temp\WER.3afe1ac4-6d89-409f-a459-743a83b77646.tmp.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.1a6f3ad3-ff85-486b-bee0-6b44febb5ad6.tmp.xml

WERGenerationLog.txt</Data>

<Data Name="StorePath">\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_RemoteDesktopMan_5aaff1288e9af06648af6bd14f392a708bba482f_5e95f839_cab_a895b046-46e9-4e3a-bf49-060579a754f9</Data>

<Data Name="AnalysisSymbol">

</Data>

<Data Name="Rechecking">0</Data>

<Data Name="ReportId">0d1140ca-8077-4e50-907e-89f5d9fdd243</Data>

<Data Name="ReportStatus">524390</Data>

<Data Name="HashedBucket">

</Data>

<Data Name="CabGuid">0</Data>

</EventData>

</Event>

My RDM crashes.

My RDM crashes.

Published 2 years ago

here for the same issue as well.. RDM's been crashing several times a day and not just after adding machines.. see above logs

My RDM crashes.

My RDM crashes.

Published 2 years ago

Log Name: Application

Source: Windows Error Reporting

Date: 28/10/2024 11:46:45 AM

Event ID: 1001

Task Category: None

Level: Information

Keywords:

User: SYSTEM

Computer: MNABCBPG1B3

Description:

Fault bucket , type 0

Event Name: AppHangB1

Response: Not available

Cab Id: 0

Problem signature:

P1: RemoteDesktopManager.exe

P2: 2024.3.13.0

P3: 66960000

P4: 230d

P5: 67247104

P6:

P7:

P8:

P9:

P10:

Attached files:

\\?\C:\Users\P816637\AppData\Local\Temp\WER.9b58c0e9-6ce8-4a0c-8dcb-8cd787405f46.tmp.version.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.21f98807-03af-4106-b087-f2a1caf6336c.tmp.WERInternalMetadata.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_RemoteDesktopMan_5aaff1288e9af06648af6bd14f392a708bba482f_5e95f839_cab_a895b046-46e9-4e3a-bf49-060579a754f9\WPR_initiated_DiagTrackMiniLogger_OneTrace_User_Logger_20241008_1_EC_0_inject.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.efbf2b81-35b8-425b-af8e-d96270b862a2.tmp.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_RemoteDesktopMan_5aaff1288e9af06648af6bd14f392a708bba482f_5e95f839_cab_a895b046-46e9-4e3a-bf49-060579a754f9\WPR_initiated_DiagTrackMiniLogger_WPR System Collector_inject.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.a00e3613-4a9f-4311-b9d4-f3287fccff0a.tmp.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.d7a039bd-1f49-4e1e-8efc-f8d5413b3a64.tmp.csv

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.a04115e6-90e5-4380-9a67-57f344641bcd.tmp.txt

\\?\C:\Users\P816637\AppData\Local\Temp\WER.3afe1ac4-6d89-409f-a459-743a83b77646.tmp.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.1a6f3ad3-ff85-486b-bee0-6b44febb5ad6.tmp.xml

WERGenerationLog.txt

These files may be available here:

\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_RemoteDesktopMan_5aaff1288e9af06648af6bd14f392a708bba482f_5e95f839_cab_a895b046-46e9-4e3a-bf49-060579a754f9

Analysis symbol:

Rechecking for solution: 0

Report Id: 0d1140ca-8077-4e50-907e-89f5d9fdd243

Report Status: 524390

Hashed bucket:

Cab Guid: 0

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Windows Error Reporting" Guid="{0ead09bd-2157-539a-8d6d-c87f95b64d70}" />

<EventID>1001</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2024-10-28T00:46:45.9594368Z" />

<EventRecordID>63427</EventRecordID>

<Correlation />

<Execution ProcessID="47900" ThreadID="43544" />

<Channel>Application</Channel>

<Computer>MNABCBPG1B3</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData>

<Data Name="Bucket">

</Data>

<Data Name="BucketType">0</Data>

<Data Name="EventName">AppHangB1</Data>

<Data Name="Response">Not available</Data>

<Data Name="CabId">0</Data>

<Data Name="P1">RemoteDesktopManager.exe</Data>

<Data Name="P2">2024.3.13.0</Data>

<Data Name="P3">66960000</Data>

<Data Name="P4">230d</Data>

<Data Name="P5">67247104</Data>

<Data Name="P6">

</Data>

<Data Name="P7">

</Data>

<Data Name="P8">

</Data>

<Data Name="P9">

</Data>

<Data Name="P10">

</Data>

<Data Name="AttachedFiles">

\\?\C:\Users\P816637\AppData\Local\Temp\WER.9b58c0e9-6ce8-4a0c-8dcb-8cd787405f46.tmp.version.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.21f98807-03af-4106-b087-f2a1caf6336c.tmp.WERInternalMetadata.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_RemoteDesktopMan_5aaff1288e9af06648af6bd14f392a708bba482f_5e95f839_cab_a895b046-46e9-4e3a-bf49-060579a754f9\WPR_initiated_DiagTrackMiniLogger_OneTrace_User_Logger_20241008_1_EC_0_inject.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.efbf2b81-35b8-425b-af8e-d96270b862a2.tmp.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_RemoteDesktopMan_5aaff1288e9af06648af6bd14f392a708bba482f_5e95f839_cab_a895b046-46e9-4e3a-bf49-060579a754f9\WPR_initiated_DiagTrackMiniLogger_WPR System Collector_inject.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.a00e3613-4a9f-4311-b9d4-f3287fccff0a.tmp.etl

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.d7a039bd-1f49-4e1e-8efc-f8d5413b3a64.tmp.csv

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.a04115e6-90e5-4380-9a67-57f344641bcd.tmp.txt

\\?\C:\Users\P816637\AppData\Local\Temp\WER.3afe1ac4-6d89-409f-a459-743a83b77646.tmp.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.1a6f3ad3-ff85-486b-bee0-6b44febb5ad6.tmp.xml

WERGenerationLog.txt</Data>

<Data Name="StorePath">\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_RemoteDesktopMan_5aaff1288e9af06648af6bd14f392a708bba482f_5e95f839_cab_a895b046-46e9-4e3a-bf49-060579a754f9</Data>

<Data Name="AnalysisSymbol">

</Data>

<Data Name="Rechecking">0</Data>

<Data Name="ReportId">0d1140ca-8077-4e50-907e-89f5d9fdd243</Data>

<Data Name="ReportStatus">524390</Data>

<Data Name="HashedBucket">

</Data>

<Data Name="CabGuid">0</Data>

</EventData>

</Event>

1 - 6 of 6 items