Share via


Event ID:105 - every couple of seconds in the event viewer

Question

Thursday, April 27, 2017 3:52 PM | 1 vote

I have a Windows 10 Pro (15063) build that randomly reboots itself throughout the day.

I have run DISM scan, health and restore with no issues found.

I have run sfc with no issues found.

In the event viewer I am finding prior to the critical Kernel-Power notification of shut-down, that the following event ID: 105 occurs randomly every few seconds (hundreds of times!):

event id 105 -> Microsoft-windows-remotedesktopservices-rdpcorets/admin

DETAILS:

The server's security layer setting allows it to use native RDP encryption, which is no longer recommended. Consider changing the server security layer to require SSL. You can change this setting in Group Policy.

I have tested Remote Desktop on this workstation and I am able to connect without issue.

Why would this message show up every few seconds?

We do not allow direct access to RD from external sources so why do I need to "Consider SSL" ??

Out of 25 workstations in our office, ALL running Win 10 pro 15063, is this one the only one exhibiting this error?

HELP!?!

All replies (3)

Thursday, April 27, 2017 5:57 PM

Does it bluescreen when it restarts ? See; 

System file check (SFC) Scan and Repair System Files & DISM to fix things SFC cannot (guide by Team ZigZag) and upload the three latest minidump files for analysis if it does. Look for the dmp files anyway.

What is remote connections to this machine set to? Is Network Leven Authentication set to only allow ticked?


Monday, August 14, 2017 9:53 AM

Did you find a fix to this. Having the same issue!


Sunday, September 2, 2018 4:47 PM

Me too...   Any solutions?  Thanks