Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

TerminalServices-RemoteConnectionManager Event ID: 1057: The relevant status code was Object already exists.


  • Please log in to reply
4 replies to this topic

#1 delar

delar

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:07:40 PM

Posted 25 April 2012 - 02:58 PM

The computer is Windows 7 Professional 64-bit edition version 6.1 Build 7601 service pack 1. The computer is not in a domain environment. I believe this may be a security issue however I completed an in-place windows 7 upgrade to try and fix the problem but after all of the windows updates, etc the error remains and appears every time the computer is rebooted...

I could use some help with the following error:

Log Name: System
Source: Microsoft-Windows-TerminalServices-RemoteConnectionManager
Event ID: 1057
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Description:
The Terminal Server has failed to create a new self signed certificate to be used for Terminal Server authentication on SSL connections. The relevant status code was Object already exists.

Provider Name="Microsoft-Windows-TerminalServices-RemoteConnectionManager"
Guid="{C76BAA63-AE81-421C-B425-340B4B24157F}"
EventSourceName="TermService"

I found {C76BAA63-AE81-421C-B425-340B4B24157F} in my registry in the:

HKey_LOCAL_MACHINE -> SOFTWARE -> Microsoft -> Windows -> CurrentVersion -> WINEVT -> Channels -> Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin -> OwningPublisher

HKey_LOCAL_MACHINE -> SOFTWARE -> Microsoft -> Windows -> CurrentVersion -> WINEVT -> Channels -> Microsoft-Windows-TerminalServices-RemoteConnectionManager/Analytic -> OwningPublisher

HKey_LOCAL_MACHINE -> SOFTWARE -> Microsoft -> Windows -> CurrentVersion -> WINEVT -> Channels -> Microsoft-Windows-TerminalServices-RemoteConnectionManager/Debug -> OwningPublisher

HKey_LOCAL_MACHINE -> SOFTWARE -> Microsoft -> Windows -> CurrentVersion -> WINEVT -> Channels -> Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational -> OwningPublisher

Microsoft-Windows-TerminalServices-RemoteConnectionManager
%SystemRoot%\system32\termsrv.dll

When I open as administrator a command prompt window and enter the follow: regsvr32 termsrv.dll

I get the following message:

RegSvr32

The module termsrv.dll was loaded but the entry-point DllRegisterServer was not found.

Make sure that termsrv.dll is a valid DLL or OCX file and then try again.

Not sure if this is a problem or if this behavior is expected...

I ran sfc /scannow and check disk on the hard drive with both reporting no errors.

I updated the security profile for:

[Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security]

In the right pane, double click "Require use of specific security layer for remote (RDP) connections", in the security layer list, select RDP.

I modified the policy and there was no change in computer behavior. The error still appears each time the computer is reboot.

===

I found a semi-related webpage that at least lists the same Microsoft-Windows-TerminalServices-RemoteConnectionManager and 1057. However I'm running Windows 7 64-bit edition and I seriously doubt I have a lack of available memory issue.

Event ID 1057 - Terminal Services Authentication and Encryption
http://technet.microsoft.com/en-us/library/cc775192%28v=ws.10%29.aspx

Physical Memory (MB)
Total 24567
Cached 6337
Available 21821
Free 15709

The relevant status code says that the "Object already exists" which I think is far more relevant then some memory issue. Do I have to delete some file or registry entry? Or is it a security issue?

Google searches have come up with nothing. Any suggestions would be very helpful!

BC AdBot (Login to Remove)

 


#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:09:40 AM

Posted 25 April 2012 - 06:25 PM

Hello -
RE: TerminalServices-RemoteConnectionManager Event ID: 1057: The relevant status code was Object already exists.

Please read >> http://www.jonathanbond.org/techy-stuff as there seems to be a "fix" there -
This has worked for some people -

Thank You -
Credit to AdvancedSetup at Malwarebytes forum for the link -

Edited by noknojon, 25 April 2012 - 06:27 PM.


#3 delar

delar
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:07:40 PM

Posted 26 April 2012 - 10:50 AM

Hello -
RE: TerminalServices-RemoteConnectionManager Event ID: 1057: The relevant status code was Object already exists.

Please read >> http://www.jonathanbond.org/techy-stuff as there seems to be a "fix" there -
This has worked for some people -

Thank You -
Credit to AdvancedSetup at Malwarebytes forum for the link -


I saw that post but the relevant status code was "Key not valid for use in specified state" and mine was "Object already exists". I didn't want to start messing around with things and cause more problems if it wasn't the same issue.

#4 delar

delar
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:07:40 PM

Posted 26 April 2012 - 03:31 PM

I rebooted the computer with a clean windows boot:

msconfig

In the System Configuration Utility dialog box, click Selective Startup on the General tab.

Click to clear the Load Startup Items check box.
Note The Use Original Boot.ini check box is unavailable.
Click the Services tab.
Click to select the Hide All Microsoft Services check box.
Click Disable All, and then click OK.
When you are prompted, click Restart.


Still have the error on computer reboots.

#5 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:09:40 AM

Posted 27 April 2012 - 07:15 AM

Hi -
Apart from the "Source: Microsoft-Windows-TerminalServices-RemoteConnectionManager Event ID: 1057" Message, what problems do you have ??

Is your question just what the message means, and how did you "complete an in-place windows 7 upgrade to try and fix the problem" ??

We need to know what actual problem you are having -

Thank You -
EDIT -
Do you wish to place a topic in Am I Infected, "" I believe this may be a security issue"", or please be more specific -

Edited by noknojon, 27 April 2012 - 07:19 AM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users