Hi,
I am continuously getting event id: 4005 on RDS server.
Server OS: Microsoft Windows Server 2012 R2 Standard.
The Winlogon process terminates unexpectedly and prevents new logins from processing. However, the only way to get login process work after the power cycle the server.
Webroot antivirus agent is installed on the server.
Tried to install the below-mentioned update on the server but is shows not applicable. It looks like this update is superseded with other updates.
November 15, 2016:- (Preview of Monthly Rollup)
https://support.microsoft.com/en-us/kb/3197875
Webroot released the new agent (9.0.18.34 - October2th, 2017).
Added
•Efficacy improvements when making determinations for critical system processes
•Enabled installation where TLS version is 1.1 or greater
•Data gathering for phase 1 of malicious scripts shield
•Extended data set transmitted for use with Machine Learning
•Further optimization of cloud communications
•Handle /disable command line option correctly
•Improvements to hash calculation for non-PE files
•In Product Messaging ( IPM ) displays special characters correctly
•Select IPMs can trigger re-acceptance of EULA
•Update WSA copyright message to 2017
•Support for Windows 10 Fall Creators release
•Support for Windows 2016 Server
•Enable installation and removal of DNS-P Agent
Fixed
•Integration with Mozilla Firefox no longer causes a browser crash in certain circumstances
•Internet connectivity is not lost when removing WSA
•Protect against WSA driver being written to disk with zero-byte file size
•Prevent agent crash when Backup & Sync is being used
•Addresses a memory leak resulting in 4005 <g class="gr_ gr_106 gr-alert gr_gramm gr_inline_cards gr_run_anim Grammar multiReplace" data-gr-id="106" id="106">event</g>
on Terminal Servers
•Ensured plugins are removed smoothly during un-installation
•Ensured journaling files are always present at the time of WSA installation
•Send data back for GSM to clear 'Needs Attention' from devices in a timely manner
•When System Analyzer is running, ensure that files can be restored from Quarantine
Reference link of Webroot: http://answers.webroot.com/Webroot/ukp.aspx?pid=10&app=vw&vw=1&login=1&json=1&solutionid=2234
Regards,