One of our RDS session hosts has a strange problem. From time to time the RDS Security Layer changes which causes slow logon times of up to 60 seconds.
When we first experienced the slow logon we "reset" the Security Layer setting on de RDS Collection by setting the Security Layer to "RDP security layer" and then back to "Negotiate". A few hours later the problem returned.
We then discovered that the following registry key on the remote desktop server changes to 0:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp\SecurityLayer
When we change the value of the SecurityLayer key to 1 everything works normal again and logons to the RDS are fast.
The key has changed multiple times now but I can't find any correlations. Also the interval of changing seems totally random. Has anybody any ideas why this setting is changing or how to troubleshoot further?
Thanks in advance.