Monitor unlimited number of servers
Filter log events
Create email and web-based reports
Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content
Event ID: 39 Source: CDM
English
Request a translation of the event description in plain English.
Comments
"Citrix Support Document ID: CTX109668" has information on this event.
This can also happen if the client has for example LPT1 and LPT2 and the server has only LPT1. Then the event is created based on the problem of the LPT2-redirection.
This event indicates a CDM - Redirector problem. The following is a series of troubleshooting steps that can be taken in order to assist in resolving this issue:
First, find out what client device type is causing the issue (Client com port, Drive, LPT port, etc)
1. Disable all client device mappings in Citrix Connection Configuration for the ICA Listener that you connect with.
2. Logon from the client with the suspect device.
3. If you were able to logon, and no events in the Events Viewer appeared associated with CDM, re-enable one client device type at a time in Citrix Connection Configuration.
4. Repeat Steps 2 and 3 until the device type is found.
Next, Within the session, at the command prompt, type:
QOBJECT /DEVICE > QOBJECT.TXT
This command creates a text file where you can see the mapping for LPT1 and LPT2. During troubleshooting, ensure the following: The port has been mapped using the CDM redirector. This is the Citrix redirector for mapping client devices. If instead of the CDM redirector you see the LanMan redirector, it indicates that the port on the server is being mapped to another port on the server network (using Microsoft networking). In the mapping for the client device: LPTx:\yy\LPTz: LPTx is the port name at the server side, /yy/ is the session ID, and LPTz is the port on the client site, where LPTx is pointing to.
Finally, try the following if you still are having issues:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdm\Parameters
Increase the settings for the following:
RequestTimeout: Default is 60 (in seconds)
DirCacheTimeout Default is 30 seconds
CacheTimeout Default is 60 seconds
*** Note: For Microsoft Windows NT Server 4.0 Terminal Server Edition, Windows 2000 Server and Windows 2000 Advanced Server - QUERY replaces QUSER, QPROCESS, QOBJECT, QAPPSERV, QWINSTA from Citrix Winframe. See ME186592.
First, find out what client device type is causing the issue (Client com port, Drive, LPT port, etc)
1. Disable all client device mappings in Citrix Connection Configuration for the ICA Listener that you connect with.
2. Logon from the client with the suspect device.
3. If you were able to logon, and no events in the Events Viewer appeared associated with CDM, re-enable one client device type at a time in Citrix Connection Configuration.
4. Repeat Steps 2 and 3 until the device type is found.
Next, Within the session, at the command prompt, type:
QOBJECT /DEVICE > QOBJECT.TXT
This command creates a text file where you can see the mapping for LPT1 and LPT2. During troubleshooting, ensure the following: The port has been mapped using the CDM redirector. This is the Citrix redirector for mapping client devices. If instead of the CDM redirector you see the LanMan redirector, it indicates that the port on the server is being mapped to another port on the server network (using Microsoft networking). In the mapping for the client device: LPTx:\yy\LPTz: LPTx is the port name at the server side, /yy/ is the session ID, and LPTz is the port on the client site, where LPTx is pointing to.
Finally, try the following if you still are having issues:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdm\Parameters
Increase the settings for the following:
RequestTimeout: Default is 60 (in seconds)
DirCacheTimeout Default is 30 seconds
CacheTimeout Default is 60 seconds
*** Note: For Microsoft Windows NT Server 4.0 Terminal Server Edition, Windows 2000 Server and Windows 2000 Advanced Server - QUERY replaces QUSER, QPROCESS, QOBJECT, QAPPSERV, QWINSTA from Citrix Winframe. See ME186592.
Check to see if any users have more than 1 active session listed in the Citrix Management Console. If so, reset the active sessions. In our case, this made the error go away.
Windows Event Log Analysis Splunk App
Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.
Cisco ASA Log Analyzer Splunk App
Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.