We have a few applications on Windows 2008 R2 servers, presented via RemoteApp, via links from TS-Web. These apps have been running this way for years (~8 years I think).
One of our users is having issues logging in, with it hanging for a couple of minutes at the "configuring remote session" phase before it exits with no explanation / error / etc. We've done all the obvious fixes (disable bitmap caching, delete local cache, ensure low resolution, delete her profile, check no TS server holds a copy of her profile, check firewalls are off or have the required exceptions, etc. but with no joy. We've also confirmed the issue only occurs with the unique combo of her account on her machine.
Since we have a farm of servers, and the login takes minutes, I've not yet been able to capture her login attempt with procmon in time to get clues...
In order to dig deeper (and avoid the inelegant solution of replacing or rebuilding her entire machine), I'd like to know more about what's going on under the covers...
What happens during an RDP connection; i.e. when the system says
configuring remote session, what is actually happening (also interested in other phases; though only for academic reasons)?
Are any logs created which may give a clue to the fault / do you need to enable this logging somewhere? NB: I've checked the event log but at present can see no difference between her (failed) attempt and any other user's.