09/09/2021  10:38:36 Start process ID 376586240348829215("C:\Program Files (x86)\NoMachine\bin\nxserver.bin" "-c" "C:\ProgramData\nomachine\nxserver\nxserver.exe --login" "-H" "600") user NX 09/09/2021  10:38:38 Process ID 376586240348829215, a subprocess is started with ID 376586245260359200 ("C:\Program Files (x86)\NoMachine\\bin\\nxexec.exe" "--auth") user NX 09/09/2021  10:38:40 Process ID 376586240348829215, a process is started with ID 376586247758067233 ("C:\Program Files (x86)\NoMachine\\bin\\nxexec.exe" "--node" "--user" "DOMAIN\MYUSER" "--priority" "realtime" "--mode" "0" "--pid" "1320" "-H" "600"), user NX In between there are multiple logins and unlogins of the my user who made the connection against NoMachine. (MYUSER, S-1-5-21-XXXXXXXX-XXXXXXXXX-XXXXXXXXX-XXXX) 09/09/2021 10:38:41 Process 376586245260359200 ends with code 0 09/09/2021  10:38:42 Process376586240348829215 ends with code 0 09/09/2021  10:38:42 Process376586247758067233 ends with error code 1 NXserver.log 13188 13188 2021-09-09 10:38:38 682.368 NXSERVER User 'DOMAIN\MYUSER' logged in from IP 'xxx.xx.xxx.xx' using authentication method NX-password. 13188 13188 2021-09-09 10:38:39 292.870 NXSERVER ERROR! Cannot connect to local node. 13188 13188 2021-09-09 10:38:39 294.896 NXSERVER WARNING! Process 'C:\Program Files (x86)\NoMachine\\bin\\nxexec.exe --node --user DOMAIN\MYUSER --priority realtime --mode 0 --pid 1320 -H 600' with pid '11060/1368' finished with exit code 1 after 0,157 seconds. 13188 13188 2021-09-09 10:38:39 294.896 NXSERVER WARNING! NXNodeExec: nxexec with pid '11060' just died with exit code '1'. NXerror.log Info: Handler started with pid 13188 on Thu Sep 09 10:38:36 2021. Info: Handling connection from IP 'xxx.xx.xxx.xx' port 53482 on Thu Sep 09 10:38:36 2021. 5892 12960 10:38:38 663 WriteTokenMessage: ERROR! Writing to client failed. 5892 12960 10:38:38 664 WriteTokenMessage: ERROR! Error code '1346'. 5892 12960 10:38:38 664 SendToken: ERROR! Failed to write message to token server. 13188 9404 10:38:38 682.368 CheckPrivilege: WARNING! Server couldn't process request. 13188 11188 10:38:38 682.368 CheckPrivilegeThread: WARNING! Worker thread failed. 13188 11188 10:38:38 682.368 HostIsAdmin: ERROR! Failed to check user's privilege level. 13188 8300 10:38:38 685.359 CheckPrivilege: WARNING! Server couldn't process request. 13188 11188 10:38:38 685.359 CheckPrivilegeThread: WARNING! Worker thread failed. 13188 11188 10:38:38 685.359 HostIsAdmin: ERROR! Failed to check user's privilege level. 13188 1096 10:38:38 753.179 CheckPrivilege: WARNING! Server couldn't process request. 13188 11188 10:38:38 754.178 CheckPrivilegeThread: WARNING! Worker thread failed. 13188 11188 10:38:38 754.178 HostIsAdmin: ERROR! Failed to check user's privilege level. 13188 11012 10:38:39 086.416 CheckPrivilege: WARNING! Server couldn't process request. 13188 11188 10:38:39 086.416 CheckPrivilegeThread: WARNING! Worker thread failed. 13188 11188 10:38:39 086.416 HostIsAdmin: ERROR! Failed to check user's privilege level. 11060 9104 10:38:39 164 NXLsaSendRequest: ERROR! Cannot send request to NXLSA package. Error code is : 0. Package's response is : 0xc0000001. 11060 9104 10:38:39 166 ExecuteNodeNXLsa: ERROR! NXLsa/exec failed and no password available. 11060 9104 10:38:39 176 BecomeSystem: ERROR! Failed to open process running under SYSTEM account. 11060 9104 10:38:39 177 BecomeSystem: ERROR! Error is '6'. 11060 9104 10:38:39 282 LoadAccountProfile: ERROR! Load user profile failed with error code '1314'. 11060 9104 10:38:39 284 ExecuteNodeToken: ERROR! Failed to create process as user. 11060 9104 10:38:39 285 ExecuteNodeToken: ERROR! Error is '1314' 11060 9104 10:38:39 286 ExecuteNodeToken: ERROR! Failed to create process with logon token. 11060 9104 10:38:39 288 nxexecExecNode: ERROR! Failed to launch node process. 11060 9104 10:38:39 289 main: ERROR! Could not execute nxnode. Info: Connection from IP 'xxx.xx.xxx.xx' port 53482 closed on Thu Sep 09 10:38:39 2021. Info: Handler with pid 13188 terminated on Thu Sep 09 10:38:39 2021. 13188 11188 10:38:39 334.759 Io/Io: WARNING! Descriptor FD#884 type socket still open at exit. 13188 11188 10:38:39 334.759 Io/Io: WARNING! Descriptor FD#1048 type socket still open at exit. NXService.log 3760 2848 10:38:38 665.437 ReadTokenMessage: ERROR! Read from server pipe failed. 3760 2848 10:38:38 666.410 ReadTokenMessage: ERROR! Error is '109'. 3760 2848 10:38:38 666.410 ImpersonationWorker: ERROR! Failed to read message from client. 3760 12348 10:38:38 682.368 GetCachedToken: ERROR! Failed to find access token for user (MYUSER, S-1-5-21-XXXXXXXX-XXXXXXXXX-XXXXXXXXX-XXXX) 3760 12348 10:38:38 682.368 WriteTokenMessage: ERROR! Writing to client failed. 3760 12348 10:38:38 682.368 WriteTokenMessage: Error is '109'. 3760 9016 10:38:38 685.359 GetCachedToken: ERROR! Failed to find access token for user '(MYUSER, S-1-5-21-XXXXXXXX-XXXXXXXXX-XXXXXXXXX-XXXX) 3760 9016 10:38:38 685.359 WriteTokenMessage: ERROR! Writing to client failed. 3760 9016 10:38:38 685.359 WriteTokenMessage: Error is '109'. 3760 6036 10:38:38 753.179 GetCachedToken: ERROR! Failed to find access token for user '(MYUSER, S-1-5-21-XXXXXXXX-XXXXXXXXX-XXXXXXXXX-XXXX) 3760 6036 10:38:38 754.178 WriteTokenMessage: ERROR! Writing to client failed. 3760 6036 10:38:38 754.178 WriteTokenMessage: Error is '109'. 3760 7032 10:38:39 086.416 GetCachedToken: ERROR! Failed to find access token for user '(MYUSER, S-1-5-21-XXXXXXXX-XXXXXXXXX-XXXXXXXXX-XXXX) 3760 7032 10:38:39 086.416 WriteTokenMessage: ERROR! Writing to client failed. 3760 7032 10:38:39 086.416 WriteTokenMessage: Error is '109'. 3760 9596 10:38:39 168.200 GetCachedToken: ERROR! Failed to find access token for user '(MYUSER, S-1-5-21-XXXXXXXX-XXXXXXXXX-XXXXXXXXX-XXXX)