Dwminit error on ESXi 7.0 Update 3 (HPE)

[AIT-AT]

since a view weeks, i have a problem with an esxi (HPE-Custom-AddOn_703.0.0.10.9.0-11 (Hewlett Packard Enterprise) ) host. all guests running perfect except one.

the server (GUEST) is a windows server 2022. after one day, the rdp connection to the server is not available. after several hours the server does not responding.

the host report a Dwminit error in the event log. and every time i try to connect to the server, there is a DxgKrnl error in the protocol.

i installed a new server as a workaround and transfered all servics to the new guest.
another server whitch had no problem has today the same issue.

did any one see the same problem with vsphere?

Error-Messages:

Index : 115458
EntryType : Warning
InstanceId : 2147614720
Message : Der Desktopfenster-Manager-Prozess wurde beendet. (Prozessexitcode: 0x800401f0, Neustartzähler:
5, ID des primären Anzeigegeräts: Microsoft Basic Display Driver)
Category : (0)
CategoryNumber : 0
ReplacementStrings : {0x800401f0, 5, Microsoft Basic Display Driver}
Source : Dwminit
TimeGenerated : 09.01.2023 09:09:01
TimeWritten : 09.01.2023 09:09:01
UserName :

Index : 115457
EntryType : Information
InstanceId : 1073750851
Message : Der Sitzungsport wurde vom Desktopfenster-Manager registriert.
Category : (0)
CategoryNumber : 0
ReplacementStrings : {}
Source : Desktop Window Manager
TimeGenerated : 09.01.2023 09:09:01
TimeWritten : 09.01.2023 09:09:01
UserName :

TimeCreated : 09.01.2023 09:09:25
ProviderName : Microsoft-Windows-DxgKrnl
Id : 465
Message : Winlogon in session 61 (console) reuqested session stop using GPU, returned status {Vorgang
fehlgeschlagen}
Der Vorgang konnte nicht durchgeführt werden., with progress stage of no display adapter found

[DCasota]

Hi,

Can you double check the sequence of installed Microsoft Windows Server 2022 updates ?

Have a look to the update history here. In the last six months there were some rdp + dwm related issues + fixes/rollbacks, but there were also some issues lately with Sophos Antivirus.

Other users reported that updating/reinstalling latest (12.1.5) VMware tools didn't help, some others disabled 3d graphics in vm settings. It might not be matching to your's infrastructure issue but give a try as well.

Hope this helps.
Daniel

[AIT-AT]

i think i found the problem (thanks Daniel[DCasota] for your hint)

after many hours (and 3 days) of troubleshooting on vmware [tools etc] and windows update [trying to uninstall each update incrementally], i realized that my problem is caused by TrendMicro WFBS in conjunction with microsoft rdp.

when trend micro wfbs is installed (whetherit is runnin or not does not matter), i can start the vmware console and take the 0-session of the host. this way i can control the guest. errors are reported in the eventlog and rdp is not available.

when trend micro is uninstalled (reboot was not necessary), the server response was normally and no errors are reportet in eventlog.

the patch of trend micro was the 2454 (https://autoupdate.wfbs.trendmicro.com/static/WFBS/20.0/DE/readme/WFBS_100_SP1_WIN_ALL_Patch_2454.tx...).
there are no known issue with microsoft rdp/display manager and endpoint agent.

now i am trying to rollback the patch and find out why the dwminit process crashed. propably it was the behavior monitoring.

if any of you need more details, do not hesitate to ask

[NadineK]

Did you ever found out the cause? Was ist behavior monitor or any exclusions that did the trick?

We are also facing this issue and that from time to time users are unable to logon because of the dwminit error.
We are using TrendMirco Apex One and this is our first Server 2022 with RDS role installed .

Since I read your post I reinstalled TM and also changed graphic ettings  from "detect automatically" to "user defined setting" and changed the value for video memory from 4 to 16MB.

[achtchaern]

Just so you know: We have the same issue on Hyper-V VMs (Server 2022 and Trend Micro).

[alfster73]

Anyone else find a fix for this issue?  I am seeing this on my Windows Server 2022 vm's, but with a different AV (Sophos.)

VMWare Tools:  12.2.0

[AIT-AT]

Hello, I have solved the problem with a workaround. I have switched from Smart Scan to Conventional Scan on all servers.

[marcolefo12]

Hi

We have the same problem with DataGuard form F-Secure.

Disabling it solved the problem from nom. I will search for a better way. I will contact F-secure support

[RajeevVCP4]

Did you log the case with Microsoft.

it seem windows problem