KB 2799035: Certificate Propagation service crashes when you disconnect an RDS client from a Win7 or Win2008 R2-based RDS server

A new KB was released today (2799035) related to a crash of the Certificate Propagation service when you connect to a RD Session Host Server by using a smart card, and then you disconnect the connection immediately.

“…Assume that you have a Windows 7 or Windows Server 2008 R2-based Remote Desktop Services (RDS) server. You connect an RDS client to the server by using a smart card, and then you disconnect the connection immediately. In this situation, the Certificate Propagation service crashes and other services that are contained in the same Svchost group on the RDS server unexpectedly stop. Additionally, the following event is logged in the Application log:

Log Name: Application
Source: Application Error
Date: Date and time
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Description:
Faulting application name: svchost.exe_ProfSvc, version: file version, time stamp: time stamp,
Faulting module name: iedkcs32.dll, version: file version, time stamp: time stamp
Exception code: 0xc0000005
Fault offset: Offset
Faulting process id: Id
Faulting application start time: Time
Faulting application path: C:\Windows\system32\svchost.exe
Faulting module path: C:\Windows\System32\iedkcs32.dll

Note The following services that are contained in the same Svchost group as the Certification Propagation service are affected by this issue:

• Application Experience service
• Application Information service
• Application Management service
• Certificate Propagation service
• Group Policy Client service
• IP Helper service
• Server service
• User Profile service
• Task Scheduler service
• System Event Notification service
• Remote Desktop Configuration service
• Shell Hardware Detection service
• Windows Management Instrumentation service
• Windows Update service…”

“…This issue is caused by a race condition that occurs when the RDS client is connected to the server and then disconnected. Two separate threads are created to handle the connection and disconnection events. The session that is used by the first thread is deleted by the second thread because of the race condition. Therefore, an access violation occurs in the first thread..”

Source and download: http://support.microsoft.com/kb/2799035/en-us?sd=rss&spid=14134