vSphere 5.1 – VMware Tools filling event logs on a Terminal Server

I just stumbled across this bug while working on an ESXi 5.1 server running a Windows Server 2008 R2 Terminal Server VM.

The VM had been crashing randomly and throughout the Application event logs were the following messages:


Reading the event details showed the following:


After a bit of digging around I found this KB article: http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2036350

As it turns out this is a known issue and currently a workaround exists to help alleviate the symptoms.

First disable VMware Tools Application logging by modifying the tools.conf file, normally found under C:\ProgramData\VMware\VMware Tools on Server 2008/R2/2012. If this file does not exist you can create it manually via notepad or similar. Add the following line to the file:

vmusr.level = error

Save the file and restart the VMTools service from the Services snap-in tool.

Secondly, disable the virtual machine general logging via the vSphere client. Edit the virtual machine settings, click on the Options tab, select Advanced->General and un-tick the “Enable Logging” tick box.


Save the configuration and then restart the VM. If you are unable to restart the VM you can also vMotion the VM to another host to make this setting take affect.

Anyway, hope this helps 🙂