User may be unable to re-connect to disconnected session. A new session gets launched rather than connecting to existing session.

"Access this computer from the network" right was added to user's security group.

---

Problem Cause

BrokerAgent wasn't able to open a WCF channel to the cloud connectors impersonating the user launching the session. As a result user token notification was not sent to the Broker and so the trusted user was not set on the session. Without the trusted user on a session, reconnection is not allowed  

You may see following lines in CDF trace:

hh:mm:ss:xxxxx,xxxx,xxxx,x,BrokerAgent,,0,,x,EntryExit,"StackManager.QuerySingleUserToken(xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx): Exit(UserTokenHandle:xxxx)",""

hh:mm:ss:xxxxx,xxxx,xxxx,x,BrokerAgent,,0,,x,EntryExit,"ControllerConnectionFactory:AttemptConnection: Attempting to connect to endpoint at address http://<CloudConnector name>:80/Citrix/CdsController/INotifyBroker, binding WsHttpBindingINotifyBrokerEndpoint and contract Citrix.Cds.Protocol.Controller.INotifyBroker",""


hr:mm:ss:xxxxx,xxxx,xxxx,x,BrokerAgent,,0,,x,Error,"NotificationManager.NotificationServiceThread: NotifyEventEntry:NotifyUser, Exception:Citrix.Cds.BrokerAgent.ConnectionFailedException: Error occurred when attempting to connect to endpoint at address http://<CloudConnector name>:80/Citrix/CdsController/INotifyBroker, binding WsHttpBindingINotifyBrokerEndpoint and contract Citrix.Cds.Protocol.Controller.INotifyBroker: System.ServiceModel.Security.SecurityNegotiationException: The caller was not authenticated by the service. ---> System.ServiceModel.FaultException: The request for security token could not be satisfied because authentication failed.