Issue
Customer observed repeated logon/logoff events occurring within 1 second at 30-minute intervals for all Automation Servers. These events appear in the Event Viewer but do not impact system performance.
Product Line
EcoStruxure Building Operation
Environment
- Building Operation Automation Servers
- Building Operation Device Administrator
- Building Operation WorkStation
Cause
When left open and connected to the server, the Device Administrator continuously polls the server status. This polling requires authentication, resulting in a logon followed by an immediate logoff. The behavior repeats at a fixed interval (approximately every 30 minutes) as part of the status check mechanism.
Resolution
- Close Device Administrator when not actively in use. This will stop the periodic login attempts.
- If login events persist after closing Device Administrator, further investigation is required to identify other sources of admin logins.
