Last few weeks we ( me and my colleague ) were installing a terminal server 2008 in a windows server 2008 R2 domain. And after logging in with a user we got the message in the event log 4105.