The tech emailed me at the end of the day and isolated it to a specific action that the user was doing which causes it. The action happens to be where we load the Polar SpellCheck DLL to check spelling. This triggered something that I had read about some time ago where unloading a DLL from an EXE instance which was being run from a network folder rather than a local folder causes the RDP session to crash. I hope to get a look at the clients RDS server tomorrow to see if the program was installed on a local drive (which we always recomment) or a network drive. Hopefully this is what the issue is.... stay tuned.