RDP farm member is set to deny new connection but reconnect existing, drain mode, but clients connect and it seems the load balancer is routing requests to it. Clients see the "remote connections are disabled" message in the rdp session. Upon 4th and or 5th try they may get directed to a new session.
External F5 load balancer, token redirection, external IP set in broker settings on farm members.