[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Logon Problem (server/terminal services)

Posted on 2006-04-20
8
Medium Priority
?
300 Views
Last Modified: 2010-04-18
I have a windows 2003 server running terminal services, when you try to access the server via remote desktop the logon starts and the screen goes away. So I went to the console of the server and try to logged on with my admin id, and the logon started and then it went to saving setting and back to the ctr-alt-del to log on again.

Any clue?


Thanks!
0
Comment
Question by:dehmerl
7 Comments
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 16503205
Hi dehmerl,

what do the event viewers say on the server?

Cheers!
0
 

Author Comment

by:dehmerl
ID: 16503736
No real errors to speak of or even warnings, here is the info about an id doing logon/logoff.

Event Type:      Success Audit
Event Source:      Security
Event Category:      Logon/Logoff
Event ID:      528
Date:            4/20/2006
Time:            8:31:35 PM
User:            XXX\Administrator
Computer:      XXX-GP01
Description:
Successful Logon:
       User Name:      Administrator
       Domain:            XXX
       Logon ID:            (0x0,0x402C20)
       Logon Type:      2
       Logon Process:      User32  
       Authentication Package:      Negotiate
       Workstation Name:      TAM-GP01
       Logon GUID:      {6df91fc7-535b-0ef9-9946-8027fe11d9ef}
       Caller User Name:      XXX-GP01$
       Caller Domain:      XXX
       Caller Logon ID:      (0x0,0x3E7)
       Caller Process ID: 1292
       Transited Services: -
       Source Network Address:      127.0.0.1
       Source Port:      0


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type:      Success Audit
Event Source:      Security
Event Category:      Logon/Logoff
Event ID:      576
Date:            4/20/2006
Time:            8:31:35 PM
User:            XXX\Administrator
Computer:      XXX-GP01
Description:
Special privileges assigned to new logon:
       User Name:      Administrator
       Domain:            XXX
       Logon ID:            (0x0,0x402C20)
       Privileges:      SeSecurityPrivilege
                  SeBackupPrivilege
                  SeRestorePrivilege
                  SeTakeOwnershipPrivilege
                  SeDebugPrivilege
                  SeSystemEnvironmentPrivilege
                  SeLoadDriverPrivilege
                  SeImpersonatePrivilege

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.



Is there something that I should be looking for?
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 16503750
nuh thats all good    no errors in the dcdiag
0
Configuration Guide and Best Practices

Read the guide to learn how to orchestrate Data ONTAP, create application-consistent backups and enable fast recovery from NetApp storage snapshots. Version 9.5 also contains performance and scalability enhancements to meet the needs of the largest enterprise environments.

 

Author Comment

by:dehmerl
ID: 16503784
This server is just a member, and I can log on my other server with the admin and my personal id
0
 
LVL 3

Expert Comment

by:isd503
ID: 16507578
If you can logon to the server locally, use the local administrator account to logon and delete the profile associated with your "admin id" you referenced above.  You might have a corrupt profile.

Remember to save any information contained in your profile to another location before deleting it.
0
 

Author Comment

by:dehmerl
ID: 16567093
Ok, sorry for the late reply. It seems a torjan hit that server and few other that removed the regkey for the login GUI reference.

It was the Clicker Tojan and there are a few ways to fix it after searching google...

Thanks for the help all.
0
 

Accepted Solution

by:
GranMod earned 0 total points
ID: 16915419
PAQed with points refunded (500)

GranMod
Community Support Moderator
0

Featured Post

Prep for the ITIL® Foundation Certification Exam

December’s Course of the Month is now available! Enroll to learn ITIL® Foundation best practices for delivering IT services effectively and efficiently.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
This Micro Tutorial will teach you how to add a cinematic look to any film or video out there. There are very few simple steps that you will follow to do so. This will be demonstrated using Adobe Premiere Pro CS6.
Despite its rising prevalence in the business world, "the cloud" is still misunderstood. Some companies still believe common misconceptions about lack of security in cloud solutions and many misuses of cloud storage options still occur every day. …

873 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question