Logon Problem (server/terminal services)

I have a windows 2003 server running terminal services, when you try to access the server via remote desktop the logon starts and the screen goes away. So I went to the console of the server and try to logged on with my admin id, and the logon started and then it went to saving setting and back to the ctr-alt-del to log on again.

Any clue?


Thanks!
dehmerlAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Jay_Jay70Commented:
Hi dehmerl,

what do the event viewers say on the server?

Cheers!
0
dehmerlAuthor Commented:
No real errors to speak of or even warnings, here is the info about an id doing logon/logoff.

Event Type:      Success Audit
Event Source:      Security
Event Category:      Logon/Logoff
Event ID:      528
Date:            4/20/2006
Time:            8:31:35 PM
User:            XXX\Administrator
Computer:      XXX-GP01
Description:
Successful Logon:
       User Name:      Administrator
       Domain:            XXX
       Logon ID:            (0x0,0x402C20)
       Logon Type:      2
       Logon Process:      User32  
       Authentication Package:      Negotiate
       Workstation Name:      TAM-GP01
       Logon GUID:      {6df91fc7-535b-0ef9-9946-8027fe11d9ef}
       Caller User Name:      XXX-GP01$
       Caller Domain:      XXX
       Caller Logon ID:      (0x0,0x3E7)
       Caller Process ID: 1292
       Transited Services: -
       Source Network Address:      127.0.0.1
       Source Port:      0


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type:      Success Audit
Event Source:      Security
Event Category:      Logon/Logoff
Event ID:      576
Date:            4/20/2006
Time:            8:31:35 PM
User:            XXX\Administrator
Computer:      XXX-GP01
Description:
Special privileges assigned to new logon:
       User Name:      Administrator
       Domain:            XXX
       Logon ID:            (0x0,0x402C20)
       Privileges:      SeSecurityPrivilege
                  SeBackupPrivilege
                  SeRestorePrivilege
                  SeTakeOwnershipPrivilege
                  SeDebugPrivilege
                  SeSystemEnvironmentPrivilege
                  SeLoadDriverPrivilege
                  SeImpersonatePrivilege

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.



Is there something that I should be looking for?
0
Jay_Jay70Commented:
nuh thats all good    no errors in the dcdiag
0
Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

dehmerlAuthor Commented:
This server is just a member, and I can log on my other server with the admin and my personal id
0
isd503Commented:
If you can logon to the server locally, use the local administrator account to logon and delete the profile associated with your "admin id" you referenced above.  You might have a corrupt profile.

Remember to save any information contained in your profile to another location before deleting it.
0
dehmerlAuthor Commented:
Ok, sorry for the late reply. It seems a torjan hit that server and few other that removed the regkey for the login GUI reference.

It was the Clicker Tojan and there are a few ways to fix it after searching google...

Thanks for the help all.
0
GranModCommented:
PAQed with points refunded (500)

GranMod
Community Support Moderator
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.