Solved

winlogon.exe application error Unable to remote desktop into server

Posted on 2007-03-27
2
2,630 Views
Last Modified: 2012-05-05
So this morning i come in and i'm unable to remote into the domain using remote desktop. It starts to login then just closes down. It creates 2 events in the app viewer on the server

Event Type:      Error
Event Source:      Application Error
Event Category:      (100)
Event ID:      1000
Date:            3/27/2007
Time:            10:24:35 AM
User:            N/A
Computer:      ******
Description:
Faulting application , version 0.0.0.0, faulting module unknown, version 0.0.0.0, fault address 0x0008e89f.


Event Type:      Information
Event Source:      DrWatson
Event Category:      None
Event ID:      4097
Date:            3/27/2007
Time:            10:24:36 AM
User:            N/A
Computer:      ******
Description:
The application, C:\WINDOWS\system32\winlogon.exe, generated an application error The error occurred on 03/27/2007 @ 10:24:36.031 The exception generated was c0000005 at address 0008E89F (<nosymbols>)

I found one post that suggested a SFC which unfortunately made no difference. I also found a MS article but that also seemed to have no affect on the issue. http://support.microsoft.com/kb/914048

This is a SBS2k3 sp1 box with sp2 installed for exchange. I have not recently installed any updates that might cause this issue that i'm aware of. In fact the last update installed was a few months ago. I was able to remote in yesterday just fine. I've tried rebooting this morning with no success.

I ran spybot this morning for fun but all that was found was a cookie or two. I have yet to run hijack this, however since this machine rarely if ever touches the net i'm not to worried.

Everything else appears to be functioning correctly, i've had no other problems.

Any suggestions?
0
Comment
Question by:XJGPER
2 Comments
 

Author Comment

by:XJGPER
ID: 18809578
So i finally discovered the issue we were having.

Last week we modified the ctrl-alt-del logo to display our company logo instead. Those of you familiar with this process know you mess with msgina.dll and create a corresponding reg key. I pushed it out with a login script to all our clients (running winxp), and it works great on those boxes.

It would appear the server decided to take on the new logo as well. Logging in directly at the console worked fine, however it totally destroys remote logins via terminal services. Once i whacked the key that calls on the new logo everything fell into place.

After just a 5 minute look i saw an article that mentioned win2k workstation msgina dll's had a slightly different mem location for the logo then win2k server. I assume the same must be true for xp and win2k3.

Anyways problem solved.

Admins i would like to leave this question up in case someone else runs into thisproblem sometime down the road. However my only option is to delete it since no one answered for me. If you would rather i deleted this instead please let me know.
0
 

Accepted Solution

by:
EE_AutoDeleter earned 0 total points
ID: 18962760
XJGPER,
Because you have presented a solution to your own problem which may be helpful to future searches, this question is now PAQed and your points have been refunded.

EE_AutoDeleter
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

This guide is intended for migrating Windows 2003 Standard with Exchange 2003 to Windows Small Business Server 2008. You will need the following: Exchange Best Practice Analyzer: http://www.microsoft.com/downloads/details.aspx?FamilyID=DBAB201F-…
This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Small Business Server 2011. NOTE: This guide has been written using the preview version of SBS2011 therefore some of the screens may …
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now