Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

winlogon.exe application error Unable to remote desktop into server

Posted on 2007-03-27
2
Medium Priority
?
2,737 Views
Last Modified: 2012-05-05
So this morning i come in and i'm unable to remote into the domain using remote desktop. It starts to login then just closes down. It creates 2 events in the app viewer on the server

Event Type:      Error
Event Source:      Application Error
Event Category:      (100)
Event ID:      1000
Date:            3/27/2007
Time:            10:24:35 AM
User:            N/A
Computer:      ******
Description:
Faulting application , version 0.0.0.0, faulting module unknown, version 0.0.0.0, fault address 0x0008e89f.


Event Type:      Information
Event Source:      DrWatson
Event Category:      None
Event ID:      4097
Date:            3/27/2007
Time:            10:24:36 AM
User:            N/A
Computer:      ******
Description:
The application, C:\WINDOWS\system32\winlogon.exe, generated an application error The error occurred on 03/27/2007 @ 10:24:36.031 The exception generated was c0000005 at address 0008E89F (<nosymbols>)

I found one post that suggested a SFC which unfortunately made no difference. I also found a MS article but that also seemed to have no affect on the issue. http://support.microsoft.com/kb/914048

This is a SBS2k3 sp1 box with sp2 installed for exchange. I have not recently installed any updates that might cause this issue that i'm aware of. In fact the last update installed was a few months ago. I was able to remote in yesterday just fine. I've tried rebooting this morning with no success.

I ran spybot this morning for fun but all that was found was a cookie or two. I have yet to run hijack this, however since this machine rarely if ever touches the net i'm not to worried.

Everything else appears to be functioning correctly, i've had no other problems.

Any suggestions?
0
Comment
Question by:XJGPER
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 

Author Comment

by:XJGPER
ID: 18809578
So i finally discovered the issue we were having.

Last week we modified the ctrl-alt-del logo to display our company logo instead. Those of you familiar with this process know you mess with msgina.dll and create a corresponding reg key. I pushed it out with a login script to all our clients (running winxp), and it works great on those boxes.

It would appear the server decided to take on the new logo as well. Logging in directly at the console worked fine, however it totally destroys remote logins via terminal services. Once i whacked the key that calls on the new logo everything fell into place.

After just a 5 minute look i saw an article that mentioned win2k workstation msgina dll's had a slightly different mem location for the logo then win2k server. I assume the same must be true for xp and win2k3.

Anyways problem solved.

Admins i would like to leave this question up in case someone else runs into thisproblem sometime down the road. However my only option is to delete it since no one answered for me. If you would rather i deleted this instead please let me know.
0
 

Accepted Solution

by:
EE_AutoDeleter earned 0 total points
ID: 18962760
XJGPER,
Because you have presented a solution to your own problem which may be helpful to future searches, this question is now PAQed and your points have been refunded.

EE_AutoDeleter
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the event you manage a Small Business Server 2003, and you are audited for PCI compliance, there are several changes you must make in order to pass the audit. I can take no credit for discovering any of these fixes or workarounds, but there is no…
The articles for turning off the Client firewall policy on the internet are for SBS 2008 and don't really help for SBS 2011. They actually moved the Client firewall policy. In 2011, the client firewall policy has moved to the SBS computers conta…
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…
In response to a need for security and privacy, and to continue fostering an environment members can turn to for support, solutions, and education, Experts Exchange has created anonymous question capabilities. This new feature is available to our Pr…
Suggested Courses

660 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question