Solved

2003 Terminal server - users denied logon because not enough resources are available, happens occasionally requires reboot to fix

Posted on 2007-03-31
11
33,308 Views
Last Modified: 2013-11-21
I have a Windows 2003 R2 SP2 domain controller and a Windows 2003 R2 SP2 terminal server (member server, not a dc).  They are both completely patched.  The terminal server has ACT 2007 for workgroups, lotus notes and office 2003 installed.  It supports about 10 users.  Both servers are less than a year old, the dc is a dell poweredge 2800 and the terminal server is a dell precision with 2GB of ram.

The problem is that the terminal server will function just fine for a week or so and then suddenly when a new user tries to log on they get an error message indicating that not enough resources are available to log them on.  Sorry, I didn't screenprint the exact message and I can't reproduce it.  When this happens I can get current stats from the terminal server using Remotely Anywhere and the CPU and memory are both perfectly normal (1.4GB memory available, CPU is fairly steady around 8%).  This error continues to occur for all new users until the tserver is rebooted.

The following events show up when this happens:

eventid 1053, Userenv
Windows cannot determine the user or computer name. (Not enough storage is available to complete this operation. ). Group Policy processing aborted.

eventid 1219, Winlogon
Logon rejected for *username*. Unable to obtain Terminal Server User Configuration. Error: Not enough resources are available to complete this operation.


I'm wondering what peoples thoughts are on this, I'm pretty stumped.
0
Comment
Question by:pg999
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
11 Comments
 
LVL 7

Expert Comment

by:pkutter
ID: 18830841
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 18833453
pg999,

I am wondering how many CAL's you have installed on the terminal server?

Regards,

James
0
 

Author Comment

by:pg999
ID: 18833496
I have 10 installed
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 4

Accepted Solution

by:
grenade earned 500 total points
ID: 18834942
1) Create/edit these values in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory
Management
"PoolUsageMaximum"=dword:00000030
"PagedPoolSize"=dword:ffffffff
2) Restart.

Cheers
0
 

Author Comment

by:pg999
ID: 18837517
Ah, I see http://support.microsoft.com/kb/312362 that says the same thing and that certainly makes sense.  Thanks very much, I'll close this in a week if this doesn't happen again.
0
 

Author Comment

by:pg999
ID: 18854329
It happened again today.  The server had been up for 18 hours.  This time I was around when they called me so I got in through remotely anywhere to the console and watched the ram drop quickly down to around 600MB free.  There was 1 user active and 3 users disconnected at the time.  The task manager did not show what was using up all that ram.  At around 600MB I got kicked out and couldn't get back in.

I did get a a screenshot of the login error message this time though.
http://img246.imageshack.us/my.php?image=tservererrorlk5.jpg
0
 

Author Comment

by:pg999
ID: 18966912
Well it has been fine since the 4th, so thanks for the info grenade and also thanks for replying Jay and pkutter.
0
 

Expert Comment

by:boozydaboozer
ID: 21244517
Two of my clients are experiencing exactly the same problem.

At one there's an unholy high count of handles (100k+) in use by a custom application they use, so that might be an underlying cause.
At the other several dozens of the same (small) executable are running at the same time.

I'll report back after I've done the registry changes mentioned above.
0
 
LVL 2

Expert Comment

by:pkokkinis
ID: 21612348
I'm having the same exact issue. Has the registry hack worked for you guys?
Thanks.
0
 

Expert Comment

by:partnersmvz
ID: 23379167
what happens if i cant find the PoolUsageMaximum but i can find the other one??
0
 
LVL 1

Expert Comment

by:tacf
ID: 27273192
The registry change worked for us!
0

Featured Post

Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
ADFS Setup 4 42
Problems creating account in AD with Powershell, data from SQL 57 48
Domain controller keeps issuing itself a certificate daily 4 34
Local admin account 3 40
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question