Solved

Logon Error on a Windows 2003 Terminal Server

Posted on 2009-07-14
4
663 Views
Last Modified: 2013-11-21
Yesterday I received a call from a client.  Some users were having issue logging on to their terminal server.   I looked into it and they were getting the errors below.   I restored the NTUSER files in the profile folder and they were able to log back on.   I looked at the log and I noticed that UPHClean which I had loaded a few weeks ago was being blocked by Symantec from making any changes to the profiles when the users logged off.  I added an exception to Symantec to resolve this issue and thought the issue was resolved.

This morning I received a call saying they were again having issues logging into the server.  I used the same tape to restore the NTUser files but today it does not seem to make any difference.   Even after I have restored these files they can not logon onto the server.  

We are running Microsoft Windows 2003 with Symantec Endpoint Protection.  Whenever this isue occurs I see both of the following error messages in the application log.  I watched the performance tab on Task manager and there seems to be enough memory and the CPU is not overloaded.  

Any suggestions would be appreciated.

Event Type:      Error
Event Source:      Userenv
Event Category:      None
Event ID:      1500
Date:            7/14/2009
Time:            11:54:03 AM
User:            CANDW2\pcollins
Computer:      CWSERVER
Description:
Windows cannot log you on because your profile cannot be loaded. Check that you are connected to the network, or that your network is functioning correctly. If this problem persists, contact your network administrator.

 DETAIL - Insufficient system resources exist to complete the requested service.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

and

Event Type:      Error
Event Source:      Userenv
Event Category:      None
Event ID:      1508
Date:            7/14/2009
Time:            12:19:36 PM
User:            NT AUTHORITY\SYSTEM
Computer:      CWSERVER
Description:
Windows was unable to load the registry. This is often caused by insufficient memory or insufficient security rights.

 DETAIL - Insufficient system resources exist to complete the requested service.  for C:\Documents and Settings\pcollins.CANDW2\ntuser.dat

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.




0
Comment
Question by:qvfps
  • 3
4 Comments
 

Author Comment

by:qvfps
ID: 24851438
Thanks
0
 
LVL 5

Accepted Solution

by:
Darkstriker69 earned 500 total points
ID: 24854679
Hi gvfps,

This issue you are seeing is quite common in Windows 2003 TS 32 bit servers.

The main reason for the "insufficient system resources..." is depleted kernel memory (mostly paged-pool memory).

You can verify if kernel memory causes problems in your environment by running Process Explorer, here is a good link on how to do that - http://blogs.technet.com/askperf/archive/2007/03/07/memory-management-understanding-pool-resources.aspx 

In order to configure to maximum amount of paged pool kernel memory I always configure the following Registry keys on my customers TS boxes:

HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PagedPoolSize - FFFFFFFF (Hex, REG_DWORD)

HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\SystemPages - 0 (REG_DWORD)

HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PoolUsageMaximum - 60 (Decimal, REG_DWORD)

After you configure these settings you need to reboot the TS box. after the reboot you can use Process Explorer again and make sure that now more Paged-pool kernel memory is avaliable.

Hopefully this helps,

Darkstriker69
0
 

Author Comment

by:qvfps
ID: 24856331
Thanks for the reply.  I have made the suggested changes and I will let you know if the issue occurs again in the next couple of days.  
0
 

Author Closing Comment

by:qvfps
ID: 31603345
I checked the Application log again this morning and there have been no errors since I made the above changes.  Thanks for the help.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question