Logon Error on a Windows 2003 Terminal Server

Yesterday I received a call from a client.  Some users were having issue logging on to their terminal server.   I looked into it and they were getting the errors below.   I restored the NTUSER files in the profile folder and they were able to log back on.   I looked at the log and I noticed that UPHClean which I had loaded a few weeks ago was being blocked by Symantec from making any changes to the profiles when the users logged off.  I added an exception to Symantec to resolve this issue and thought the issue was resolved.

This morning I received a call saying they were again having issues logging into the server.  I used the same tape to restore the NTUser files but today it does not seem to make any difference.   Even after I have restored these files they can not logon onto the server.  

We are running Microsoft Windows 2003 with Symantec Endpoint Protection.  Whenever this isue occurs I see both of the following error messages in the application log.  I watched the performance tab on Task manager and there seems to be enough memory and the CPU is not overloaded.  

Any suggestions would be appreciated.

Event Type:      Error
Event Source:      Userenv
Event Category:      None
Event ID:      1500
Date:            7/14/2009
Time:            11:54:03 AM
User:            CANDW2\pcollins
Computer:      CWSERVER
Description:
Windows cannot log you on because your profile cannot be loaded. Check that you are connected to the network, or that your network is functioning correctly. If this problem persists, contact your network administrator.

 DETAIL - Insufficient system resources exist to complete the requested service.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

and

Event Type:      Error
Event Source:      Userenv
Event Category:      None
Event ID:      1508
Date:            7/14/2009
Time:            12:19:36 PM
User:            NT AUTHORITY\SYSTEM
Computer:      CWSERVER
Description:
Windows was unable to load the registry. This is often caused by insufficient memory or insufficient security rights.

 DETAIL - Insufficient system resources exist to complete the requested service.  for C:\Documents and Settings\pcollins.CANDW2\ntuser.dat

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.




qvfpsAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

qvfpsAuthor Commented:
Thanks
0
Darkstriker69Commented:
Hi gvfps,

This issue you are seeing is quite common in Windows 2003 TS 32 bit servers.

The main reason for the "insufficient system resources..." is depleted kernel memory (mostly paged-pool memory).

You can verify if kernel memory causes problems in your environment by running Process Explorer, here is a good link on how to do that - http://blogs.technet.com/askperf/archive/2007/03/07/memory-management-understanding-pool-resources.aspx 

In order to configure to maximum amount of paged pool kernel memory I always configure the following Registry keys on my customers TS boxes:

HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PagedPoolSize - FFFFFFFF (Hex, REG_DWORD)

HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\SystemPages - 0 (REG_DWORD)

HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PoolUsageMaximum - 60 (Decimal, REG_DWORD)

After you configure these settings you need to reboot the TS box. after the reboot you can use Process Explorer again and make sure that now more Paged-pool kernel memory is avaliable.

Hopefully this helps,

Darkstriker69
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
qvfpsAuthor Commented:
Thanks for the reply.  I have made the suggested changes and I will let you know if the issue occurs again in the next couple of days.  
0
qvfpsAuthor Commented:
I checked the Application log again this morning and there have been no errors since I made the above changes.  Thanks for the help.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Server OS

From novice to tech pro — start learning today.