Solved

Login process never completes

Posted on 2011-03-17
8
364 Views
Last Modified: 2012-06-27
We originally setup a fairly basic Windows network. It included Windows XP Pro clients connected to a single Windows 2003 Server. The server did hand off some tweaks in the domain policy and all worked well when connecting to this server.

A couple of months ago we migrated the all of these workstations to connect to another Windows domain managed by a different W2003 Server with a different AD (and we also demoted the original W2003 server so it was simply a member server).

Now on random occassion when a user try and login they are able to enter their user id and password, but after they click ok the login process never completes. The screen goes to a blank blue screen and hangs. Often I force a shutdown on the workstation, wait a minute and then log back on and then the login process completes as it should.

Any suggestions on how to rectify this situation?
0
Comment
Question by:bnrtech
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
  • 2
8 Comments
 
LVL 43

Expert Comment

by:Amit
ID: 35158312
Increase RAM in your Domain controller. I assume DC is unable to process all login request. Did you made any changes to kerberos life time age? By default it is 10 hours
0
 
LVL 38

Expert Comment

by:ChiefIT
ID: 35163039
If these are DHCP clients, DHCP will pass down the DNS server's IP address. After demoting your server, you also probably removed DNS and/or removed it from the network. So, your clients are looking for a DNS server that doesn't exist, AND that DNS server is suppose to point to the direction of your authentication server, (which it can't find now).

Log onto the DHCP scope options, remove any non-existing DNS servers.
0
 

Author Comment

by:bnrtech
ID: 35164744

amitkulshrestha - I will check out the memory on the DC on Monday

ChiefIT - All clients have been assigned a static IP. I will reconfirm that they have the correct IP for the active DNS server
0
NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

 

Author Comment

by:bnrtech
ID: 35180441

Also I am not 100% certain this is the case, but I do believe what I am about to detail is true. At least informally I have noticed this pattern to be true.

Recall that originally we were connected to a Windows domain (Domain A) and then migrated to a new Windows domain (Domain B).

With that said, I am pretty certain that the login process not completing is specific to user that were originally created on Domain A and then migrated to Domain B. I have not seen the issue occur for users that had their user account created after we completed the migration to Domain B
0
 
LVL 43

Expert Comment

by:Amit
ID: 35180920
Move user to different OU and block all GPO iheritance and then test it. If it logs in fast. Then you need to look into GPO or any script which is used while login process
0
 
LVL 38

Expert Comment

by:ChiefIT
ID: 35293097
You will probably have to rejoing the new domain.
0
 

Accepted Solution

by:
bnrtech earned 0 total points
ID: 35443541
sorry for the delay. it was an operational nightmare with the security folks. the approved answer was to wipe and rebuild the computers and no they are ok.
0
 

Author Closing Comment

by:bnrtech
ID: 35465253
This was the solution that we implemented to resolve the matter
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains the steps required to use the default Photos screensaver to display branding/corporate images
Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s ManageEngine webinar, where attendees received a comprehensive look at the ma…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question