Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

RDP not working after SP1 for Windows 2008 R2 installed

Posted on 2011-09-21
5
Medium Priority
?
3,659 Views
Last Modified: 2013-11-21
So, I finally decided to try out SP1 for Windows 2008 R2 on one of my domain controllers. It's been fine on my Windows 7 workstations and most member servers.

Anyways, I copied the SP1 executable (didn't want to wait for the download) to the server and waited. Then waited some more. It took about 2 and a half hours for it to complete. When it finally got back to the logon screen, the mouse and keyboard were frozen. Ugh. Tried to connect remotely but had no luck.

Power it off and back on again and all seemed okay. Got the message that SP1 is installed and seems to be working okay (this is just a domain controller/DNS server...nothing else).

A few days later and I'm trying to connect to the server remotely and I find that I can't. The server was fine before SP1. When I attempt to connect with mstsc, I'm prompted with the certificate dialog, I say "okay" (nothing unusual to me yet) and then the box disappears for half a second before the logon box reappears. Subsequent attempts don't have the certificate dialog, it just comes back to the logon prompt. No errors.

I can logon directly to the server console. When I check the logs, I see the "Windows logon service terminated unexpectedly" message at exactly the same time I attempted to remotely logon. Rebooted the server but the problem persists.

Port 3389 is active on the server(I can telnet to it) and I'm actually seeing success entries in the security log for my logon attempt followed by an immediate logoff success. The accounts I'm using have remote access rights and remote access is enabled (all terminal service clients). Using an account without proper rights will generate a "this account doesn't have rights" message as expected.

I'm tempted to rollback the service pack, but I really don't want to wait another 2 hours for it to be remove and I really don't want any more surprises. Has anyone run into this and is there a fix?

Thanks,
Tim
0
Comment
Question by:timmr72
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 59

Accepted Solution

by:
Darius Ghassem earned 2000 total points
ID: 36577555
Look over this link to see if this helps out

http://thebackroomtech.com/2010/08/31/fix-the-windows-logon-process-has-unexpectedly-terminated/

Make sure you have all other Windows updates applied

Go to Run type sfc /scannow
0
 

Author Comment

by:timmr72
ID: 36577846
Thanks for replying. I'm also seeing this (matching the failed windows logon times):

Event ID 20: Attempt to send connect message to Windows video subsystem failed.

It's only happening when attempting to connect via RDP to the server. I'm running sfc /verifyonly right now.
0
 

Author Comment

by:timmr72
ID: 36578087
Well, sfc /scannow seemed to do the trick (at least RDP is back). It had to run twice because it reached it's maximum for queing files to fix.

I'm surprised it worked. Also, I still show that I'm SP1 for 2008 R2, but I wonder if I can trust that? With all the post SP1 integrity issues, should I do anything else (reapply any patches/SP's)  or just be happy it's all working for the moment.

-Tim
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 36580309
You should be good to go
0
 

Author Closing Comment

by:timmr72
ID: 36581925
Thank you.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Know what services you can and cannot, should and should not combine on your server.
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

704 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question