Solved

RDP not working after SP1 for Windows 2008 R2 installed

Posted on 2011-09-21
5
3,604 Views
Last Modified: 2013-11-21
So, I finally decided to try out SP1 for Windows 2008 R2 on one of my domain controllers. It's been fine on my Windows 7 workstations and most member servers.

Anyways, I copied the SP1 executable (didn't want to wait for the download) to the server and waited. Then waited some more. It took about 2 and a half hours for it to complete. When it finally got back to the logon screen, the mouse and keyboard were frozen. Ugh. Tried to connect remotely but had no luck.

Power it off and back on again and all seemed okay. Got the message that SP1 is installed and seems to be working okay (this is just a domain controller/DNS server...nothing else).

A few days later and I'm trying to connect to the server remotely and I find that I can't. The server was fine before SP1. When I attempt to connect with mstsc, I'm prompted with the certificate dialog, I say "okay" (nothing unusual to me yet) and then the box disappears for half a second before the logon box reappears. Subsequent attempts don't have the certificate dialog, it just comes back to the logon prompt. No errors.

I can logon directly to the server console. When I check the logs, I see the "Windows logon service terminated unexpectedly" message at exactly the same time I attempted to remotely logon. Rebooted the server but the problem persists.

Port 3389 is active on the server(I can telnet to it) and I'm actually seeing success entries in the security log for my logon attempt followed by an immediate logoff success. The accounts I'm using have remote access rights and remote access is enabled (all terminal service clients). Using an account without proper rights will generate a "this account doesn't have rights" message as expected.

I'm tempted to rollback the service pack, but I really don't want to wait another 2 hours for it to be remove and I really don't want any more surprises. Has anyone run into this and is there a fix?

Thanks,
Tim
0
Comment
Question by:timmr72
  • 3
  • 2
5 Comments
 
LVL 59

Accepted Solution

by:
Darius Ghassem earned 500 total points
Comment Utility
Look over this link to see if this helps out

http://thebackroomtech.com/2010/08/31/fix-the-windows-logon-process-has-unexpectedly-terminated/

Make sure you have all other Windows updates applied

Go to Run type sfc /scannow
0
 

Author Comment

by:timmr72
Comment Utility
Thanks for replying. I'm also seeing this (matching the failed windows logon times):

Event ID 20: Attempt to send connect message to Windows video subsystem failed.

It's only happening when attempting to connect via RDP to the server. I'm running sfc /verifyonly right now.
0
 

Author Comment

by:timmr72
Comment Utility
Well, sfc /scannow seemed to do the trick (at least RDP is back). It had to run twice because it reached it's maximum for queing files to fix.

I'm surprised it worked. Also, I still show that I'm SP1 for 2008 R2, but I wonder if I can trust that? With all the post SP1 integrity issues, should I do anything else (reapply any patches/SP's)  or just be happy it's all working for the moment.

-Tim
0
 
LVL 59

Expert Comment

by:Darius Ghassem
Comment Utility
You should be good to go
0
 

Author Closing Comment

by:timmr72
Comment Utility
Thank you.
0

Featured Post

Are end users causing IT problems again?

You’ve taken the time to design and update all your end user’s email signatures, only to find out they’re messing up the HTML, changing the font and ruining the imagery. What can you do to prevent this? Find out how you can save your signatures from end users today.

Join & Write a Comment

We recently had an issue where out of nowhere, end users started indicating that their logins to our terminal server were just showing a "blank screen." After checking the usual suspects -- profiles, shell=explorer.exe in the registry, userinit.exe,…
Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now