Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 372
  • Last Modified:

Windows 7 Pro - Users Get Logged Off

Hi All,

Windows 7 Machine - x86 - Professional - Windows 2003 Domain.

When a user logs onto the machine, it immediately logs them off and takes them back to the CTRL+ALT+DEL screen.
Nothing I can see in the event viewer.

I have done everything to work out what's causing this:
Re-Domained the machine
Created a new OU and blocked all inheritance to every policy
Ran scf /scannow - no error
App Locker and Software Restrictions are disabled
Run Resultant Set of Policy MMC - Can see no settings being applied

The only thing I do know is that if you're a member of Domain Admins - You can logon fine. Though if my RDP session to the workstation is idle for 2 minutes, it boots me off. I can't even see the setting for this (and I have looked).

Does anyone know what could be doing this?
0
powellt77
Asked:
powellt77
  • 3
  • 2
  • 2
  • +2
1 Solution
 
Gary ColtharpSr. Systems EngineerCommented:
One machine or many?
0
 
powellt77Author Commented:
Just 1 machine
0
 
Gary ColtharpSr. Systems EngineerCommented:
I have seen this happen with a filesystem error... boot to an OS CD, recovery console and run chkdsk /p

0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
jason_0573Commented:
This issue could be caused by some malware/virus. Have you scanned the machine? Does it affect all users logging into this particular machine? How many users have a profile set up on it?
0
 
johnb6767Commented:
Have you applied any custom permissions/Security Policy changes to the machine lately?
0
 
powellt77Author Commented:
Thanks All:

gcoltharp - Have now run, but didn't find anything
jason_0573 - Thanks - Haddn't thought of this and will do next
johnb6767 - No, nothing. I was hunting though the local system policy thinking there may be something in there, but nothing.
0
 
Gary ColtharpSr. Systems EngineerCommented:
The user profile might be bad. After a reboot, you could log in as an administrative user and delete the user's profile and let it get recreated on the next login. Unless, like jason_0573 suggested....is it happening on any user level logon?
0
 
ehadminCommented:
I think someone could be playing a joke on you... an easy logon script could do just that.
I would have the user login into different machine and see if same result. After that you could recreate user profile
0
 
johnb6767Commented:
Kinda drastic, but......

Process Monitor can enable boot logging, so you can see whats happening in EXTREME DETAIL............

Troubleshooting with Process Monitor
http://blogs.technet.com/b/askperf/archive/2007/06/01/troubleshooting-with-process-monitor.aspx

Options>Select Enable Boot Logging, and reboot.... After reboot, do a couple failed logon attempts, then log on ok with your Domain Admin account. It will prompt to compile the log file, and once in the log, search for "Access Denied"......

Best thing I can suggest as it works for a Domain Admin... Permissions/Rights issue.....
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 3
  • 2
  • 2
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now