Remote Desktop Connection logon doesn't finish. Blue desktop and mouse arrow shows

Windows 2008 Server R2

Issue happens when logon as domain admin.
No issue when other user logs on.

I think it's related to a problem I'm trying to fix. Previously, when logging on, instead of running the logon .bat, the text editor SciTE would open the .bat file. The logon would not continue, i.e. show desktop and shortcuts, until I closed the editor.

Yesterday, I changed the default association action / behavior of .bat file to Notepad. I think I should have chosen CMD.EXE or reset the association to the default instead.

Now, a RDC logon logs on but doesn't finish. Just the blue desktop and mouse arrow shows.

I close the RDC window and try again. Each time, it starts a new logon. This confirms my suspicion that prior logons are still there.

Again, this is via RDC. I have not tested this at the physical server yet. But I suspect the issue will persist.

How can I fix this?
LVL 27
NVITEnd-user supportAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Davis McCarnOwnerCommented:
Does anything happen if you start the Task Manager <CTRL-ALT-DEL> and use it to start explorer.exe?
NVITEnd-user supportAuthor Commented:
Hi Davis,

Here's a PSList output of the remote server:
Name                Pid Pri Thd  Hnd   Priv        CPU Time    Elapsed Time

atashost           1924   8   4  100   1864     0:00:00.015    36:09:19.051
avp                3320   8  70 2001 282984     0:19:53.064    36:09:01.867
BackupExecManagementService  5284   8  14  616  77940     0:00:19.094    36:08:06.810
bedbg              1988   8   4   72   3272     0:00:00.031    36:09:15.510
benetns            4352   8   8  188  10472     0:00:01.575    36:08:19.791
bengine            4428   8  17  470  31524     0:04:01.130    36:08:19.667
beremote           1952   8  15  460  47164     0:50:02.629    36:09:17.507
beserver           4640   8 115 1587 118280     0:03:30.242    36:08:35.566
csrss               620  13   9 1309   4032     0:00:14.149    36:10:11.264
csrss               852  13   7   74   2980     0:00:01.248    35:46:18.071
dfsrs              1448   8  12  244  10324     0:00:09.375    36:09:14.433
dfssvc             3400   8  16  242   9840     0:00:40.575    36:08:59.020
dns                1780   8  41 2784 321440     0:00:14.757    36:09:13.716
dsm_om_connsvc32   3188   8  23  392  64548     0:00:45.599    36:09:02.742
dsm_om_shrsvc32    2792   8   9  162   3100     0:00:00.795    36:09:06.961
dsm_sa_datamgr32   1352   8  24  381  24896     0:05:38.568    36:09:14.761
dsm_sa_eventmgr32  1080   8   7  183   5356     0:00:18.548    36:09:15.198
Idle                  0   0  16    0      0   571:06:53.931     0:00:00.000
ismserv            2364   8   9  132   5484     0:00:00.717    36:09:10.705
javaw              3328   8  29  723  33988     0:25:19.730    36:09:01.793
javaw              5480   8  19  623  40772     0:45:10.720    36:08:06.001
klnagent           2400   8  33 1064  26192     0:02:03.349    36:09:10.533
LogonUI            1084  13   6  174   9912     0:00:00.436    35:46:16.889
LogonUI            5956  13   6  171   9848     0:00:00.109    36:07:48.435
lsass               772   9  47 2890  90304     0:02:59.167    36:10:04.603
lsm                 780   8  11  254   4996     0:00:10.795    36:10:04.525
Microsoft.ActiveDirectory.WebServices  1876   8  16  343  48444     0:00:18.657   36:09:22.779
Monitor            3268   8   4   65   2144     0:00:00.031    36:09:02.333
mr2kserv           2452   8   4   99   1800     0:00:00.015    36:09:09.504
msdtc              6728   8  12  162   4940     0:00:00.093    36:05:50.554
ntfrs              2760   8  15  341  18728     0:00:05.850    36:09:07.101
PDAgent            3004   8  12  338  17368     0:05:22.890    36:09:05.904
PDEngine           5488   8  10  208  11948     0:26:00.602    36:08:05.991
PresentationFontCache  2060   8   6  180  26656     0:00:00.218    36:09:13.248
pvlsvr             4004   8  15  477  29396     0:00:18.798    36:08:53.697
RMI                5436   8   4   65   2144     0:00:00.046    36:08:06.107
services            764   9   8  395  14124     0:00:05.085    36:10:04.868
smss                512  11   3   44   1148     0:00:02.246    36:10:18.425
spoolsv            1848   8  24  742  26536     0:00:35.646    36:09:22.920
sqlbrowser         3208   8   9  126   2308     0:00:00.015    36:09:02.696
sqlservr           2476   8  61  851 224656     0:02:43.301    36:09:09.348
sqlwriter          3248   8   6  218   8064     0:00:00.873    36:09:02.514
svchost              12   8  14  348  13496     0:00:40.716    36:09:53.621
svchost             204   8   8  350   9156     0:00:29.281    36:09:53.886
svchost             936   8  34 1291  67240     1:05:49.196    36:09:53.200
svchost             988   8  11  407   7896     0:00:07.378    36:09:55.352
svchost            1060   8  14  387  12548     0:00:06.645    36:09:52.981
svchost            1148   8   9  225  14224     0:00:07.690    36:09:50.750
svchost            1188   8  18  611  33604     0:00:39.405    36:09:50.532
svchost            1308   8  16  327  11848     0:00:02.964    36:09:49.159
svchost            1760   8  46  333  30932     0:00:10.639    36:09:13.763
svchost            2584   8   4   76   2516     0:00:00.000    36:09:07.211
svchost            3132   8   4   71   2532     0:00:00.000    36:09:02.868
svchost            3152   8   5  180   3484     0:00:04.165    36:09:02.862
svchost            5804   8  12  289   5652     0:00:09.921    36:08:04.354
svchost            5888   8   5  136   3216     0:00:00.156    36:08:04.294
System                4   8 220 8570    112     1:58:17.390    36:10:18.534
vds                5776   8  13  161   5004     0:00:00.686    36:08:04.641
wininit             664  13   3  103   2900     0:00:00.390    36:10:06.943
winlogon           6200  13   3   92   3496     0:00:00.124    35:46:18.046
WmiPrvSE           4164   8   7  145  12356     0:07:02.965    36:08:39.532

Open in new window

NVITEnd-user supportAuthor Commented:
Here's the same in the tree format:
Name                             Pid Pri Thd  Hnd      VM      WS    Priv
Idle                               0   0  16    0       0      24       0
  System                           4   8 215 8602    4164     716     112
    smss                         512  11   3   44    4532    1852    1148
csrss                            620  13   9 1301   53092    6860    4032
wininit                          664  13   3  103   46448    6468    2900
  services                       764   9   7  393   50744   18136   14072
    svchost                       12   8  14  351   58116   17148   13616
    svchost                      204   8   7  359   41932   13588    9104
    svchost                      936   8  33 1283  592928   82748   67344
    svchost                      988   8  11  407   49376   13896    7896
      WmiPrvSE                  4164   8   7  145   43064   14636   12356
    svchost                     1060   8  14  384  100264   22668   12548
    dsm_sa_eventmgr32           1080   8   7  183   61704   10800    5356
    svchost                     1148   8   9  225   76968   22120   14224
    svchost                     1188   8  18  604  515968   40696   33608
    svchost                     1308   8  17  330   51932   15432   11904
    dsm_sa_datamgr32            1352   8  25  383  119836   30136   24948
    dfsrs                       1448   8  11  241   70736   18108   10296
    svchost                     1760   8  46  335  634924   31740   30932
    dns                         1780   8  41 2782  367224  316612  321440
    spoolsv                     1848   8  24  742  155460   37948   26536
    Microsoft.ActiveDirectory.WebServices  1876   8  16  343  567244   52344   48436
    atashost                    1924   8   4  100   30660    4672    1864
    beremote                    1952   8  13  458  287816   73568   47116
    bedbg                       1988   8   4   72   17996    5740    3272
    PresentationFontCache       2060   8   6  180  510392   23852   26656
    ismserv                     2364   8  10  134   39028    8384    5568
    klnagent                    2400   8  33 1055  156868    6028   26164
    mr2kserv                    2452   8   4   99   28220    4448    1800
    sqlservr                    2476   8  61  735 1612376  209176  224656
    svchost                     2584   8   4   76   22820    5148    2516
    ntfrs                       2760   8  15  341  342396    2360   18728
    dsm_om_shrsvc32             2792   8   9  162  134320    8124    3100
    PDAgent                     3004   8  14  340   97436   22992   13780
    svchost                     3132   8   4   71   22836    5156    2532
    svchost                     3152   8   4  180   20448    6248    3428
    dsm_om_connsvc32            3188   8  23  391  669868   66060   64548
    sqlbrowser                  3208   8   9  126   30940    5280    2308
    sqlwriter                   3248   8   6  218  107616   15828    8064
    Monitor                     3268   8   4   65   49224    4648    2144
      javaw                     3328   8  29  723  275552   36232   33988
    avp                         3320   8  67 1999  851844   66500  281152
    dfssvc                      3400   8  13  232   50228   14600    9684
    pvlsvr                      4004   8  15  477  423560   50176   29396
    benetns                     4352   8   8  188   88160   19340   10472
    bengine                     4428   8  17  470  641040   55092   31524
    beserver                    4640   8 113 1587  897944  137944  118232
    BackupExecManagementService  5284   8  14  576  610368   48736   76900
    RMI                         5436   8   4   65   49224    4652    2144
      javaw                     5480   8  19  623  263572   44372   40772
    PDEngine                    5488   8  10  209   84824   20976   11928
    vds                         5776   8  13  161   44608   11772    5004
    svchost                     5804   8  12  287   42800   12228    5644
    svchost                     5888   8   5  136   31452    7476    3216
    msdtc                       6728   8  12  162   62808   10760    4940
  lsass                          772   9  49 2900  743476   82996   90460
  lsm                            780   8  11  250   33892    8348    4984
  LogonUI                       5956  13   6  171   86196   17688    9848
csrss                            852  13   7   74   39168    5276    2980
winlogon                        6200  13   3   92   23152    6348    3496
  LogonUI                       1084  13   6  174   86232   17132    9912

Open in new window

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Davis McCarnOwnerCommented:
I do not see Windows Explorer and I suggested you do File -> New Task and type in explorer.exe to see what happens.  Explorer, BTW is what shows your desktop.
joharderCommented:
Your best bet is to restore the server to a time when it worked properly.  

If that's not possible, find another Windows Server 2008 R2 server, and use regedit to export the contents of HKEY_CLASSES_ROOT\.bat and HKEY_CLASSES_ROOT\batfile and then import.  Alternatively, you could manually set the same; whichever is easiest for you.
CoralonCommented:
1. Have you tried deleting the existing profiles -- if you reset it on a per-user basis, then only those profiles would be affected, so you can just delete the profiles.

2. You generally do not want to interfere with the batch file associations.  By default RDS runs a series of batch files which is probably why you are getting hung up.  But the fact that it is only affecting the admins makes me suspect the profile level issue i mentioned above.

The way to determine if the automatic scripts are part of the problem would be to stop it from running.  The script series starts with usrlogon.cmd in %systemroot%\system32.  The easiest way to stop this is to change the registry entry hklm\software\microsoft\windows nt\currentversion\winlogon\appsetup.  It will have an entry for usrlogon.cmd.  Remove that piece of it, but leave the cmstart.exe in the value.

Coralon
NVITEnd-user supportAuthor Commented:
When I got physical access to the server...

It showed 2 user options: the current logged on user (CLU) I used when logging on via RDP and "Other user". I picked user CLU and entered the pw.

It said "Preparing your desktop".

Then, the blue background and the mouse arrow showed.

The desktop w/ shortcuts didn't show after around 30 seconds. I pressed ctrl-alt-del to open task manager. the dialog w/ task mgr didn't show right away.

After a few more seconds, the dialog w/ task mgr showed. I picked Cancel.

Next, notepad opened with CLU's profile logon script .bat file

I closed notepad. The rest of the desktop then showed.

I checked CLU's profile which does show logon-admin.bat as the logon script.

The ultimate cause was the file associations under "Control Panel\Programs\Default Programs\Set Associations"

I removed various reg keys so the .bat file doesn't open with notepad during logon.

Under HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bat\OpenWithList, erase 2 values:

a=NOTEPAD.EXE
MRUList=a

Also, erase key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bat\UserChoice

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
NVITEnd-user supportAuthor Commented:
See my last post.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.