hoffmanconsultingllc
asked on
2008R2 Remote Desktop Services - Winlogon.exe keeps crashing
Hello,
2008R2 SP1, 64GB RAM, 8CPU. Running, session host, RDS gateway, remote app. Latest patches.
System becomes unresponsive to logins, users on the system have no issues and i have to power cycle the vm to get it to respond to logins again. I have not been able to determine why the process keeps crashing but it is happening every day.
Any ideas?
Log Name: Application
Source: Microsoft-Windows-Winlogon
Date: 7/24/2015 3:19:10 AM
Event ID: 4005
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: nan-ts-vpts01.nan.local
Description:
The Windows logon process has unexpectedly terminated.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wi nlogon" Guid="{DBE9B383-7CF3-4331- 91CC-A3CB1 6A3B538}" EventSourceName="Winlogon" />
<EventID Qualifiers="49152">4005</E ventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000 </Keywords >
<TimeCreated SystemTime="2015-07-24T07: 19:10.0000 00000Z" />
<EventRecordID>3023230</Ev entRecordI D>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Chan nel>
<Computer>nan-ts-vpts01.na n.local</C omputer>
<Security />
</System>
<EventData>
<Binary>02010000</Binary>
</EventData>
</Event>
2008R2 SP1, 64GB RAM, 8CPU. Running, session host, RDS gateway, remote app. Latest patches.
System becomes unresponsive to logins, users on the system have no issues and i have to power cycle the vm to get it to respond to logins again. I have not been able to determine why the process keeps crashing but it is happening every day.
Any ideas?
Log Name: Application
Source: Microsoft-Windows-Winlogon
Date: 7/24/2015 3:19:10 AM
Event ID: 4005
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: nan-ts-vpts01.nan.local
Description:
The Windows logon process has unexpectedly terminated.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wi
<EventID Qualifiers="49152">4005</E
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2015-07-24T07:
<EventRecordID>3023230</Ev
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Chan
<Computer>nan-ts-vpts01.na
<Security />
</System>
<EventData>
<Binary>02010000</Binary>
</EventData>
</Event>
Maybe this will help. Perhaps the VM needs more resources.
ASKER
I've requested that this question be deleted for the following reason:
Resolved
Resolved
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.