2008R2 Remote Desktop Services - Winlogon.exe keeps crashing

Hello,

2008R2 SP1, 64GB RAM, 8CPU.  Running, session host, RDS gateway, remote app. Latest patches.

System becomes unresponsive to logins, users on the system have no issues and i have to power cycle the vm to get it to respond to logins again. I have not been able to determine why the process keeps crashing but it is happening every day.

Any ideas?

Log Name:      Application
Source:        Microsoft-Windows-Winlogon
Date:          7/24/2015 3:19:10 AM
Event ID:      4005
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      nan-ts-vpts01.nan.local
Description:
The Windows logon process has unexpectedly terminated.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Winlogon" />
    <EventID Qualifiers="49152">4005</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-07-24T07:19:10.000000000Z" />
    <EventRecordID>3023230</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>nan-ts-vpts01.nan.local</Computer>
    <Security />
  </System>
  <EventData>
    <Binary>02010000</Binary>
  </EventData>
</Event>
LVL 1
hoffmanconsultingllcAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Randy DownsOWNERCommented:
Maybe this will help. Perhaps the VM needs more resources.


    Lack of system resources (hard disk space, memory, CPU)
    Corrupted Windows registry
    Service that has failed to start
0
hoffmanconsultingllcAuthor Commented:
I've requested that this question be deleted for the following reason:

Resolved
0
Randy DownsOWNERCommented:
How was it resolved. did my answer help at all?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.