Windows OS
--
Questions
--
Followers
Top Experts
How to determine more details on the following error in windows event viewer windows server 2019.
Event ID:4005
The Windows logon process has unexpectedly terminated.
Zero AI Policy
We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.
check if the suggested solution helps you : run sfc after uninstalling some KB :
Event ID 4005:The Windows logon process has unexpectedly terminated. (microsoft.com)
you're not giving us much info to go on!
What roles/services does the server run?
What symptoms are you seeing?
On its own the error doesn't tell us much more that the text you've included: the logon service terminated, unexpectedly.
Are there more errors/warnings just before or after it?
On a hunch I checked your other questions and can see an issue on an RDS server running out of memory in a recent question. Don't suppose this is the same server is it? RDS servers low on memory would definitely cause this event when memory gets low enough so if it is the same server that's your answer: low memory resources.






EARN REWARDS FOR ASKING, ANSWERING, AND MORE.
Earn free swag for participating on the platform.
Windows OS
--
Questions
--
Followers
Top Experts
This topic area includes legacy versions of Windows prior to Windows 2000: Windows 3/3.1, Windows 95 and Windows 98, plus any other Windows-related versions including Windows Mobile.
Create your account and start contributing!