RDP users stuck at "Welcome" screen and cannot login

-

hi,

in our business, have application server host 1 application , has rdp services enabled allow multiple users remotely connect , launch hosted application.

the server vmware (esxi 5.5 patch 9) virtual machine running windows server 2012 r2 standard. 16gb of ram , 8 vcpu.

we've had server in production since may , we've seen 2 occurrences of issue far. @ 1 point, new users not able log server using rdp. users logged in can still work on server/application without issue. new users try login, input domain username , password, stay stuck @ "welcome" screen. don't disconnected, spins @ "welcome" forever. interestingly enough, you'll able see username (domain\username) on top of "welcome" text, when issue happens, shows "other user". way "fix" issue manually reset virtual machine (power off/power on).

the issue happened last night , did troubleshooting before resetting server. @ first, believed rdp protocol affected, tried log on server using vmware console , got same results users. left running 2 hours , never got in; still stuck @ welcome. users told me never got in. tried use "computer management"  and connect remotely server , see logs. never let me in, got stuck @ "connecting...". gave investigation restore service , reset virtual machine. after reset, able login again, including me.

i took @ windows events logs after reset , relevant logs find within window of issue multiple evend id 4005 following :

event id : 4005
windows logon process has unexpectedly terminated.

i investigated performance metrics of virtual machine. cpu , ram within normal , gave me no reason suspect performance issue.

all hard drives have more enough available space.

network doesn't seem issue either, logged in users able work , pings consistent/stable.

the server restarted each week preventive measure.

i don't believe hardware related, more related windows itself. not rdp services since console didn't work either.

do guys have idea issue ?

thanks,

guillaume.



Windows Server  >  Windows Server 2012 General



Comments

Post a Comment

Popular posts from this blog

Error: 0x80073701 when trying to add Print Services Role in Windows 2012 Standard

-
hello, i'm getting error when trying add print services role in windows 2012 standard. i'm getting same error whether use gui or powershell. this new server install. the powershell error follows: add-windowsfeature : request add or remove features on specified server failed. installation of 1 or more roles, role services, or features failed. the referenced assembly not found. error: 0x80073701 at line:1 char:1 + add-windowsfeature print-services + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~     + categoryinfo          : invalidoperation: (@{vhd=; credent...name=localhost}:psobject) [install-windowsfeature],     exception     + fullyqualifiederrorid : dismapi_error__failed_to_enable_updates,microsoft.windows.servermanager.commands.addwind    owsfeaturecommand success restart needed exit code      feature result ------- -------------- ---------      -------------- false   no             failed         {} issue appreciated. hi, i think should st
Read more

Disconnecting from a Windows Server 2012 R2 file sharing session on a Windows 7,8,10 machine

-
i've been trying disconnect server while , haven't been able to. there quick way this? i've used net session , net user , work sometime never consistent. can task? hi yrusad, thanks post. does work when check “computer management > system tools > shared folders > open files/sessions”. directly manage from gui. and based on knowledge, quick way mentioned net session /delete /y. mean never consistent? best regards, mary please remember mark replies answers if , unmark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com . Windows Server  >  Windows Server 2012 General
Read more

Event ID 64,77,1008 Certificates Events Windows Server 2008, 2008R2

-
hi guys, i need event ids. event id 64 clear - expired certificate. problem computers have new certificate ca of them keep old one. can remove them certificate store on computers or should check before? event id 77 - 1 strange me. warning , in same time don't see suspicious: "windows default" policy module logged following warning: active directory connection <domain controller name> has been reestablished <domain controller name>. have 4 dcs. should check or ignore these messages. event id 1008 - "certificate services client: credential roaming not performed because number of tokens in local store has exceeded limit." - i've checked articles credential roaming i'm not sure should do. if give tips , answers, great. in advance. hi, event id 64 clear - expired certificate. problem computers have new certificate ca of them keep old one. can remove them certificate store on computers or should check before? i assume these
Read more