Windows NT Cannot get past the welcome-to-windows screen

  • Thread starter Thread starter Ole Thomsen
  • Start date Start date
O

Ole Thomsen

We recently started to have a problem logging on to our WTS 2003 farm.

Random servers stop accepting remote clients, while logged-in users sessions
continue.

Logging on locally shows the welcome-to-windows screen, pressing
ctrl-alt-del gives no login screen but after 10-20 seconds the
welcome-to-windows screen reappears.

The only way to get access to the server is rebooting.

We recently added the august security patches, and before that IE7.

Ole Thomsen
 
Since you cannot logon to the console of the server either, I don't
think that your problem has anything to do with Terminal Services.

Are there any errors or warnings in the EventLog when this happens?
Is there any pattern as to when this starts to occur after a
reboot? Immediately, or after some days?

Check this article:

302346 The Default Windows Logon Interface May Not Appear After
Installing Third-Party Program
http://support.microsoft.com/kb/302346/en-us

If that fixes it, and you have not installed any software that
replaces the msgina.dll, then I would strongly suspect the server
to be infected with malicious software.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

"Ole Thomsen" <ot@networks.dk> wrote on 24 aug 2007 in
microsoft.public.windows.terminal_services:

> We recently started to have a problem logging on to our WTS 2003
> farm.
>
> Random servers stop accepting remote clients, while logged-in
> users sessions continue.
>
> Logging on locally shows the welcome-to-windows screen, pressing
> ctrl-alt-del gives no login screen but after 10-20 seconds the
> welcome-to-windows screen reappears.
>
> The only way to get access to the server is rebooting.
>
> We recently added the august security patches, and before that
> IE7.
>
> Ole Thomsen
 
Thanks Vera,

you might be right about the problem not being TS related, it's just that it
has only happened for (some of) our TS hosts.

There is no pattern, and the problem occurs after several hours runtime.

No errors logged.

It seems to be networking related, as the server can be ping'ed and answers
telnet to port 3389 - but cannot be managed over the network in any way.

Net view \\servername gives: The network path was not found.

After reboot all is well.

We have 9 TS hosts, it happened 5-6 times during last week on 4 different
servers. This is really annoying as we get no alarm because the server
happens to answer ping and probes on port 3389.

Ole Thomsen


"Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote in message
news:Xns9996DFD417FA9veranoesthemutforsse@207.46.248.16...
> Since you cannot logon to the console of the server either, I don't
> think that your problem has anything to do with Terminal Services.
>
> Are there any errors or warnings in the EventLog when this happens?
> Is there any pattern as to when this starts to occur after a
> reboot? Immediately, or after some days?
>
> Check this article:
>
> 302346 The Default Windows Logon Interface May Not Appear After
> Installing Third-Party Program
> http://support.microsoft.com/kb/302346/en-us
>
> If that fixes it, and you have not installed any software that
> replaces the msgina.dll, then I would strongly suspect the server
> to be infected with malicious software.
>
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> "Ole Thomsen" <ot@networks.dk> wrote on 24 aug 2007 in
> microsoft.public.windows.terminal_services:
>
>> We recently started to have a problem logging on to our WTS 2003
>> farm.
>>
>> Random servers stop accepting remote clients, while logged-in
>> users sessions continue.
>>
>> Logging on locally shows the welcome-to-windows screen, pressing
>> ctrl-alt-del gives no login screen but after 10-20 seconds the
>> welcome-to-windows screen reappears.
>>
>> The only way to get access to the server is rebooting.
>>
>> We recently added the august security patches, and before that
>> IE7.
>>
>> Ole Thomsen
 
Have you checked if the msgina.dll on your servers is genuine? -
version and time stamp?
If it is, I think I would open a support call with Microsoft.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

"Ole Thomsen" <ot@networks.dk> wrote on 25 aug 2007 in
microsoft.public.windows.terminal_services:

> Thanks Vera,
>
> you might be right about the problem not being TS related, it's
> just that it has only happened for (some of) our TS hosts.
>
> There is no pattern, and the problem occurs after several hours
> runtime.
>
> No errors logged.
>
> It seems to be networking related, as the server can be ping'ed
> and answers telnet to port 3389 - but cannot be managed over the
> network in any way.
>
> Net view \\servername gives: The network path was not found.
>
> After reboot all is well.
>
> We have 9 TS hosts, it happened 5-6 times during last week on 4
> different servers. This is really annoying as we get no alarm
> because the server happens to answer ping and probes on port
> 3389.
>
> Ole Thomsen
>
>
> "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote
> in message
> news:Xns9996DFD417FA9veranoesthemutforsse@207.46.248.16...
>> Since you cannot logon to the console of the server either, I
>> don't think that your problem has anything to do with Terminal
>> Services.
>>
>> Are there any errors or warnings in the EventLog when this
>> happens? Is there any pattern as to when this starts to occur
>> after a reboot? Immediately, or after some days?
>>
>> Check this article:
>>
>> 302346 The Default Windows Logon Interface May Not Appear After
>> Installing Third-Party Program
>> http://support.microsoft.com/kb/302346/en-us
>>
>> If that fixes it, and you have not installed any software that
>> replaces the msgina.dll, then I would strongly suspect the
>> server to be infected with malicious software.
>>
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> ___ please respond in newsgroup, NOT by private email ___
>>
>> "Ole Thomsen" <ot@networks.dk> wrote on 24 aug 2007 in
>> microsoft.public.windows.terminal_services:
>>
>>> We recently started to have a problem logging on to our WTS
>>> 2003 farm.
>>>
>>> Random servers stop accepting remote clients, while logged-in
>>> users sessions continue.
>>>
>>> Logging on locally shows the welcome-to-windows screen,
>>> pressing ctrl-alt-del gives no login screen but after 10-20
>>> seconds the welcome-to-windows screen reappears.
>>>
>>> The only way to get access to the server is rebooting.
>>>
>>> We recently added the august security patches, and before that
>>> IE7.
>>>
>>> Ole Thomsen
 
There seems to be a bug in the latest HP Proliant NIC drivers and
administration.

After downgrading to drivers from Proliant Support Pack 7.70 we haven't seen
the error for two days.

Thanks,
Ole Thomsen


"Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote in message
news:Xns999789EC16FCveranoesthemutforsse@207.46.248.16...
> Have you checked if the msgina.dll on your servers is genuine? -
> version and time stamp?
> If it is, I think I would open a support call with Microsoft.
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> "Ole Thomsen" <ot@networks.dk> wrote on 25 aug 2007 in
> microsoft.public.windows.terminal_services:
>
>> Thanks Vera,
>>
>> you might be right about the problem not being TS related, it's
>> just that it has only happened for (some of) our TS hosts.
>>
>> There is no pattern, and the problem occurs after several hours
>> runtime.
>>
>> No errors logged.
>>
>> It seems to be networking related, as the server can be ping'ed
>> and answers telnet to port 3389 - but cannot be managed over the
>> network in any way.
>>
>> Net view \\servername gives: The network path was not found.
>>
>> After reboot all is well.
>>
>> We have 9 TS hosts, it happened 5-6 times during last week on 4
>> different servers. This is really annoying as we get no alarm
>> because the server happens to answer ping and probes on port
>> 3389.
>>
>> Ole Thomsen
>>
>>
>> "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote
>> in message
>> news:Xns9996DFD417FA9veranoesthemutforsse@207.46.248.16...
>>> Since you cannot logon to the console of the server either, I
>>> don't think that your problem has anything to do with Terminal
>>> Services.
>>>
>>> Are there any errors or warnings in the EventLog when this
>>> happens? Is there any pattern as to when this starts to occur
>>> after a reboot? Immediately, or after some days?
>>>
>>> Check this article:
>>>
>>> 302346 The Default Windows Logon Interface May Not Appear After
>>> Installing Third-Party Program
>>> http://support.microsoft.com/kb/302346/en-us
>>>
>>> If that fixes it, and you have not installed any software that
>>> replaces the msgina.dll, then I would strongly suspect the
>>> server to be infected with malicious software.
>>>
>>> _________________________________________________________
>>> Vera Noest
>>> MCSE, CCEA, Microsoft MVP - Terminal Server
>>> TS troubleshooting: http://ts.veranoest.net
>>> ___ please respond in newsgroup, NOT by private email ___
>>>
>>> "Ole Thomsen" <ot@networks.dk> wrote on 24 aug 2007 in
>>> microsoft.public.windows.terminal_services:
>>>
>>>> We recently started to have a problem logging on to our WTS
>>>> 2003 farm.
>>>>
>>>> Random servers stop accepting remote clients, while logged-in
>>>> users sessions continue.
>>>>
>>>> Logging on locally shows the welcome-to-windows screen,
>>>> pressing ctrl-alt-del gives no login screen but after 10-20
>>>> seconds the welcome-to-windows screen reappears.
>>>>
>>>> The only way to get access to the server is rebooting.
>>>>
>>>> We recently added the august security patches, and before that
>>>> IE7.
>>>>
>>>> Ole Thomsen
 
Back
Top