10/16 Updates killed TS now only admins can login.

[jdeaner]

I am experiencing a problem with our 2k-server box. After MS released auto-updates on Thursday, October 16, 2003, users started experiencing the MSI-Office installer every time they tried to use an office application. Sticking the office CD in the server would only reveal an error that a local file was missing from the office install directory. An attempt to repair the office concluded with the same error. So, office was uninstalled/reinstalled and now all users are receiving a blank desktop (no icons, toolbars, etc.. just the blue windows screen) upon login to the Terminal Server.

As an administrator, I am able to login without a problem.

I have also noticed that if I give local Admin privileges to the domain users, their desktop loads without a problem.

I have had a similar problem doing updates before with a different 2k server running TS, but that was with the admin login as well. The fix was to create a new admin profile and the problem eventually fixed itself with later updates. I've been searching and can't find any relevant docs or info regarding this issue. Any help would be greatly appreciated.

I believe this has to do with automatic updates and not rebooting the server after they have been applied.

I’ve already checked MSKB article 287654

 

[pdurkee]

I have have this problem also, but on MS updates on clients. I have had to reinstall the office apps a few times, because we keep getting the windows installer problem. I have used MS windows installer cleanup utility to fix the installer problem. (msicuu.exe)

pdurkee

 

[jdeaner]

My previous installer problems were mostly due to viruses.
But this is not the case. I've gotten the installer to go away with the reinstall of office on the 2k server. My problem seems to be with user rights. I can run all applications by pressing CTL+ALT+END in the hung TS empty desktop window by using the "NewTask" from the task manager. There are no programs or files in the startup folder. My login script for the domain (not local to the box) runs without a problem (clients are authenticating). There are no applications hanging and the only processes running when on the TS client are:

crss.exe
winlogon.exe
rdpclip.exe
usrinit.exe (loads and then disappears)


Does anyone know if there is a text-log option when logging onto a windows machine? The event view shows nothing.

 

[jdeaner]

Found the logging/logging options. MSKBA 221833



Here is my userenv log:


USERENV(a44.8d4) 14:33:08:084 GetUserGuid: Failed to get user guid with 1355.
USERENV(a44.8d4) 14:33:08:094 GetUserGuid: Failed to get user guid with 1355.
USERENV(610.158) 14:35:39:021 GetUserGuid: Failed to get user guid with 1355.
USERENV(610.158) 14:35:39:031 GetUserGuid: Failed to get user guid with 1355.


Here is the verbose log:

USERENV(a0c.a04) 14:39:37:942 LibMain: Process Name: \??\C:\WINNT\system32\winlogon.exe
USERENV(a6c.8b8) 14:39:41:827 =========================================================
USERENV(a6c.8b8) 14:39:41:847 LoadUserProfile: Entering, hToken = <0x15c>, lpProfileInfo = 0x6f648
USERENV(a6c.8b8) 14:39:41:847 LoadUserProfile: Entering, hToken = <0x15c>, lpProfileInfo = 0x6f648
USERENV(a6c.8b8) 14:39:41:857 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
USERENV(a6c.8b8) 14:39:41:867 LoadUserProfile: lpProfileInfo->lpUserName = <TSclientUser>
USERENV(a6c.8b8) 14:39:41:877 LoadUserProfile: NULL central profile path
USERENV(a6c.8b8) 14:39:41:877 LoadUserProfile: lpProfileInfo->lpDefaultPath = <\\server01\netlogon\Default User>
USERENV(a6c.8b8) 14:39:41:887 LoadUserProfile: NULL server name
USERENV(a6c.8b8) 14:39:41:897 GetUserMutex: entering
USERENV(a6c.8b8) 14:39:41:907 GetUserMutex: Waiting...
USERENV(a6c.8b8) 14:39:41:917 GetUserMutex: Wait succeeded. Mutex currently held.
USERENV(a6c.8b8) 14:39:41:927 RestoreUserProfile: Entering
USERENV(a6c.8b8) 14:39:41:927 IsCentralProfileReachable: Entering
USERENV(a6c.8b8) 14:39:41:937 IsCentralProfileReachable: Null path. Leaving
USERENV(a6c.8b8) 14:39:41:947 RestoreUserProfile: Profile path = <>
USERENV(a6c.8b8) 14:39:41:957 ExtractProfileFromBackup: A profile already exists
USERENV(a6c.8b8) 14:39:41:967 PatchNewProfileIfRequred: A profile already exists with the current sid, exitting
USERENV(a6c.8b8) 14:39:41:967 CreateLocalProfileKey: Not setting additional Security
USERENV(a6c.8b8) 14:39:41:977 GetExistingLocalProfileImage: Found entry in profile list for existing local profile
USERENV(a6c.8b8) 14:39:41:987 GetExistingLocalProfileImage: Local profile image filename = <%SystemDrive%\Documents and Settings\TSclientUser>
USERENV(a6c.8b8) 14:39:41:997 GetExistingLocalProfileImage: Expanded local profile image filename = <C:\Documents and Settings\TSclientUser>
USERENV(a6c.8b8) 14:39:42:007 GetExistingLocalProfileImage: No local mandatory profile. Error = 2
USERENV(a6c.8b8) 14:39:42:017 GetExistingLocalProfileImage: Found local profile image file ok <C:\Documents and Settings\TSclientUser\ntuser.dat>
USERENV(a6c.8b8) 14:39:42:027 GetExistingLocalProfileImage: Failed to query low profile unload time with error 2
USERENV(a6c.8b8) 14:39:42:037 Local Existing Profile Image is reachable
USERENV(a6c.8b8) 14:39:42:047 Local profile name is <C:\Documents and Settings\TSclientUser>
USERENV(a6c.8b8) 14:39:42:057 RestoreUserProfile: No central profile. Attempting to load local profile.
USERENV(a6c.8b8) 14:39:42:138 MyRegLoadKey: Mutex released. Returning 0.
USERENV(a6c.8b8) 14:39:42:158 MyRegLoadKey: Mutex released. Returning 0.
USERENV(a6c.8b8) 14:39:42:168 CreateClassHive: existing user classes hive found
USERENV(a6c.8b8) 14:39:42:178 RestoreUserProfile: About to Leave. Final Information follows:
USERENV(a6c.8b8) 14:39:42:188 Profile was successfully loaded.
USERENV(a6c.8b8) 14:39:42:198 lpProfile->lpRoamingProfile = <>
USERENV(a6c.8b8) 14:39:42:208 lpProfile->lpLocalProfile = <C:\Documents and Settings\TSclientUser>
USERENV(a6c.8b8) 14:39:42:218 lpProfile->dwInternalFlags = 0x0
USERENV(a6c.8b8) 14:39:42:228 RestoreUserProfile: Leaving.
USERENV(a6c.8b8) 14:39:42:238 GetUserGuid: Failed to get user guid with 1355.
USERENV(a6c.8b8) 14:39:42:258 GetUserGuid: Failed to get user guid with 1355.
USERENV(a6c.8b8) 14:39:42:268 UpgradeProfile: Entering
USERENV(a6c.8b8) 14:39:42:278 UpgradeProfile: Build numbers match
USERENV(a6c.8b8) 14:39:42:288 UpgradeProfile: Leaving Successfully
USERENV(a6c.8b8) 14:39:42:298 LoadUserProfile: Releasing mutex.
USERENV(a6c.8b8) 14:39:42:308 LoadUserProfile: Leaving with a value of 1.
USERENV(a6c.8b8) 14:39:42:318 LoadUserProfile: hProfile = <0x160>
USERENV(a6c.8b8) 14:39:42:328 =========================================================
USERENV(a6c.8b8) 14:39:42:338 ApplySystemPolicy: Entering
USERENV(a6c.8b8) 14:39:42:348 ApplySystemPolicy: PolicyPath is: <\\server01\netlogon\ntconfig.pol>.
USERENV(a6c.8b8) 14:39:42:358 ApplySystemPolicy: No policy file.
USERENV(a6c.a90) 14:39:42:428 ApplyGroupPolicy: Entering. Flags = 2
USERENV(a6c.a90) 14:39:42:438 ProcessGPOs:
USERENV(a6c.a90) 14:39:42:448 ProcessGPOs:
USERENV(a6c.a90) 14:39:42:458 ProcessGPOs: Starting user Group Policy processing...
USERENV(a6c.a90) 14:39:42:468 ProcessGPOs:
USERENV(a6c.a90) 14:39:42:478 ProcessGPOs:
USERENV(a6c.a90) 14:39:42:488 EnterCriticalPolicySection: User critical section has been claimed. Handle = 0x1ac
USERENV(a6c.a90) 14:39:42:498 ProcessGPOs: Machine role is 1.
USERENV(a6c.a90) 14:39:42:508 ProcessGPOs: Calling GetGPOInfo for normal policy mode
USERENV(a6c.a90) 14:39:42:518 GetGPOInfo: ********************************
USERENV(a6c.a90) 14:39:42:528 GetGPOInfo: Entering...
USERENV(a6c.a90) 14:39:42:538 GetGPOInfo: lpHostName or lpDNName is NULL. Skipping DS stuff.
USERENV(a6c.a90) 14:39:42:548 GetGPOInfo: Leaving with 1
USERENV(a6c.a90) 14:39:42:558 GetGPOInfo: ********************************
USERENV(a6c.a90) 14:39:42:568 ProcessGPOs: OpenThreadToken failed with error 1008, assuming thread is not impersonating
USERENV(a6c.a90) 14:39:42:578 ProcessGPOs: -----------------------
USERENV(a6c.a90) 14:39:42:588 ProcessGPOs: Processing extension Registry
USERENV(a6c.a90) 14:39:42:598 CompareGPOLists: The lists are the same.
USERENV(a6c.a90) 14:39:42:608 CheckGPOs: No GPO changes and no security group membership change and extension Registry has NoGPOChanges set.
USERENV(a6c.a90) 14:39:42:618 ProcessGPOs: -----------------------
USERENV(a6c.a90) 14:39:42:628 ProcessGPOs: -----------------------
USERENV(a6c.a90) 14:39:42:638 ProcessGPOs: Processing extension Folder Redirection
USERENV(a6c.a90) 14:39:42:658 CompareGPOLists: The lists are the same.
USERENV(a6c.a90) 14:39:42:658 CheckGPOs: No GPO changes but couldn't read extension Folder Redirection's status or policy time.
USERENV(a6c.a90) 14:39:42:678 ProcessGPOs: Extension Folder Redirection skipped because both deleted and changed GPO lists are empty.
USERENV(a6c.a90) 14:39:42:688 ProcessGPOs: -----------------------
USERENV(a6c.a90) 14:39:42:698 ProcessGPOs: Processing extension Microsoft Disk Quota
USERENV(a6c.a90) 14:39:42:708 ProcessGPOs: Extension Microsoft Disk Quota skipped with flags 0x2.
USERENV(a6c.a90) 14:39:42:718 ProcessGPOs: -----------------------
USERENV(a6c.a90) 14:39:42:728 ProcessGPOs: Processing extension Scripts
USERENV(a6c.a90) 14:39:42:738 CompareGPOLists: The lists are the same.
USERENV(a6c.a90) 14:39:42:748 CheckGPOs: No GPO changes but couldn't read extension Scripts's status or policy time.
USERENV(a6c.a90) 14:39:42:758 ProcessGPOs: Extension Scripts skipped because both deleted and changed GPO lists are empty.
USERENV(a6c.a90) 14:39:42:768 ProcessGPOs: -----------------------
USERENV(a6c.a90) 14:39:42:778 ProcessGPOs: Processing extension Security
USERENV(a6c.a90) 14:39:42:789 ProcessGPOs: Extension Security skipped with flags 0x2.
USERENV(a6c.a90) 14:39:42:799 ProcessGPOs: -----------------------
USERENV(a6c.a90) 14:39:42:809 ProcessGPOs: Processing extension Internet Explorer Branding
USERENV(a6c.a90) 14:39:42:819 CompareGPOLists: The lists are the same.
USERENV(a6c.a90) 14:39:42:829 CheckGPOs: No GPO changes but couldn't read extension Internet Explorer Branding's status or policy time.
USERENV(a6c.a90) 14:39:42:839 ProcessGPOs: Extension Internet Explorer Branding skipped because both deleted and changed GPO lists are empty.
USERENV(a6c.a90) 14:39:42:849 ProcessGPOs: -----------------------
USERENV(a6c.a90) 14:39:42:859 ProcessGPOs: Processing extension EFS recovery
USERENV(a6c.a90) 14:39:42:869 ProcessGPOs: Extension EFS recovery skipped with flags 0x2.
USERENV(a6c.a90) 14:39:42:879 ProcessGPOs: -----------------------
USERENV(a6c.a90) 14:39:42:889 ProcessGPOs: Processing extension Application Management
USERENV(a6c.a90) 14:39:42:899 ProcessGPOs: Extension Application Management skipped with flags 0x2.
USERENV(a6c.a90) 14:39:42:909 ProcessGPOs: -----------------------
USERENV(a6c.a90) 14:39:42:919 ProcessGPOs: Processing extension IP Security
USERENV(a6c.a90) 14:39:42:929 ProcessGPOs: Extension IP Security skipped with flags 0x2.
USERENV(a6c.a90) 14:39:42:939 LeaveCriticalPolicySection: Critical section 0x1ac has been released.
USERENV(a6c.a90) 14:39:42:949 ProcessGPOs: User Group Policy has been applied.
USERENV(a6c.a90) 14:39:42:959 ProcessGPOs: Leaving with 1.
USERENV(a6c.a90) 14:39:42:969 ApplyGroupPolicy: Leaving successfully.
USERENV(878.a18) 14:39:43:139 LibMain: Process Name: C:\WINNT\system32\userinit.exe
USERENV(a6c.404) 14:39:43:159 GPOThread: Next refresh will happen in 97 minutes
USERENV(878.a18) 14:39:43:339 CheckXForestLogon: checking x-forest logon, user handle = 140
USERENV(878.a18) 14:39:43:399 CheckXForestLogon: Stand-alone or NT4 domain, not x-forest logon.