Randomly - "The group policy service failed the logon. Access is denied" running remote applications

-

i know there ton of articles on dont seem work me. getting error sporadically on our servers. 

we running cloud application being published 5 different application servers. application published app through terminal services , users authenticated through active directory; have 16000 users. 

once in while, above error message , user denied access log on server. hang @ user profile service trying load , bam, error message. 

i myself unable log in 1 of our app servers next day magically able again. have backdoors access servers, when first happened, added .bak @ end of profile , able log in no problem got temporary profile. tried deleting profile , never recreated it, still go on temp profile. next day, able log in no problems. 

at first, affecting employees, starting affect customers running our application. 

ive tried this: http://social.technet.microsoft.com/forums/en-us/w7itpronetworking/thread/8c0054a3-35be-4fc4-839c-e2176613eb23

ive tried this: http://social.technet.microsoft.com/forums/en/winserverts/thread/0b324074-c43c-4803-9c14-70375d4fcda7

ive tried this: http://social.technet.microsoft.com/forums/en-us/winservergp/thread/9bc23129-568a-4c7d-9f94-419307a0d544

and various others found on web. work? hard because may try fix , on server, may occur again. id find out how stop ever happening again. ive read in places, roaming profiles needs removed, in other forums few other tips, reboot server. cant reboot server during production, , during non peak times, servers arent under load. hard determine if of fixes have worked. can still happen.

so guess question comes down can use find root of problem. def think has profile service, tools can use figure out or if knows real fix this, please let me know.

thanks!

russ, mcse

also add this... hard determine app server user signed on to. when user makes log app, have app server theyre logged in navigation bar make easy support, if never log in, hard tell server causing them denied. 

russ, mcse



Windows Server  >  Remote Desktop Services (Terminal Services)



Comments

Post a Comment

Popular posts from this blog

Cannot access Anywhere Access using domain name?

-
after installing anywhere access in windows server 2012 essentials r2, cannot use anywhere access using setup domain name in wizard such remote.mydomain.com? if enter public ip address, example, 72.2.34.5 works. before set anywhere access, created a record pointing public address...pinged , worked...so not sure doing wrong?  is wizard supposed create record etc , make remote.mydomain.com work? if enter public ip address while on lan, takes me router webpage.  shouldn't work on lan if accessed via public ip? thank you, tim. the wizard can configure remote.microsoft_names.com  remote.remotewebaccess.com but cannot configure domains purchased outside wizard.  depends on how domain configured if wildcard.yourdomain.com should work  if try ping remote.your_domain.com afar , not give proper  public ip, need add record mariette said. much have record domain.com www.domain.com , if have website somewhere else www.domain.com , need re...
Read more

server manager error: ADAM.events.xml could not be enumerated.

-
firewall off isnt it. rerun ldap wizard:?  why?  will screw exchange server running on machine?  ldap wizard asks questions don't understand. please dont send generic links to: http://social.technet.microsoft.com/wiki/contents/articles/13444.windows-server-2012-server-manager-troubleshooting-guide-part-ii-troubleshoot-manageability-status-errors-in-server-manager.aspx thanks, john hi john, >> ok. server manager app. these questions refer this. nothing else 2.  do need create app dir or not?  this server manager, shouldnt done? (why did break in first place?) how check if app dir exists server manager or not. 3.  if "lightweight" implementation of anything, sure hate see "heavyweight" version. the waring events can't enumerated. , cause not completing configuration of ad lds. ad lds not related server manager. used provide flexible support directory-enabled applications. if not implementing such application...
Read more

send messages to users

-
i have domain server windows 2000 sp4. my clients using win xp , win 98. when send messages computer management-shared folders-rightclick-all task-send message connected users, message received clients using winxp but not in  win 98 .how send them without winpopup  , net meeting. this forum windows server 2008.   check messenger service running on win98-clients. (haven't seen win 98 in while might not available...) Windows Server  >  Directory Services
Read more