Microsoft // Winlogon 4005 (The Windows logon process has unexpectedly terminated) on one Windows Server 2012 VM with working RDS roles installed

Hello experts,
I have deployed all essential RDS roles and features on one Windows Server 2012 Virtual Machine
a few months ago and I recently ran into issues with users not being able to access it through RDP all of a sudden after entering credentials successfully.
Every time that happens I get an event ID Winlogon 4005 (The Windows logon process has unexpectedly
terminated). I am also receiving but not all the time event ID 6000 and 6003 referring to being unable to handle critical or normal events from AUinstallAgent.
Any help on this problem would be greatly appreciated.
Thank you in advance for your support.
Massimiliano

Hello experts,
I have deployed all essential RDS roles and features on one Windows Server 2012 Virtual Machine
a few months ago and I recently ran into issues with users not being able to access it through RDP all of a sudden after entering credentials successfully.
Every time that happens I get an event ID Winlogon 4005 (The Windows logon process has unexpectedly
terminated). I am also receiving but not all the time event ID 6000 and 6003 referring to being unable to handle critical or normal events from AUinstallAgent.
Any help on this problem would be greatly appreciated.
Thank you in advance for your support.
Massimiliano

Similar Messages

  • Remote Desktop disconnects immediately. Error 4005; Windows logon process has unexpectedly terminated.

    Hi, I have always been able to remote into my pc (Win 8.1) using remote desktop. Just recently this stopped working. Either I get a blank screen for about 10 seconds and then it closes or the connection closes immediately. Every time this happens I get error
    4005 in the event log; Windows logon process has unexpectedly terminated. It seems the remote desktop stopped working after the last set of Windows updates were applied. But no other web searches indicates anyone else has had this problem recently. I've also
    read the Windows Server document or error 4005 which suggests my registry may be corrupt or a service may be stopped but this does not seem to apply to my situation. I'm stumped and without being able to remote into my pc from my office I can't do my job.
    Any suggestions would be greatly appreciated.
    UPDATE: After installing a new required Windows update and a bunch of optional Windows updates (that I had been ignoring), the problem has been fixed. I'm guessing which ever Windows update broke Remote Desktop was fixed in the latest update(s).

    Hi arzoo1,
    So you have checked the steps mentioned in the article below?
    Event ID 4005 — Windows Logon Availability
    You may take a try with Dism /online /cleanup-image /resorehealth command and then check if issue insists.
    For Windows Update related, please consider system restore or startup repair.
    Try to boot into clean boot and then remote again to check if issue insists.
    Best regards
    Michael Shao
    TechNet Community Support

  • The iChat Agent process has unexpectedly quit, disconnecting you from all..

    My iChat has been doing this all the time! I can't stay connected for more than an hour without iChat quitting on me and giving me this message:
    *"Disconnected from iChat Agent. The iChat Agent process has unexpectedly quit, disconnecting you from all services. Logging in again will restart it."*
    I have tried these steps to fix the problem with no success.
    Step 1 - Repaired Permissions
    Step 2 - Rebooted off of the DVD or CD and Repaired Disk
    Step 3 - Went to /Users/user_name/Library/Preferences folder and deleted these files:
    com.apple.iChat.plist
    com.apple.iChat.Aim.plist
    com.apple.iChat.Jabber.plist
    com.apple.iChat.SubNet.plist
    com.apple.iChatAgent.plist
    Step 4 - Reinstalled the **** thing.
    My iChat works 100%, I have no issues connecting, video conferencing, screen sharing and etc. But every hour or so the connection drops and gives me that **** message!!! *"Disconnected from iChat Agent. The iChat Agent process has unexpectedly quit, disconnecting you from all services. Logging in again will restart it."* So have to keep reconnecting all the time! Sometimes I'm in a middle of a conference and the freackn' thing just drops!!!! (Even tho sometimes I do get that error but my video connection still works offline.... not sure how....)
    I have been in several forums and no one was able to fix this issue! Can some official Apple guy help with this!!! I mean, ****!! What an annoying bug!! I really on iChat to communicate with co-workers and etc as I work remotely. If Adium had video support I wouldn't even wast my time to get this thing working, but iChat is still my best option(when the **** thing works)
    Please any help is greatly appreciated.
    And no its not my router and ISP and this happens with any connection(Coffee shops, public libraries, WiFi Hot Spots....)

    I had the same problem a month or two ago. I spent a few hours on the phone with an Apple tech and after the fourth time calling back was transferred to a Product Specialist (the highest level of Apple technicians). The specialist recommended creating a test account on my Mac and trying to launch iChat to see if the problem was system-wide or a user based issue. When that didn't work I was out of options. What it unfortunately came down to was having to do an Archive and Install (which didn't work) and after hours of backing up did an Erase and Install. After all the smoke cleared and my computer was back to normal, iChat was back and fully functional as before.
    IF YOU ARE USING TIME MACHINE:
    *DO NOT* copy all of your files back onto your Mac. Only copy your documents and music, preferences and nothing else. Chances are you backed up the problem without even knowing it and you would just end up back where you started.
    I did notice that my .Mac account still works in iChat but AIM does not (which just happens to be what I use to communicate with the rest of the world).
    Good Luck!

  • The filtering process has been terminated

    got 1 WFE and 1 App server
    configured the search like this: 
    I've moved the search index on both servers so it's like this; (I know it's different folder names)
    IndexPartitionOrdinal : 0
    RootDirectory         : E:\SPSearchIndex
    ComponentId           : 7bfd9b97-fb14-4e26-8b93-05ce8340c493
    TopologyId            : 082bdf84-ba56-41ef-9b64-6b9a0c7407f4
    ServerId              : 39202252-fb20-43c9-a674-84c3d4891da1
    Name                  : IndexComponent1
    ServerName            : APP1
    IndexPartitionOrdinal : 0
    RootDirectory         : E:\SearchIndex
    ComponentId           : 5c076b2c-945a-4a72-955a-237d003a7498
    TopologyId            : 082bdf84-ba56-41ef-9b64-6b9a0c7407f4
    ServerId              : ad0c8592-edec-47c5-a14b-df682c13c514
    Name                  : IndexComponent2
    ServerName            : WFE1
    on both servers The <machinename>/WSS_WPG and <machinename>/WSS_ADMIN has full control (also the Searchcontent account) to the folders  - but still I get the error:
    "The filtering process has been terminated "
    can someone please advise so the Search can crawl flawless and without errors?

    Hi,
    Firstly, please ensure Search Service Account has access to the SearchIndex share which is usually located
    in  "%Program Files%\Microsoft Office Servers\15.0\Data\Office Server\Applications" directory. And make sure “WSS_WPG” group has full control permissions to "C:\Windows\Temp" directory.
    Then try removing and add the existing crawl rules. You could also change the identity of the search to the farm account. Restart search related service and start full crawl.
    If it still doesn’t work, please check ULS log and find more detail error message.
    Regards,
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected] .
    Rebecca Tu
    TechNet Community Support

  • Is there an EASY way to submit podcasts to the itunes store? i've tried creating podcasts in garageband, then somewhere after wordpress  itunes  doesn't recognize the feed. my process has been (i am open to suggestions for other free and EASY services/me

    is there an EASY way to submit podcasts to the itunes store? i've tried creating podcasts in garageband, then somewhere after wordpress  itunes  doesn't recognize the feed.
    my process has been (i am open to suggestions for other free and EASY services/methods):
    garageband : create & edit audio. add 1400x1400 image.
    share to itunes.
    drag file to desktop.
    upload .m4a file to google drive.
    create a link post in wordpress using "podcast" tag & create "podcast" category.
    click on "entries rss" in wordpress, which takes me to the rss subscribe page (which is basically just my wordpress address with "/feed" at the end.
    i copy this url.
    go to itunes store > then "submit a podcast"
    itunes gives me the error message "we had difficulty downloading episodes from your feed."
    when i try to subscribe to my podcast in itunes, it does, but gives me no episodes available.
    i went back into wordpress and changed settings/ reading settings to : "full text" from "summary"
    still the same error message.
    i added a feedburner step after wordpress but got the same errors. i don't think i should have to add feedburner.
    wordpress seems to be encapsulating the rss, what am i doing wrong?
    this so much easier when you could go directly from garage band to iweb to mobileme; i miss those apple days (also idisk).

    if anyone has a super EASY process, i would LOVE to know what it is. EASY, meaning no html and also free. there are many free online storage systems available, many of which i currently use. the above process was just me trying to figure it out, if you have an easier method, please share. thank you so much!

  • When i run Time Machine to back up my computer onto an external hard drive, i have no way of knowing when the back up process has been completed. I don't know when it is safe to disconnect the external hard drive - which is store in a separate location.

    When i run Time Machine to back up my computer on to an external hard drive, i have no way of knowing when the back up process has been completed.  This is necessary to know because i don't leave my external hard drive connected to the computer.  I routinely disconnect it after backing up the hard drive, and then i store the external hard drive in a different location from the computer.  So, knowing when the back up process has been completed would be a very helpful thing to have the computer specify. 

    Just enable Time Machine's menu extra (System Preferences -> Time Machine -> Show Time Machine in menu bar.
    This will add a little Time Machine icon to your menubar. When Time Machine is actively backing up your data, the icon will spin as a visual indicator. You can also click the menu icon to see the backup status, including how much data is left to back up.

  • How to display a mssg on page before the adf lifecycle process has ended?

    Hi;
    We have an ADF Application(11.1.1.3). We sign a document with a mobile signature. To do this we use a webservice call. During this call a hash is generated for the user to check and sign the document. Everything is fine but we couldn't find a way to display the generated hash on the page before the adf lifecycle process has finished. The hash should be displayed on the screen while the rest of the method is proceeding. After 2 minutes, the hash is timed out. How can we do this?
    The method is as follows:
    public boolean docFirstSign(String telNo, int gsmOperator, String evrakNo) {
    String filePathToSign = null;
    boolean signOpResult = false;
    FileProcessor fileP = new FileProcessor();
    try {       
    filePathToSign = fileP.getFilePathToSign(evrakNo);
    byte[] imzalanacakVeri = MobilImza.getBytesFromFile(filePathToSign);
    String dataToBeDisplayed = "Size atanmis ve evrak uygulamasi uzerinden goruntulediginiz "+ evrakNo +" numarali evraki mobil olarak imzalayacaksiniz!";
    MSS_SenderSoapProxy proxy = new MSS_SenderSoapProxy();
    HashResult res = proxy.getHashForGsmOperator(imzalanacakVeri, telNo, 1);
    Here the hash is generated. This should be displayed on the page, as at the same time a mobile message is sent to the user to check it and sign it. And the method shoud go on processing.
    Logging.getLogger().info("Message -->"+res.getMessage());
    //Hash kontrol
    if (res.getResultCode()==0) {
    SignatureResult sres = proxy.getSignature(dataToBeDisplayed,res.getApTransId()); //Turkce karakter olmayacak
    Logging.getLogger().info("sres.getResultCode()-->"+sres.getResultCode());
    if (sres.getResultCode()==0) {
    byte[] imzaliData = MobilImza.base64Decode(sres.getSignedData());
    System.out.println(sres.getMessage());
    FileOutputStream fos = new FileOutputStream(new File(filePathToSign));
    fos.write(imzaliData);
    fos.close();
    signOpResult = fileP.docCheckin(evrakNo);
    } else {
    fileP.cancelCheckout(evrakNo);
    } else {
    Logging.getLogger().error("Hash Hesaplanamadi");
    fileP.cancelCheckout(evrakNo);
    return signOpResult;
    } catch (Exception e) {
    e.printStackTrace();
    fileP.cancelCheckout(evrakNo);
    return signOpResult;
    return signOpResult;
    }

    Hi,
    its a synchronous method execution which means that the display of a popup only works when there is a response to the initial request. What about - as soon as you generated the Hash - show a popup to the user asking him/her to take a note of the hash and then confirm that the document or whatever you want to sign and send to the mobile should be processed. So when the user clicks ok on the message dialog you continue with the remaining of your method
    Frank

  • My session has dissapeared, save for one window. How do i recover it?

    A few days ago, i had a session of 4 windows (with several tabs) saved in Firefox so they would open up again when i next opened Firefox. They have worked fine for the past month, but today i only got one window back when i opened up Firefox. This has never happened before. How do i recover my lost session windows?

    If you do not see those closed windows in "History > Recently Closed Windows" then the tabs from those windows are gone.<br />
    If you use the close X on the title bar to close a window then only the last closed window will be restored.<br />
    You need to use "File > Exit Firefox" to close all window to prevent losing windows in case you close the main window and others are still open.

  • Your server has unexpectedly terminated the connection

    Hello All, Is anybody else getting this error message?  Anybody know why?  Any known fixes? I am running:Windows 8.1Windows Live Mail (but also see the problem using Outlook 2010)Only see the problem with my IMAP account, POP accounts have not had the problem. Your server has unexpectedly terminated the connection. Possible causes for this include server problems, network problems, or a long period of inactivity. Details:The server did not respond to this IMAP command before the connection was terminated.Configuration:Account: *******Server: imap.comcast.netUser name: ******Protocol: IMAP Port: 993Secure(SSL): 1Code: 800ccc0f 

    Unfortunately I have not been able to resolve the problem and Comcast has not been of any help.  All I can do is tell you what did not work for me. - I called customer service and he tried resynching the mail server (not sure what that actually is), he was sure this would work, it did not resolve the issue.- I was told to reinstall windows live mail, I did and that did not resolve the issue at all- Turned off the firewall and email virus scanning, no improvement- Increased and decreased lenght of server timeouts, no improvement I have discovered that I get the error message with windows live mail and Oultlook 2010 but not with the windows mail app that comes with windows 8. I have also found that I only get the error with my imap accounts. Very frustrating......  

  • Acrobat 7.0 OCR: Unable to process the page because the Paper Capture recognition service unexpectedly terminated

    Hello,
    This error occurs on some computers and but not others. I even tested it with the most basic word document, no formatting and scanned it.
    It works on a few systems but others get the message:
    Unable to process the page because the Paper Capture recognition service unexpectedly terminated.
    Does anyone have any suggestions? Did 7.0 have issues?
    Thanks

    You still didn't answer for Michael the version of 7  At one time adobe prodived and standrad version and a pro version. Standard basically done the same thing as the Print to PDF feature in the Print Menu (of the Macintosh).
    Pro added features such as forms creation.
    Also the exact version number can be found in the about acrobat under the Acrobat menu.
    example for my version would be:           

  • What will i do when i received the message of an error is that "your server has unexpectedly termina

    What will I do when I received the messages about the errors?    Here the information was given away :
    "Your server has unexpectedly terminated the connection. Possible causes for this include server problems, network problems, or a long period of inactivity. Subject 'Kindly send a check this week', Account: 'imap.mail.rogers.com', Server: 'smtp.broadband.rogers.com', Protocol: SMTP, Server Response: '552 Message Size exceeded', Port: 587, Secure(SSL): No, Server Error: 552, Error Number: 0x800CCC0F"

    Are you getting this error message on your printer or computer ?
    What kind of printer do you have and what operating system are you using ?
    If I helped you at all it would be great if you clicked the blue kudos star!
    If I solved your post please mark it as solved to help others.
    I'm a printer tech with HP.

  • HT1725 Why can I all of a sudden not purchase on Cand Crush and on Words With Friends??  The credit card company has NOT stopped anything. I have no problems with other iTunes purchases!

    Why can I all of a sudden not purchase on Cand Crush and on Words With Friends??  The credit card company has NOT stopped anything. I have no problems with other iTunes purchases!

    Contact iTune Support
    https://ssl.apple.com/emea/support/itunes/contact.html

  • Does anyone else get the error message :iCloud has unexpectedly stopped"?

    I am visiting South Africa and realy heavily on access to my iCloud. For the past 48 hours iCloud seems to be down and I keep getting the error message "icloud has unexpectedly stopped". Apple has not acknowledged the problem, yet. Does anyone else experience similar issues? Any suggestions on how to access icloud.com?

    I'm having the same problem on my wife's computer. I successfully joined several shared calendars from my account, and suddenly started getting this message on the last one. I've tried again repeatedly over the last 24 hours, including sending a new invitation, logging her out of iCloud website, etc.
    Did you find any resolution to the problem?

  • Unable to install SQL Server 2012 along with BIDS & VS 2012 on Windows 7

    Unable to install SQL Server 2012 along with BIDS & VS 2012 on Windows 7 professional.
    I get the below error
    Could not find vsjitdebugger.exe
    Blogs say anti-virus is stopping but I dont have one on the system.
    Note: I had used SQL 2008 on the system previously and has a refresh i have deleted all the software to speed up the system.
    Now i could not install both the software.
    Can I get some help regarding this?

    Hi Nandu,
    As your description, you come across an error(vsjitdebugger.exe cannot be found). Please confirm if the error occurs during the installation of SQL Server 2012.  If so, please help post SQL Server setup logs. By default, SQL Server setup log file locates
    in C:\Program Files\Microsoft SQL Server\110\Setup Bootstrap\Log.
    Base on my research, this error could be caused by that the previous uninstallation is improper and vsjitdebugger.exe file could be mistakenly deleted.
    To troubleshoot the issue, you could start your computer into Safe Mode and fix your problem with one of the following methods. For more information, please refer to the article:
    http://www.fixerrorkit.com/fix-error/fix-vsjitdebugger.exe-error.html.
    1. You could execute the sfc /scannow command following steps below.
    a. Press "Windows+R", type in cmd and then right click "Run as administrator"
    b. Type in sfc /scannow (There's a space between sfc and /scannow) into the dialog and hit Enter key and click ok.
    c. Wait until the System File Checker finishes the check.
    2. You could use a Windows repair installation, also known as a Startup Repair to repair your Windows system files.
    3. You could install the latest Windows updates to fix vsjitdebugger.exe error. Microsoft often releases new service packs and system patches to replace or update some DLL files of Windows system.
    4. You could use third-party tool such as Automatic Error Fix Tool to fix your vsjitdebugger.exe error. However, Microsoft cannot make any representations regarding the quality, safety, or suitability of any third-party software or information found there.
    In addition, if you are unable to install  Visual Studio, I suggest you post your question in Visual Studio Setup and Installation forum at
    https://social.msdn.microsoft.com/Forums/vstudio/en-US/home?forum=vssetup  . It is appropriate and more experts will assist you.
    Regards,
    Michelle Li

  • Disappearing disk space Windows Server 2012 R2 with SharePoint Server 2013 Enterprise

    I've got an interesting problem with a virtual machine in our VMWare environment.  It is Windows Server 2012 R2 with SharePoint Server 2013 Enterprise installed.  I started out with a 60GB disk and it started running out of space, so I increased
    it in VMWare and extended the partition to 100GB.  Well, that lasted for a bit and so I extended it again.  I've done this 3 or 4 times and now I've got a 160GB disk with about 2-3GB of space remaining (and it started with 10GB remaining). 
    WinDirStat shows 105GB of <Unknown> space being used, which is probably my issue.  However, I can't determine what this is and it keeps growing like a tapeworm.  The context menu on the <Unknown> files has all the options disabled,
    so WinDirStat doesn't appear to have access to whatever the file(s) is/are.  I've performed several chkdsk /f on the C: drive and nothing bad is reported.  I don't have any restore points and am not running VSS (that I'm aware of).  The pagefile
    reports as being about 4.9GB, so that's not the issue.  No large files are shown anywhere and my explorer settings are set to show me all files, including system files.
    When I try to run WinDirStat with elevated permissions, it hangs and becomes unresponsive. 
    I've even resorted to running CCleaner to see if it found anything, but it simply found the standard temp files and such...about 1GB. 
    I'm pulling my hair out...and I don't have much to start with.  Anyone have any ideas?
    Thanks
    Russ

    It appears that somehow, Microsoft Fusion Assembly binding logging was turned on and many of the temp folders located at c:\users\username\AppData\Local\Microsoft\Windows\InetCache\IE were filling up with hundreds of thousands of Fusion HTM log files. 
    This is controlled by an entry in the registry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog which was set to 1.  Hopefully, setting it back to zero will fix the issue.  As a result of figuring this out, I have recovered almost 80GB of disk
    space occupied by the log files.
    I thought WinDirStat would show me what I needed to know, but it turns out TreeSize (which I've used in the past) works much better.
    Russ

Maybe you are looking for

  • HP Wireless Printing - problems with MAcbook Airport

    I've read through most of the problems related to printers on here and I think I have a unique one!! I've just bought and installed a HP C8180 all-in-one printer. Installed as per instructions - on home network and across ethernet. I've reserved an I

  • Slow opening of file to edit

    Hi there, I it very slow (up to four minutes) to open a photographic (jpg) file to edit with Photoshop (it is ridiculously slow)....should I uninstall it and then reinstall it again? Thank you

  • When will Apple TV support YouTube subtitles???

    I noticed while using the Apple TV, that most of the videos I try to watch that have English subtitles will play the video but not the subtitles. So I was wondering if anyone knows when Apple TV will support YouTube subtitles because a lot of videos

  • How to separate XML element content

    Hi All, How can i separate XML element content in to two strings, where each string will be copied into new variables. For ex: The input I get is <XmLElement>C:/documents/sharedFiles/apple.pdf</XMLElement> now I want to break the content into two par

  • AT300-105: Have anyone info about updates in the future?

    Dear friends, does anyone know whether we will ever get any form of update for AT300-105, which is currently stuck at 4.0.3.05. ? The reason I am asking this is that my company has recently introduced BYOD concept and we are eligible to use our own d