Hello everybody,
at a customer's site, there are several 2008 R2 terminal servers running. More often than we like ;-) the following symptoms occur:
- At RDP logon, users get the error message that the group policy service could not logon, and access denied. This leads to the abortion of the logon process.
- After that, the NTUSER.DAT of the roaming profiles is only 256 KB in size (usually, the NTUSER.DAT there is about 2 MB). If we mount such a small NTUSER.DAT, we see just a few keys.
- In the event log, there are entries that the class registry cannot be loaded.
NTUSER.DAT is already excluded from any anti-virus software. Does anybody have a clue about what happens there, or a tip how to diagnose it? Thanks in advance.
Best Regards, Stefan Falk