URGENT - 2008 R2 TS Server hangs on applying computer settings!

[tommej]

I don't really know at this point what you can do, there is definitely some kind of connection problem looking at that log.

[Cache]

No problem, thanks so much for your help today with it - I'm gonna leave it loading over the weekend and then wipe and reinstall on Monday (oh joy of joys) because I really don't know where to go with it.

 

Thanks again, it's really appeciated!

[Firefox]

Have you tried deleting the network team, disabling one of the nics, and configuring the other with your required IP?

 

Broadcom Network Teams - Not worth the time and effort lol

[robknowles]

Hello,

 

What AntiVirus do you run on it? I've had exactly the same issue a few times, most of which required a rebuild. Since installing the latest Symantec AntiVirus Endpoint Protection Client (11.7 I think) I haven't had the issue yet since September.

 

Do you run any other monitoring software - we also ran Impero on it, which I thought may have been another cause.

 

Thanks,

 

Rob

[Cache]

Haven't tried deleting the team, internet access worked fine on it, could ping it, could ping out, could access resources on it (c$ ect) but couldn't log on to it at all (it's always the Group Policy Client it says it's waiting for).

 

Antivirus is Sophos and there's no other monitoring software installed on the machine. :/

 

Cheers

[russdev]

Hello,

 

What AntiVirus do you run on it? I've had exactly the same issue a few times, most of which required a rebuild. Since installing the latest Symantec AntiVirus Endpoint Protection Client (11.7 I think) I haven't had the issue yet since September.

 

Do you run any other monitoring software - we also ran Impero on it, which I thought may have been another cause.

 

Thanks,

 

Rob

 

Doubt Impero would cause that however if wanted to be sure disable Impero client service that way you would know if Impero is casuing an issue.

 

However this does remind me of a problem with Symantec I use to have after upgrades and basicly what happenss is the Network threat protection drivers get all corrupt. Removing all all network drivers (both original and any Symantec ones etc). Reinstall network card and add your IP config. You may need to boot into domain restore mode to get access to the network drivers etc as if not letting you login in normal mode and safe mode does not have network card enabled).

 

Russell

[Cache]

Well today I've formatted and reinstalled the server and touch wood, everything seems to be working perfectly once again so really not sure what's gone on.

 

For info, the server was ready to logon after the group policy client took 1 hour to be ready according to the event log when I looked before demolishing it this morning.

 

Thanks for the help/advice all.

[Cache]

I was having such a good day today until 3.15 when someone came and said they couldn't log on to the server - strangely everything worked fine when I logged on.

 

The message the student got was along the lines The RDS service is currently busy. Please try again later, other users should be unaffected by this. This was true because I could log on, so I thought I know I'll restart the server.

 

Cue the same problem as last time. I've managed to salavge it currently though, Removed Sophos, disbanded the team and removed the network adapters from Device manager, scanned new hardware, connected one network adapter up not in a team and reinstalled Sophos and touch wood it's working normally.

 

Now nothing has changed, everything has been ticking over nicely for almost a month but yet it suddenly and inexplicably occured once again.

 

I'm just concerned it's going to happen again, obviously it's down to either Sophos or the Network Card but guess I'll have to wait and see what happens.... :/

[robknowles]

Hi,

 

Just to let you know I had the same issue with one of my servers that I was having before the summer last week. Had to hard reboot it since I couldn't login at all and was stuck on Group Policy Client for ages. Left it overnight and luckily it was fine in the morning.

 

As I said before we run Symantec EndPoint Protection and you run Sophos so I doubt it's the AV here. What Intel Network Cards/Drivers do you use - it's a Dell R710 we have so whether it's an Intel NIC/Driver related issue.

 

For us it definitely isn't a switch issue (to which the server connects to) as we replaced our core switch (Hp 4108GL) to a Dell PowerConnect over the summer, for which it's now happened on both.

 

One last thing we occassional have users who can login to the server fine, however, when they use Internet Explorer they can't access external websites only Internal ones. Accessing an External one simple presents an error "This page can not be displayed". Logging off/on, updating GP doesn't work - other users can be using the Internet fine on the server. The only way to fix this is to delete their profile off the server.

 

I'm wondering whether it's an issue to do with a faulty Group Policy somewhere - sometimes when users login their Folder Redirection isn't applied - a GP Update or logoff/on can fix this - that said the issue is never experienced on normal desktop pcs.

 

Cheers,

 

Rob

[Cache]

Well it has happend again just now, using the 2nd card in the server, different port on the switch.

 

I've had the issue with Internet Explorer and it's always been the proxy policy not applying and logging off and logging on again normally sorts that. I'm the Remote Desktop Host Manager I'm seeing a lot of disconnected seesions build up with no usernames there so something is going on somewhere.

 

Our server is a Dell T410 and has Broadcom Nic's in it and not Intel.

 

Core switch is a 2910al-48g.

[Cache]

Out of interest, would you say these describe your issues to an extent @robknowles?

 

Remote desktop sessions do not completely exit, and you cannot establish new remote desktop sessions to a computer that is running Windows Server 2008 R2

The Group Policy preference settings for the "Terminal Session" item-level targeting item are not applied in Windows 7 or in Windows Server 2008 R2

 

The First did for what happend yesterday, but the hotfix doesn't apply to SP1 apparently.

 

I think I'm going to have to bring forward my complete GPO rewrite from the summer :/

Edited November 23, 2011 by Cache

[robknowles]

Hello,

 

Neither of those seem to apply for us. The RDS Sessions seems to log off properly - it's either the server locks up or future logins stop on the Group Policy Client. For the second one I don't use Terminal Session item-level targeting at present.

 

Cheers,

 

Rob

[robknowles]

Hi,

 

Just noticed the following thread (http://www.edugeek.net/forums/windows-server-2008-r2/86860-slow-logons-applying-folder-redirection.html), which mcrompton01 points to two links:

 

2008R2 - GPClient is taking a long time to handle the logon request (Up to 1 hour)

 

You experience a long domain logon time in Windows 7 or in Windows Server 2008 R2 after you deploy Group Policy preferences to the computer

 

I won't try installing it until when we get back in January, but this fix the issue.

 

Cheers,

 

Rob

[Cache]

The middle one you posted, GPClient taking up to 1 hour, is actually my thread (and my reply saying that I didn't bother installing the hotfix because it made no difference to the other guy).

 

I reinstated my team last week (having had it running off a single card since the last time it played up) and haven't had any more issues as of yet.