Question Locked

Windows 2003 server login problems

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I am running a Win2k3 server and everytime I put the password to login, the system starts to load the profile and then kick you out to the CTRL ALT DEL login screen. Any suggestions as to why the server is doing this.

7 replies

by tmalo627

There is a log on script with a command to log off... Or there might be a GPO preventing a local log on...

by rob miners

Substitute your 2003 CD.

Enter the Recovery Console

Boot the system using the Windows XP CD-ROM. In the first screen when the Setup begins, read the instructions press "R" (in the first screen) enter the Recovery Console.

1: C:\WINDOWS

Which Windows Installation would you like to log on to
(To cancel, press ENTER)?
After you enter the number for the appropriate Windows installation, Windows will then prompt you to enter the Administrator account password.

Note If you use an incorrect password three times, the Windows Recovery Console closes. Also, if the Security Accounts Manager (SAM) database is missing or damaged, you cannot use the Windows Recovery Console because you cannot have correct authentication. After you enter your password and the Windows Recovery Console starts, type exit to restart the computer.

Type the following command and press Enter.

CD SYSTEM32
(If that does not work, try CHDIR SYSTEM32)
At the prompt type in
COPY USERINIT.EXE WSAUPDATER.EXE

Quit Recovery Console by typing EXIT and restart Windows.

You'll be able to login successfully as you've created the wsaupdater.exe file (now, a copy of userinit.exe)

"WARNING MODIFYING REGISTRY INFORMATION IS DANGEROUS"
Backup the Key before making changes.

Now, change the USERINIT value in the registry
Click Start, Run and type Regedt32 and press Enter.

Navigate to:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon

In the right pane you will see that the value of the Userinit key is incorrectly set to "wsaupdater.exe,"

In the right-pane, change the value of Userinit to C:\WINDOWS\system32\userinit.exe,

Type the above value exactly as given, including the comma. Also, change the path to userinit.exe appropriately if Windows is installed in a different drive.

Close Registry Editor and restart Windows.

Or try this if not successful.

Insert the XP CD and reboot the computer. You may need to configure your computer to boot from the CD-ROM drive.
When the Windows XP Setup has started, press "R" to "repair the Windows XP installation using Recovery Console".
Select the Windows installation to repair (generally this is C:\Windows) by typing its number and then pressing ENTER.
Type the Administrator password and press ENTER.
Type the following commands: and press Enter after each.
D:
CD I386
EXPAND USERINIT.EX_ C:\WINDOWS\SYSTEM32
NOTE: If your CD-ROM drive has a different letter assigned to it, enter "X:" instead, where X is the appropriate drive letter.
After entering "EXPAND USERINIT.EX_ C:\WINDOWS\SYSTEM32" you should see the text "1 file(s) copied", in which case all went well.

Remove the Windows XP CD, type "EXIT" and press ENTER to restart your computer. You should now be able to log on as normal.

by ricregier

I have tried the above entries with not luck, system still looks like its going to open the explorer then goes back to the ctrl+alt+detele entry... My problem started with an spam email trojan last week, I found on two user data entries an "Ankown User" I tried to delete it but it would not let me, so I gave it no abilities. Then I rebooted server to see if I could remove this user, and then I could not log on... I think it might have changed something in the reg but I have no knowledge on how to manage the reg in dos...

Help

by rob miners

Give us a few details, like Operating System, the steps that you took running AV/Malware/Spyware removal tools and their names, and the Virus name if you know it. Also if you can acces the system in Safe Mode.

by jgirizarry

Thank you guys for your comments. I ended up performing a Windows setup CD repair. Since this repair would not erase any settings or config, I saw in the event reports that the netlogon service could not start.

This discussion is closed to new replies.