2000 Server hangs when logging on as domain Administrator

[amcdonald]

Only the domain\administrator causes the server to hang
during logon... local and other domain accounts logon
normally.
No related event logs... any suggestions on how to
troubleshoot this?

 

[stash]

Any thing in the logs?

Are the other domain accounts part of the administrators group? By default only users in those groups are allowed to logon interactively, meaning you wouldve had to have changed the security settings on the box to allow other users to log on. There may be a value missing to allow the domain admin on.

 

[Teva24]

Does it really hang? Is the little colored bar still moving in the login box?

It may be that your computer is attemting to start a service/get a dhcp address/register it's dns, or something that requires domian admin access.

If the bar is still moving, give it a few min (no more than 10) and see if it gets any further. If it does end up logging in, look in the eventlog when it comes up and check for delayed services/programs.

Do you have any special login scrips assigned to the domain admin acct that might be trying to do something on login?

When you try to login as domain\administrator, can you go to another workstation at the same time and try to access the servers shares/remote management?

For a test you can create a new domain user, add them to the domain admin group and see if that user gets any further (when doing this start from scratch, don't copy an existing user)

If that works, then maybe the profile for domain admin is currupted. make sure no services are using the domain admin acct, Reboot the server (needed if you've previously tried to login ad domain admin sometimes), Using another admin acct (local or remote) Move (don't delete, you can go through steps to recover it later if you need to) the C:\Documents and Settings\Administrator.Domainname folder to somewhere else. The folder might be named something else on your server.
Then upon next login it will recreate the profile. you can then copy some of your settings back from the old folder.

-Teva24

 

[amcdonald]

Originally posted by: STaSh
Any thing in the logs?

Are the other domain accounts part of the administrators group? By default only users in those groups are allowed to logon interactively, meaning you wouldve had to have changed the security settings on the box to allow other users to log on. There may be a value missing to allow the domain admin on.

domain\domain admins (group) is in the local administrators group. Other users in the domain admins group can logon, but when domain\administrator logs on the system hangs between the 'logging on' message and the appearance of the desktop (it hangs on a completely blank screen). I've left it on for several hours this way.

This problem is exclusive to one server, as the domain\administrator account works on any other server/workstation. Also, the system appears to hang (no response from any keyboard functions, but the mouse works), but the server still functions for clients. I don't see any logs for the tiem of the system crash other than a successful security audit ... Any ideas?

 

[stash]

Try deleting the domain admins profile on that server. My computer, properties, user profiles.

 

[Smilin]

Originally posted by: STaSh
Try deleting the domain admins profile on that server. My computer, properties, user profiles.

What he said.

If that doesn't do it start checking your policies.

 

[amcdonald]

Originally posted by: Smilin

Originally posted by: STaSh
Try deleting the domain admins profile on that server. My computer, properties, user profiles.

What he said.

If that doesn't do it start checking your policies.

Deleting the local profile didn't change anything... What policy could be causing this? No policy changes have been made.

 

[Jgtdragon]

Sounds like a bad profile.