Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Troubles with AD Domain / Group Policy?

02 Nov 2009   #1
usererror

Windows 7 Pro 32bit
 
 
Troubles with AD Domain / Group Policy?

Is anyone here using Win7 Pro in a 2003 Functionality level Active Directory environment?

On multiple Windows 7 boxes, my laptop, and my desktop I ALWAYS get the error attached in the screenshot "Failed to connect to a windows service" when I log onto the Domain. I have looked at the event log and it is very, very vague. Most our IT users who have 7 just don't log onto the Domain at all, but i'd like to figure out what the issue is.

The Aero service also does not work when I log on, so i have the win2k look, and then after about 2 minutes the service starts again, by itself and all is well.

Any ideas??


My System SpecsSystem Spec
.
02 Nov 2009   #2
H2SO4

Win7x64
 
 

Not exactly a "crashes and debugging" issue, but perhaps sufficiently interesting for this section of the forum

Can you please post the text of the event(s) which relate to this error using the "copy" button (to copy details to the clipboard) in the lower left-hand corner of the event details dialog.
My System SpecsSystem Spec
02 Nov 2009   #3
usererror

Windows 7 Pro 32bit
 
 

True, not a crashing / debugging issue. But it seemed to "fit" here best.

I discovered today that the "Crash" ONLY happens when I log onto my two 7 PC's using my AD account that is a member of the Domain Admins group.

If I log on as a normal user, the issue does NOT happen. I will post the text of the details window tomorrow when I return to work.
My System SpecsSystem Spec
.

03 Nov 2009   #4
usererror

Windows 7 Pro 32bit
 
 

Ok here's what I got today immediately after logging in with my domain admin account:

"The winlogon notification subscriber <GPClient> was unavailable to handle a critical notification event."

"The winlogon notification subscriber <GPClient> failed a critical notification event."

"The scheduled restore point could not be created. Additional information: (0x80042319)." this one is maybe to be expected. We have System Restore DISABLED by Group Policy

"Volume Shadow Copy Service error: Writer WMI Writer did not respond to a GatherWriterStatus call.

Operation:
Gather writers' status
Executing Asynchronous Operation

Context:
Current State: GatherWriterStatus"

"The Windows Update service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service."

"The Windows Management Instrumentation service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service."

"The Themes service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service."

"The Shell Hardware Detection service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service."

"The Task Scheduler service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service."

"The User Profile Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service."

"The Server service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service."
My System SpecsSystem Spec
03 Nov 2009   #5
H2SO4

Win7x64
 
 

Ah, how wrong we were to think that it's not a "crashing & debugging" issue

The list of services which "terminated unexpectedly" corresponds to those sharing the same ("netsvcs") svchost instance. Therefore, it's safe to conclude that the specific svchost process is crashing.

It's not obvious from that output what the cause might be - at least not to me. As a suggestion, you might want to test what happens if you enable system restore.

Otherwise, it's possible to troubleshoot these sorts of crashes, but it's involved, especially so when svchost's the process which is crashing. If you're keen, I'll write up some suggestions.
My System SpecsSystem Spec
04 Nov 2009   #6
usererror

Windows 7 Pro 32bit
 
 

If you wouldn't mind sending your suggestions I'd be curious to see them. Again I am baffled to why this only happens on my Domain Admin user account...its also happening to our other domain admins...

We are theorizing it has to do with our GPO...
My System SpecsSystem Spec
05 Nov 2009   #7
H2SO4

Win7x64
 
 

Quote   Quote: Originally Posted by usererror View Post
If you wouldn't mind sending your suggestions I'd be curious to see them. Again I am baffled to why this only happens on my Domain Admin user account...its also happening to our other domain admins...

We are theorizing it has to do with our GPO...
I'd say you're very probably right, and that the specific mix of GPOs is somehow linked to the cause, although it's somewhat strange that the issue affects only admins - in most GP SNAFUs it's the non-admins who get the thick end of the stick.

There are multiple ways to approach this. If AD is your specialty, you could use the GPMC/RSOP tools to review the effective policy matrices for admins and non-admins, or rather the differences between them.

Otherwise, you could jump straight to the most vulgar problem manifestation - the svchost crash - and attempt to isolate and analyse the reasons. Personally, I'd favour this approach, if only because I think the GPMC was coded by beelzebub and his little wizards

If you're keen to go with the svchost crash analysis approach, please let me know whether running GPUPDATE /FORCE causes another instance of the svchost crash after having already logged on. If so, it becomes a little bit easier, because we've already got console access at the point where we can repro the crash, and that makes collecting crash info more straightforward.
My System SpecsSystem Spec
Reply

 Troubles with AD Domain / Group Policy?




Thread Tools




Similar help and support threads
Thread Forum
Group Policy - Apply to a Specific User or Group
How to Apply Local Group Policies to Specific User or Group in Windows Windows has three layers of local GPOs: Local Group Policy Local Group Policy is the only local GPO that allows both computer configuration and user configuration settings to be applied to all users of the computer....
Tutorials
Group Policy Applies Policy EXCEPT for 1 Setting!
Hi all! Windows 7 Pro 32 bit on a domain I've NEVER seen this before and I cant figure it out. I have a group policy set on an OU named LAPTOPS. The policy gets applied, however the User Config\Windows Setting\Scripts\Logon DOES NOT. When you run the GPRESULTS on the laptop, I see the...
General Discussion
Domain users group - no domain?
Hi, I'm using Windows 7 Home Premium x64, IE9, with Comodo Firewall and HIPs, Avast AV, MBAM, EMET and SAS. I have one LUA and one Admin a/c, both strong passworded---Guest a/c is disabled, Real Administrator is enabled, passworded, and never used. I'm behind a router with no network or...
System Security
Domain Group Policy 2003 environment & Windows 7 clients
Whenever I log in to windows 7 using my test AD account I only see 3 icons inside control panel.... When I log in to XP using the same AD account I see all the control panel icons that Im supposed to see according to my GP settings. So it looks like my GP is NOT working properly for windows 7...
System Security
Account Operators group, the Domain Admins group, the Enterprise Admin
how do I add these permissions to my account? I'm trying to change "How a Service is Started" and it won't let me without one of these persmissions. thx
Customization
Group Policy Editor or Local Security Policy
Will either of these allow me to restrict drive access to a single user only? I've tried to restrict drive access with Group Policy Editor but it applies the restriction globally--even to me the administrator. Could anyone let me know if this is possible and how to do it? Much thanks.
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 19:29.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App