Just a guess, but it sounds like something is trying to read the TS config on the domain admin account out of AD (user account, properties, Terminal Services Profile tab), but it is getting access denied. Maybe look at the security (permissions) on the domain admin account in ADU&C and make sure it can be read by the TS server's account?
-Bonnie -----Original Message----- From: Edward B. DREGER [mailto:[EMAIL PROTECTED] Sent: Friday, April 11, 2008 8:08 AM To: NT System Admin Issues Subject: domain admin can't log on (Winlogon event 1219) Source: Winlogon Event ID: 1219 Description: Logon rejected for DOMAIN\Administrator. Unable to obtain Terminal Server User Configuration. Error: Access is denied. == Domain admin logon attempts appear to succeed, then sit for several minutes... before returning to the logon screen. Local/machine-domain logon works great. Any quick hints beyond what the obvious Google searches provide? Anyone else encountered this? (It shouldn't be a firewall or network problem. I've not seen anything indicative of dropped packets, pMTU detection problems, et cetera.) TIA! Eddy -- Everquick Internet - http://www.everquick.net/ A division of Brotsman & Dreger, Inc. - http://www.brotsman.com/ Bandwidth, consulting, e-commerce, hosting, and network building Phone: +1 785 865 5885 Lawrence and [inter]national Phone: +1 316 794 8922 Wichita ________________________________________________________________________ DO NOT send mail to the following addresses: [EMAIL PROTECTED] -*- [EMAIL PROTECTED] -*- [EMAIL PROTECTED] Sending mail to spambait addresses is a great way to get blocked. Ditto for broken OOO autoresponders and foolish AV software backscatter. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
