Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Workstations hang on running startup script due to GPO
Workstations hang on running startup script due to GPO [message #156116] Wed, 10 June 2009 15:15 Go to next message
Ike  is currently offline Ike  United States
Messages: 1
Registered: June 2009
Junior Member
Hi All,
I really appreciate your comments on this. We have setup Mandatory user
profiles to lock down some kiosk PCs. We got hit badly by a trojan virus.
after cleaning the virus, the PC freezes on runnin startup scripts for 10
minutes till it times out then the PC start booting up. We then find an
event viewr error
Event Type: Warning
Event Source: Winlogon
Event Category: None
Event ID: 1217
Date: 6/10/2009
Time: 12:44:17 PM
User: N/A
Computer: KIOSK03
Description: Execution of GPO scripts has timed out and have been
terminated.
We also find this error in c:\windows\debug\usrmode\usrenv.log
USERENV(314.318) 08:59:49:968 CUserProfile::CleanupUserProfile: Ref Count is
not 0
searching this error was pointing to not unloading the profile correctly but
we deleted the profile and rebooted several time with no help.

Notes:
we do not have startup or shut down scripts in the group policy.
Other PCs that pulls the same mandatory profile work fine.
we deleted the user profile folder from the workstation.
running programs like malware bytes, CCleaner did now work.
we deleted everything associated with the virus. ran different antivirus
programs.
so far the only way to solve it is to re-image.

Thank you all for your inputs.
Re: Workstations hang on running startup script due to GPO [message #156123 is a reply to message #156116] Wed, 10 June 2009 16:10 Go to previous message
pbbergs  is currently offline pbbergs  United States
Messages: 1024
Registered: July 2009
Senior Member
Are these machines in a dmz? Are you blocking icmp between it and the dc?
If it is check out slow link detection and group policy.

http://support.microsoft.com/kb/227260

It is just a thought but I have seen this before, although the timeout I
have seen is only about 2 minutes.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Ike" <micro@aol.com> wrote in message
news:u6yGP$f6JHA.5180@TK2MSFTNGP04.phx.gbl...
> Hi All,
> I really appreciate your comments on this. We have setup Mandatory user
> profiles to lock down some kiosk PCs. We got hit badly by a trojan virus.
> after cleaning the virus, the PC freezes on runnin startup scripts for 10
> minutes till it times out then the PC start booting up. We then find an
> event viewr error
> Event Type: Warning
> Event Source: Winlogon
> Event Category: None
> Event ID: 1217
> Date: 6/10/2009
> Time: 12:44:17 PM
> User: N/A
> Computer: KIOSK03
> Description: Execution of GPO scripts has timed out and have been
> terminated.
> We also find this error in c:\windows\debug\usrmode\usrenv.log
> USERENV(314.318) 08:59:49:968 CUserProfile::CleanupUserProfile: Ref Count
> is not 0
> searching this error was pointing to not unloading the profile correctly
> but we deleted the profile and rebooted several time with no help.
>
> Notes:
> we do not have startup or shut down scripts in the group policy.
> Other PCs that pulls the same mandatory profile work fine.
> we deleted the user profile folder from the workstation.
> running programs like malware bytes, CCleaner did now work.
> we deleted everything associated with the virus. ran different antivirus
> programs.
> so far the only way to solve it is to re-image.
>
> Thank you all for your inputs.
>
>
>
>
Re: Workstations hang on running startup script due to GPO [message #156127 is a reply to message #156116] Wed, 10 June 2009 15:33 Go to previous message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Ike" <micro@aol.com> wrote in message
news:u6yGP$f6JHA.5180@TK2MSFTNGP04.phx.gbl...
> Hi All,
> I really appreciate your comments on this. We have setup Mandatory user
> profiles to lock down some kiosk PCs. We got hit badly by a trojan virus.
> after cleaning the virus, the PC freezes on runnin startup scripts for 10
> minutes till it times out then the PC start booting up. We then find an
> event viewr error
> Event Type: Warning
> Event Source: Winlogon
> Event Category: None
> Event ID: 1217
> Date: 6/10/2009
> Time: 12:44:17 PM
> User: N/A
> Computer: KIOSK03
> Description: Execution of GPO scripts has timed out and have been
> terminated.
> We also find this error in c:\windows\debug\usrmode\usrenv.log
> USERENV(314.318) 08:59:49:968 CUserProfile::CleanupUserProfile: Ref Count
> is not 0
> searching this error was pointing to not unloading the profile correctly
> but we deleted the profile and rebooted several time with no help.
>
> Notes:
> we do not have startup or shut down scripts in the group policy.
> Other PCs that pulls the same mandatory profile work fine.
> we deleted the user profile folder from the workstation.
> running programs like malware bytes, CCleaner did now work.
> we deleted everything associated with the virus. ran different antivirus
> programs.
> so far the only way to solve it is to re-image.
>
> Thank you all for your inputs.


Without knowing anything about your infrastructure (DNS settings, DNS
misconfigurations, multihomed DCs, single label domain name issues,
disjointed namespace issue, etc), and from your posted errors, the first
thing I can think of is the profile cleanup utility. Take a look...

Download details: User Profile Hive Cleanup Service - Mar 8, 2007 ... A
service to help with slow log off and unreconciled profile problems.
www.microsoft.com/downloads/details.aspx?FamilyId=1B286E6D-8 912-4E18-B570-42470E2F3582

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer
aceman@mvps.RemoveThisPart.org

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

"Efficiency is doing things right; effectiveness is doing the right
things." - Peter F. Drucker
http://twitter.com/acefekay
Previous Topic:GPO-Based Removal of Registry Entries
Next Topic:RE: Delegation - Effective Rights
Goto Forum:
  


Current Time: Fri Oct 20 03:02:15 EDT 2017

Total time taken to generate the page: 0.03981 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software