Windows Server 2008 stops responding and hangs at the “Applying Computer Settings” stage of the logon process

I was recently faced with a Windows 2008 Server that became stuck on the “Applying Computer Settings…” screen of the logon process.  It would sit at this stage for close to an hour before it would finally reach the logon prompt.

Worse yet once logged in the Event Log showed no errors.  A check of the services showed that Netlogon was in a stopping state and a handful of other services did not start.

  • Print Spooler
  • Terminal Services
  • Server service
  • Remote Registry
  • Windows Management Instrumentation (WMI)
  • Distributed Transaction Coordinator

Booting into Safe Mode seemed fine.  It would boot up fast and log straight in.  Of course most services are stopped in Safe Mode so didn’t shed much light.

I didn’t have much to work off.  I had been removing and applying new certificates for OCS 2007 just prior to removing the computer from the domain and putting it into a Workgroup.  A subsequent reboot led to the hung logon process.

After some digging around I finally came across an MS KB which matched what I was experiencing.   The key note of the article was that this issue typically occurs after a server certificate is applied.

Microsoft provides a Hotfix and a Workaround for this issue.  The Hotfix updates 2 or 3 files depending on your OS version.  The Workaround is a registry change and was the solution I took.  The registry change makes HTTP.sys depend on crytosvc service to be started first.  The quick backup and change of the reg keys and reboot got me back up and running.

Appendix.

Reg Fix

  1. Click Start, type regedit in the Start Search box, and then press ENTER.
  2. Locate and then click the following registry subkey:
  3. HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesHTTP
  4. On the Edit menu, point to New, and then click Multi-string Value.
  5. Type DependOnService, and then press ENTER.
  6. Right-click DependOnService, and then click Modify.
  7. In the Value data box, type CRYPTSVC, and then click OK.
  8. Exit Registry Editor.
  9. Restart the computer.

Microsoft KB Article

http://support.microsoft.com/kb/2379016

  1. Saved my bacon! thanks for the post.

  2. Adding New Value in Registry did not worked for me. I have windows 2008 R2 Server and i have resolved the issue by remote in to the Server via iLO Connection. Its tooks around 10 minutes for me to reach to the Start Screen. Disable the Network Card. Reboot the Server. Remote in via iLO. Enable the NIC Card. Set them to receive DHCP IP (instead of original Static IP). Reboot the Server. Remote in via mstsc (remote desktop in). Set the IP as Static and Reboot. Issue resolved after reboot. Thanks

Leave a Comment


NOTE - You can use these HTML tags and attributes:
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>

%d bloggers like this: