I was recently faced with a Windows 2008 Server that became stuck on the “Applying Computer Settings…” screen of the logon process. It would sit at this stage for close to an hour before it would finally reach the logon prompt.
Worse yet once logged in the Event Log showed no errors. A check of the services showed that Netlogon was in a stopping state and a handful of other services did not start.
- Print Spooler
- Terminal Services
- Server service
- Remote Registry
- Windows Management Instrumentation (WMI)
- Distributed Transaction Coordinator
Booting into Safe Mode seemed fine. It would boot up fast and log straight in. Of course most services are stopped in Safe Mode so didn’t shed much light.
I didn’t have much to work off. I had been removing and applying new certificates for OCS 2007 just prior to removing the computer from the domain and putting it into a Workgroup. A subsequent reboot led to the hung logon process.
After some digging around I finally came across an MS KB which matched what I was experiencing. The key note of the article was that this issue typically occurs after a server certificate is applied.
Microsoft provides a Hotfix and a Workaround for this issue. The Hotfix updates 2 or 3 files depending on your OS version. The Workaround is a registry change and was the solution I took. The registry change makes HTTP.sys depend on crytosvc service to be started first. The quick backup and change of the reg keys and reboot got me back up and running.
- Click Start, type regedit in the Start Search box, and then press ENTER.
- Locate and then click the following registry subkey:
- On the Edit menu, point to New, and then click Multi-string Value.
- Type DependOnService, and then press ENTER.
- Right-click DependOnService, and then click Modify.
- In the Value data box, type CRYPTSVC, and then click OK.
- Exit Registry Editor.
- Restart the computer.
Microsoft KB Article