B
Brett G
System is a virtual server running Windows Server 2016 Standard on Hyper-V and about 1000 local Windows users are defined. Active Directory is NOT being used.
Viewing the virtual server directly on Hyper-V host server, there's a long delay after I press Ctrl+Alt+Del before I can log in. (Swirling dots are displayed.)
Using remote desktop, there's a long delay "Please wait for the Local Session Manager" and it usually times out.
Clue #1: I observed that lsass.exe is using high CPU while the delay occurs.
Clue #2: For each user on the system (in alphabetical order until it times out), the Security Event Log shows Event ID 4798 for C:\Windows\System32\LogonUI.exe, "A user's local group membership was enumerated."
Any suggestions? Thanks.
Continue reading...
Viewing the virtual server directly on Hyper-V host server, there's a long delay after I press Ctrl+Alt+Del before I can log in. (Swirling dots are displayed.)
Using remote desktop, there's a long delay "Please wait for the Local Session Manager" and it usually times out.
Clue #1: I observed that lsass.exe is using high CPU while the delay occurs.
Clue #2: For each user on the system (in alphabetical order until it times out), the Security Event Log shows Event ID 4798 for C:\Windows\System32\LogonUI.exe, "A user's local group membership was enumerated."
Any suggestions? Thanks.
Continue reading...