Hello guys. Im trying to investigate a slow logon problem in my environment. I have 4 DCs but one is too slowly at logon. It takes 1 min in Welcome screen, even if i just disconnect or logoff. All servers have same services running, roles, features, hardware. I have no errors log, just infos: ---------------------------------------------------------------------------- Log Name: Application Source: Desktop Window Manager Date: 10/08/2012 11:36:04 Event ID: 9003 Task Category: None Level: Information Keywords: Classic User: N/A Computer: DC02.domain.com.br Description: The Desktop Window Manager was unable to start because a composited theme is not in use Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Desktop Window Manager" /> <EventID Qualifiers="16384">9003</EventID> <Level>4</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2012-08-10T14:36:04.000000000Z" /> <EventRecordID>18264</EventRecordID> <Channel>Application</Channel> <Computer>DC02.domain.com.br</Computer> <Security /> </System> <EventData> </EventData> </Event> ---------------------------------------------------------------------------- Log Name: Application Source: Microsoft-Windows-Winlogon Date: 10/08/2012 11:36:04 Event ID: 4101 Task Category: None Level: Information Keywords: Classic User: N/A Computer: DC02.domain.com.br Description: Windows license validated. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Winlogon" /> <EventID Qualifiers="16384">4101</EventID> <Version>0</Version> <Level>4</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2012-08-10T14:36:04.000000000Z" /> <EventRecordID>18263</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>DC02.domain.com.br</Computer> <Security /> </System> <EventData> <Data>0x00000000</Data> <Data>0x00000001</Data> </EventData> </Event> ---------------------------------------------------------------------------- Log Name: Application Source: Desktop Window Manager Date: 10/08/2012 11:35:20 Event ID: 9009 Task Category: None Level: Information Keywords: Classic User: N/A Computer: DC02.domain.com.br Description: The Desktop Window Manager has exited with code (0x40010004) Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Desktop Window Manager" /> <EventID Qualifiers="16384">9009</EventID> <Level>4</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2012-08-10T14:35:20.000000000Z" /> <EventRecordID>18261</EventRecordID> <Channel>Application</Channel> <Computer>DC02.domain.com.br</Computer> <Security /> </System> <EventData> <Data>0x40010004</Data> </EventData> </Event> ---------------------------------------------------------------------------- Anybody can help with this issue? Thanks in advance.Luiz Eduardo MCP Windows Server 2003. MCTS Network Windows Server 2008. MCTS Application Windows Server 2008. MCTS SQL Server 2008. Se a resposta ajudou, colabore com o Frum e classifique.

Please see if following articles helps Event ID: 9003 Source: Desktop Window Manager http://www.eventid.net/display-eventid-9003-source-Desktop%20Window%20Manager-eventno-10811-phase-1.htm Event ID 4101 Display Driver Timeout Detection and Recovery (en-US) http://social.technet.microsoft.com/wiki/contents/articles/1462.event-id-4101-display-driver-timeout-detection-and-recovery-en-us.aspx Event ID: 9009 Source: Desktop Window Manager http://www.eventid.net/display.asp?eventid=9009&eventno=10141&source=Desktop%20Window%20Manager&phase=1I do not represent the organisation I work for, all the opinions expressed here are my own. This posting is provided "AS IS" with no warranties or guarantees and confers no rights. - .... .- -. -.- ... --..-- ... .- -. - --- ... ....

Try this.... http://support.microsoft.com/default.aspx?scid=kb;en-US;2655998

Please see if following articles helps Event ID: 9003 Source: Desktop Window Manager http://www.eventid.net/display-eventid-9003-source-Desktop%20Window%20Manager-eventno-10811-phase-1.htm Event ID 4101 Display Driver Timeout Detection and Recovery (en-US) http://social.technet.microsoft.com/wiki/contents/articles/1462.event-id-4101-display-driver-timeout-detection-and-recovery-en-us.aspx Event ID: 9009 Source: Desktop Window Manager http://www.eventid.net/display.asp?eventid=9009&eventno=10141&source=Desktop%20Window%20Manager&phase=1 I do not represent the organisation I work for, all the opinions expressed here are my own. This posting is provided "AS IS" with no warranties or guarantees and confers no rights. - .... .- -. -.- ... --..-- ... .- -. - --- ... .... Hello Santosh, thanks for your reply. Your first link is about Desktop Experience? I dont have it installed, so, my all servers have no themes. The second link is about display source and Windows Vista, im running 2008R2, not 2008 and my event source is Microsoft-Windows-Winlogon The third link talk about citrix, i dont have it installed. Thank you anyway. ---------------------------------------------------------------------------------- Mr CDR_Cody, Thanks but my server is not a remote desktop or printer server, is just a domain controller without printers. ----------------------------------------------------------------------------------- Anybody can help?Luiz Eduardo MCP Windows Server 2003. MCTS Network Windows Server 2008. MCTS Application Windows Server 2008. MCTS SQL Server 2008. Se a resposta ajudou, colabore com o Frum e classifique.

In Remote Desktop Client configuration Im using High Color 16bit, no local devices and resources, no items at Experience tab and still taking 1 minute to show desktop. Luiz Eduardo MCP Windows Server 2003. MCTS Network Windows Server 2008. MCTS Application Windows Server 2008. MCTS SQL Server 2008. Se a resposta ajudou, colabore com o Frum e classifique.

Hello guys. Im trying to investigate a slow logon problem in my environment. I have 4 DCs but one is too slowly at logon. It takes 1 min in Welcome screen, even if i just disconnect or logoff. All servers have same services running, roles, features, hardware. I have no errors log, just infos: ---------------------------------------------------------------------------- Log Name: Application Source: Desktop Window Manager Date: 10/08/2012 11:36:04 Event ID: 9003 Task Category: None Level: Information Keywords: Classic User: N/A Computer: DC02.domain.com.br Description: The Desktop Window Manager was unable to start because a composited theme is not in use Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Desktop Window Manager" /> <EventID Qualifiers="16384">9003</EventID> <Level>4</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2012-08-10T14:36:04.000000000Z" /> <EventRecordID>18264</EventRecordID> <Channel>Application</Channel> <Computer>DC02.domain.com.br</Computer> <Security /> </System> <EventData> </EventData> </Event> ---------------------------------------------------------------------------- Log Name: Application Source: Microsoft-Windows-Winlogon Date: 10/08/2012 11:36:04 Event ID: 4101 Task Category: None Level: Information Keywords: Classic User: N/A Computer: DC02.domain.com.br Description: Windows license validated. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Winlogon" /> <EventID Qualifiers="16384">4101</EventID> <Version>0</Version> <Level>4</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2012-08-10T14:36:04.000000000Z" /> <EventRecordID>18263</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>DC02.domain.com.br</Computer> <Security /> </System> <EventData> <Data>0x00000000</Data> <Data>0x00000001</Data> </EventData> </Event> ---------------------------------------------------------------------------- Log Name: Application Source: Desktop Window Manager Date: 10/08/2012 11:35:20 Event ID: 9009 Task Category: None Level: Information Keywords: Classic User: N/A Computer: DC02.domain.com.br Description: The Desktop Window Manager has exited with code (0x40010004) Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Desktop Window Manager" /> <EventID Qualifiers="16384">9009</EventID> <Level>4</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2012-08-10T14:35:20.000000000Z" /> <EventRecordID>18261</EventRecordID> <Channel>Application</Channel> <Computer>DC02.domain.com.br</Computer> <Security /> </System> <EventData> <Data>0x40010004</Data> </EventData> </Event> ---------------------------------------------------------------------------- Anybody can help with this issue? Thanks in advance. Luiz Eduardo MCP Windows Server 2003. MCTS Network Windows Server 2008. MCTS Application Windows Server 2008. MCTS SQL Server 2008. Se a resposta ajudou, colabore com o Frum e classifique. My Security Log file was corrupted, i just backup it, empty logs and change the log file to securityOK.evtx. Dont ask me why i decide to look that but i won the machine again! I was thinking about logon steps and now its ok.Luiz Eduardo MCP Windows Server 2003. MCTS Network Windows Server 2008. MCTS Application Windows Server 2008. MCTS SQL Server 2008. Se a resposta ajudou, colabore com o Frum e classifique.