Event ID 10000 is logged in the Application log on a Windows Server 2003-based computer that has Terminal Server enabled

Support for Windows Server 2003 ended on July 14, 2015

Microsoft ended support for Windows Server 2003 on July 14, 2015. This change has affected your software updates and security options. Learn what this means for you and how to stay protected.

Important This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:
256986 Description of the Microsoft Windows registry
Symptoms
When you try to connect to a Microsoft Windows Server 2003-based computer that has Terminal Server enabled, an event that is similar to the following is logged in the Application log:
Event Type:	ErrorEvent Source:	DCOMEvent Category:	None Event ID:	10000Date:		2/20/2006Time:		10:04:57 AMUser:		N/AComputer:	Computer_NameDescription:Unable to start a DCOM Server: {0002DF01-0000-0000-C000-000000000046}The error: "%%233" Happened while starting this command: <command> -Embedding 
Note Computer_Name is the name of the Terminal Server computer.
Cause
This issue occurs when registry entries that are required for Winlogon notifications are missing from the registry of the Terminal Server computer.
Resolution
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.To resolve this issue, add the following registry entries to the registry of the Terminal Server computer. To do this, follow these steps:
  1. Click Start, click Run, type regedit in the Open box, and then click OK.
  2. Locate the following registry subkey:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv
  3. Under this subkey, add the following registry entries:
    NameTypeValue data
    LogoffREG_SZTSEventLogoff
    LogonREG_SZTSEventLogon
  4. Restart the Terminal Server computer.
Properties

Article ID: 914052 - Last Review: 06/20/2014 10:46:00 - Revision: 2.0

Microsoft Windows Server 2003, Enterprise Edition (32-bit x86), Microsoft Windows Server 2003, Standard Edition (32-bit x86), Microsoft Windows Server 2003, Web Edition, Microsoft Windows Server 2003, Enterprise x64 Edition, Microsoft Windows Server 2003, Standard x64 Edition, Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems

  • kbtshoot kbprb KB914052
Feedback