Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-9324: Failed to open a new desktop or Run with privilege

Centrify DirectControl ,  

12 October,17 at 11:30 PM

Problem:
A error message is presented when attempting to open a new desktop.
Error: LsaLogonUser error: There are currently no logon servers available to service the logon request" popped up when creating desktop/Run with privilege.

User-added image

Cause:
User did not restart the machine after adding the privilege elevation service and the required DLLs are not loaded.

A) Check configuration:

For Windows 10/Server 2016:
Registry
Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\centrifyfsf
Name: Start
Value: 0 (Bootup)
Type: DWORD

For Windows 7/8.X/Server 2008 R2/Server 2012/Server 2012 R2:
Registry
Key: HKLM\SYSTEM\CurrentControlSet\Control\Lsa
Name:Security Packages 
Value: contains "dzKerberoes" and "dzmsv1_0"
Type: REG_MULTI_SZ

B) Check to see if the DLLs are loaded or not:

Start Process Explorer with administrative privileges, check the DLLs (View->Lower Pane View->Dlls) loaded by lsass.exe. dzKerberoes.dll and dzmsv1_0.dll should be loaded.

C) Check the system reboot time:

Check Windows event log on system event against the time for joining zone. The following event should be logged after zone joined:
Source: Kernel-General
Event ID: 12
Message: The operating system started at system time ....

Source: User32
Event ID: 

Resolution: 
Reboot the machine.

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.