12 October,17 at 11:30 PM
Problem:
A error message is presented when attempting to open a new desktop.
Error: LsaLogonUser error: There are currently no logon servers available to service the logon request" popped up when creating desktop/Run with privilege.
Cause:
User did not restart the machine after adding the privilege elevation service and the required DLLs are not loaded.
A) Check configuration:
For Windows 10/Server 2016:
Registry
Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\centrifyfsf
Name: Start
Value: 0 (Bootup)
Type: DWORD
For Windows 7/8.X/Server 2008 R2/Server 2012/Server 2012 R2:
Registry
Key: HKLM\SYSTEM\CurrentControlSet\Control\Lsa
Name:Security Packages
Value: contains "dzKerberoes" and "dzmsv1_0"
Type: REG_MULTI_SZ
B) Check to see if the DLLs are loaded or not:
Start Process Explorer with administrative privileges, check the DLLs (View->Lower Pane View->Dlls) loaded by lsass.exe. dzKerberoes.dll and dzmsv1_0.dll should be loaded.
C) Check the system reboot time:
Check Windows event log on system event against the time for joining zone. The following event should be logged after zone joined:
Source: Kernel-General
Event ID: 12
Message: The operating system started at system time ....
Source: User32
Event ID:
Resolution:
Reboot the machine.