petri

ok found this http://support.microsoft.com/?kbid=886212 seems to be issue, thanks for your help anyway

get the follow entry in between login and logout . Event Type: Success Audit Event Source: Security Event Category: Privilege Use Event ID: 576 Description: Special privileges assigned to new logon: User Name: Domain: Logon ID: (0x0,0x1227C4DC) Privileges: SeChangeNotifyPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege

I recently rebuilt my desktop with xp sp2 and applied the hacked termserv.dll to the install to enable multiple concurent logins on the machine. If i try and login to the machine remotely on an account that isnt currently logged into (I have a remote working account seperate from the main profile), the connection is established, im authenticated and start the login process. As soon as the login process has finished, it automatically logs me off the system, with no warning or explanation. If i then login to the machine locally using that account and then connect from a remote location / machine, i connect to the session without a problem. This hasnt always been the case, my previous image of xp doesnt have this issue and i was able to perform remote logins without initially logging into the machine. I have clear event logs and tried to glean a bit more info into what is occuring but not much joy, this is the entry that appears source: Userenv Event Id: 1068 Desc ::Windows ended GPO processing because the computer shut down or the user logged off. have checked Event Id and found this link http://www.eventid.net/display.asp?eventid...Userenv&phase=1 however have to subscribe to see further and the microsoft link is dead. Checked on microsofts site and cant find the document reffered to. Anyone came across this before ?