We have an issue that just started happening today on our standalone Windows Server 2008 R2. There is no domain it's just using local users and groups when a particular user tries to login it goes through the process and then immediately logs them off before the desktop is reached.
The following errors are logged in the event viewer:
Event ID 5: source: Kernel General{Registry Hive Recovered} Registry hive (file): '\??\C:\Users\username\ntuser.dat' was corrupted and it has been recovered. Some data might have been lost. followed by a event id 7002: User Logoff Notification for Customer Experience Improvement Program
If I setup a brand new user they have the same issue, if I then add the existing user or newly created user to the administrator group they can both logon, remove them from the group and they can no longer logon anymore.
I have run a scandisk, sfc /scannow, rebooted the server, disabled customer experience improvement, If I try to run gpedit.msc I get "Administrative templates encountered an error while parsing incorrect document syntax" I get a half dozen of these
before it allows me in. I tried to delete the users profiles and copy over another working users ntuser.dat but that doesn't help. All terminal server licensing is correct and working.
Leaving these users as admins is not a solution for obvious reasons, any ideas?