Event IDs 1000 and 1004 may be logged in the Application event log, and Windows Server 2003 Terminal Server client connections and logon tries may sometimes fail, when you try to connect to a remote computer (914048)

Important This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry

SYMPTOMS

On a Microsoft Windows Server 2003-based computer, Windows Server 2003 Terminal Server client connections and logon tries may sometimes fail. You may also experience one or more of the following symptoms:

When you try to connect, the logon prompt for the Terminal Server client connection returns to the Remote Desktop Connection dialog box without any error message.
After you provide your credentials, the Log On to Windows dialog box appears again.

Additionally, the following error and information messages may be logged in the Application event log on the server side:Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Description: Faulting application, version 0.0.0.0, faulting module rpcrt4.dll, version 5.2.3790.137, fault address 0x00028989. Event Type: Information
Event Source: Application Error
Event Category: (100)
Event ID: 1004
Description: Reporting queued error: faulting application winlogon.exe, version 0.0.0.0, faulting module rpcrt4.dll, version 5.2.3790.137, fault address 0x00028989Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Description: Faulting application, version 0.0.0.0, faulting module ntdll.dll, version 5.2.3790.49, fault address 0x0000234a

CAUSE

This issue occurs when a font package that is not valid is installed on the Windows Server 2003-based server that is running Terminal Server. When you try to log on, the font package that is not valid causes data structure corruption that finally cannot be handled by the Winlogon service. Therefore, a Terminal Server connection session cannot be established.

WORKAROUND

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.
To work around this issue, rename a registry key so that the Winlogon service does not use these fonts during Terminal Server client connection initialization. To do this, follow these steps:

Click Start, click Run, type regedit, and then click OK.
Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Type 1 Installer\Type 1 Fonts
Rename the Type 1 Fonts registry entry.

Note All Type 1 fonts will be disabled after you rename the Type 1 Fonts registry entry. After the logon process is complete, you can change the entry back to the original name, and the Type 1 fonts will again be available. If you still experience the problem, contact the font manufacturer of the Type 1 fonts to replace this font package.

MORE INFORMATION

For more information about a similar problem, click the following article number to view the article in the Microsoft Knowledge Base: