Win 11 22H2 local domain join leads to black screen after domain user login

Question

Hi,

I've use the same local AD and group policy's for a few years without problems and with dozens of computers and users, now on windows 11 pc's (10.0 (22621)) this issue appeared.

The pc is removed from the box, turned on updated to the latest available (from microsoft) and them, added to the local domain in a AD on a Windows server 2019 server. This step goes well, and the pc reboots.

This first time I can normally login with a domain user as normal, but after logout or restart the problem appears. Once in this "state" not even the local admin configured during the setup process works.

The only way I can login after this, is with safe mode, and I can see on event viewer some errors like:

"DCOM got error "1804" attempting to start the service **** with arguments "Unavailable"......

And they appear for multiple services.

Any information will be much appreciated.

Answer 1

Hello

Here are a few things you could try:

Safe Mode: Since you mentioned that you can log in with Safe Mode, try disabling startup programs. Press Win + R, type msconfig and press enter. Go to the Services tab, check Hide all Microsoft services, then click Disable all. Restart your computer and see if the problem persists.

System File Checker (SFC): Run the System File Checker tool to repair missing or corrupted system files. To do this, open Command Prompt as an administrator, then type sfc /scannow and press enter.

Event Viewer: Check the Event Viewer for any errors that might give more information about the problem. To open Event Viewer, press Win + X, then select Event Viewer.

Antivirus and Firewall: Temporarily disable any Antivirus program or Windows Firewall you may have.

Domain User Account: Check if the domain user account has the necessary permissions to access these features.

Answer 2

Hi, Did you find any reason why this is happening? I experience the same (but without those DCOM errors); the only way I managed to let the users log into the computer was by creating a WMI filter to not apply the default domain policy to Windows 11 computers in the domain, but I would like to find what's wrong since that policy has important stuff for my domain. All the best!