I am having an issue here, where users are no more able to logon to a Windows Server 2012 R2 machine running RD services. After successfull logon, they just get a black screen presented. This does also apply to temporarily created local users trying to log on at the console (non AD users), so the RD Services and profiles can be ruled out.
When booting in Safe mode users can login and see the desktop. Also group policies can be ruled out as a culprit, as it works when booting in 'safe mode with networking' (i see the gpo are getting applied).
We also removed sophos antivirus for testing purpose... I am kind of stuck here, the event log doesnt reveal anything useful.
I would like to know at which point of the login process stucks. So how can I debug the logon process or further diagnose this problem? Any help is greatly appreciated...