Hi, We have migrated a windows 2008 32 bit standard server from old domain to the new domain using ADMT.After migrating when we login with a domain user /administrator and run the dir command from the command prompt we get the below error.This happens with any domain user.If we login with the local user of the server it works fine without issues.How can we resolve this? Problem signature: Problem Event Name: APPCRASH Application Name: cmd.exe Application Version: 6.0.6001.18000 Application Timestamp: 47919317 Fault Module Name: cmd.exe Fault Module Version: 6.0.6001.18000 Fault Module Timestamp: 47919317 Exception Code: c0000005 Exception Offset: 00000000000146d6 OS Version: 6.0.6002.2.2.0.272.7 Locale ID: 8279 Additional Information 1: f8b4 Additional Information 2: 6c058c74d0c232ad6d2c5b109bd9574f Additional Information 3: 732e Additional Information 4: 4aeea234682a8a5f6b5f6a63b8a9c014

Please delete the profile of a domain user logon and check it this may be problem from the registry as well. http://www.virmansec.com/blogs/skhairuddin

We tried logging in with a new domain user, still the same issue.It works only with local administrator /user

Hi, Thanks for the post. In this case, we need to use Process Monitor to separately capture the I/O activities when running with the local user and domain user. Step 1: Download Process Monitor ====================== 1. Please download the Process Monitor at http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx 2. Extract the zip file to Desktop. Step 2: Clean Boot ============= Let's disable all startup items and third party services when booting. This method will help us determine if this issue is caused by a loading program or service. Please perform the following steps: ? 1. Click "Start", go to "Run", and type "msconfig" (without the quotation marks) in the open box to start the System Configuration Utility. 2. Click the "Services" tab, check the "Hide All Microsoft Services" box and click "Disable All" (if it is not gray). 3. Click the "Startup" tab, click "Disable All" and click "OK". 4. Click "OK" to restart your computer to Selective Startup environment. 5. When the "System Configuration Utility" window appears, please check the "Don't show this message or launch the System Configuration Utility when Windows starts" box and click OK. 6. Check whether or not the issue still appears in this environment. ? Note: Temporarily disabling the Startup Group only prevents the startup programs from loading at startup. This shouldn't affect the system or other programs. We may still manually run these programs later. Step 3: Collect the Information ===================== 1. Open Procmon.exe (Process Monitor). 2. Reproduce this issue. 3. After that, please click Capture in the tool bar (or directly press Ctrl+E) in Process Monitor. 4. Click Save, in the prompt window, selects “All Events”. 5. Click Browser Button (The button is right to “Path”), in the prompt window, click Desktop, type “test” (without the quotation marks) in the File Name box and press Enter. 6. Find the file, right-click on this file, click "Send To", and click "Compressed (zipped) Folder". For your convenience, I have created a workspace for you. You can upload these two files to the following link. (Please choose "Send Files to Microsoft") Workspace URL: (https://sftasia.one.microsoft.com/choosetransfer.aspx?key=6b90adf4-74aa-424d-9b91-b020239a2bf6) Password: qZ3XlnCX)YRcPxx Note: Due to differences in text formatting with various email clients, the workspace link above may appear to be broken. Please be sure to include all text between '(' and ')' when typing or copying the workspace link into your browser. Thanks, MilesPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Got exactly same problem on freshly installed Win2008 x86 with SP2, all patches provided with Microsoft Update enabled and HP Proliant support tools installed. Local "Administrator" profile works, but all domain profiles crash with same error that you get (App name and Fault module name = cmd.exe). Deleting user profile doesn't help. Using "dir /w" instead of "dir" works. Also various other applications crash, for example Sun Java runtime installer crashes at the end. Hmm.. Now why dir /w works, but regular dir doesn't? Go to control panel and click Regional options. Regardless what you have put in regional setting it's showing "Arabic (Saudi Arabia)" as current format because that's first on pulldown list. However actual regional settings such as date format and currency displayed below are correct and not those used in Saudi Arabia. It's also impossible to change to proper regional format option because Apply stays grayed out and Ok just closes window. Instead change to any other regional format, click apply, then select proper region you want to use and click apply. Now try typing dir in command prompt and it works. Apply same settings to default user profile so any new users logging in will work. As for those that already have profile you need to fix them manually or recreate profiles. Interesting bug. Your post was only one I could find with same symptoms so I guess it's not that common problem. Would be nice to know exactly what causes corruption or regional settings, but at least I know how to fix it now.