Win Login impossible

[=?ISO-8859-15?Q?Bj=F6rn_Urbanek?=]

Hello!

I have an mystical problem: I have an Win XP SP2 Workstation.
(Always on). Different users uses this PC for remote or local login.
After an undefined time it isn't possible to log in, after entering the
correct user datas nothing happend. It just appears the
CRTl-ALT-DEL-Screen again. After an reebot it works fine, until the
effect appears again.
The event log doesn't say something interesting about this.

My idea is, that it could depend with an problem with the winlogon.exe -
process?

ANy other ideas what it could be and HOW can i solve it?

Thanks!!

 

[Pegasus \(MVP\)]

Hello!

I have an mystical problem: I have an Win XP SP2 Workstation.
(Always on). Different users uses this PC for remote or local login.
After an undefined time it isn't possible to log in, after entering the
correct user datas nothing happend. It just appears the
CRTl-ALT-DEL-Screen again. After an reebot it works fine, until the effect
appears again.
The event log doesn't say something interesting about this.

My idea is, that it could depend with an problem with the winlogon.exe -
process?

ANy other ideas what it could be and HOW can i solve it?

Thanks!!

The symptoms you describe are usually caused by userinit.exe
rather than winlogon.exe. However, they tend to be permanent,
not transient. In view of the intermittent nature of your problem
I suggest you collect some data by getting the Task Scheduler
to run this batch file once every five minutes:

@echo off
if not exist c:\Logs md c:\Logs
echo %date% %time:~0,5% >> c:\Logs\test.log
set system >> c:\Logs\test.log
cacls %SystemRoot%\system32\userinit.exe >> c:\Logs\Test.log
cacls %SystemRoot%\system32\winlogon.exe >> c:\Logs\Test.log

When the problem occurs next, have a look at the log file and
check if there is any difference.

By the way, is the problem restricted to domain logins or
does it happen on local logins too?

 

[=?ISO-8859-15?Q?Bj=F6rn_Urbanek?=]

The symptoms you describe are usually caused by userinit.exe
rather than winlogon.exe. However, they tend to be permanent,
not transient. In view of the intermittent nature of your problem
I suggest you collect some data by getting the Task Scheduler
to run this batch file once every five minutes:

@echo off
if not exist c:\Logs md c:\Logs
echo %date% %time:~0,5% >> c:\Logs\test.log
set system >> c:\Logs\test.log
cacls %SystemRoot%\system32\userinit.exe >> c:\Logs\Test.log
cacls %SystemRoot%\system32\winlogon.exe >> c:\Logs\Test.log

When the problem occurs next, have a look at the log file and
check if there is any difference.

By the way, is the problem restricted to domain logins or
does it happen on local logins too?

Hello!

Thanks for your answer. I will use the script, hope to find something.
The problem happen on local and domain logins.