Winlogon access violation

[Fred W.]

Hello everyone!

I hope this is the correct place to post this. Some of my users have been
complaining of an error with the Windows logon system process. It's
throwing a BSOD with a C000021a error.

DRWTSN32's minidump shows:
eax=00000000 ebx=00000000 ecx=7ffdf000 edx=00000000 esi=00000000 edi=
00000000
eip=0100df06 esp=0006f1d0 ebp=0006f21c iopl=0 nv up ei pl zr na pe
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=
00000246
winlogon!IsRASServiceRunning+0x3f:
0100df06 891a mov dword ptr [edx],ebx ds:0023:00000000
=????????

I'm guessing this is breaking due to a RAS Service issue? I'm just not
sure. Any help would be greatly appreciated as I have searched everywhere
and not really gotten any more information.

Thanks!

 

[Jian-Ping Zhu [MSFT]]

Hello,

Thank you for your post.

Please note the "blue death screen" issue is related to kernel crash. I
suggest you contact Microsoft CSS (CUSTOMER SERVICE AND SUPPORT), which is
the best resource to analyze the memory dump file and locate the root
cause.

To obtain the phone numbers for specific technology request please take a
look at the web site listed below:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS

If you are outside the US please see http://support.microsoft.com for
regional support phone numbers.

Besides, the following is some general information for your reference.

After some research, I find that several operations might cause error code
C000021A on Windows XP.

1. After you install the FTP service or you add the Microsoft Internet
Information Services (IIS) component in Windows XP, you may receive a
"C000021A" error message.

To resolve this issue, you need to install Windows XP service pack 2 which
contains this fix.

For more information, please refer to the following KB article:

Installing Internet Information Services Can Cause Problems in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;EN-US;811412

2. If Microsoft Internet Explorer maintenance policies are being applied,
you may receive a "Stop C000021A" error message on a blue screen on a
Windows XP-based client computer during the logon process.

To resolve this issue, install the latest service pack for Internet
Explorer 6 and install the Latest Windows XP Service Pack.

For more information, please refer to the following KB article:

Internet Explorer Maintenance Policies May Cause an Access Violation in
Winlogon
http://support.microsoft.com/default.aspx?scid=kb;EN-US;318666

Moreover, the following KB article tells you how to troubleshoot a "STOP
0xC000021A" error

How to troubleshoot a "STOP 0xC000021A" error
http://support.microsoft.com/default.aspx?scid=kb;EN-US;156669

I hope this helps. Thanks.

Sincerely,
Neo Zhu,
Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.