Tech Problem Aggregator

Event ID 1030 and 40961 at Logon, Slow Logoff

Q: Event ID 1030 and 40961 at Logon, Slow Logoff

I am running a Vista x 64 client with a SBS2003 server. There are now real critical issues, but there are some logon and logoff anomalies.

I consistently receive events 1030 and 40961 at Logon. I will post details in subsequent entries.

Also, Logoff usually takes a very long time (like more than 15 minutes).

A: Event ID 1030 and 40961 at Logon, Slow Logoff

Example event 40961:

The Security System could not establish a secured connection with the server LDAP/sbsserv.Dimond.local/Dimond.local@DIMOND.LOCAL. No authentication protocol was available.

- System

- Provider

[ Name] LsaSrv

- EventID 40961

[ Qualifiers] 32768

Level 3

Task 3

Keywords 0x80000000000000

- TimeCreated

[ SystemTime] 2010-10-27T23:19:24.000Z

EventRecordID 156192

Channel System

Computer IPS-091.Dimond.local

Security


- EventData

LDAP/sbsserv.Dimond.local/Dimond.local@DIMOND.LOCAL
03030980

3 more replies
Answer Match 86.52%

Hi there,
I have dozens of logon/logoff entries in my event viewer
most of which are supposedly done by NT AUTHORITY
or NETWORK SERVICE. Running WINXP HOME SP3 IE8

5/21/2012 1:58:01 PM Security Success Audit Policy Change
858 NT AUTHORITY\SYSTEM PAS Windows Firewall group policy settings have been applied.

5/21/2012 1:57:58 PM Security Success Audit Policy Change
858 NT AUTHORITY\SYSTEM PAS Windows Firewall group policy settings have been applied.

5/21/2012 9:43:51 AM Security Success Audit Privilege Use
576 NT AUTHORITY\NETWORK SERVICE PAS "Special privileges assigned to new logon:
User Name: NETWORK SERVICE
Domain: NT AUTHORITY
Logon ID: (0x0,0x3E4)
Privileges: SeAuditPrivilege
SeAssignPrimaryTokenPrivilege
SeChangeNotifyPrivilege"

5/21/2012 9:43:51 AM Security Success Audit Logon/Logoff
528 NT AUTHORITY\NETWORK SERVICE PAS "Successful Logon:
User Name: NETWORK SERVICE
Domain: NT AUTHORITY
Logon ID: (0x0,0x3E4)
Logon Type: 5
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name:
Logon GUID: -"

5/21/2012 7:17:49 AM Security Success Audit Privilege Use
576 NT AUTHORITY\NETWORK SERVICE PAS "Special privileges assigned to new logon:
User Name: NETWORK SERVICE
Domain: NT AUTHORITY
Logon ID: (0x0,0x3E4)
Privileges: SeAuditPrivilege
SeAssignPrimaryTokenPrivilege
SeChangeNotifyPrivilege"

5/21/2012 7:17:49 AM Security Success Audit Logon/Logoff
528 NT AUTHORITY\NETWORK SERVICE PAS "Successf... Read more

A:Suspicious logon/logoff entries in event viewer

First what alerted you of these "warnings"?

13 more replies
Answer Match 85.68%

Hi there,
I have dozens of logon/logoff entries in my event viewer when I turn on my PC, most of which
are supposedly done by NT AUTHORITY or NETWORK SERVICE.

5/21/2012 1:58:01 PM Security Success Audit Policy Change
858 NT AUTHORITY\SYSTEM PAS Windows Firewall group policy settings have been applied.

5/21/2012 1:57:58 PM Security Success Audit Policy Change
858 NT AUTHORITY\SYSTEM PAS Windows Firewall group policy settings have been applied.

5/21/2012 9:43:51 AM Security Success Audit Privilege Use
576 NT AUTHORITY\NETWORK SERVICE PAS "Special privileges assigned to new logon:
User Name: NETWORK SERVICE
Domain: NT AUTHORITY
Logon ID: (0x0,0x3E4)
Privileges: SeAuditPrivilege
SeAssignPrimaryTokenPrivilege
SeChangeNotifyPrivilege"

5/21/2012 9:43:51 AM Security Success Audit Logon/Logoff
528 NT AUTHORITY\NETWORK SERVICE PAS "Successful Logon:
User Name: NETWORK SERVICE
Domain: NT AUTHORITY
Logon ID: (0x0,0x3E4)
Logon Type: 5
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name:
Logon GUID: -"

5/21/2012 7:17:49 AM Security Success Audit Privilege Use
576 NT AUTHORITY\NETWORK SERVICE PAS "Special privileges assigned to new logon:
User Name: NETWORK SERVICE
Domain: NT AUTHORITY
Logon ID: (0x0,0x3E4)
Privileges: SeAuditPrivilege
SeAssignPrimaryTokenPrivilege
SeChangeNotifyPrivilege"

5/21/2012 7:17:49 AM Security Success Audit Logon/Logoff
528 NT AUTHORITY\NETWORK SERVICE PAS "Successful Logon:
User Name: NETWOR... Read more

A:Solved: Suspicious logon/logoff entries in event viewer

14 more replies
Answer Match 85.68%

Hi there,
I have dozens of logon/logoff entries in my event viewer when I turn on my PC, most of which are supposedly done by NT AUTHORITY or NETWORK SERVICE. What's also weird is that I get some failed logon attempts as well. This happens every time. I should say that I do suspect someone on the same network (I am one of two clients hooked up to a router+modem that connects to the internet) of malicious activity. But I don't know if this is related. I have turned on logon/logoff auditing. The following is what I see upon waking up my PC from standby. You can see my actual logon occurring a few seconds after all the 'network services' have logged on.

4/12/2008 11:38:20 PM Security Success Audit Logon/Logoff 538 YOUR-699C5579F9\Laura YOUR-699C5579F9 "User Logoff:
User Name: Laura
Domain: YOUR-699C5579F9
Logon ID: (0x0,0x56CA957)
Logon Type: 7
"
4/12/2008 11:38:20 PM Security Success Audit Privilege Use 576 YOUR-699C5579F9\Laura YOUR-699C5579F9 "Special privileges assigned to new logon:
User Name:
Domain:
Logon ID: (0x0,0x56CA957)
Privileges: SeChangeNotifyPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege"
4/12/2008 11:38:20 PM Security Success Audit Logon/Logoff 528 YOUR-699C5579F9\Laura YOUR-699C5579F9 "Successful Logon:
User Name: Laura
Domain: YOUR-699C5579F9
Logon ID: (0x0,0x56CA957)
Logon Type: 7
Logon Process: User32
Authentication Package: Negotiate
Workstation Name: YOUR-699C5579F9
Logon GUID: {00000000-... Read more

A:Solved: Suspicious logon/logoff entries in event viewer

12 more replies
Answer Match 81.9%

I've been having a problem for awhile now and I'm officially asking for help.

My concern right now is over an Event Viewer Error that I am currently receiving:

Source: LSASRV
Category: SPNEGO (Negotiator)
EventID: 40961

The Security System could not establish a secured connection with the server DNS/dns1.ctnt.com.cn. No authentication protocol was available.

I've checked my TCP/IP connections; their pointed to the correct servers. I've checked the HOSTS and LMHOSTS file; their fine. I've searched the registry and the name is not there (if it's there as an IP, I cannot say). I've googled the DNS (and parts thereof), no hits. I've even tried to IPCONFIG the address and it comes back nil. I can account for everything that is in my HiJackthis Log (see below) that is not SAFE (I do not discount that I may not know that something has malware attached to something there, however).

Another concern, which may very well be unrelated, is that my Symatec Utilities no longer work. I uninstalled Symantec Antivirus from Systemworks Premiere 2006 after it caused a host of problems earlier this year and, surprise!, they no longer support their software (I know I'm a little late coming to this conclusion, but it always worked well for ME in the past; now using McAfee Antivirus). Every time I attempt to run a program, the hourglass turns for a second and then disappears; if you watch it in the Task Manager, it blinks quickly (fast enough to know... Read more

A:DNS Hijack Attempt? Event 40961

7 more replies
Answer Match 77.7%

high i am currently on my laptop which has build 7077 32bit installed on it and whenever i logon, off, or lock it, it takes like 1 min or 2 just to do that each time. in older builds it was alot faster if not almost instant. why is it doing this. amd dual core sempron processor, 2gb of ram, nvidia geforce go 6150. idk what else to tell you its jsut alot slower when it comes to loging out and in along with locking it

A:slow logon and logoff and lock speeds

Was this a clean install or an upgrade?

9 more replies
Answer Match 69.72%

Hi, I hope someone out there can shed a little light on this situation as it's doing my nut in!

We have a network with 3 Windows 2003 servers and workstations all with XP. When the users log in a script runs which maps network drives and pushes printer connections etc. Also we have several group policies set which restrict pupils and staff in certain ways. Nothing drastic though. Just 'Cant see certain Control Pannel Items etc'.

Now all was working perfectly until a couple of weeks ago 2 staff members came to me and said "I can't get on the interenet or e-mail". I had a look and when they logged in on their normal computer it seemed to log in fine but then receieved a couple of "Cannot perform this action due to restrictions on effect on this computer" messages. This message also appears when they try to click on the Internet for example. On closer inspection it has run the scripts ok because I have the shared drives and printers. But the virus scanner which is sophos in our case hasn't loaded (it comes down from the server), also there is no All Programs in the start menu, or shut down.

If I log off and check the event viewer I have event 1030 there which refers to an error with group policy.

Now the most annoying problem is it appears completly random with it's timing. Usually a shut down and restart of the computer fixes it. Moving to another computer can also fix it. It dosent always do it on the same computers, other peolpe can log on to ... Read more

More replies
Answer Match 69.72%

Hi, I hope someone out there can shed a little light on this situation as it's doing my nut in!

We have a network with 3 Windows 2003 servers and workstations all with XP. When the users log in a script runs which maps network drives and pushes printer connections etc. Also we have several group policies set which restrict pupils and staff in certain ways. Nothing drastic though. Just 'Cant see certain Control Pannel Items etc'.

Now all was working perfectly until a couple of weeks ago 2 staff members came to me and said "I can't get on the interenet or e-mail". I had a look and when they logged in on their normal computer it seemed to log in fine but then receieved a couple of "Cannot perform this action due to restrictions on effect on this computer" messages. This message also appears when they try to click on the Internet for example. On closer inspection it has run the scripts ok because I have the shared drives and printers. But the virus scanner which is sophos in our case hasn't loaded (it comes down from the server), also there is no All Programs in the start menu, or shut down.

If I log off and check the event viewer I have event 1030 there which refers to an error with group policy.

Now the most annoying problem is it appears completly random with it's timing. Usually a shut down and restart of the computer fixes it. Moving to another computer can also fix it. It dosent always do it on the same computers, other... Read more

More replies
Answer Match 69.3%

I'm running Windows XP sp 2, latest updates. It takes about 3-5 minutes to log on. I've checked for virus and spyware and my system looks clean. The long logon time isn't new. I've been having this issue for several months and I've just got around to investigating it.

I checked the event log and I noticed the following errors.

Event Type: Error
Event Source: NetBT
Event Category: None
Event ID: 4311
Date: 8/26/2006
Time: 1:34:29 PM
User: N/A
Computer: D5Z2N211
Description:
Initialization failed because the driver device could not be created.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 58 00 ......X.
0008: 00 00 00 00 d7 10 00 c0 ....?..?
0010: 13 01 00 00 34 00 00 c0 ....4..?
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 8/26/2006
Time: 1:35:39 PM
User: N/A
Computer: D5Z2N211
Description:
The Trend Micro Proxy Service service depends on the Trend Micro TDI Driver service which failed to start because of the following error:
A device attached to the system is not functioning.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 8/26/2006
Time: 1:36:10 PM
User: N/A
Computer: D5Z2N211
Description:
The following boot-start or system-start driver(s) failed t... Read more

A:Slow logon - errors in event log

Do any of these seem to apply

netbt:
unused network adapter
remote access service (go to my pc, pc anywhere)

the tmtdi is also trend micro. the netbt has some association with the trend micro, not much though. perhaps a re-install of trendmicro would be a fix or check the settings closely for a component that is disabled but it's service is still set to start, perhaps an incorrect path to an executable in msconfig or services.msc

4 more replies
Answer Match 68.88%

These event just started appearing a day or two ago, but they continue to repeat every 5 minutes:

Event 1030:
Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event 1058:
Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=bbpi-pdc,DC=billsblue,DC=com. The file must be present at the location <\\bbpi-pdc.billsblue.com\sysvol\bbpi-pdc.billsblue.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. (Windows cannot find the network path. Verify that the network path is correct and the destination computer is not busy or turned off. If Windows still cannot find the network path, contact your network administrator. ). Group Policy processing aborted.
They occur exactly every five minutes, and always in this order. I searched for the gpt.ini file it's looking for and found it.

I don't really have any group policies in place, just basic users and computers. Nothing fancy. And I'm afraid I don't quite understand AD enough to just 'experiment' until I make these error go away.

Any ideas and/or guidance would be welcome.... thanks
 

A:Event 1030 & 1058, repeating. Guidance?

One possibility:
As per Microsoft: "This behavior may occur if the following conditions are true: your Windows XP-based computer is a member of a domain, and the Microsoft Distributed File System (DFS) client is turned off (disabled). To resolve this issue, turn on (enable) the DFS client". See M314494 to find out how to do this. Also check M810907 for a hotfix.

Other possibilities:
http://www.eventid.net/display.asp?eventid=1030&eventno=1542&source=Userenv&phase=1
 

3 more replies
Answer Match 68.46%

Dear All,
I am at work and I am now having serious problem with my computer. I can't log on to my computer running WinXP Pro sp2 in IBM Thinkpad T41. When turned on, the computer boot up smoothly to Welcome screen awaiting for password. After enter the password and hit enter. It shows "Loading your personal settings" which is normal.

Yet, 0.1 second after sucessfully logon, I got kicked back to the login screen. It seems the computer logoff my account automatically showing "Saving your account settings" and then it is waiting for password.

This repeats every time I try to logon, always got kicked back to welcome screen after 0.1 second.

I tried to logon as computer administrator too but no hope...

Then I tried to open up a safe mode by pressing F8. Well, Safemode exhibits in the same way as normal mode.

I also tried the command prompt option. The wried thing is I got the Welcome Screen instead of command prompt.

Basically, all options in the F8 menu lead me to that evil Welcome Screen and autmatically log me off after logon.

I absolutely have no control over my computer now. T__T I believe it's some sort of virus that's tricking me but I don't know its name. Would someone help me?

Thanks in advance
Joe

A:Logon Problem, Looping Logon/Logoff

I have the same problem now with my Windows 2000 Pro on a Compaq Armada M700. Did anyone ever help you? What was the solution?!

6 more replies
Answer Match 68.46%

Hi!!

I get an error message on 2 machines in my domain.

domain: 3 windows 2003 servers.
1 server: DC
2/3 servers: on this I get the error. the both servers are set as member servers.
how I can fix the error on the both machines?

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 22.09.2003
Time: 10:13:48
User: GICIOLAND\gicio
Computer: JAMESBROWN
Description:
Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

regards,
gicio
 

More replies
Answer Match 67.62%

Hi,

Application event viewer notification keep showing this error. Kindly advise.

Event ID: 1030
Source : Userenv
User NT Authority\System
Decription: Windows cannot query for the list of group policy object. Check the event log for possible messages previously logged by the policy engine tha tdescribes the reason fo this

Event ID: 1030
Source : Userenv
User NT Authority\System
Description: Windows cannot access the file gpt.ini for GPO CN=(31B2F340-016D-11D2-945f-00c04FB84F9,CN=Policies,CN=System,DC=mscmsia,DC=com. hte file must be present at the location <\\mscmsia.com\sysvol\mscmsia.com\Policies\{31BF340-016D2-945F-00C04FB984F9}\gpt.ini>.(Access is denied). Grpoup Policy processing aborted.


Thank you.
 

More replies
Answer Match 66.36%

Hi guys! hoping for some pointing in the right direction here with an intermittent issue.

I use a Dell XPS17 with W7 Ultimate for work (which entails visiting various clients and login on to their networks via mapped drives (don't know if that is relevant to issue)).

Anyhow, some days on starting up the laptop, after I login to my profile, it hangs with a black screen for times between five and fifteen minutes or until I force a hard shut down (other days it starts up fine albeit slower than I would like!).

The days that this happens the Event viewer Administrative Events will show maybe 5,000 lines of
Event ID 7001 "The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start"
Log Name: System, Source: Service Control Manager.

Likes its continually attempting this same task until it gets a result or gives up..

Searches I have done regarding this issue return so many results (unrelated to my circumstances) I am struggling to see were to go to try and resolve it.

I appreciate this is a brief description of the issue but as I don't know what it is I don't know what is relevant to tell you..

My IT knowledge is pretty basic.

Thanks in advance for any assistance.

A:Event ID 7001 Service Control Manager causing slow logon

Hello and welcome Mugel mate I don't know if this will help but worth a try
Event ID 7001 ? Service Start Operations

9 more replies
Answer Match 63.42%

I have Laptop running windows Xp Home Edition. The problem with the system is that, when I logon, it goes through the logging on propcess, opens up and automatically swings into logging off again.

Did scanning but the problem is still persisting.

Any idea how to resolve this situation.

sprautzpng

A:Logon Logoff

It?s the result of a Virus or a Trojan which corrupts the registry key holding the value of the files which are executed while logging in to windows. The other possibility is, the registry key getting replaced with some incorrect value.

the following instruction may help you to fix this problem.

1. You need to connect the infected computer to a network. Make sure that there is one computer in the network which doesn?t suffer from this problem. Now, switch on both of the computers, i.e. the infected and the working computer.

2. From the working computer, Go to Start> Run, type regedit.exe and hit enter. This will launch the registry editor.

3. Go to File> Connect Network Registry, by using this infected computer?s name or IP address.

4. Locate the following entry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\

5. In this entry there is a key named userinit, double click on the key and set its value to ?C:\WINDOWS\System32\userinit.exe,?
If the problem still persists then you need to run a repair setup. Check out for detailed instructions on running a repair setup over here: http://www.microsoft.com/windowsxp/u...ps/doug92.mspx

4 more replies
Answer Match 63.42%

XPsp3
 
When I log off, I want to automatically go back to the desktop without a login dialog or a welcome screen.
 
I know how to change from one to the other, but can both be eliminated?
 
thx

More replies
Answer Match 62.58%

I have several XP Pro workstations connected to a 2003 Server. After the workstations are up for 10+ hours the workstations flood the network to the 2003 Server with Logon/Logoff credentials. This flood lasts for several minutes.

This process is impacting the performance of the Network and the Workstations. Can someone give me a clue about why this occurs?

System Info
40 XP Pro Patched up to SP2
The XP Pro Workstations has a Mapped Drive to a 2003 Server
The 2003 Server is fully updated

BAtchison
 

A:XP Pro Multiple Logon/Logoff

I have the same situation. Has anyone found what is causing it?

Jim


batchison said:

I have several XP Pro workstations connected to a 2003 Server. After the workstations are up for 10+ hours the workstations flood the network to the 2003 Server with Logon/Logoff credentials. This flood lasts for several minutes.

This process is impacting the performance of the Network and the Workstations. Can someone give me a clue about why this occurs?

System Info
40 XP Pro Patched up to SP2
The XP Pro Workstations has a Mapped Drive to a 2003 Server
The 2003 Server is fully updated

BAtchisonClick to expand...
 

3 more replies
Answer Match 62.58%

Edit: Removed content since I could not get a response to a relatively simple question which I found the answer to on my own.

Bet if I make an ignorant comment that the only thing you people appear to know is:

Download and run HijackThis
Download and run SpyBot Search & Destroy
Download and run AdAware

And if the question can not be solved with any of the above patented replies.
Ya'll don' know jackshyte!

.....Willy
 

A:Remote Logon/Logoff?

No joy
 

2 more replies
Answer Match 62.58%

ok hear i am again computer will not let me in logon goes to screensaver then goes back to login page stuck in loop have tried safe mode same thing have tried reloading xp same thing please could somebody help even if I could unlock so that I can network all the files off the pc onto my laptop then reformat drive.
tried going in as administrator still does not work
 

A:logon - logoff loop

I have had this before.

The only way I could solve it was by putting the hard disk of the machine in to another PC as a slave, then editting the registry using regedt32 and replacing the line mention userinit.

however have a look here for a number of possible solutions:

http://www.kellys-korner-xp.com/xp_wel_screen.htm
 

1 more replies
Answer Match 62.58%

I am working on a computer for a friend and I am lost. The problem is this: the computer seems to boot up fine, but takes a while to load and then finally shows the logon screen, but when I click on the user account, it says loading user settings and then as fast as it shows that, it says saving user settings and logs off, preventing me from logging on. I figure it is something with my friend's account, and go to advanced boot up and try to log on in safe mode under administrator and get the same thing. My friend has a lot of stuff on this computer and would like to save it if at all possible. How can I get into any account or repair it?

Thanks, Adam
 

A:Endless logon/logoff in XP

8 more replies
Answer Match 62.58%

Calling all experts:

I'm stuck in a logon/logoff loop in WinXP. After researching the forums, I followed the advice given on Lavasoft's Knowledge Base Article 04060901 (http://www.lavasofthelp.com/articles/v6/04/06/0901.html) but to no avail. Then I tried the advice given on Microsoft KB Article 310396(http://support.microsoft.com/kb/310396/) but now upon re-boot I get the following BSOD message:
"STOP: C0000269 {illegal system dll relocation} The system DLL Kernel32.dll was relocated in memory. The application will not run properly. The relocation ocurred because the DLL C:\WINDOWS\system32\GDI32.dll occupied an address range reserved for windows system dlls. The vendor supplying the dll sho%s%"

Curiously, I had not run Ad-Aware for 5 or so days when I got stuck in the loop but did use the computer in those 5 days. Any help would be greatly appreciated. Thanks in advance.

Sindrive
 

A:Logon Logoff Loop in XP

6 more replies
Answer Match 62.58%

Hello,

IBM T42 Windows XP Pro SP3

Presently I'm experiencing a lack of sound alert when the unlock computer password window is displayed while in screen saver mode.

I have the Screen Saver set to resume on password.

However with my other IBM T41 laptop typically I will first hear the Logoff sound when the unlock computer window is displayed then after I Logon with the password the Logon sound will play.

I have tested the Logon/Logoff sounds with the Sound and audio devices in the control panel but all seems to be in order. I have also installed the latest Audio drivers from Lenovo.com

I wonder if a Registry key could disable these sounds??

I have all the MS updates installed.


Thanks in advance.

A:No Logon/Logoff sound

Open the T41 and check the sound settings, and make sure all the Windows Sounds are the same on the T42. One of them is off.

3 more replies
Answer Match 62.58%

meodem usb always logoff after i loggon it
usb alcatel x200
its always got off after i get it in !
the driver gone after it installed and re installed by it self and re off !!!
stick with this ,
win7 ultimate

A:modem usb always logoff after i logon it

any help ppl .,? i have no net now in my pc !!

2 more replies
Answer Match 62.58%

I am having problems logging into my WindowsXP Home Edition computer. I think the problem happened after Adaware found and removed BlazeFind. I did the following as was mentioned elsewhere on this site:

Here is the solution to the logon - logoff issue in Windows XP.

Enter the Recovery Console

Boot the system using the Windows XP CD-ROM. In the first screen when the Setup begins, read the instructions press "R" (in the first screen) enter the Recovery Console. Type-in the built-in Administrator password to enter the Console. You'll see the prompt reading C:\Windows (Or any other drive-letter where you've installed XP)

Type the following command and press Enter.

CD SYSTEM32
(If that does not work, try CHDIR SYSTEM32)

COPY USERINIT.EXE WSAUPDATER.EXE

Quit Recovery Console by typing EXIT and restart Windows.

You'll be able to login successfully as you've created the wsaupdater.exe file (now, a copy of userinit.exe)

Now, change the USERINIT value in the registry. Click Start, Run and type REGEDIT. Navigate to:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon]

In the right-pane, change the value of Userinit to "C:\WINDOWS\system32\userinit.exe,"

Type the above value exactly as given, including the comma - exclude the quotes. Also, change the path to userinit.exe appropriately, if Windows is installed in a different drive.


After doing this successfully, and then restarting the computer again, I was no l... Read more

More replies
Answer Match 62.58%

I am trying to boot up a PC that allows me to log on and then I get a brief(1 sec) desktop background and then goes straight to logoff. It's running XP Prof and I went to recovery console and did a chkdsk /r and it said it fixed 1 or more errors. I ran it again and it was clean. It still won't work even in safe mode. How can I fix this?
Thanks
 

A:Logon and then immediate logoff cycle ??

Hello Geno. Please use the instructions suggested in this thread and see if they help or not.

Let us know the results though. Good Luck.

-- Goku
 

1 more replies
Answer Match 62.58%

Hi there,


I am requesting help with the logon-logoff problem when starting up windows XP.

These are some things that I tried

-Recovery console chkdsk (no problems found)

-Access registry (cannot login in ANY mode)

-copy userinit.exe wsaupdater.exe (file not found)

-cd system32\config
ren software software.old
copy C:\windows\repair\software (does not work)

-repair with windows boot cd (does not work)

-deleted all virus related files through recovery console (done)

Here is my theory of what happened:

Kaspersky found a virus embedded in userinit.exe and most likely deleted the file causing failure to logon to windows correctly. Repairing with windows cd does not work either. Is there any way to access avpdos from recovery console? (Theory is to restore file)

Thanks

A:Logon Logoff Loop

bump!

9 more replies
Answer Match 62.58%

I now have my own logon/logoff screen backgrounds, which is very pleasing. However it occurs to me to wonder whether it is possible to have different backgrounds for logon and logoff?

A:Different logon / logoff screens

Hello and welcome Toby mate first I have got to ask if the backgrounds are fine now why do you need to know how to change those screens presuming that you set them up in the first place??

I have to say too that having a logon screen would be ok for the length of time that the logoff takes is it really worth the hassle of setting it up?? Or do you have an extremely long logoff tiem??

2 more replies
Answer Match 62.58%

I now have my own logon/logoff screen backgrounds, which is very pleasing. However it occurs to me to wonder whether it is possible to have different backgrounds for logon and logoff?

A:Different logon / logoff screens

Hello and welcome Toby mate first I have got to ask if the backgrounds are fine now why do you need to know how to change those screens presuming that you set them up in the first place??

I have to say too that having a logon screen would be ok for the length of time that the logoff takes is it really worth the hassle of setting it up?? Or do you have an extremely long logoff tiem??

5 more replies
Answer Match 62.58%

I have an older Gateway which is running XP Prof. Yesterday, when I turned it on, I logged on and it started loading my settings and then it automatically started a logoff process and completed. I booted in safe mode and it did the same thing...I've tried it many times with the same result...What can I do to fix? Thanks for any help

A:Immediate logoff after logon question

Insert the Windows XP CD into the CD drive, and then restart the computer. Click to select any options that are required to start the computer from the CD drive if you are prompted. When the "Welcome to Setup" screen appears, press R to start the Recovery Console. If you have a dual-boot or multiple-boot computer, select the installation that you must access from the Recovery Console. When you are prompted, type the Administrator password. If the administrator password is blank, just press ENTER.Type: chkdsk /rIt's important to have a space before the "/".To exit the Recovery Console and restart the computer, type exit at the command prompt, and then press ENTER.

11 more replies
Answer Match 62.58%

I have several XP Pro workstations connected to a 2003 Server. After the workstations are up for 10+ hours the workstations flood the network to the 2003 Server with Logon/Logoff credentials. This flood lasts for several minutes.

This process is impacting the performance of the Network and the Workstations. Can someone give me a clue about why this occurs?

System Info
40 XP Pro Patched up to SP2
The XP Pro Workstations has a Mapped Drive to a 2003 Server
The 2003 Server is fully updated
 

More replies
Answer Match 62.58%

I used to work as a computer technician and even I am stumped at this. I custom built my own computer and installed windows xp home sp 2 and right from the beginning. What happens is from time to time after either me or my husband logoff on our accounts or just swith users, and then later on go back to logon, we will type in our password and it will say loading, and then bounce back to the users again not allowing us into our profile so I end up having to restart the computer everytime.
I even tried logging off all accounts if they were not already "box" that says windows is locked only an admin can unlock the computer and then you type in your user name and password, and it comes up saying system cannot log you on due not enough system... and darn it I can't remember what it said! But thats the jist of it. After it says that I have to restart but it takes FOREVER for it to restart, so impatient me always just hits the restart key on the computer. I have even formated and reinstalled windows and did that about 2 months ago but same thing every time. I am leaning towards hardware issue but I am not certain.
Help please!!! I am trying to run a business from home and I NEED to get this fixed ASAP!

More replies
Answer Match 62.58%

Hopefully I can find some help here.

I have XP SP2 and have two users on it. Both have Admin Rights if that makes a difference . When I do a log off to log back in as the other user, the password field does not contain the blinking cursor bar so that I am able to type the password. Even clicking on it, doesn't change anything.

I can shut the computer off using the quicklink in the left corner. But that is it. On the reboot, everything is fine until I try to log off/on as the other user.

Is there a patch that is missing?

More replies
Answer Match 62.58%

Hello, I am trying to change the logon / off options on windows XP pro, for fast user switching and the windows welcome screen. BUT the message i get is :
Client services for netware has disabled the welcome screen and fast user switching. To restore these features , you must uninstall client services for netware.

Please how do i do this ?
Thanks.

A:Set Logon and Logoff Options

Hi, this link may help http://support.microsoft.com/kb/315347 and how to uninstall http://forums.novell.com/novell-product-su...xp-machine.html

2 more replies
Answer Match 62.58%

I used to work as a computer technician and even I am stumped at this. I custom built my own computer and installed windows xp home sp 2 and right from the beginning. What happens is from time to time after either me or my husband logoff on our accounts or just swith users, and then later on go back to logon, we will type in our password and it will say loading, and then bounce back to the users again not allowing us into our profile so I end up having to restart the computer everytime.
I even tried logging off all accounts if they were not already "box" that says windows is locked only an admin can unlock the computer and then you type in your user name and password, and it comes up saying system cannot log you on due not enough system... and darn it I can't remember what it said! But thats the jist of it. After it says that I have to restart but it takes FOREVER for it to restart, so impatient me always just hits the restart key on the computer. I have even formated and reinstalled windows and did that about 2 months ago but same thing every time. I am leaning towards hardware issue but I am not certain.
Help please!!! I am trying to run a business from home and I NEED to get this fixed ASAP!
 

A:logon/logoff issues

7 more replies
Answer Match 62.58%

I am using Windows XP Professional with SP 3. When I logoff the PC, I get an automatic
logon. I must disconnect the power source plug so that the PC does not log back on. Can anyone help me resolve the problem.

This is relatively new problem.

A:logoff and logon loop

Sounds like a registry issue. My problem is the opposite: after I log in I'm immediately logged off. I booted with ERD Commander 2005 to have a look at my registry and saw in HKLM~Software~Microsoft~Windows NT~Winlogon some spurious entries I had to fix which pointed to my temp directory.

1 more replies
Answer Match 62.58%

Have XP Home desktop. It got Antivirus 2008. Removed it. Then installed Norton Antivirus 2009 and ran scan, (it showed many instances of W32.Virut!gen) hit fix. Everything seemed fine. When I did my next logon the system would apply user settings, then immediately logoff. I tried many things - checked that "Userinit"=c:\windows\system32\userinit.exe,

Tried the Microsoft fix of renaming security, software, sam, etc and copying over.

Tried to repair from XP install disk repair console.

Tried to reinstall over XP -- it hangs at 35 minutes after trying to do a reboot on system/volume/... and having "volume/..." reject the reboot.

(and I have tried about 20 different things to get past this, including removing nearly all hardware, renaming volume.inf to volume.bak, etc.)

No success. I have decided to bite the bullet and do a clean XP install on the desktop.

Before I could tackle that, my son pointed out that our XP media center laptop now has the same problem. The laptop is running under one user account but when anyone tries to logon under a different user account, it does the logon/logoff. I expect I will start getting the same logon/logoff problems when I do my next restart.

The laptop has Norton 360 on it. Prior to the laptop having problems I ran live update and then (as part of my efforts to diagnose the desktop) connected my desktop's HD via an external USB drive box. It showed two instances of W32.Virut!gen. I hit "Fix." I assume ... Read more

A:XP Logon - logoff - not userinit.exe?

I just checked the Norton 360 log on the desktop. It found two instances of W32.Virut!gen on my desktop's HD -- one in

i386\orun32.exe and the other in

windows\installer\.......(lots of hex)\newshortcut1_...(lots more hex).exe


wrorke said:


Have XP Home desktop. It got Antivirus 2008. Removed it. Then installed Norton Antivirus 2009 and ran scan, (it showed many instances of W32.Virut!gen) hit fix. Everything seemed fine. When I did my next logon the system would apply user settings, then immediately logoff. I tried many things - checked that "Userinit"=c:\windows\system32\userinit.exe,

Tried the Microsoft fix of renaming security, software, sam, etc and copying over.

Tried to repair from XP install disk repair console.

Tried to reinstall over XP -- it hangs at 35 minutes after trying to do a reboot on system/volume/... and having "volume/..." reject the reboot.

(and I have tried about 20 different things to get past this, including removing nearly all hardware, renaming volume.inf to volume.bak, etc.)

No success. I have decided to bite the bullet and do a clean XP install on the desktop.

Before I could tackle that, my son pointed out that our XP media center laptop now has the same problem. The laptop is running under one user account but when anyone tries to logon under a different user account, it does the logon/logoff. I expect I will start getting the same logon/logoff problems when I do my next restart.

The laptop has Norton... Read more

1 more replies
Answer Match 62.58%

Okay, I have Windows XP Home Edition. I keep getting the logon-logoff runaround. I tried booting in Safe Mode, same thing happens. I CANNOT get past the blue "welcome" login screen. In addition, I cannot boot from my XP disc...it won't read. Most of my research online has suggested downloading software, getting to the 'START' menu, etc. But I CANNOT GET PAST THE BLUE WELCOME LOGIN SCREEN. Any ideas????

More replies
Answer Match 62.58%

I am using an older Gateway(bios2002) running XP Prof. and when I boot up and login, I get my background pic for about 1 second and then it automatically logs off. I also tried it in safe mode and it does the same thing.

I ran a rc.iso and did a chkdsk /r and it fixes 1 or more errors, but it still does the same thing...I would appreciate some assistance..Thank you

A:Immediate logoff after logon question

http://www.bleepingcomputer.com/forums/t/195560/immediate-logoff-after-logon-question/mod please close/del this thread

1 more replies
Answer Match 62.58%

Here is my story (sort of long...sorry):

I have an issue with my home PC (Sony desktop, Win XP, about 8 years old). I installed some software that I now believe to be a virus. My computer started running slow right after I did it, and instead of running Spybot, AdAware, etc. right away, I rebooted. Well, right after that I received the following error:

Windows could not start because the following file is missing or corrupt:
windows\system32\ntoskrnl.exe
Please re-install a copy of the above file.

I then used the Win XP CD and recovery console to restore the "ntoskrnl" file. I also ran checkdisk, and no errors came up. I then rebooted, got to the logon screen (which by the way never used to come up) with my name listed. I don't have a password, so I clicked yes, my background picture pops up (but no icons). Now, as soon as that happens, it immediately says logging off, savings personal settings, etc. and goes back to the logon screen. (Note: I get this logon-logoff loop even if I try to logon in safe mode.)

My next step was to use the Win XP CD and repair windows. I reloaded Win XP on top of the original load and rebooted, but the same logon-logoff issue is there.

Also, a side issue is that I don't have a complete backup of my files, pictures, etc. so reformatting is out.

Help??

A:Logon/logoff Loop

There are several suggestions in Ntoskrnl.exe is missing or corrupt.You may be able to use a Windows XP bootable Floppy Disk to boot from a diskette instead of your hard drive. If your hard drive's boot sector or Windows' basic boot files have been corrupted, this disk will circumvent the problem and boot you into Windows. If you don't have an emergency boot floppy, you may be able to use one created on another PC running Windows XP but there's no guarantee that it will boot your machine.How to obtain Windows XP Setup boot disks from Microsoft. The Setup boot disks are available so that you can run the Setup program on computers that cannot use a bootable CD-ROM.If the emergency boot floppy does not work, try doing a "Repair Install with Recovery Console". The Recovery Console is a Windows utility that provides a DOS-like command line from which you can run some repair programs. If you have a Microsoft Windows CD-ROM, you can get to the Recovery Console by booting from that CD and pressing any key when you told to 'Press any key to boot from CD'. At the 'Welcome to Setup' screen, press r for Repair.

1 more replies
Answer Match 62.58%

We are getting dozens of these Alerts generated at our Exchange Server. What is causing it and more importantly, what procedural steps do we take to prevent the alerts from generating.

------------------------------------------------------------------------------------------------------------------------------
Details:

Windows Event Alert was recorded

Time: Date Time
Windows Event Time: Date Time
Windows Event Log: Security
Windows Event Source: Microsoft-Windows-Security-Auditing
Windows Event ID: 4625
Windows Event Severity: Failure Audit
Windows Event Message: An account failed to log on.

Subject:
Security ID: S-1-5-18
Account Name: [[EXCHANGE_SERVER$]]
Account Domain: [[DOMAIN]]
Logon ID: 0x3e7

Logon Type: 8

Account For Which Logon Failed:
Security ID: S-1-0-0
Account Name: [[Username]]
Account Domain: [[DOMAIN]]

Failure Information:
Failure Reason: Unknown user name or bad password.
Status: 0xc000006d
Sub Status: 0xc000006a

Process Information:
Caller Process ID: 0xd5c
Caller Process Name: C:\Windows\System32\inetsrv\w3wp.exe

Network Information:
Workstation Name: [[EXCHANGE_SERVER]]
Source Network Address: [[IP_ADDRESS]]
Source Port: Port

Detailed Authentication Information:
Logon Process: Advapi
Authentication Package: Negotiate
... Read more

A:Failed Logon Events [Event ID 4625; Logon Type 8; Procss Name: w3wp; Process: Advapi]

Account For Which Logon Failed:
Security ID: S-1-0-0
Account Name: [[Username]]
Account Domain: [[DOMAIN]]

Failure Information:
Failure Reason: Unknown user name or bad password.
Status: 0xc000006d
Sub Status: 0xc000006a

Process Information:
Caller Process ID: 0xd5c
Caller Process Name: C:\Windows\System32\inetsrv\w3wp.exe

Network Information:
Workstation Name: [[EXCHANGE_SERVER]]
Source Network Address: [[IP_ADDRESS]]
Source Port: PortClick to expand...

I would start there. Where is the source of the attempt? Inside or outside? If inside, it should be easy to determine who the source is (assuming that this is an internal server). If outside, you may have someone trying to hack an account.
 

3 more replies
Answer Match 62.16%

OK. Here I go again. I am having a problem with logging off and switching off of user accounts. I have two user acccounts in my computer and am running Windows XP Home Edition. Both of the user accounts are admin accounts and one of them is passowrd-protected and the other one is not. I usually use the account that is not password-protected and my bro uses the one that is. The problem starts when he or I switch/logoff to his account. It takes hell lot of time to just come up. And then when hes done working on his stuff or whatever hes gotta do and tries to switch back, a popup comes up and says there is a DSL connection would like to close it and we always click yes. And after that the screen goes blank and thats it. The PC stops responding to anything at all even if I wait a long time for it to come around. I am then just stuck there untill I keep the power button on the processor pressed down for a while to shut it down. The restarting keys (Ctrl + Alt + Del) won't work. The PCs is pretty fast (1.99 GHz with 256 MB of RAM) but it works VERY slow once I have restarted after it got stuck. Even though I've got DSL the pages come up just like I'm using a 28.8 kbps modem connection. I've no idea whats causing this since there aren't many programs in the startup to cause the computer to be slow. I have a lot of songs on my PC and might that be causing the slowness....? Not sure though since they are just taking up space not the memory. I don't really... Read more

A:XP User Logon Logoff Problems

6 more replies
Answer Match 62.16%

Hi All

I am stuck in a login/logon loop in my Fujitsu laptop w/ Win XP Pro, SP2. As soon as I login it goes thru the process and immediately logs me off. This happens in both my account and admin mode. I ran various spyware and virus apps to clean out the PC. A Squared did find a "trojan" run.exe in the Windows/Temp folder called run.exe. It apparently is a trojan.win32.agent.if, so I quarantined it.

System restore does not work either so I posted that to the AumHa system restore forum.

I did search quite a few posts here but I am hoping somebody can give me a solution. If not it looks like a reinstall of XP Pro...

Any help would be greatly appreciated.

Gary

A:Win Xp Pro Logon/logoff Loop Problem

I want to make sure I'm interpreting correctly.

You are on the Welcome screen of Windows. You log in to your user account, and as soon as you are logged in you are then automatically logged off. Is that right?

Does this happen also in safe mode?

Orange Blossom

5 more replies
Answer Match 62.16%

I've run all the scans. I found and deleted 4 bugs including trojan vxgame. Now the pc will boot to a desktop screen and immediately log off. I've tried everything but a re-format..is this salvageable? Thank you in advance for any help.

Logfile of HijackThis v1.99.1
Scan saved at 6:46:57 PM, on 11/24/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Becky Pickering.BECKY\My Documents\HijackThis\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareBlock Class - {0A87E45F-537A-40B4-B812-E2544C21A09F} - C:\Program Files\SpyCatcher 2006\SCActiveBlock.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries... Read more

A:Logon/Logoff Loop..got rid of Trojanvxgame

I have since run RegistryFix and ATF..found an additional 452 problems and fixed those. Still won't boot except in safe mode.

4 more replies
Answer Match 62.16%

So in Windows 8, MS removed the ability to have a login/logoff sound. In Windows 10, the same problem persists.

Interestingly enough, under the C:\Windows\Media folder, there is a file called "Windows Logon" which is a brand new sound from Windows 8, also in 10.

The "Windows Logoff Sound" file is the same as Vista/7, so no change there.

Regardless, why did MS make a new log on sound, if it's not even possible to use it?

A:Why is it not possible to set Windows Logoff/Logon sounds?

Originally Posted by bobjoe


So in Windows 8, MS removed the ability to have a login/logoff sound. In Windows 10, the same problem persists.
Interestingly enough, under the C:\Windows\Media folder, there is a file called "Windows Logon" which is a brand new sound from Windows 8, also in 10.
The "Windows Logoff Sound" file is the same as Vista/7, so no change there.
Regardless, why did MS make a new log on sound, if it's not even possible to use it?



After listening to both the logon.wav and logoff.wav sounds it would appear to me to be part of shortening the boot or close process as the files are only about 185KB, just a few seconds and not as long as on Win7.

0 more replies
Answer Match 62.16%

I have a PC that on startup instead of the windows screen it shows a XXX picture. It is now showing the same picture on logoff. Also, when you close any window it reboots the PC. This is a Windows 2000 OS.

Any ideas? I can't seem to locate it and then started thinking it was probably a virus. Here is the Hijack Log:

Logfile of HijackThis v1.99.1
Scan saved at 7:08:13 PM, on 11/7/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\savedump.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\MsPMSPSv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\mobsync.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Roxio Shared\Project Selector\projselector.exe
C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
C:\Program Files\Browser MOUSE\mouse32a.exe
C:\Program Files\Hewlett-Packa... Read more

More replies
Answer Match 62.16%

Hi All,

I have been using the PC for a long time, but since of late I am
concerned of keep track of the Computer usage. Appreciate if anyone
could let me know the following.

A> Keep track of the Logon / Logoff times of the Computer.

B> What applications have been opened and closed.

With regard to the abvoe. Kindly let me know if there are free software
that do this job for me. Or whether the system itself is able to the job.

Your Comments would be much appreciated. THanks

Best Regards
 

A:Solved: Logon / Logoff Times !!

7 more replies
Answer Match 62.16%

Hi there,

I am in a bit of a jam. Let me summarize to you what my problem is...

I purchased and downloaded a copy of Office 2003 and Windows XP last year. These were legit copies of software because it passed all Genuine Validations and were up-to-date.

A few days ago my computer acquired a virus. Trojan.GameThief-Online from HB Inject Software, as Kaspersky called it. Kaspersky (also up-to-date) could not remove the software. After trying three times to remove this virus, I guess the virus activated a secondary protocol which disrupted userinit.exe. This caused a logon logoff loop. Access through any modes (safe, network, command prompt, last good configuration) did not work because the logon logoff loop came up again.

I was told by a friend to do a repair install from a Microsoft XP cd. Since my version was a downloaded one, I borrowed his cd, which was an illegitimate version. The repair install did not work; the logon logoff problem was not fixed. I now have over-written my previous windows with this illegitimate cd-key.

I can't hookup my hard drive to another computer to access my office 2003 cd-key (which should not have been affected by repair install), because the virus replicates itself onto other harddrives.

I did not write down the cd-keys =/

I cannot access Microsoft support because no product id!!

So this is my story as to date. I have three questions:

1, how do I fix the logon logoff problem?
2, how can I get my office 2003 legit cdke... Read more

A:Logon Logoff Loop + cd-key recovery

More info:

I have tried these solutions to no avail:

-Recovery console chkdsk (no problems found)

-Access registry (cannot login in ANY mode)

-copy userinit.exe wsaupdater.exe (file not found)

-cd system32\config
ren software software.old
copy C:\windows\repair\software (does not work)

3 more replies
Answer Match 62.16%

It?s my first post on here so hi everyone.

I?ve been scratching my head on a machine I have bought second hand and which runs Windows XP Home Edition (SP3).
The issue I have is that when I restart the machine, any file on the C drive, any program and any hardware I had installed before logging off just disappear.

I?ve tried looking into gpedit.msc, got it to run on the Home Edition, but that did not help me fix the problem. So there must be some sort of logon or logoff script in place but I don?t know where to look.

Any help would be welcome, I don?t want to format because the PC has an application installed for which I don?t have the install disc and since it?s a commercial piece of software for commercial use, getting a copy of that install disc is an issue.

G.

A:XP home edition logoff-logon

Ok well no one seems to know... But I figured it out by myself, and it wasn't a script, it was some piece of software...

2 more replies
Answer Match 62.16%

Is it safe, and if so, is there a tweak to have my computer boot and shut down without the sound scheme? Also, I've gone into my control panel several times to set the sound scheme to "No Sound" and it continues to restart. Is there a way to disable that permanently as well without having it affect any streaming programs, dvd or cd audio playback? Please advise. Thank you.
 

A:Disable logon-logoff sounds

Did you save your previous scheme to some name and then replace it with no sounds and then opted to apply?
 

3 more replies
Answer Match 62.16%

OK, I'm way confused. I have auditing for logon/logoff set to "Success/Failure" in my event logs. I've noticed numerous failed logon attempts; types 2, 3, and 8. I tell myself that there must be a logical explanation for these numerous failed logon attempts but cannot find any. I use the machine 96% of the time and my wife the other 4%. She is on a user-access account. I'm on an admin-account and should probably use my power-user account more often.

The peak of this problem is that for approx two minutes on Dec 18th '08 I had a failed logon attempt each second of those two minutes. These were logon type 3 attempts. My PC is Lenovo X61 and is configured on a workgroup, not on a network of any kind. This is my home internet connection. I have one other pc and it is not configured with my Lenovo to be on any sort of network, they simply connect through the router; no domain is set.

My laptop (and desktop) is protected with Kaspersky Internet Security 2009 and also is behind a wireless NAT Linksys router with firewall features on. I also have that router set so that wireless machines cannot communicate with eachother. UPNP and SSDP are disabled as is Remote Help/Assistance.

All of my machines are fully patched and updated as per Microsoft and Thinkpad update utilities.

I also run spybot once or so per week on top of Kaspersky's high-security-settings scans. The worst that I've found are tracking cookies. My machine is not s... Read more

More replies
Answer Match 62.16%

Hey guys I'm new to the forum and i was just wondering if any of you know how to get the logon, logoff, unlock, lock, shutdown sounds to play in windows 8.1. I have the "play startup sound" box checked off and i also went into the registry and changed the 1s to 0s and brought them to the sounds. Any help would be great as it is hard to find out how to online I keep trying but find no way how to. Thanks!

A:Windows 8/8.1 logon, logoff sounds

Hello, and welcome to Eight Forums.

Unfortunately, the he logon, logoff, unlock, lock, shutdown sounds have been hard coded to be disabled in Windows 8/8.1. You could add the options back in the Sound CP, but they still will not work because of the mentioned reason.

22 more replies
Answer Match 62.16%

I have an issue which started a few weeks ago after a Windows Update which I have not been able to solve. On one of my computers running W7 Ultimate X64, if I log on from the computer for the first time, everything works fine. However, if I try to log on for the first time using RDP, the log on process starts and part way through a cmd.exe - Application Error pops up with "The application was unable to start correctly (0xc0000142). Click OK to..." and then logs off and closes the session. Once I've managed to log in, RDP works fine until the next restart or the account is logged out. It appears to be happening with every account on the computer.

What I can deduce is the something is trying to launch a cmd.exe, which for some reason if the log on is triggered through RDP, fails. What I have not managed to work out is what it is. I've tried to turn on userenv logging, but can't get it to generate a log file. I can't seem to find anything useful in the event logs either.

Any tips on how to track down what is happening would be appreciated. Thanks in advance.

A:Logon through RDP has cmd.exe application error and then causes logoff

I've just found the culprit. Kloudian Orbweb ME. I decided I did not want/need it (a freebie from ASRock) and uninstalled Orbweb. After the reboot, the problem went away.

1 more replies
Answer Match 62.16%

My son decided to downgrade a new Gateway M-1626 laptop from Vista to XP Pro X64 w/ SP2 (XP Pro X64 and SP2 are not on the same CD). I helped him find compatible chipset, LAN, graphics, etc drivers and all was good for a couple of days.

He enabled Microsoft Update and downloaded a few, then re-started the computer as instructed.

Since then, Windows accepts his password, then shows logging off and saving settings, then back to the logon screen.

Safe Mode and Last Good configuration do the same thing.

Ideas?
 

A:Solved: Endless Logon &amp; Logoff

Is he logging in through administrator account or a different user name??
 

3 more replies
Answer Match 62.16%

I had a virus issue with file server.exe. An online forum told me to find the file in the registry and delete it. After restarting, my computer (ASUS EEE PC 1000HD) would not let me log on for more than about half a second. Any ideas?


P.S. I have XP SP3 and its a netbook so no optical drive.

A:XP Logon-Logoff Loop Issue

Do you have a USB optical drive?

If so, change the boot order and boot the XP disk.

14 more replies
Answer Match 62.16%

I have an IBM Thinkpad 600X running Windows XP. After a few freezes in which I had to turn off the computer manually, my user account might have been corrupted. When I logon, the wallpaper appears without the desktop. After awhile, the account logs off. Any subsequent attempt to logon using this account or another account results in immediate logoff message (saving user setting). Any help would be appreciated.

A:Windows XP Logon Logoff Loop

are you able to log in under safe mode?
if you are, try system restore and or a virus scan

post back

8 more replies
Answer Match 62.16%

Im running WindowsXP on a DELL ispiron laptop and have gotten the Logon/logoff virus. I know formating the HDD and reinstalling the operating system will work. However i want to keep my data files. I tried a second OS in another partition which works find execpt it can't access documents that are password protected. Can anybody help me with a solution on how to get rid of the virus and gain access to my old files. Thanks in advance.

A:WindowXP logon/logoff virus-- HELP!

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Let's try creating a boot disk that may allow me to get you to boot normally:

Using OTLPE

This file is quite large, and requires a CD/DVD burner, and a blank CD on a clean machine. A USB device would be handy as well.Download and install ISOBurner. This will allow you to burn OTLPE.ISO to a bootable CD. Here are ISO Burner Instructions

Download OTLPE.iso and burn to a CD using ISO Burner Or your own burning application). NOTE: This file is 270Mb in size so it may take some time to download.
Once the download is complete, double-click on it. This will open ISOBurner to burn the file to CD.
Reboot your affected system using the boot CD you just created.

Note : If you do not know how to set your computer to boot from CD follow the steps here

Your system should now display a REATOGO-X-PE desktop.
At this step, you should be able to save any data files to an external USB drive. Do so now, then continue.
Double-click on the OTLPE icon.
When asked "Do you wish to load the remote registry", sele... Read more

2 more replies
Answer Match 62.16%

Hi, A friend of mine has a computer just like mine. HP, dual processors, 500 gig HD and when he logs on a voice greets him with good morning/evening and his name. when he logs off the same voice says goodby. Someone else set up his computer and he doesn't know how the guy did it. I would like to set mine up the same way.
How do I do it? I know it can be done. He uses MSN and Quest. I use MSN and Comcast. Is this a Quest thing?
Thanks
Jerry

A:Voice Greeting Upon Logon/Logoff

Thanks Rich, This helped and does indeed work. It is not exactly what I was talking about. The way my friends works is it knows AM from PM and greets you accordingly along with your name. EX: Good morning Jerry / Good evening Jerry.
Thanks Again,
Jerry

5 more replies
Answer Match 62.16%

Hi,

I am new to this forum, and it seems to be a great place to find answers about a lot of things.
And that's good because I happen to have a problem ;).

Well, I have a cable internet connection on my laptop. Often now since a few days, I get disconnected and reconnected to the internet. It happens quite often and each time it's a very short cut in time but enough to break downloads, ip phone communication, chat etc... VERY annoying!

I went to see the event log abnd found that appearing pretty much each time I get disconnected !

Log :

Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 528
Date: 2/16/2006
Time: 6:27:30 AM
User: NT AUTHORITY\LOCAL SERVICE
Computer: HP-PAVILON
Description:
Successful Logon:
User Name: LOCAL SERVICE
Domain: NT AUTHORITY
Logon ID: (0x0,0x3E5)
Logon Type: 5
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name:
Logon GUID: {00000000-0000-0000-0000-000000000000}

The process seems to be "Advapi"... What is that ? Looking on the net, it seems that there is a windows composante with this name... but is it the same... ? Do I have a virus ?
What should I do ?

Thanks for any help.
Fab

PS : my OS is Windows XP

A:Problem Logon/logoff Security

Hello toimprovelife and welcome to BC.Advapi32.dll is a valid windows file but in looking around I find advapi seems to be variously described as a backdoor trojan. F-Secure Anti-Virus 2006 calls it Backdoor.IE_Patch. The first link will let you download a trial version that no doubt will remove it as it is recognized by that company.What anti-virus/anti-malware programs do you run now?

3 more replies
Answer Match 62.16%

I believe that I inadvertantly downloaded or opened a virus or malware of some kind that is now preventing me from accessing my laptop. When I logon under any user I am automatically logged off again. I have tried booting in safe mode and to command prompt, but to no avail. Still the same problem.

I have looked on line and many people including Microsoft say that this is because 'userinit.exe' is missing in the registry. I have accessed the registry using bartPE and userinit is there.

Unfortunately I cannot locate my XP disk for this laptop; however I have a recovery disk from an older laptop, but when trying this I get a blue screen saying ' A problemhas been detected and windows has shut down to prevent damage to your computer'???? This error does give some further info, but without being able to access the laptop I cannot do anything about it.

Can you offer any advice?

A:Auto Logoff after user Logon

your userinit.exe is located in C:\Windows\System32

You can get a copy of the userinit.exe from another computer, or boot into recovery console from a XP disc, and log in. You should be at a c:\windows prompt. Type the following:

cd\windows\system32

You should be at a c:\windows\system32 prompt.

copy userinit.exe wsaupdater.exe

Allow it to overwrite.

Type exit and allow it to reboot, pull the CD.

10 more replies
Answer Match 61.32%

I am trying to remember how to track logon and logoff time on an individual computer that is running windows 7 home edition - so it doesn't have Group Policy and is not on a domain or server. If I could get help on this that would be great.

Thank you
 

A:Track Logon and Logoff Computer Time

Go to Event Viewer, on right pane, click 'Create Custom View'. Select 'By Log', pull down 'Event Logs', Checkmark 'Windows Logs', Move to the field <All Event IDs> and type in 4624,4636,4803,4801 , click OK and name the view."Logon events"

For logoff events, do the same as above and type in 4634. However, there are circumstances where this event ID is not triggered when people logoff according to MS.
 

1 more replies
Answer Match 61.32%

I have a Gateway running XP Home Edition Service Pack 2. My son downloaded something virulent and I had to deal with the ubiquitous and resistant "Dangerous Spyware" background. Once I got rid of that and verified everything with HJT, I did a virus scan with AVG Free and cleared up a lot of problems.

On restarting after running AVG Free, I can't logon. It doesn't matter whether I try a normal boot, safe mode, or safe mode with command processor. There is only one user name (Owner) and it's the administrator name as well. There are no passwords involved. It's a preinstalled environment and I have neither the Windows XP CD nor a System Restore CD.

When the logon box showing user name appears, the option selected button contains "Shut Down". If I click on "OK", the computer does not shut shut down. Instead, the "Windows is shutting down" message appears, the "Logging off" message flashes, the "Saving your settings" message appears, and then the logon box reappears with the "Shut Down" option still selected.

If I click on the option selected button and then select "Shut Down" and click on "OK", the "Windows is shutting down" message may or may not appear and the computer powers off in three seconds. The logon box does not first reappear and show "Shut Down" as the selected option and allow me to click the logon box "OK" button as i... Read more

A:XP Home Edition SP2 logon/logoff loop

Try using the Last Known Good Configuration.When the computer is starting, repeatedly tap the F8 key, this should take you to the Windows Advanced Options Menu, once this opens click on Last Known Good Configuration (your most recent settings that worked).

6 more replies
Answer Match 61.32%

My Group Policy logon/logoff scripts aren't being run.

I have an Active Directory object with a group and user both located in it. I've joined the user to the group and applied some group policies to the object already that work just fine, so I know my structure is setup properly.

Now I try to add logon and logoff scripts. For troubleshooting sake, I went ahead and put both scripts on a network share and even referenced them in group policy through the network share instead of the server's local drives. The scripts have read/execute permissions for the group that this Group Policy is applied to. I have even gone as far as logging onto another computer with the user that this is supposed to apply to and manually running the scripts. They both work. I've added these scripts under User Configuration/Windows Settings/Scripts (Logon/Logoff) when editing the group policy from Active Directory.

They're not executing when I log on to a domain computer with this user.
 

A:Group Policy Logon/Logoff Scripts

16 more replies
Answer Match 61.32%

Ok, I have a strange problem. I've been Googling around, and a few people had this same problem, but there have been no fixes. Whenever I used hit my Windows Key+L shortcut (short for Switch User) a sound would play, Windows XP Logoff Sound.wav, and when I would log back into the account, it would play Windows XP Logon Sound.wav. However, as of today, they don't play.There is a catch, however. If after I turn on my computer and log into my account, I log out of the account completely, and log back in, the aforementioned sounds begin to work via the shortcut again.I have checked Sounds and Audio Devices in control panel and verified that the sounds are enabled, and I downloaded TweakUI to verify that "Beep on errors" is checked, and I just don't know what else the problem could be.Any help would be greatly appreciated, thanks!

A:Windows Logon and Logoff Sounds Not Playing

I have been noticing this also on my Win 7 system but have never seem to be bothered. Maybe a software glitch but, would probably look into this after I've seen your concern.

2 more replies
Answer Match 61.32%

Alright so I have windows xp pro 2007 on my dell laptop. I have the logon logoff loop problem that I think was caused by the win 32 virus (mccafee was reporting it before the loop started). I have my xp installation cd, but it will not load when I start the computer. I even modified the BIOS to make the cd drive start first but that hasn't helped. I just need to access the cd so I can reinstall windows. Please help, thank you.

A:Urgent! Windows logon logoff loop

Can you start in safe mode? If so, whatever computer you're using to post here, downlad Dr WEb CureIt and run it in safe mode on your computer. It will run from a usb memory stick and should clean the infection.

RayJay

4 more replies
Answer Match 61.32%

Windows uses only one logon & logoff screen wallpaper. I have manually customize my logon screen wallpaper and would like to know if there is way to customize the logoff screen wallpaper with a different wallpaper than the logon wallpaper. Meaning, 2 wallpapers, one for each task. Thank you for your time.

A:Custom logon & logoff screen wallpaper

I do not believe this is possible.

Jerry

3 more replies
Answer Match 61.32%

Ok -

Hoping someone can help out with this. I had a perfectly running Windows Server 2008 with 5 laptops, 8 Windows 7 Domain Users. Only problem was the the Server 2008 Enterprise was an upgrade from 2003, which left a lot of artifacts on the server. Since this was a home install, I figured good time to wipe the server and have a 'clean' 2008 *R2* install. I had several backups on an external 1TB drive so I was set. Also good opportunity to learn more about the new Windows Backup from a recovery standpoint.

Ran install from DVD, wiped drive, resetup the entire server.... GREAT! Only had a few accounts/groups, so reset them up manually, then restored all my GPOs, users/shared files and folders and profiles (\\SERVERNAME\PROFILES$)... Again, so far GREAT.

Now to the clients - Several Windows 7 laptops... not so great - all had each of the users' roaming profiles loaded so thought I could just login and everything would be working, no? I mean I had the same server name, IP, file structure, etc., etc. NO! Had to rejoin all the PCs to the Domain - Ok, no biggy for 8 PCs.

So onto the current problem... On any laptop, any domain user, Windows 7 logs in (Preparing Desktop...), then immediately logs out - back to the user/password screen... any Laptop, any User - same deal. If I create a new user profile, i.e. blow away both the <<username>> and <<username.V2>> folders on the server and let the OS recreate, everything is fine. Well, I don't want to bl... Read more

A:Windows 7 Logon with Immediate Logoff (2008 AD Domain)

An ideal place to try Process Monitor and it's logging feature.
The log can become huge - so be careful!

First run it normally to see if it logs anything of note in the short time between logon and logoff.
If that doesn't work we'll have to find the instructions to have it run on boot.

It's free here: Process Monitor

6 more replies
Answer Match 61.32%

I've run into a huge problem trying to remove virtumonde variant. After running vundofix wich deleted some files but not "pmnlk.dll", Dr. Web cure It and Ad-Aware 2007 didn't found nothing unusual. After various failed atempts from vundofix to remove "pmnlk.dll" I've decided to try remove it myself, booting in real mode and delete it. Bad dacision. Now i've got an useless computer, because even in safe mode will not logon to any account. It's not possible to run hijackthis so I can't post any report. All I can do is manage files and get access to the registry using Bart PE bootable disc. Please tell me how can I get rid of this mallware without reinstalling windows cause it's my work computer and lot's of work will be lost if I reinstall.

Thanks in advance for any reply.
 

More replies
Answer Match 61.32%

Hi all. Just cloned my hard disk and everything copied.

I go to enter my username/password, hit enter, and then the splash screen appears. It says "Loading Personal Settings..." and then disappears. However, it is still loading as the splash screen color bar is still moving. Then, about 45 seconds later, it says "Saving Personal Settings..." and then "Logging off." It then proceeds to take me to back to the logon screen.

The Microsoft.com solution to the logon-logoff loop did NOT work. Any other suggestions?
 

A:Logon-Logoff--Microsoft solution NOT working

11 more replies
Answer Match 60.9%

Hi all,

I have created a service for my application, which is running on Windows7 and windows xp.

Problem:-

When ever I logoff my system and Logon again the service is automatic starting in windows XP but it is not automatically start on windows 7.What it's root cause.I am not getting IT.

Could any one help me quickly?. Please It is really urgent.

Thnx in advance

A:how to start a service automatically on windows 7 Logoff then Logon

Is it set to automatic startup in the Services list?

Go to Start panel and type "services", you should see it pop up in the search results. Make sure your service startup type is either set to "Automatic" or "Automatic (Delayed)" and it should work fine.

1 more replies
Answer Match 60.9%

Ok Guys. This problem has stumped me for some time now. Lets see who can come up with the solution.

Im the Net Admin for a cybercafe near where i live. We have 30+ workstations and 2 NT4 servers that do domain logins, fileserving, DHCP, etc. These machines also distribute the config.pol windows policy files. For some time now, we have been seeing some significant delays during all logons and logoffs from the client machines.

Here is a step through of the problem.

1 - Computer is turned on, or logoff is chosen from start menu of a user already logged in.

2 - Wait 15-20 seconds.

3 - MS Networks Logon screen appears (Username, password, Domain).

4 - User types in name and password, hits enter.

5 - User has to wait 15-25 seconds for the login to be verified.

In steps 2 and 5, there is obviously something wrong. it shouldnt take the NT machines that long to authorize domain users. The HD's of the client machines are not busy, so i dont think its some background process causing the delays. I cant figure it out.

Could there be some misconfiguration on the part of Domain Servers? or maybe on the client side? I cant find anything that is out of order. There is also a slight delay when the win98 machines go to network neighboorhood, however, i always just thought that this was win98 looking for broadcasts. Also, a good point to make is that any NT machine i have had on this network logs on and off with no hitch, none at all. Another point is that once the user has logged... Read more

A:{Advice Offered} - Delayed Logoff and Logon times

10 more replies
Answer Match 60.9%

i have this really annoying problem with my HP pavilion pc. its running windows xp. it does not play the startup sound when it is started, it does not play the shutdown sound when i shut it down, it doesnt play the logon sound when i logon nor does it play the logoff sound when i log off? any idea why? Thanx in advance.
 

A:Windows Startup/Shutdown and Logon/Logoff Sounds

16 more replies
Answer Match 60.9%

What's happening is that one of my XP Pro/SP3 (32-bit) boxes is experiencing a commonly-reported problem wherein the XP boot process runs successfully but then goes into an infinite login/logoff loop (NOT a reboot loop). What happens is that the small Windows XP logo box comes up, says "Loading your personal settings", then it changes the text at the bottom to read "Logging off", whereupon the whole loop starts over again! (along with all the Microsoft music)

There are a great many other identical tech support requests out there, including some here on this board (see, for example: XP log on log off loop), but none of the suggested solutions in there or by Microsoft or by anyone else I can find actually fixes my problem!

Here are some facts along with the things I've already tried:

(1): There is no malware on the system (confirmed with several tools).

(2): The suggested Microsoft Answers solution involving userinit.exe and the userinit HKLM registry key (see the post by pjn33 at: Windows XP... logon stuck in loop), doesn't work for me (i.e., no change).

(3): A variation of (2) above is to change the userinit key to point to "C:\Windows\Explorer.exe", but that doesn't work either.

(4): There's no evidence of a corrupted registry -- that system worked fine until this loop started happening (which curiously began after I fixed a "disk full" (actually just a full partition) problem on a completely unrelated disk dri... Read more

A:XP Pro logon-logoff loop; usual fixes don't work!

This is a symptom of a virus. I know you scanned with some tools, but there are many viruses that aren't picked up with the regular tools.
Please click on the link in my signature for Virus/Malware Help do those things and post in that section of the forum for better results.

19 more replies
Answer Match 60.9%

*Windows XP, SP3, fully updated
*Running Norton 360, fully updated, firewalled
*Motorola Modem (SB5100, Surfboard cable modem)

In my event viewer I am seeing many policy changes, Privilege use changes, and logon/logoff attempts.

Some examples are:

Many logon/logoff attempts
Failure audits for logon failures (bad user name or password)
Attempts to change my logon password
Failure Audits for attempting to log in under my account
Success Audits for Anonymous login
Logon processes being trusted to submit logon requests
Notification packages being activated to submit password or account changes

These all occur within 1 minute and happen just after I login to Windows. Is this a trojan or a rootkit? Not too sure what is going on here but I feel like someone is accessing my computer.
I have scanned using Norton 360 and Norton Power Eraser, Malwarebytes, Trend Micro Housecall in safe mode and nothing has come up. I have used Microsoft Security Analyzer to 2.2 to try and find issues - none has come up.

I ran a rootkit revealer (www.sysinternals.com) and received some suspicious registry entries (data mismatch between windows API and raw hive data and Key name contains embedded nulss) these fall under HKLM\security\policy\secrets\sac* and HKLM\software\microsoft\DbgagD\1* and some cookies that are hidden from windows api and the directory index.

Any help would be appreciated,

Thanks,

Len.

A:Success/Failure Audits with Logon/Logoff attempts

Hello TripleInstance and welcome to Bleeping Computer! My name is swagger and I'll be assisting you.Please follow the directions below, asking any questions before you proceed if you do not understand something completely.::TDSS Killer::Download the TDSS Killer and save it to your Desktop. <-Important!!!Be sure to download TDSSKiller.exe (v2.7.48.0).Double-click on TDSSKiller.exe to run it.
Vista/Windows 7 users right-click and select Run As Administrator.If TDSSKiller does not run, try renaming it.To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to How to change the file extension.Click the Start Scan button.Do not use the computer during the scan.If the scan completes with nothing found, click Close to exit.If malicious objects are found, they will show in the Scan result - Select action for found objects and offer three options.Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller.2.4.0.0_27.07.2010_09.o7.26_log.txt) will be created and saved to the root directory (usually Local Disk C:).Copy and paste the contents of that file in your next reply.::ESET Online Scanner::Please run a free online scan with the ESET Online Scanner.Tick the box next to Yes, I accept the Terms of Use.Click StartAccept any se... Read more

8 more replies
Answer Match 60.9%

Hey guys, i have a Window 2k Domain controller, and i've made a .bat file that takes a hosts file off of our server, and copys it locally (just to block certain websites) and then i have a .bat that takes a clean copy of the hosts file off the server and copys it locally.

What i want to do is get the .bat file to execute during logon, and then a different .bat file to execute during logoff. but alas i'm lost.

Hence i come here.
 

A:Solved: Logon and Logoff Scripts! Please look, super simple.

http://www.serverwatch.com/tutorials/article.php/1474241
 

1 more replies
Answer Match 60.9%

Hi,
I am trying to strip Windows 7 of every single screen and message before login... and before shutdown.

So we've got:
- Boot sequence
- Logon screen
- Preparation to Logon
- Preparation to Shutdown

Boot sequence was easy to completely black out, by using
http://coderforlife.com/projects/win7boot/
(black background, all messages removed)

Logon screen can be skipped without hacks, just a matter of having no password.

Now I'm left with the Logon ("Preparing your desktop...", "Applying user preferences", "Welcome"... etc.) and the Shutdown ("Shutting down..." etc.) screens and messages.

Is there a way to completely disable both?

If there isn't, I am thinking of a hack: both are made by a background (which you can change with custom graphics by putting them into the OOBE folder and a couple registry keys). Then, there are text messages which are contained somewhere and can be emptied by using ResourceHacker (I found some of them but not all). Finally, somewhere within some exe or dll, there should be the "working" circle of light and the Windows 7 logo, which are superimposed to the custom background. I am attaching a picture for clarity.

Hints?
Thanks in advance,

Andrea

A:Completely removing Logon and Logoff screens and messages

Welcome to the Seven Forums
I know 2 of them.
The circles are in the imageres.dll in the PNG or Bitmap folder @ C:\Windows\System32 and C:\Windows\SysWOW64

The logo are in the basebrd.dll in the Bitmap folder @ C:\Windows\Branding\Basebrd
have a look at this Changing the Windows Logon logo | CleverIT - Online werkplekken en systeembeheer
Jerry

3 more replies
Answer Match 60.9%

Hello,
I have been tasked with tracking down the login and logoff events from a user post fact.
I believe this information would be located in the event log on the users computer. I also believe it should be logged in the AD server as well.

Q1. Are these two premises correct? 
Q2. If so, where would the actual files be located so I could parse out the login/logout data for the specific user (from the AD server especially).
Q2b. For the local system, where is the event file located? or what is the actual file name so I could search the system for it?
Any assistance in this task would be greatly appreciated.
Thanks in advance.

More replies
Answer Match 60.9%

Hi all. Just cloned my hard disk and everything copied.

I go to enter my username/password, hit enter, and then the splash screen appears. It says "Loading Personal Settings..." and then disappears. However, it is still loading as the splash screen color bar is still moving. Then, about 45 seconds later, it says "Saving Personal Settings..." and then "Logging off." It then proceeds to take me to back to the logon screen.

The Microsoft.com solution to the logon-logoff loop did NOT work. Any other suggestions?

A:Logon-Logoff Problem -- Microsoft solution NOT working

What Microsoft solution are you referring to? The normal cause of this is cloning a boot drive after the physical disk has been assigned a drive letter other than C:

3 more replies
Answer Match 60.9%

I was trying to create a dual boot system, Windows 7 and 8.1. Was using two separate physical drives, one for each OS, and two data drives.

After installing a bunch of updates to 8.1, I tried to go back to 7, and the computer wouldn't boot up.

Unplugged all the extra drives, and attempted start up repair with the installation disk.

After doing this Windows would boot to the welcome screen. When I click the icon to logon it immediately logged off.

Can log into safe mode normally. While in safe mode I created two new user accounts, one Administrator, one Standard. When attempting to logon with the new Standard account, Windows logs out immediately. With the Administrator account, it goes to what has been called the Blue Screen of Limbo; a pale blue screen, and arrow cursor that can be moved with the mouse, but no icons, and no way to log out. My normal login is an Administrator account.

Have searched the internet with words such as ?windows 7 logon and logoff immediately? and tried everything under the sun.

Tried rewriting the registry as described here:
=>https://support.microsoft.com/en-us/kb/555648

Tried replacing the userinit.exe file with a known good file from another computer.

Tried bootrec and bootsect. No help.

Also tried bcdboot, the command "bcdboot c:\windows /s c:" received the reply: "Failure when attempting to copy boot files."

Read with interest the following tutorial => Startup Repair - Run 3 Separate Times No help.

I have r... Read more

A:Welcome screen: Logon, then immediate logoff. Can boot safe mode.

Could be Win8 overwrite some permissions on the Win7 drive.

Run portable Tweaking.com - Windows Repair in Safe Mode with Networking as an admin.






Quote:
With the Administrator account, it goes to what has been called the Blue Screen of Limbo; a pale blue screen, and arrow cursor that can be moved with the mouse, but no icons, and no way to log out.


Does the cursor disappear from either side or stop at the edges? It looks like desktop is on another screen (do you have any second monitors/TV attached?). Do you get the context menu when you right click?

Edit: What happens if you CTRL ALT DEL?
You can try Win+R and then write "shutdown /l" immediately without "". That should log you off, or press your power button on case once to shutdown properly.

9 more replies
Answer Match 60.9%

Hi,

Below is my HijackThis log file. The problem I am getting is intermittent and manifests itself in Explorer hanging once I start my computer. If this occurs all I need to do is start the task manager and then logoff and log back on. I have tried turning the pc on and then waiting for a few minutes before I log in and this has no effect. I am at my wits end with it I have tried stopping and starting services and if I use Safe mode it always starts Ok, as we would expect. Can anyone see anything in the log file that may cause such behavior?

Any help would be appreciated
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:21:50, on 13/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16850)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\drivers\crauto.exe
C:\WINDOWS\System32\GEARSec.exe
C:\WINDOWS\system32\drivers\IMountSRV.exe
C:\Program Files\Java\jre6\bin... Read more

A:Windows XP Explorer Hangs, but then works on Logoff - Logon

If I set Explorer process to realtime, the machine comes back to life?
 

1 more replies
Answer Match 60.06%

Greetings Fellow Techies

I have an annoying problem with networked printers disconnecting/disappearing when TS users logoff.

Current configuration is:

SQL server (WinSvr 2K8 R2 Std) has printers installed on it (standard TCP/IP Port) and printer is shared, there are also some printers installed on the DNS server and a couple of satellite offices.

Users connect to TS servers (WinSvr 2K8 R2 & WinSvr 2K3) printers are connected and work fine until they logoff, when they log on the printers are gone "sometimes some printers are still there!?"

I have tried logging onto the server as domain administrator and connecting printers but they won't even stay for administrator (have had this with win7 client machines) and tried directly 'console' at the server.

I have looked at the printers on the SQL server and sharing properties, but canít find anything that would suggest that it is stoping printers from coming back at login on TS

Note that local (client machines) connecting to the same shared printer from the SQL server donít have the problem it's just on the TS server.

so any ideas are greatly appreciated, I have Googled and searched TSG with no luck.

Cheers
cybersloth
 

A:Network Printers Disapear after logoff-logon on terminal server

bump...
 

2 more replies
Answer Match 60.06%

As the title says I can't get the custom sounds that I've set are not working. I do have the custom startup soind working but that's it. All help is appreciated.

A:Custom Logon/Logoff/Unlock sounds refusing to work

Unfortunately, the log on/off sounds have been hard coded to be disabled in Windows 8 to help improve the performance and security during startup.

1 more replies
Answer Match 60.06%

I've read numerous thread about this and none have helped me. (My sistuation for those who are unfamiliar, is that I have a virus or trojan that is interfering with my login process and forcing a logoff as soon as I log on. So I can't fix this using regedit or other mean since I can't log in).

Everytime I try using recovery console and using "COPY userinit.exe wsaupdater.exe" it says the file specified could not be found. I also tried copying userinit.exe to a flash and copying from there, but same thing, computer can't find it.

I also heard about BartPE, but I have no idea what that is or does. Someone please help.
 

A:Solved: Logon/Logoff Cycle (Virus/userinit.exe Problem)

7 more replies
Answer Match 59.64%

i've been struggling for a full day to try to fix a host of issues but i can't make any headway. logon/logoff problem is driving me nuts. everytime i fix it and run malwarebytes or adaware to find the culprit, it deletes userinit.exe and the problem starts all over again. the issue related to not being able to get to AV websites may or may not be related.the only way i can get access to the desktop is renaming the \windows\system32\config\software to another name and booting in safe mode. Here's the hijack log after doing that, but is this valid? in this mode i can't access AV sites.thanks in advance.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 8:18:38 PM, on 9/12/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 SP2 (8.00.6001.18702)Boot mode: Safe mode with network supportRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Mozilla Firefox 3.1 Beta 1\firefox.exeC:\Program Files\Trend Micro\HijackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktopR1 - HKCU\Softw... Read more

A:numerous virus issues - can't access AV sites + logon logoff loop

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. You can subscribe by clicking the Options box to the right of your topic title and selecting Track This Topic.Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.Once I receive a reply then I will return with your first instructions.Thanks

2 more replies
Answer Match 52.92%

Hello,

I was in the Microsoft Event Viewer and was in the security tab and saw that there was an Anonymous logon to the computer. There are atleast 4 of these logoffs.

Here is the viewer:


Quote:




An account was logged off.
Subject:
Security ID: ANONYMOUS LOGON
Account Name: ANONYMOUS LOGON
Account Domain: NT AUTHORITY
Logon ID: 0x402b8ab
Logon Type: 3
This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer.




What is this? Also I am the only user for the computer.

More replies
Answer Match 52.92%

I am the only user of my  laptop, but the Event Viewer shows a series of Special Logons(event ID 4672) and Logons (Event ID 4624 or 4648) happening in the past few days when I was out of town and my laptop was locked in my room with the lid closed.


I don't want to be suspicious of any one yet so I would like to know if it's possible for the Event Viewer to record logon and special logon events without any human user actually logging on? Thanks a lot.

More replies
Answer Match 52.92%

[OS: Windows XP Home edition - Hardware: Acer Aspire 5672WLmi laptop, ATI Mobility Radeon X1600]

Hello. I have had this error for a very long time, and through goolge i found only a few cases of other people with a similar issue.
It's not something vital, but it's disturbing:

When I turn on my computer, after booting I get the login screen, then I type my password, it says "loading user settings" and it seems to be logging in, but then it suddenly goes back to the login screen again. When I login for a second time, it works.
This does not happen every time, it seems to be random; sometimes I get a spree of 10 logins without problem, but sometimes it happens every time for a few days.

The first thing I thought of was a trojan, but I did every possible test and nothing showed up, i'm 100% sure this is not a trojan. Googling, I found very few people with a similar problem, in particular I found one that was trying hard to get rid of it. Apparently, this guy did a clean install of windows several times to get rid of it, but it still wasn't gone.
I suspect this may have something to do with the ATI catalyst drivers, since that's the only thing we have in common.
Here's the thread (somewhat long):
http://www.ngohq.com/ati-discussion/8403-catalyst-prob-have-logon-xp-twice.html

What's surprising is that even if it is some issue with the drivers, it's ridiculous that only a very few people have this problem (and i've been thr... Read more

A:Need to logon twice, event ID 4614 showing up

10 more replies
Answer Match 52.92%

Hello,

I was looking at the event log and noticed that there was an anonymous logon recently and it said success audit and the description is:

Special privileges assigned to new logon:
User Name: NETWORK SERVICE
Domain: NT AUTHORITY
Logon ID: (0x0,0x3E4)
Privileges: SeAuditPrivege
SeAssignPrimaryTokenPrivilege
SeChangeNotifyPrivilege

Should I be concerned?

Thanks.

A:[SOLVED] Event log: Anonymous Logon

Also this from the same source:

Source: Security
Category: Logon\Logoff
Event ID: 540

11 more replies
Answer Match 52.92%

Hi

i typed: expand d:\i386\userinit.ex_ c:\
then copy c:\userinit.exe c:\wimdows\system32\

then i was able to log back into windows but now I've lost all my original desktop settings and programs. How do i get that back?

Your help would be appreciated

Thanks
 

More replies
Answer Match 52.5%

I saw some people having trouble with extremely slow wireless connections using an Intel Centrino Wireless n-1030 card. The original thread is closed, so the problem may already be solved, but if anyone is still experiencing this problem, here is what worked for me:

This NIC is a dual band card (802.11 + bluetooth), and with some routers having the bluetooth enabled really slowed down the 802.11n connection (it didn't seem to happen with my netgear router, but when I switched to linksys, WHAMMO!).

Anyway, when I disabled the Bluetooth adapter in Device Manager the problem was completely solved (uhhhh except I need to use a dongle to make my bluetooth mouse work now... small price to pay IMO)

Anyway, just thought I'd share my experience. Hope it can help someone.
 

More replies
Answer Match 52.5%

I'm having an issue (slow logoff and shutdown) in WinXP.
I've attached log. Any help appreciated.
 

A:Slow logoff and shutdown

A slow logoff and shutdown could mean applications are hanging- that is, not shutting down properly. It can also mean the there are too many programs starting at boot and running in the background. Each of these has to close when you shutdown

It is better to follow the order of the malware cleaning, running Malwarebytes first, then Superantispyware, followed by Hijackthis, then attaching all 3 logs. But we will try this. If problems persist, you will need to follow: http://www.techspot.com/vb/topic58138.html
You are running two antivirus programs. Decide which you want to keep, then remove the other one:
Ontrack:




Part of Ontrack's Fix-it Utilities Suite. Loads a System Tray icon that lets you access the full program. Needed if you run the crash guard, intellicluster, anti-virus, or autoupdater. Otherwise not required
C:\PROGRA~1\AVANQU~1\SYSTEM~1\MXTask.exe>> Related to Ontrack Inc.
C:\PROGRA~1\AVANQU~1\SYSTEM~1\mxtask.exe
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\Avanquest\SystemSuite\LinkScannerIE.dll
O2 - BHO: Data Vault - {8373ADC0-6330-11DD-9D77-22C856D89593} - C:\Program Files\Avanquest\SystemSuite\IE_ContextMenu_Vault.dllClick to expand...

Vipre:




2. C:\Program Files\Common Files\AntiVirus\SBAMSvc.exe
SBAMSvc.exe>> SBAMSvc.exe is the Vipre engine. It should eat up memory as it works, if that bothers you install something like cacheman to keep your entire machine ... Read more

4 more replies
Answer Match 52.5%

infuriating

network hangs for IE7
shell restarts
communications resumes
winlogon generates 1002 event ID

seconds later it repeats

when network adapter is disabled, no problems (but no network)

not tied to any programs or actions
tried multiple NICs, no effect
no other errors or tracks found
explorer restarts with or without IE running

win xp pro sp3
dual video cards
asus p5ne-sli MB
 

More replies