Winlogon.exe taking up 99%CPU?

Clean XP system (without SP1) often crawls to a halt and the culprit appears to be winlogon.exe.

System gets so bogged downt that we can't even shut down the PC.

The PCs are networked with a win2k domain controller but besides that they are clean, not even virus scanning running.

Any idea what's the cause of this?
or if there are logs to point to why winlogon is running with such a hight priority?

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

jeedAuthor Commented:
Sounds like a good solution but still don't know what the  the cause is.

We've narrowed it down to the multiport serial card... why this is playing up with the the winlogon.exe process, we're not sure.

Currently testing if the card will work with win2k. will post results when done.
Is this card seated in the PCI slot directly beside the AGP slot?  If so, move it and leave that PCI slot open.

Some mobos have resource issues when both of those slots are occupied at the same time - due mainly in part to systemboard resource sharing.

Looking forward to your findings.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Cloud Class® Course: Microsoft Azure 2017

Azure has a changed a lot since it was originally introduce by adding new services and features. Do you know everything you need to about Azure? This course will teach you about the Azure App Service, monitoring and application insights, DevOps, and Team Services.

jeedAuthor Commented:
Alas, the win2k Pro also couldn't take it. We're assuming it might be the PC motherboard.

The PC is an Acer Veriton 5500 with onboard video (Intel) and ethernet (Intel). The multiport serial card is Netmos 9845.

AGP slot is not present on this mobo and we have experimented changing slots without success. Although we did manage to stop the computer hanging by pulling out the mulitport card (don't try this at home kids :o).

We are now attempting to install the mulitport cards on an older (Acer) PCs running win2k.

One avenue we have yet to explore is setting Plug and Play BIOS settings to No/Disabled on the Veriton as suggested by Microsoft:
And experimenting with disabling ACPI.

The search continues....
jeedAuthor Commented:
We've cracked it!

The Cause:
It appears that the card was non-ACPI compliant and didn't like its IRQ being shared with everything else.

The Solution:
Install XP without ACPI and IRQ sharing. This can be achieved by hitting F5 when the installation asks if you need to install SCSI or RAID controllers. The installation will continue a little while and then you select "Standard PC" and continue. The rest of the XP installation is per normal.
Apparently it is possible to disable ACPI and IRQ sharing after XP has been installed but the general opinion is that it's not as effective.

So... any points for answering your own question?
So....I sort of hinted at the motherboard resource thing...

Doesn't count eh??   ;o)

Glad you solved it.

Pete LongTechnical ConsultantCommented:
No comment has been added lately (133 days), so it's time to clean up this TA.
I will leave a recommendation in the Cleanup topic area for this question:

RECOMMENDATION: Points for Netman66
Please leave any comments here within 7 days.

-- Please DO NOT accept this comment as an answer ! --


EE Cleanup Volunteer
jeedAuthor Commented:
recommendation accepted.

To finish the TA - further investigation found that the multiport serial cards used had a known bug that caused system crashes when the port was closed and the hardware was generating interrupts.  The lesson from this experience is don't use these cheap multport cards.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows XP

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.