Solved

How can I get a second-by-second log of Win XP bootup and login process?

Posted on 2004-10-06
9
178 Views
Last Modified: 2010-03-18
My laptop is running Win XP SP1.
It recently came down with a heavy case of a logon sluggishness when it would take bloody ages for the login prompt to come up after I press Ctrl+Alt+Del. Everything works fine once the prompt is up and I log in, it is just that endless wait before the prompt (Talking up to 10-15 minutes).
It would be nice to be able to see what processes take place during that wait time - maybe an unnecessary service is starting, maybe an unstable driver is loading, who knows.
I tried "verbose logon", but nothing is displayed during the long wait time.
And the regular "F8" boot log does not have any timeline, so it is hard to tell WHERE XP "hangs".

(I can't just roll back the system, since system restore is OFF because of a proprietary app that we use, so I have to either troubleshoot or reinstall my XP along with the endless slew of apps.)
0
Comment
Question by:adzip2001
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2
  • 2
9 Comments
 
LVL 95

Expert Comment

by:Lee W, MVP
ID: 12245410
Off hand, I'd say you need to replace a few DLLs with debug versions - typically only available to programmers with subscriptions to MSDN.  Check the userenv.log file %windir%\debug\UserMode
0
 
LVL 2

Author Comment

by:adzip2001
ID: 12247601
Userenv.log: Warmer, but not it yet, not enough detail... This is all the info that it had about my logon this morning:
USERENV(2d0.2d4) 07:40:25:088 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2d0.2d4) 07:40:25:088 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2d0.2d4) 07:40:25:088 CUserProfile::CleanupUserProfile: Ref Count is not 0

Is there a 3rd party utility out there that can do this?
0
 
LVL 95

Assisted Solution

by:Lee W, MVP
Lee W, MVP earned 30 total points
ID: 12248546
Using a debug version of a DLL (I don't remember which one) this USERENV log is MUCH more detailed.  Also - have you looked at event log to see what's going on?

Sorry, don't know of any third party app that can monitor the login like that.

My guess is it's trying to do something with the network and being unsuccessful contacting a server for what it's trying to do, timing out trying.
0
Manage your data center from practically anywhere

The KN8164V features HD resolution of 1920 x 1200, FIPS 140-2 with level 1 security standards and virtual media transmissions at twice the speed. Built for reliability, the KN series provides local console and remote over IP access, ensuring 24/7 availability to all servers.

 
LVL 2

Author Comment

by:adzip2001
ID: 12250590
> My guess is it's trying to do something with the network and being unsuccessful contacting a server for what it's trying to do, timing out trying.
- That's what I'm thinking too, I just wish I could figure out what exactly the darn thing is...

Event log didn't yield much help -- I saw only the events after the logon.

How difficult is it to subscribe to MSDN? I should prob'ly try that debug .DLL
(I would imagine that I will just need to replace the regular one somewhere in the Windows folder).
0
 
LVL 18

Expert Comment

by:crissand
ID: 12250848
I don't remeber if it's working but there are the followings switches to try:

multi(0)disk(1)rdisk(0)partition(1)\WINDOWS="Windows XP Professional" /bootlog /debug

in the boot.ini file. I could be wrong, these could be switches for servers, but give it a try. Let's say you have the following boot.ini:

[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(1)rdisk(0)partition(1)\WINDOWS="Windows XP Professional" /fastdetect

add a line like this

multi(0)disk(1)rdisk(0)partition(1)\WINDOWS="Windows XP debug mode mode" /bootlog /debug

Next time you start computer there will be a 30 second delay when you can select "Windows XP debug mode". If the switches are right the system will go (slower than normal) you'll have the bootlog file.
0
 
LVL 2

Author Comment

by:adzip2001
ID: 12251824
Quick question: where will the bootlog be saved to?
0
 
LVL 2

Author Comment

by:adzip2001
ID: 12252281
Disregard my previous comment - it goes to %SYSTEMROOT%\ntbtlog.txt

Closer to the solution, still there are no timestamps and I suspect that all that there is in the log takes place BEFORE the invitation to press "Ctrl+Alt+Del to log in".
Yet the time period in question - the time between Ctrl+Alt+Del and login prompt - still remains a mystery. No messages are displayed during that time and I don't think that those processes are reflected in the log.
0
 
LVL 18

Accepted Solution

by:
crissand earned 100 total points
ID: 12257570
You can use bootvis. It purpose is to optimize the startup of a windows xp, but it makes a timelog too. Download from here:

http://www.soft32.com/download_19687.html

since I did'n't find it on microsoft site.
0
 
LVL 2

Author Comment

by:adzip2001
ID: 12269039
Great answer, and thank you for finding bootvis -- I have been scouring the Web for days trying to find it since it went MIA from Microsoft's site.
0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Nslookup is a command line driven utility supplied as part of most Windows operating systems that can reveal information related to domain names and the Internet Protocol (IP) addresses associated with them. In simple terms, it is a tool that can …
Have you ever set up your wireless router at home or in the office to find that you little pop-up bubble in the bottom right-hand corner of Windows read "IP Conflict - One of more computers on the network have been assigned the following IP address"…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question