Users logging in are getting a blue screen and nothing ever happens (MF 1.8)


I have three Citrix 1.8 SP4 servers (Win2000 SP4) and one of them is acting very strange. After the users type in their username and password and hit ok, the screen goes blue (like the background) and they never log in. It seems to be hit or miss. If I tell them to log into one of the other two, they log in with no problems. Some users can log in to it (30) are on at the moment, but these users also experience the problem once in a while. Any troubleshooting tips or KB article I can look at? It's getting very annoying. I did notice last week when people were logging on, they were getting an error that Windows couldn't load the profile and to resize the registry MB. After looking at the registry size, it was at 80MB with a 120MB limit. For fun I upped it to 200MB and that message went away.

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

fairringtonAuthor Commented:
Actually it's Event ID 2020. The KB article describes my problems exactly, but says it's caused by Norton AV which we don't use. Any ideas?
This probably applies to 1.8 as well.  You may have some clients that can login if they are running XP.  This seems to usually only effect 2000 pro clients.  


Users connecting with ICA sessions receive a blue background and the Windows GINA does not display after installing Microsoft Rollup 1 for Windows 2000 Service Pack 4 on MetaFrame XP and MetaFrame Presentation Server 3.0 servers.

The console might be unresponsive and have high CPU utilization within the winlogon.exe process.


The issue occurs after applying the Microsoft Update Rollup 1 for Windows 2000 Service Pack 4 (Microsoft article 891861) to MetaFrame XP Feature Release 3 Service Pack 4 servers and MetaFrame Presentation Server 3.0 servers.


The issue has been, or will be, addressed in the following Hotfix Rollup Packs. Download and install the appropriate fix for your platform.

Hotfix Rollup Pack XE104W2KR01 - For MetaFrame XP 1.0 for Windows 2000

CTX106619 - Hotfix Rollup Pack XE104W2KR01 - For MetaFrame XP 1.0 for Windows 2000

For all versions of Citrix Presentation Server install the Update Rollup1 for Windows 2000 SP4 (Version 2). You can either remove the Update Rollup1 for Windows 2000 SP4 Version 1 (The older version of this update is (20050602.215753) or you can install the new version number Update Rollup1 for Windows 2000 SP4 (Version 2) (Microsoft version # 2050809.32623) on top of the version 1.

To access this software, visit and reference KB891861. The file name for version 2 of the Update Rollup1 for Windows 2000 SP4 is Windows2000-KB891861-v2-x86-ENU.EXE.

More Information

CTX106054 – Internet Explorer and Outlook Fail to Launch on MetaFrame XP Feature Release 3 when Windows 2003, Service Pack 1 or Update Rollup 1 for Windows 2000 Service Pack 4 is Installed

CTX106250 – Explaining and Troubleshooting ICA Session Initialization and Published Application Launching
Instead of messing around with even more patches I performed the steps below on all of mine and my customers servers and this fixed the problem  I have performed this on many servers without causing any other issues.  You must restart the server to have this take effect.  

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

To work around this problem, follow these steps:1. Click Start, click Run, type regedit, and then click OK.
2. In Registry Editor, locate and click the following registry subkey:
HKEY_LOCAL_MACHINE\Software\Citrix\Ctxhook\AppInit_Dlls\Smart Card Hook  
3. In the right-pane, locate and double-click the FilePathName registry entry.
4. In the Value data box, locate and rename scardhook.dll to scardhook.dll.old.
5. Quit Registry Editor.
6. Restart the computer.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

fairringtonAuthor Commented:
I haven't applied any patches or updates to this server since July 4th of last year. I'll try the second suggestion with the registry and see what happens. This server reboots on Sunday mornings so I'll let you guys know on Monday.

fairringtonAuthor Commented:

I was going to change the registry setting and I don't have that key. Actually, after HKEY_LOCAL_MACHINE\Software\Citrix, I have no Ctxhook. Any ideas?

The registry setting should only help with the ms rollup 1 problem.  I don't think I would change the registry key if you are sure the rollup has not been applied.  
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.