Users logging in are getting a blue screen and nothing ever happens (MF 1.8)

Posted on 2006-04-27
Last Modified: 2008-10-15

I have three Citrix 1.8 SP4 servers (Win2000 SP4) and one of them is acting very strange. After the users type in their username and password and hit ok, the screen goes blue (like the background) and they never log in. It seems to be hit or miss. If I tell them to log into one of the other two, they log in with no problems. Some users can log in to it (30) are on at the moment, but these users also experience the problem once in a while. Any troubleshooting tips or KB article I can look at? It's getting very annoying. I did notice last week when people were logging on, they were getting an error that Windows couldn't load the profile and to resize the registry MB. After looking at the registry size, it was at 80MB with a 120MB limit. For fun I upped it to 200MB and that message went away.

Question by:fairrington

    Author Comment

    Actually it's Event ID 2020. The KB article describes my problems exactly, but says it's caused by Norton AV which we don't use. Any ideas?
    LVL 5

    Expert Comment

    This probably applies to 1.8 as well.  You may have some clients that can login if they are running XP.  This seems to usually only effect 2000 pro clients.  


    Users connecting with ICA sessions receive a blue background and the Windows GINA does not display after installing Microsoft Rollup 1 for Windows 2000 Service Pack 4 on MetaFrame XP and MetaFrame Presentation Server 3.0 servers.

    The console might be unresponsive and have high CPU utilization within the winlogon.exe process.


    The issue occurs after applying the Microsoft Update Rollup 1 for Windows 2000 Service Pack 4 (Microsoft article 891861) to MetaFrame XP Feature Release 3 Service Pack 4 servers and MetaFrame Presentation Server 3.0 servers.


    The issue has been, or will be, addressed in the following Hotfix Rollup Packs. Download and install the appropriate fix for your platform.

    Hotfix Rollup Pack XE104W2KR01 - For MetaFrame XP 1.0 for Windows 2000

    CTX106619 - Hotfix Rollup Pack XE104W2KR01 - For MetaFrame XP 1.0 for Windows 2000

    For all versions of Citrix Presentation Server install the Update Rollup1 for Windows 2000 SP4 (Version 2). You can either remove the Update Rollup1 for Windows 2000 SP4 Version 1 (The older version of this update is (20050602.215753) or you can install the new version number Update Rollup1 for Windows 2000 SP4 (Version 2) (Microsoft version # 2050809.32623) on top of the version 1.

    To access this software, visit and reference KB891861. The file name for version 2 of the Update Rollup1 for Windows 2000 SP4 is Windows2000-KB891861-v2-x86-ENU.EXE.

    More Information

    CTX106054 – Internet Explorer and Outlook Fail to Launch on MetaFrame XP Feature Release 3 when Windows 2003, Service Pack 1 or Update Rollup 1 for Windows 2000 Service Pack 4 is Installed

    CTX106250 – Explaining and Troubleshooting ICA Session Initialization and Published Application Launching
    LVL 5

    Accepted Solution

    Instead of messing around with even more patches I performed the steps below on all of mine and my customers servers and this fixed the problem  I have performed this on many servers without causing any other issues.  You must restart the server to have this take effect.  

    Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

    To work around this problem, follow these steps:1. Click Start, click Run, type regedit, and then click OK.
    2. In Registry Editor, locate and click the following registry subkey:
    HKEY_LOCAL_MACHINE\Software\Citrix\Ctxhook\AppInit_Dlls\Smart Card Hook  
    3. In the right-pane, locate and double-click the FilePathName registry entry.
    4. In the Value data box, locate and rename scardhook.dll to scardhook.dll.old.
    5. Quit Registry Editor.
    6. Restart the computer.

    Author Comment

    I haven't applied any patches or updates to this server since July 4th of last year. I'll try the second suggestion with the registry and see what happens. This server reboots on Sunday mornings so I'll let you guys know on Monday.


    Author Comment


    I was going to change the registry setting and I don't have that key. Actually, after HKEY_LOCAL_MACHINE\Software\Citrix, I have no Ctxhook. Any ideas?

    LVL 5

    Expert Comment

    The registry setting should only help with the ms rollup 1 problem.  I don't think I would change the registry key if you are sure the rollup has not been applied.  

    Featured Post

    Find Ransomware Secrets With All-Source Analysis

    Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

    Join & Write a Comment

    Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
    Citrix XenDesktop, Citrix Studio, Citrix Policies, Citrix XenApp
    How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…
    This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now