Winlogon and Userdump

Hi, i am troubleshooting some issues we are experiencing logging off/ shutting down terminals and have been using UserModeProcessDumper to monitor the process and provide additional logging.

To confirm it was not our build, i have been using a brand new XP SP3 install and have instructed the app to capture any exceptions created by Winlogon.

I seem to consistantly get Access Violation errors when booting up and shutting down? Is this correct?

The errors seem to point to a null pointer somewhere in Winlogon

Can someone please confirm they also see this? I expected Winlogon to be rock solid.

Thanks
Jonesey007Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

acl-puzzCommented:
you mean clients are getting shutdown automatically?if this is correct try follwing

use this gpo path shown in picture attached  and delete administrator from it apply and ok and issue gpupdate command





 
rs.JPG
0
Jonesey007Author Commented:
Hi thanks for reply acl-puzz

Sorry i didnt explain myself very well
We have been experiencing 21A BSODs at shutdown on our build. They are pretty rare and unfortunatly, they have not been leaving any dump files (probably because it is a user mode crash, not kernel)
On our build we modify the GINA so i assumed it had something to do with that. I loaded on UserModeProcessDump and wasnt suprised so see Access Denied errors so thought id check a retail version of XP and to my suprise the errors were still there.
It looks as if there is Null pointer code withing the Winlogon 5.1.2600.5512 application.
I was just wondering if this is to be expected, it could be corrupting some memory which is causing my problem, i was just wondering if an expert here could confirm there are Null pointer errors in Winlogon and tell me if this is expected behaviour.

Thanks

Pete
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Jonesey007Author Commented:
Not really what i was after, but thanks for the help
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows XP

From novice to tech pro — start learning today.