"Users" get Blank Screen at Logon, Administator's Works

I have a computer that I just loaded with XP Professional SP3, and when I logon as any standard User account, the desktop is completely blank....no taskbar or anything.  I can ctr-alt-del and get Task Manager.

If I logon as an administrator, or put any standard user in the "Administrators" group it works fine.

I need a solution that does not include reloading the software.  I have spent too many hours securing it.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Rob HutchinsonDesktop SupportCommented:
It looks like there is something in the default profile that is requiring an administrator account to run.

What happens if you:

Click the Start button then the ‘Run…’ menu choice and type in msconfig
This runs a program that will give an option to disable programs not needed to run Windows. If not sure what programs need disabling, it’s best to leave them.

Note here: the two tabs to be concerned with are the ‘Services’ and ‘Startup’ tabs.
On the Services tab, check the box, [  ] ‘Hide All Microsoft Services’ to prevent disabling services Windows needs to run.
On the ‘Startup’ tab, you can uncheck as much as needed here.

If you disable most of the programs trying to start when logging into Windows, will it let the account with user's permissions login?

Another trick to getting past that blank screen to help diagnose the problem( not as a solution) is to choose
"File . New Task (Run...) from the Task Manager and type in "explorer" to force the Windows explorer to load....it may still just hang, but it might force a profile load and let you see an error message.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
rand1964Author Commented:
I will try the the first part that you suggest when I get back in on Tuesday.

The last part I have tried.  You type in Explorer.exe on "New Task" and explorer breifly shows up in the running Apps list and then disappears and I get no errors nd no profile load.

So you think that maybe that profile is disabling certain Services as it tries to load?
I have tries a "Diagnostic" Startup in MSCONFIG and it didn't help.
Rob HutchinsonDesktop SupportCommented:
Yep, I'll attach some print screens so show you where:

Redefining Cyber Security w/ AI & Machine Learning

The implications of AI and machine learning in cyber security are massive and constantly growing, creating both efficiencies and new challenges across the board. Join our webinar on Sept. 21st to learn more about leveraging AI and machine learning to protect your business.

Rob HutchinsonDesktop SupportCommented:
At least this will tell you if it is a program that is blocking the profile from loading.

If the profile loads fine after this, then just start re-enabling a few at a time to see when the login locks up again.
rand1964Author Commented:
OK, I tried this and it dod not solve my problem, so that tells me it isn't a program that it doing it.

If the Administrators work and the "Users don't, that tells me it is a permissions thing...but where?  I have looked in the obvious places.
Rob HutchinsonDesktop SupportCommented:
Can you check the event viewer logs, both Application and system?
Rob HutchinsonDesktop SupportCommented:
maybe even the security logs.

First reboot the computer, then try to login using "user" permissions, then press CTRL ALT DEL, restart, then login as admin and check the event viewer logs to give you some clue as to what is causing the lockup.

umm, wondering also what type hardware this is, and how many different computers is this happening to?
Rob HutchinsonDesktop SupportCommented:
If you want, you can also export the log files, and then upload them here.
rand1964Author Commented:
OK...I solved it.  It is a Registry Key setting called "CrashOnAuditFail" and if it is enabled, it is to instantly shutdown the computer if the User cannot be audited by the Event Security Log.
This makes no sense to me why it is doing this because the security log is not even close to being full.  DSS requires this setting to be in place....so I am in a catch 22.  

Thank you WiRedNeT for your help, you helped point me in the right direction, and you di a fantastic job showing the graphics.  I am awarding you all the points but I am going to split the solution...and if anybody has any ideas on how to get this to work I would love to hear it.
Rob HutchinsonDesktop SupportCommented:
Found this article although it doesn't look like an exact match, it has some helpful info:

One thing it says that's interesting is that they say it might be because the security log is full.

You can try setting the security log settings to auto overwrite events as needed.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.