CSRSS Causing User Profile To Lock Up?

Good Morning Experts!
I have a issue with a machine at my workplace. Whenever a domain user and domain admin logs into this one specific machine; the user's profile locks up. This happens once you try to click on anything i.e. start bar or a short cut on the desktop. This happens on the local administrator machine profile as well.

Here is the mini dump from the machine with the Issue.  I have looked over this log for a couple days now and cannot figure anything out; any help you Experts can bring to the table would be great! I would like to figure this problem out, the only solution that my boss and I can think of is to reformat the machine I do not want to do that every time a unsolvable problem comes into play.


IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: bf404258, memory referenced
Arg2: 00000001, IRQL
Arg3: 00000000, bitfield :
      bit 0 : value 0 = read operation, 1 = write operation
      bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 805232aa, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS:  bf404258

CURRENT_IRQL:  1

FAULTING_IP:
nt!MmUnmapViewInSystemCache+39b
805232aa 8b1e            mov     ebx,dword ptr [esi]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  csrss.exe

LAST_CONTROL_TRANSFER:  from 8051ce75 to 805232aa

STACK_TEXT:  
a31705d4 8051ce75 00001087 00000015 bf7f00d8 nt!MmUnmapViewInSystemCache+0x39b
a3170618 8051d3e3 821c970c 00000100 00000000 nt!KeDetachProcess+0x61
a3170648 805ac3ee bfff7000 00009000 a3170a30 nt!KeForceResumeThread+0x30
a3170710 805ad67b e2d1f3e8 a3170a30 a31709d4 nt!PopResetCurrentPolicies+0x1e5
a31708b8 8060e925 a31709d4 00000000 00000000 nt!CmpAddToHiveFileList+0x70
a3170a68 8054140c 0000001a e185af28 0000001c nt!CmpCopyValue+0x117
a3170a7c 80500fdd badb0d00 a3170af4 a3170a00 nt!RtlIpv6StringToAddressExW+0xfe
a3170c60 bf8af3fb e23ddbe0 00000000 a3170c98 nt!IopStartNextPacketByKeyEx+0x18
a3170c90 bf8af4d3 00000000 00000001 e1b543f0 win32k!bDetermineTriangleFillRoutine+0x110
a3170ca8 bf8b2618 e23ddbe0 896c07d8 a3170cd0 win32k!bCalcGradientRectOffsets+0x86
a3170cd8 bf8c0f2b 00000000 00000000 a3170d64 win32k!xxxDeactivate+0x10c
a3170d2c bf8c0d18 04ade908 e1c76008 00000000 win32k!DestroyProcessInfo+0x269
a3170d4c 8054140c 04ade908 00000000 0522aab8 win32k!DestroyProcessInfo+0xf4
a3170d64 7c90e514 badb0d00 04ade8e4 a3ce2d98 nt!RtlIpv6StringToAddressExW+0xfe
WARNING: Frame IP not in any known module. Following frames may be wrong.
a3170d78 00000000 00000000 00000000 00000000 0x7c90e514


STACK_COMMAND:  kb

FOLLOWUP_IP:
win32k!bDetermineTriangleFillRoutine+110
bf8af3fb ??              ???

SYMBOL_STACK_INDEX:  8

SYMBOL_NAME:  win32k!bDetermineTriangleFillRoutine+110

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: win32k

IMAGE_NAME:  win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a85564f

FAILURE_BUCKET_ID:  0xA_win32k!bDetermineTriangleFillRoutine+110

BUCKET_ID:  0xA_win32k!bDetermineTriangleFillRoutine+110

Followup: MachineOwner
---------

0: kd> lmvm win32k
start    end        module name
bf800000 bf9c3b00   win32k   M (pdb symbols)          c:\windows\symbols\sys\win32k.pdb
    Loaded symbol image file: win32k.sys
    Image path: win32k.sys
    Image name: win32k.sys
    Timestamp:        Fri Aug 14 07:19:27 2009 (4A85564F)
    CheckSum:         001C41DC
    ImageSize:        001C3B00
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
dellonAsked:
Who is Participating?
 
TheBDPSr. Sys EngineerCommented:
Try safe mode. If it works fine - I'd start with a reinstall of a more up to date video driver. Chances are that when the user logs in it's attempting to change the resolution and hanging. Just a thought. If that doesnt work, you might want to reinstall the latest service pack. There is a chance win32k.sys is corrupt. Can you log on locally (non domain) with no problems?
0
 
johnb6767Commented:
!thread
!process

Post the output please.....
0
 
dellonAuthor Commented:
TheBDP.

Logging on locally yeilds same results, I am trying safeboot now and try updating the video driver as well will report back.
0
 
dellonAuthor Commented:
Updating to newest video driver worked. Thank you!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.