CSRSS Causing User Profile To Lock Up?

Good Morning Experts!
I have a issue with a machine at my workplace. Whenever a domain user and domain admin logs into this one specific machine; the user's profile locks up. This happens once you try to click on anything i.e. start bar or a short cut on the desktop. This happens on the local administrator machine profile as well.

Here is the mini dump from the machine with the Issue.  I have looked over this log for a couple days now and cannot figure anything out; any help you Experts can bring to the table would be great! I would like to figure this problem out, the only solution that my boss and I can think of is to reformat the machine I do not want to do that every time a unsolvable problem comes into play.


IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: bf404258, memory referenced
Arg2: 00000001, IRQL
Arg3: 00000000, bitfield :
      bit 0 : value 0 = read operation, 1 = write operation
      bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 805232aa, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS:  bf404258

CURRENT_IRQL:  1

FAULTING_IP:
nt!MmUnmapViewInSystemCache+39b
805232aa 8b1e            mov     ebx,dword ptr [esi]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  csrss.exe

LAST_CONTROL_TRANSFER:  from 8051ce75 to 805232aa

STACK_TEXT:  
a31705d4 8051ce75 00001087 00000015 bf7f00d8 nt!MmUnmapViewInSystemCache+0x39b
a3170618 8051d3e3 821c970c 00000100 00000000 nt!KeDetachProcess+0x61
a3170648 805ac3ee bfff7000 00009000 a3170a30 nt!KeForceResumeThread+0x30
a3170710 805ad67b e2d1f3e8 a3170a30 a31709d4 nt!PopResetCurrentPolicies+0x1e5
a31708b8 8060e925 a31709d4 00000000 00000000 nt!CmpAddToHiveFileList+0x70
a3170a68 8054140c 0000001a e185af28 0000001c nt!CmpCopyValue+0x117
a3170a7c 80500fdd badb0d00 a3170af4 a3170a00 nt!RtlIpv6StringToAddressExW+0xfe
a3170c60 bf8af3fb e23ddbe0 00000000 a3170c98 nt!IopStartNextPacketByKeyEx+0x18
a3170c90 bf8af4d3 00000000 00000001 e1b543f0 win32k!bDetermineTriangleFillRoutine+0x110
a3170ca8 bf8b2618 e23ddbe0 896c07d8 a3170cd0 win32k!bCalcGradientRectOffsets+0x86
a3170cd8 bf8c0f2b 00000000 00000000 a3170d64 win32k!xxxDeactivate+0x10c
a3170d2c bf8c0d18 04ade908 e1c76008 00000000 win32k!DestroyProcessInfo+0x269
a3170d4c 8054140c 04ade908 00000000 0522aab8 win32k!DestroyProcessInfo+0xf4
a3170d64 7c90e514 badb0d00 04ade8e4 a3ce2d98 nt!RtlIpv6StringToAddressExW+0xfe
WARNING: Frame IP not in any known module. Following frames may be wrong.
a3170d78 00000000 00000000 00000000 00000000 0x7c90e514


STACK_COMMAND:  kb

FOLLOWUP_IP:
win32k!bDetermineTriangleFillRoutine+110
bf8af3fb ??              ???

SYMBOL_STACK_INDEX:  8

SYMBOL_NAME:  win32k!bDetermineTriangleFillRoutine+110

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: win32k

IMAGE_NAME:  win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a85564f

FAILURE_BUCKET_ID:  0xA_win32k!bDetermineTriangleFillRoutine+110

BUCKET_ID:  0xA_win32k!bDetermineTriangleFillRoutine+110

Followup: MachineOwner
---------

0: kd> lmvm win32k
start    end        module name
bf800000 bf9c3b00   win32k   M (pdb symbols)          c:\windows\symbols\sys\win32k.pdb
    Loaded symbol image file: win32k.sys
    Image path: win32k.sys
    Image name: win32k.sys
    Timestamp:        Fri Aug 14 07:19:27 2009 (4A85564F)
    CheckSum:         001C41DC
    ImageSize:        001C3B00
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
dellonAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

johnb6767Commented:
!thread
!process

Post the output please.....
0
TheBDPSr. Sys EngineerCommented:
Try safe mode. If it works fine - I'd start with a reinstall of a more up to date video driver. Chances are that when the user logs in it's attempting to change the resolution and hanging. Just a thought. If that doesnt work, you might want to reinstall the latest service pack. There is a chance win32k.sys is corrupt. Can you log on locally (non domain) with no problems?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
dellonAuthor Commented:
TheBDP.

Logging on locally yeilds same results, I am trying safeboot now and try updating the video driver as well will report back.
0
dellonAuthor Commented:
Updating to newest video driver worked. Thank you!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.