Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Log Windows logoff

Posted on 2012-08-21
Medium Priority
Last Modified: 2012-09-24
Is it possible to Log Windows log off procedure?

Ive got several PCs that take 15mins to logoff, no idea whats happening. Nothing in Event Veiwer, and they just hang (no hard drive activity) and then fire into life and complete logoff.

Ive tried several fixes such as reducing WaitToKillServiceTimeout and HungAppTimeout with no success.

What I would love is some type of debug which can write to say "2012-08-21 18:31:17 - Attempting to close explorer.exe, 2012-08-21 18:31:22 - Completed closing explorer.exe".

The problem exists on Windows XP, Windows 2003 and Windows 7 PCs, and its doing my head in not being able to find a solution.

Any ideas?

Thank you
Question by:tonelm54
LVL 30

Accepted Solution

flubbster earned 2000 total points
ID: 38317626
I'm not familiar with how to do that, if possible, but there is something that you can do to try to trace down the problem. You can enable Verbose Logging. This can be done for either a domain system or a stand-alone system. I actually have every system, here and at home, enabled with this. It adds only a couple of seconds to boot/logon/logoff, but is very informative if there is a problem.

See here for instructions (very easy)


What happens is that during the logon/logoff process, a small window will be displayed with each process/app that is being loaded, unloaded, network connection, etc. You want to watch for one to stay on the screen for a long time. That will be your problem child. You may be able to solve it from there once you know what is causing the delay.
LVL 24

Expert Comment

by:Nagendra Pratap Singh
ID: 38317627
Are the PCs slow to logon too?
LVL 16

Expert Comment

ID: 38318474
Interesting you have it on such different OSs.
What 3rd-party code do they have in common?  eg Enterprise AntiVirus.
Any logoff or shutdown scripts?Any roaming profiles?

Author Comment

ID: 38383652
They all have Symantec Anti-virus installed, Im going to try and update to v12 see if that helps.... :-S
LVL 30

Expert Comment

ID: 38383782
activate verbose logging as I said. It should identify the problem for you.

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

By default the complete memory dump option is disabled in windows . If we want to enable the complete memory dump for a diagnostic purpose, we have a solution for it. here we are using the registry method to enable this.
The Windows functions GetTickCount and timeGetTime retrieve the number of milliseconds since the system was started. However, the value is stored in a DWORD, which means that it wraps around to zero every 49.7 days. This article shows how to solve t…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.

580 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question