Questions tagged [winlogon.exe]

15 questions
5
votes
3 answers

What is winlogon.exe -SpecialSession?

I'm running Windows 8 Enterprise. A couple of times now, I've noticed multiple winlogon.exe processes running (accompanied by as many extra csrss.exe and dwm.exe). Today I saw one extra, but the first time I noticed it, there were five or six…
4
votes
1 answer

How to display the message "Press Ctrl+Alt+Del so as to login" before displaying the login window

On some computers I have a security display that asks me to "press Ctrl+Alt+Del" so as I can go to the Login window with username password and so on, even at boot (I think so)... But on some computers I don't have that message at boot. Do you know…
Stephane Rolland
  • 460
  • 7
  • 23
2
votes
1 answer

Replace Windows logon ui (gina) with a win32 application

In fact I'm designing an application that handles the users authentication(verification of user name and password) and grant them access of windows(load windows shell). I need to replace my program with windows logon ui. I don't talk a about writing…
wiki
  • 381
  • 3
  • 10
  • 20
2
votes
0 answers

Winlogon Event ID 811/812 event tags

In the Microsoft-Windows-Winlogon/Operationsl.evtx event log, event IDs 811 and 812 record the start and end of Winlogon events. The Data tag named Event specifies the session event type, e.g. in the linked screenshot the '5' circled indicates a…
1
vote
0 answers

How to create an administrator account only used for UAC and prevent from WinLogon?

I am trying to create an administrator account to be used only as a UAC credential prompt when launching specific command (such as user account creation). I also want to prevent from login with this account on the WinLogon interface. Is it possible…
1
vote
0 answers

How to start the Windows shell/desktop (explorer.exe) if the computer has been started with a custom "Winlogon" shell (different than explorer.exe)?

For a kiosk application, I need to not start the Windows desktop/start menu on boot, but rather, a custom application instead. I set HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell to c:\myapp\myapp.exe and it…
Basj
  • 2,143
1
vote
1 answer

Retain cached credentials after rejoin

I'm trying to create a script that unjoins (adds to workgroup) and then rejoins to the domain for people that work via VPN but have a deleted computer account in AD. This will add the machine to a workgroup (batch, yes I am aware there is…
DaBeast
  • 21
  • 4
0
votes
0 answers

winlogon.exe corrupted. Regular fixing methods do not work

In the morning, when I switched on my computer, I was faced with an error saying that winlogon.exe is missing or corrupted. I logged on to my USB OS and replaced the winlogon.exe on the computer (which was 298kb) with the one on my pendrive (which…
Sanoo
  • 565
0
votes
1 answer

Unlock/login Windows 7 with keyboard only

The Windows 7 login/lock screen sucks because you need to click first at the user icon and then enter the password. This not only inconvniently requires both Mouse and keyboard, I often have trouble starting up my laptop very dimmed and I can't see…
divB
  • 629
0
votes
1 answer

Winlogon.exe causes C++ runtime error

Recently I've become unable to log into my Dell Precision M2400. It uses the Dell Controlpoint login GUI instead of the typical windows one, and has now started giving me a runtime error on winlogon.exe that ends with a c000021a BSOD. I have tried…
Evan
  • 530
0
votes
1 answer

Display modesetting in Windows logon screen

I'd like to run an interactive scheduled task at startup, before user logon. By "interactive", I mean that I need to access Windows' CCD api to set the screen resolution/refresh rate/main display ("modesetting" in linux terms), in the interactive…
0
votes
0 answers

Winlogon\Notify Registry Key

If I delete/modify the HKLM\SOFTWARE\MicrosoftWindowsNT\CurrentVersion\Winlogon\Notify registry key, will this disable Winlogon events from being past to the event log? The Windows Dev Center entry is a bit unclear about the…
0
votes
1 answer

During windows logon process, what is the sequence for Profile Load and GPO?

According to this article: https://blogs.technet.microsoft.com/markrenoden/2015/07/28/windows-enterprise-client-boot-and-logon-optimization-part-13-boot-phase-winlogon/, User Profile loads after Group policy is applied. However, when I look at event…
Akshat
  • 21
-1
votes
1 answer

Windows login against AD without joining it

I read here and there that it’s possible to authenticate against an AD without the computer being a member of it. I’m having a hard time since few days trying, I manually set the DNS on my laptop (Win10 pro) to the AD, I tried on a freshly installed…
Max13
  • 101
-3
votes
1 answer

I have 4 Winlogons running in my computer

i usually only have 1 running i been searching on internet and some people say when you have over one winlogon.exe you are being keylogged im actually being keylogged or im just overreacting? im using a windows 8
Guest
  • 1