Strange behavior of winlogon.exe and userinit.exe
Windows XP SP3. Some users have complained to periodically desktop updates with Windows delays in some seconds.I started audit:Event Type: Success AuditEvent Source: SecurityEvent Category: Detailed Tracking Event ID: 592Date: 24.09.2010Time: 13:05:47User: NT AUTHORITY\SYSTEMComputer: C-0034Description:A new process has been created: New Process ID: 2832 Image File Name: C:\WINDOWS\system32\userinit.exe Creator Process ID: 376 User Name: C-0034$ Domain: xxx Logon ID: (0x0,0x3E7)Event Type: Success AuditEvent Source: SecurityEvent Category: Detailed Tracking Event ID: 600Date: 24.09.2010Time: 13:05:47User: NT AUTHORITY\SYSTEMComputer: C-0034Description:A process was assigned a primary token. Assigning Process Information: Process ID: 376 Image File Name: C:\WINDOWS\system32\winlogon.exe User Name: C-0034$ Domain: xxx Logon ID: (0x0,0x3E7) New Process Information: Process ID: 2832 Image File Name: C:\WINDOWS\system32\userinit.exe User Name: user Domain: xxx Logon ID: (0x0,0x2858E)Event Type: Success AuditEvent Source: SecurityEvent Category: Detailed Tracking Event ID: 593Date: 24.09.2010Time: 13:05:48User: xxx\userComputer: C-0034Description:A process has exited: Process ID: 2832 Image File Name: C:\WINDOWS\system32\userinit.exe User Name: user Domain: xxx Logon ID: (0x0,0x2858E)I understand - this fuss reduces performance.But why the system do it in middle of the user work and how to get rid of it?Thanks, Alex.1 person needs an answerI do too
September 27th, 2010 2:24am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics