index.dat locked by winlogon.exe preventing roaming profiles to be completely unloaded on client PCs

Greetings,

I posted this thread in the server instances earlier because it's over my whole environment that this occurs, but since someone there told me to post it here, here goes:

We have a problem with the index.dat (*) of locked files by the winlogon.exe process preventing the profiles on the computer to be completely empty when you connect to the wide. Most of the time, after that the user is disconnected, we cannot not even manually delete this file until a few minutes after the disconnection. For example, a script to automatically delete these files during log off is unfortunately useless.

I searched on the internet and saw a lot of people with this or similar problems, but either there was no response or did not have solutions for our environment.

The problem occurs on all the BONES in our environment (Windows 2000, Windows XP, Windows 7) and all versions of IE (IE 6, IE 7 and IE 8).

We tried the following:

-Create a profile completely (and of course delete all the computer itself)
-Disable the anti-virus
-Using the latest version of UPHClean
-Specifically exclude folders from roaming profiles (even though they are by default excluded)

index.dat (*) is located in the following folders:
-%USERPROFILE%\Cookies
-%USERPROFILE%\Local Settings\History\History.IE5\
-%USERPROFILE%\Local Settings\Temporary Internet Files\Content.IE5\

Kind regards

Bram

Hi Bram,

I found your thread in the TechNet forums where you have been redirected here. Unfortunately, I'm really ill-equipped to help you with your problem. Microsoft Answers for consumer level support and clearly your question far exceeds our support.

What I recommend doing is posting in the Windows 7 Misc on TechNet forums:
http://social.technet.Microsoft.com/forums/en/w7itprogeneral/threads

Members there is really to understand the functioning of Windows in a business environment and should have no problem to help you. I would like to apologize for the race around the forum to forum you meet to do as I know it can be frustrating.

I'm sorry I can't do more to help you!

Cody C
Microsoft Answers Support Engineer
Visit our Microsoft answers feedback Forum and let us know what you think.

Tags: Windows

Similar Questions

  • Downloads of CHC in application data creates a problem with my roaming profile

    I have a roaming profile with a size of 150 MB limit in Windows XP

    CHC files are automatically downloaded to the application data folder in this profile

    I have remove the chc files to another location

    Can someone explain how I can inform the new location of the CHC files FlashBuilder.

    AND - even better - how to organize that CHC files are downloaded to the location of my choice instead of the folder application data?

    Hi Kunlob_1 - what are CHC files?  What you download to get these CHC files?  We are trying to help you, but do not have enough information to understand your problem.

  • Why is winlogon.exe written so much data?

    Windows XP with Service Pack 3.

    If I'm checking winlogon.exe on the Task Manager, the bytes to write I/O is always increasing and gets order of 100 francs of MB or more.

    What he writes to and where?

    Is this behavior is legitimate?

    Hello

    1 how long have you been faced with this problem?
    2. don't you make changes on the computer before this problem?

    The process "winlogon.exe" runs in the background. Winlogon is a part of the Windows login subsystem and is necessary for the user authorization and activation of Windows controls.

    The winlogon.exe file is located in the C:\Windows\System32 folder. In other cases, winlogon.exe is a virus, spyware, Trojan or worm.

    Step 1: Check for the issue in the clean boot state.

    From your computer by using a minimal set of drivers and startup programs so that you can determine if a background program is interfering with your game or program. This type of boot is known as a "clean boot".

    Reference:
    How to configure Windows XP to start in a "clean boot" State
    http://support.Microsoft.com/kb/310353

    When you are finished troubleshooting, follow these steps to reset the computer to start as usual:

    1. click on start and then click Run.
    2. type msconfig and click OK.

    The System Configuration Utility dialog box appears.

    3. click on the tab general, click Normal Startup - load all services and device drivers and then click OK.
    4. When prompted, click on restart to restart the computer.

    Step 2: Also, viruses or malware scan and check.
    http://www.Microsoft.com/security/scanner/en-us/default.aspx
    http://www.Microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356

  • Csrss.exe & winlogon.exe shown in 'process' of the Task Manager with no user name or from a cache. How can I remove or put an end to this process?

    Csrss.exe is a knowledge trojen or spyware to invade the PC security

    Hi Albert,

    Csrss.exe, this is the part of the user mode of the subsystem Win32 (Win32.sys being the kernel-mode portion). CSRSS means client/server run-time Subsystem and is an essential subsystem that must run continuously. CSRSS is responsible for console windows, creating or deleting threads, and some parts of the 16-bit virtual MS-DOS environment.

    Winlogon.exe is the part of Windows Login subsystem. This process is responsible for managing the security key sequence (by pressing Ctrl + Alt + Delete before you see the logon box), loading of user profiles, the locking system when a screensaver is running and check the activation key for the operating system.

    I suggest you to run the Microsoft Safety Scanner and check if there is no virus.

    Microsoft Safety Scanner: http://www.microsoft.com/security/scanner/en-us/default.aspx

    Note: The Microsoft Safety Scanner ends 10 days after being downloaded. To restart a scan with the latest definitions of anti-malware, download and run the Microsoft Safety Scanner again. The data files that are infected can be cleaned by removing the file completely, which means that there is a risk of data loss.

    Let us know the status of the issue.

  • Re: Cannot connect - how can I fix the error "Bad Winlogon.exe - Image"?

    Last night, my laptop did something weird. The screen is blue and it has conducted an audit. The audit was in three parts (that's all I remember) once this is done, my laptop back running and it worked very well.

    Later that morning, he crashed and restarted, but when it comes to where he usually displays user logons, it came with an error message. The title was winlogon.exe - bad image
    and the message describes how the file is incorrect.

    Now, my laptop won't let connect me. How can I fix it?

    It seems that the file system was corrupted unfortunately he touched one of the important files needed for windows to boot.

    You will need a bootable CD to repair the problem for that I recommend Microsoft Diagnostics and Recovery Toolset, you can download from http://www.microsoft.com/downloads/details.aspx?familyid=5D600369-0554-4595-8AB4-C34B2860E087&displaylang=en

    Run the Setup program, go to the installation folder and burn "erd50.iso" as an image (not a data CD) file using software such as Nero.
    Then you need to boot from the CD I do not know how it comes to your laptop so check the manual or change the boot order in BIOS whether it is the method as start the recovery disc.

    When the software is loaded will ask that the Windows installation you want to repair if no disc i.e. C: is offered in the drop-down list, then you may need to change the BIOS setting regarding the AHCI mode, compatible and under tension when you are finished.
    If drive C is visible then the hard drive is accessible, however, you must select "does not fix an installation of Windows." and click OK.

    Click Start, then select "Command prompt", you will get a black box with white text.

    type the following command and enter: chkdsk c: /f /r

    This command will perform a full scan of your hard disk and correct any errors, he can find that could take up to 45 minutes depending on the size of your disk.
    When he finished closing and restart your laptop without the CD in the drive, if you have changed the AHCI mode in the BIOS then change back.

    If Windows still doesn't boot then boot from the CD again and restart "Command Prompt".

    type the following command and enter:

    c:
    cd\windows\system32

    If entered correctly your screen should display: C:\Windows\system32 >

    type the following command and enter: (Note: the point is necessary and not a typo)

    Copy dllcache\winlogon.exe. /y

    If all goes well you should see a message: 1 file (s) copied.

    Stop the laptop restore all the BIOS settings and hopefully Windows will boot again normally. :)

    Richard S.

  • Ntuser.dat locked by system after log off

    tons of stuff on the internet about this but no real difficulty. We currently use roaming profiles on a 2 k 3 Server for our Citrix configuration. We met the issue of temporary profiles created because the ntuser.dat file is locked by the system in their ordinary account profile. This has actually been a problem for several years to the contract and I am now cleaning.

    We have the GPO to set to point to a share to store profile data, refers to the configuration of the roaming profile.

    first thing I noticed was tons of SID keys under HKLM\Software\Microsoft\Windows NT\Current Version\Profile list. I deleted all these keys and profiles on the servers of applications under Docs & settings. now on the first login my account has been created on the server, SID created key. after disconnection of application, he removed key SID in the registry, writes data to the profile on hand but profile left on application server because ntuser.dat has been locked. then, the next time you connect, it starts to create profiles of temperature.

    Maybe it's a little much info for the real problem at hand, but I wanted to explain the Setup here incase it helps.

    does anyone have a solution for this?
    UPHClean is not an option because we use roaming profiles. they are always locked.

    or does anyone have a script that I could use that force a version of the log off?

    any info would be much appreciated. Thank you guys

    Hello

    You can ask your question in the TechNet Forums: http://social.technet.microsoft.com/Forums/en-US/home

    Thank you.

  • Infected Winlogon.exe and explorer.exe accidentally deleted on XP Pro PC - need help from recovery console

    Hello

    Windows XP Pro SP3 Dell Optiplex and been infected by Trojan in winlogon exe files and Explorer. AVG asked me if I wanted to force deletion and I foolishly agreed. Now, I get the BSOD and the message 'Windows logon done unexpectedly '.   It is a work PC and the CD only we have is the Dell CD to re - install and I know that I need as the first step recovery console. I don't know if the recovery console is on it, and then I need help for the uncomprressed explorer.ex_ and winlogon.ex_ and in their right place.

    I'm not a total newbie, but it's been some time that I used the recovery console.

    Help?  Thanks in advance and greetings to all

    Morey

    Try to be more specific with the error messages you see, so it does not guess or try things.

    Here is an example of a popular error message that sounds like yours (maybe):

    STOP: c000021a {fatal system error}
    The Windows logon process ended unexpectedly with the status of 0xc0000034 (0 x 0000000 0000000 x 0).
    The system has been shut down.

    What exactly tell your message?

    There should be copies of XP system files backup all critical already on your hard drive in the windows\system32\dllcache folder (it is this case), you may not need any expansion.

    I would like to see the exact error message, make a CD bootable Recovery Console, run chkdsk/r even if he doesn't find anything to do and then see the replacement of missing persons or suspicious files, either by copying it in the backup copies of replacement of the recovery, or from another CD Console, you can do if the Recovery Console gives you a hard time (first do the CD Recovery Console).

    First of all, you need to start on something...

    You can do a restore bootable XP CD as follows:

    If you have no XP bootable media (or aren't sure you have) create a bootable XP Recovery CD of Console and do not forget.

    This is not the same as recovery disks that may have come to a store to purchase the system.

    You can make a bootable Recovery Console CD by downloading an ISO file and burn it to a CD.

    The ISO bootable image file you need to download is called:

    xp_rec_con. ISO

    Download the ISO from here:

    http://www.mediafire.com/?ueyyzfymmig

    Use a new CD and this simple and free program to burn your ISO file and create your bootable CD:

    http://www.ImgBurn.com/

    Here are some instructions for ImgBurn:

    http://Forum.ImgBurn.com/index.php?showtopic=61

    It would be a good idea to test your bootable CD on a computer running.

    You may need to adjust the computer BIOS settings to use the CD-ROM drive as the first device to boot instead of the hard drive.  These adjustments are made before Windows tries to load.  If you miss it, you will need to restart the system again.

    When you start on the CD, follow the instructions:

    Press any key to boot from CD...

    Installing Windows... going to pronounce.

    Press 'R' to enter the Recovery Console.

    Select the installation that you want to access (usually 1: C:\WINDOWS)

    You may be asked to enter the password (usually empty).

    You should be in the folder C:\WINDOWS.  It's the same as the

    C:\Windows folder that you see in Solution Explorer.

    The Recovery Console allows base as file commands: copy, rename, replace, delete, chkdsk, fixboot, fixmbr, cd, etc.

    For a list of the commands in the Recovery Console, type help at the command prompt.

    Start by checking the integrity of your file system by using the chkdsk command.

    In the command prompt window, run the chkdsk command on the drive where Windows is installed to try to fix any problems on the afflicted player.

    Running chkdsk is fine, even if he finds no problem.  It won't hurt anything to run it.

    Assuming your boot drive is C, run the following command:

    CHKDSK C: /r

    Let chkdsk finish to correct the problems, he could find.  It may take a long time for chkdsk complete or they seem to be "stuck".  Be patient.  If the HARD drive led blinks always, chkdsk is something.  Keep an eye on the amount of the percentage to be sure that it is still making progress.  It may even seem to go back sometime.

    You must run chkdsk/r again until it finds no error to correct.

    Do, or do not. There is no test.

    I decided to implement the points for a new puppy instead of a pony!

  • Winlogon.exe has encountered a problem and had to close. __

    The following problem occurs on the computer of my husband who runs Windows XP Home Edition with Internet Explorer 7.

    Problem: at any time, whether on the web or not, restart the computer on his own repeatively.

    This error occurred on 21/11/10 to 9:1701 h.  Please tell this problem to Microsoft.  We have created an error report that you can send to us.  We will treat this report as confidential and anonymous.  To see only the data that the error report contains click here.
    Error signature
    szAppName: winlogon.exe szAppVer: 0.0.0.0 szModName: unknown
    szModVer: 0.0.0.0 offset: 0192ffb0

    Hi little09red,

    Do you remember any changes made on your computer before the show?

    Follow the methods below:

    Method 1:

    Scan System File checker on your computer, you can check the link for the steps below: Description of Windows XP and Windows Server 2003 System File Checker (Sfc.exe): http://support.microsoft.com/kb/310747

    Method 2:

    a. Insert the Windows XP CD-ROM in the CD-ROM drive and restart the computer. Follow the instructions to start the computer from the CD-ROM drive.

    b. when the Welcome to Setup screen appears, press R to start the Recovery Console.

    c. If you have a computer dual-boot or multiboot, select the installation that you want to access from the Recovery Console.

    d. When prompted to do so, type the administrator password and press ENTER. If the administrator password is blank, press ENTER.

    e. type the following command: copy d:\i386\winlogon.ex_ c:\windows\system32\winlogon.exe

    Come in

    With regard to:

    Samhrutha G S - Microsoft technical support.

    Visit our Microsoft answers feedback Forum and let us know what you think.

  • Error starting Winlogon.exe & saveboot.exe

    Hi there I'm having a problem starting with a laptop running windows xp pro.

    The problem is that winlogon.exe crashes whenever I try to start windows. (even in safe mode)

    the winlogon error is: "the instruction at"0x5ad862ca"referenced memory at"0x018a8000". The requested data was not stored in the memory due to an error of e state / of "0xc0000009c". ""Click ok to complete the program or on Cancel to debug the program.

    However, I found that if I do not press 'ok' or 'Cancel' I'm able to start with the screen on.

    Brilli.B,
    Make sure that you have tried the options listed in this thread: XP without boot troubleshooting.

    You can also run the memory diagnostic tool to test your RAM.

    Mike - Engineer Support Microsoft Answers
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • Computer Dell laptop/windows xp, got virus.tried to fix. BAD IDEA. ERROR: DLL msgina.dll UI winlogon.exe - bad image.logon failed to load.

    Computer Dell laptop of my husband has a virus that wants you to install a fake security program. I tried to fix it. OOPS. I tried to choose an earlier date to restore your computer to and I got zapped, crashed and burned. Error is now: winlogon.exe - bad image then the msgina.dll login user interface DLL failed to load, contact admin to replace the dll or restore the original dll. I don't have a boot cd. Is there a way of "back door" to get his computer works again?

    As you know now, do a restore of the system on a severely infected machine is not a good thing. Better to save the data and do a clean installation of Windows. You can try to do it yourself, but based on your post, which I would not recommend it. I don't mean to hurt your feelings, just to be practical. It would be better to take the machine to a competent local tech (not a type of BigComputerStore/GeekSquad of the place).

    If you really want to try it yourself, here's what you need to do:

    1. start the computer with Linux Livecd such as Knoppix. You are using Linux, copy the data files on an external hard drive.
    2. install Windows using the XP Dell installation CD.
    3. install all the drivers for Dell. Use the Dell Resource CD or get the drivers from the Dell advance website.
    4. switch to XP Service Pack 3 and do all the Windows updates.
    5. install a good antivirus - NOD32 (commercial), Avast or Avira (both have free versions).
    6. install all other desired programs, updated if necessary (especially if you have MS Office).
    7. analyze data saved with the antivirus before you copy it to the new clean install. MS - MVP - Elephant Boy computers - don't panic!

  • Windows Defender stops on index.dat

    Malfunction of Windows Defender

    Windows Defender scans until it reaches the file C:\Users\Cake\AppData\Roaming\Microsoft\Windows\Cookies\index.dat then stops?

    Why is this happening and how can I solve this problem?

    Hello

    Did you change your computer?

    Method 1:

    How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7

    http://support.Microsoft.com/kb/929135

    Note: After a repair, be sure to set the computer to start as usual as mentioned in step 7 in the above article.

    Method 2:

    Troubleshooting of Windows Defender

    http://support.Microsoft.com/kb/555957

    Enable or disable the Windows Defender

    http://Windows.Microsoft.com/en-us/Windows-Vista/turn-Windows-Defender-on-or-off

    Update definitions for Windows Defender

    http://Windows.Microsoft.com/en-us/Windows-Vista/keep-Windows-Defender-definitions-up-to-date

    Search for spyware and other potentially unwanted software

    http://Windows.Microsoft.com/en-us/Windows-Vista/scan-for-spyware-and-other-potentially-unwanted-software

    How to delete cookie files in Internet Explorer

    http://support.Microsoft.com/kb/278835

  • Infect winlogon.exe, explorer.exe virus and virus Hosts-DNS

    Hi guys,.

    A laptop computer, that I'm not using has recently been infected with a virus from winlogon.exe and explorer.exe and one DNS host virus.
    I tried to use avast: edition free, malwarebytes and spybot search and destroy.
    And as a last resort, I used Norton Power Eraser...

    The problem is not cleaner Antivirus or antispyware can eliminate this type of virus.
    And not boot into safe mode and try to remove it from there do not remove viruses at all.
    I took this laptop a laptop technician where he took out the hard drive and scanned for viruses, but when I came back the virus or on it.

    What can I do to remove these viruses, since it has severely reduced performance on my pc and the virus's keep redirect my Web pages, I will be using internet explore?
    I think that the virus has embedded themselves inside the windows operating system.

    Thank you
    Brent

    Hi mate

    Usually the explorer.exe, winlogon.exe are running Microsoft files and these files belongs to the Windows operating system and must be placed in the folder C:\Windows\System32.
    If it a case then these are not viruses.

    However, you can try the Antivirus application free Avira Antivirus software.
    Google for it you can download it for free.
    Scan the system and check again.

    As a last option, I recommend reinstalling the system using the Toshiba recovery disc!
    That would erase everything from the HARD drive.

  • Equium P300-16 t winlogon.exe error - badimage

    Hello

    I encounter an error that my Equium P300-16 t starts to windows Vista.

    This is what happens...

    Winlogon.exe - BadImage
    C:\windows\system32\KBDUK. DLL is not designed to run on windows or it contains an error. Try to reinstall with original media or contacting... blah blah blah.

    It began to appear after I tried to uninstall my Norton antivirus has expired. And it seems that the result of this error is that I can not connect detect wireless networks. so no internet! the age of darkness here I come.

    I don't know who this KBDUK file is so I am worried to take it off.
    I tried to restore to before I made changes but its made no difference - I broke it.

    Any help would be much appreciated.

    Thank you

    Dave

    Hello

    Maybe this KBDUK. DLL file is a virus or has something to do with your old Nero

    If you Norton from your system you must also run the Norton removal tool that you can download from the homepage of Symantec. It removes all the files of Norton products.
    Check this box!

    If it doesn t work I would try a system restore to an earlier point. After that you can try to delete Norton again.

  • Help! atieclxx.exe winlogon.exe and csrss.exe running with no description?

    Help, recently I realized that this three processes are running on my task manager process list. > aticlxx.exe and csrss.exe, winlogon.exe< they="" have="" no="" username,="" commandline,="" and="" no="" description,="" i="" cannot="" end="" any="" of="" them="" myself,="" i="" suspect="" its="" a="" malware.="" help="" is="" needed="" and="" tell="" me="" if="" it="" is="" suppose="" to="" be="" running="" at="" all,="" if="" yes="" why="" are="" there="" no="" description.="" i="" have="" trend="" micro="" titanium="" security="" running="" which="" i="" disabled="" before="" the="" dds="" scan="" below.="" i="" have="" used="" malware="" bytes="" to="" scan="" but="" nothing="" is="" detected.="" help="" of="" comfort="" is="" greatly="" needed="" as="" i="" want="" to="" know="" if="" its="" reallly="" a="" malware="" or="" just="" my="" mind="" having="" a="" false="">

    I noticed that my internet is slow with very high ping, my laptop is starting to become slower, although it is a new on
    Core i5 2.5 ghz ram 4 GB ddr3

    I ran norton 360, but nothing came out, and they are still running, I got my laptop, hard drive formatted and reinstalled windows, but they are still there

    When I start window in safe mode I find csrss.exe and winlogon.exe with description, but under normal conditions, that they are not

    pls help me :(

    Try "show processes from all users".

    Or run Process Explorer with 'show details for all processes"selected on the file menu.

    http://TechNet.Microsoft.com/en-us/Sysinternals/bb896653

  • Winlogon.exe guard popping up saying 'No disc' there is no disk in the drive. Insert a disc into drive K

    Winlogon.exe guard popping up saying 'No disc' there is no disk in the drive. Insert a disc into drive K. I won't record anything. It keeps popping up when I want to stop and he let me close. And it won't go away. I tried the Task Manager, and who is unable to complete the task. I went to his file and tried to delete, but it's not going to get out me of my PC

    Hello

    1. what version of operating system you are using?
    2. did you of recent changes on your system prior to this problem?
    3. when, exactly, you get this error message?

    You can try the steps mentioned below and check if it helps to solve the problem.

    Method 1: Scan your computer anti-virus using the Microsoft Safety Scanner.

    Microsoft safety scanner will help us to get rid of software viruses, spyware and other malicious software.

    The Microsoft Security Scanner is a downloadable security tool for free which allows analysis at the application and helps remove viruses, spyware and other malware. It works with your current antivirus software.

    http://www.Microsoft.com/security/scanner/en-us/default.aspx

    Note: The Microsoft Safety Scanner ends 10 days after being downloaded. To restart a scan with the latest definitions of anti-malware, download and run the Microsoft Safety Scanner again.

    Warning: If you run the antivirus program that is infected by the virus scan will get deleted. Therefore, reinstall the program. Also, if files and folders are affected by the virus, while they might even get deleted.

    Method 2: Try to boot in safe mode and check if the same problem occurs.

    http://Windows.Microsoft.com/en-us/Windows7/start-your-computer-in-safe-mode

     

    Method 3: If the problem does not exist in Mode without failure, then try to put your computer in a clean boot state.

    By setting your boot system minimum state helps determine if third-party applications or startup items are causing the problem.

     

    How to troubleshoot a problem by performing a clean boot in Windows Vista or Windows 7:
    http://support.Microsoft.com/kb/929135

    Note: After the boot minimum troubleshooting step, follow step 7 in the link provided to return the computer to a Normal startup mode.

    Hope this information is useful.

Maybe you are looking for

  • Music library has emptied

    My library of music on my PC (content downloaded CDs and downloaded items from the store) seems empty.  I tried to download files from an application when it happened. Is it possible to sync with my iPod that gets the music between iPod and computer?

  • Withings scale

    I bought a scale in an Apple Store and I can't connect with my Airport Express.I submit my problem to the Withings and they gave me 4 reasons: or attempt to connect to a network of 5 GHz instead of a 2.4 GHz network. The scale is able to connect to n

  • Add - ons are not load, JS popus not appear after clicking, firebug button appears

    Hello I was using Firefox 8, and then today, I noticed this not the js scripts work, the add-on does not display after a click, Firebug button at the top right is missing. Thinking that if I switch to 9 it will solve my problems, but it did not. How

  • HP Probook 4530 s quick launch buttons

    Hi, today, when I woke up the laptop the keyboard did not work... So I uninstalled with drivers I know a simple reboot would have been enough, I was too hasty... I am the keyboard driver to a standard Windows keyboard driver, and my left Fn, CTRL key

  • several Booleans to be used in the event structure

    Hello I try to set up a business with several cases of Boolean structure and manage with that. What I want to do here is: I have a set of 5 values, each of which is 'true' or 'false '. For each value 'true', I have a certain set of steps to perform.