Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

xp pro wont keep both users logged on


  • Please log in to reply
32 replies to this topic

#1 keithontheshore

keithontheshore

  • Members
  • 95 posts
  • OFFLINE
  •  
  • Local time:04:40 PM

Posted 22 February 2010 - 06:47 AM

I have had success getting this system up and running again with the aid of Syler in the mailware forum. after recovering from a rootkit infection, i have what seem to be windows issues. i am running xp pro sp3. when i log on to my user account and then try and switch to my wifes user account, it logs me off. usually i hear the log off chimes about three minutes after the switch from one to the other. also when i log onto my side, it displays the windows screensaver and acts like it is going into standby . there were many changes done during the recovery from the infection, so i hope this is a minor fix.
thank you in advance for any help with this issue.

BC AdBot (Login to Remove)

 


#2 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:09:40 PM

Posted 22 February 2010 - 02:31 PM

When you switch users are you prompted with a welcome screen?

#3 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:40 AM

Posted 22 February 2010 - 04:37 PM

Sometimes you need to clear the security log in the Event Viewer to allow you to switch users.

To open the Event Viewer go to Start > Control Panel > Administrative Tools > Event Viewer. Alternately, go to Start > Run and type in "eventvwr.msc" (without the quotes) and press Enter.

Beside Event Viewer, click the + (plus sign) to expand the list (if not already expanded), and then click Security.

From the Action menu, select "Clear all Events", and then click No to clear the log.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#4 keithontheshore

keithontheshore
  • Topic Starter

  • Members
  • 95 posts
  • OFFLINE
  •  
  • Local time:04:40 PM

Posted 23 February 2010 - 06:12 AM

hello Budapest

I re set the event viewer, and while it seemed to help speed things up, it did not correct the problem. browser seems to load a lot faster.

hello Cryptodan

when i log from one user to another it does take me back to a welcome screen just as if i was restarting the computer. it also checks my floppy drive when i go to my user account. we did do a mbrfix when we removed the rootkit. could that be causing these problems?

thank you both for your assistance
Keith

#5 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:09:40 PM

Posted 23 February 2010 - 06:23 AM

Can you check the event logs to see if they are full? Also check c:\documents and settings\ to see if your user exists.

#6 keithontheshore

keithontheshore
  • Topic Starter

  • Members
  • 95 posts
  • OFFLINE
  •  
  • Local time:04:40 PM

Posted 23 February 2010 - 10:30 AM

I checked the event viewer and under application it appears full as well as under system both show events dating back 25 to 30 days and have 512 kb max log size. did clear security previously. all users are present in doc/set folder.

#7 keithontheshore

keithontheshore
  • Topic Starter

  • Members
  • 95 posts
  • OFFLINE
  •  
  • Local time:04:40 PM

Posted 23 February 2010 - 10:32 AM

i have also noticed feilds that i indicate to be saved such as rember user are cleared each time i re log on to my user profile.

#8 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:09:40 PM

Posted 23 February 2010 - 02:11 PM

Are you using fast user switching or the classic login?

#9 keithontheshore

keithontheshore
  • Topic Starter

  • Members
  • 95 posts
  • OFFLINE
  •  
  • Local time:04:40 PM

Posted 23 February 2010 - 02:14 PM

i am not familiar with fast switching so i assume i am using classic login

#10 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:09:40 PM

Posted 23 February 2010 - 02:23 PM

Faster User Switching

Posted Image

Classic Login:
Posted Image

#11 keithontheshore

keithontheshore
  • Topic Starter

  • Members
  • 95 posts
  • OFFLINE
  •  
  • Local time:04:40 PM

Posted 23 February 2010 - 02:25 PM

yes i am using fast switching.

#12 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:09:40 PM

Posted 23 February 2010 - 02:32 PM

Then your users should remain logged in, any error messages?

#13 keithontheshore

keithontheshore
  • Topic Starter

  • Members
  • 95 posts
  • OFFLINE
  •  
  • Local time:04:40 PM

Posted 23 February 2010 - 02:34 PM

no error messages, should i clear the event viewer?

#14 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:09:40 PM

Posted 23 February 2010 - 02:36 PM

Yes clear it. Also increase the size to about 6megs or 6000, and check over write existing entries.

Edited by cryptodan, 23 February 2010 - 02:37 PM.


#15 keithontheshore

keithontheshore
  • Topic Starter

  • Members
  • 95 posts
  • OFFLINE
  •  
  • Local time:04:40 PM

Posted 23 February 2010 - 03:16 PM

i have increased the size and noticed two error messages since i cleared all entries at 2:50 pm i did a restart and the following messages were in the event viewer logs.

in the system folder
1 security service driver(x86)service failed to start due to the following failure "system cannot find the file"

2 the server did not register with the DCOM with in the required time out

in the application folder

warning

trace level parameter is not located in the registry.default level used is 32




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users