Winlogon access violation

[Guest Fred W.]

Hello everyone!

 

I hope this is the correct place to post this. Some of my users have been

complaining of an error with the Windows logon system process. It's

throwing a BSOD with a C000021a error.

 

DRWTSN32's minidump shows:

eax=00000000 ebx=00000000 ecx=7ffdf000 edx=00000000 esi=00000000 edi=

00000000

eip=0100df06 esp=0006f1d0 ebp=0006f21c iopl=0 nv up ei pl zr na pe

nc

cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=

00000246

winlogon!IsRASServiceRunning+0x3f:

0100df06 891a mov dword ptr [edx],ebx ds:0023:00000000

=????????

 

I'm guessing this is breaking due to a RAS Service issue? I'm just not

sure. Any help would be greatly appreciated as I have searched everywhere

and not really gotten any more information.

 

Thanks!

[Guest Jian-Ping Zhu [MSFT]]

RE: Winlogon access violation

 

Hello,

 

Thank you for your post.

 

Please note the "blue death screen" issue is related to kernel crash. I

suggest you contact Microsoft CSS (CUSTOMER SERVICE AND SUPPORT), which is

the best resource to analyze the memory dump file and locate the root

cause.

 

To obtain the phone numbers for specific technology request please take a

look at the web site listed below:

http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS

 

If you are outside the US please see http://support.microsoft.com for

regional support phone numbers.

 

Besides, the following is some general information for your reference.

 

After some research, I find that several operations might cause error code

C000021A on Windows XP.

 

1. After you install the FTP service or you add the Microsoft Internet

Information Services (IIS) component in Windows XP, you may receive a

"C000021A" error message.

 

To resolve this issue, you need to install Windows XP service pack 2 which

contains this fix.

 

For more information, please refer to the following KB article:

 

Installing Internet Information Services Can Cause Problems in Windows XP

http://support.microsoft.com/default.aspx?scid=kb;EN-US;811412

 

2. If Microsoft Internet Explorer maintenance policies are being applied,

you may receive a "Stop C000021A" error message on a blue screen on a

Windows XP-based client computer during the logon process.

 

To resolve this issue, install the latest service pack for Internet

Explorer 6 and install the Latest Windows XP Service Pack.

 

For more information, please refer to the following KB article:

 

Internet Explorer Maintenance Policies May Cause an Access Violation in

Winlogon

http://support.microsoft.com/default.aspx?scid=kb;EN-US;318666

 

Moreover, the following KB article tells you how to troubleshoot a "STOP

0xC000021A" error

 

How to troubleshoot a "STOP 0xC000021A" error

http://support.microsoft.com/default.aspx?scid=kb;EN-US;156669

 

I hope this helps. Thanks.

 

Sincerely,

Neo Zhu,

Microsoft Online Support

Microsoft Global Technical Support Center

 

Get Secure! - http://www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so

that others may learn and benefit from your issue.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.