Winlogon.exe issue

Dear all,

We have intalled a network logon system based on smart cards. We use a Smart
Card (and CSP) with a digital certificate inside to boot up the PC's.

Some times, in different PC's and with no apparent cause or action with the
smart card we get an error from the winlogon.exe process that conducts to a
reboot. These exceptions didn't happen before the smart card winlogon
installation.

All the information we get is that there is a problem with the winlogon.exe
process, but we don't know if it is a bug in the OS caused by using smart
cards to boot up the PC's or if it is our software (CSP or GINA) which is
causing the winlogon process to fail. No debugging is possible because the
problem can not be reproduced and the PC is rebooted automatically after
clicking Ok in the alert window.

As I mentioned before, the exception may happen without accesing to the card
(neither physically nor through any software), just working normally with a
MSoffice aplication, for example.

We have no idea of what may be going on.

Has anyone notice this issue before?, Is it an OS bug or may be our software
that is causing the winlogon process failure?, Any idea?.

Thank's for any clue.

Best regrads

Fer

karl
Wed Jul 12 06:17:47 CDT 2006


"Fernando" <x509smp000@sermepa.es> wrote in message
news:eaAXEFapGHA.4548@TK2MSFTNGP03.phx.gbl...
> Dear all,
>
> We have intalled a network logon system based on smart cards. We use a
> Smart
> Card (and CSP) with a digital certificate inside to boot up the PC's.
>
> Some times, in different PC's and with no apparent cause or action with
> the
> smart card we get an error from the winlogon.exe process that conducts to
> a
> reboot. These exceptions didn't happen before the smart card winlogon
> installation.
>
> All the information we get is that there is a problem with the
> winlogon.exe
> process, but we don't know if it is a bug in the OS caused by using smart
> cards to boot up the PC's or if it is our software (CSP or GINA) which is
> causing the winlogon process to fail. No debugging is possible because the
> problem can not be reproduced and the PC is rebooted automatically after
> clicking Ok in the alert window.

The message you're clicking OK on, is it possible to write it down word for
word, and what exactly does it say? Does a Google search say anything about
that error message?

Are your computers configured to automatically restart after a system
failure, e.g. under My Computer Properties, Advanced, Startup? Is it
possible to obtain a full memory dump via that same screen?

I think I'd first want help from the vendor for the third-party GINA and
other software installed to support the smart cards.

--

kind regards,
Karl Levinson, CISSP, CCSA, MCSE [MS MVP]
--------------------------------
Microsoft Security FAQ:
http://securityadmin.info

Fernando
Thu Jul 13 08:10:15 CDT 2006

Hi Karl,

The exception we get is as follows (It is in Spanish, so I will try to
translate as good as I can).

In the title bar -> Winlogon.exe - Application error

In the text of the alert window -> The instruction in 0x7c921f52 refers to
memory in 0x00740063. The memory can not be 'read'.

Accept to finalize
Cancel to debugg.

The adresess are different in every issue but the error are more or less the
same.

This issue happens much more frecuently in PC's with more than one PC/SC
reader connected.

The PC's are not configured to restart after a system failure

I´ll check the other ponits you mention.

Thank's for your comments

Best regards

"karl levinson, mvp" <levinson_k@securityadmin.info> escribió en el mensaje
news:ulSWOTapGHA.4216@TK2MSFTNGP04.phx.gbl...
>
> "Fernando" <x509smp000@sermepa.es> wrote in message
> news:eaAXEFapGHA.4548@TK2MSFTNGP03.phx.gbl...
> > Dear all,
> >
> > We have intalled a network logon system based on smart cards. We use a
> > Smart
> > Card (and CSP) with a digital certificate inside to boot up the PC's.
> >
> > Some times, in different PC's and with no apparent cause or action with
> > the
> > smart card we get an error from the winlogon.exe process that conducts
to
> > a
> > reboot. These exceptions didn't happen before the smart card winlogon
> > installation.
> >
> > All the information we get is that there is a problem with the
> > winlogon.exe
> > process, but we don't know if it is a bug in the OS caused by using
smart
> > cards to boot up the PC's or if it is our software (CSP or GINA) which
is
> > causing the winlogon process to fail. No debugging is possible because
the
> > problem can not be reproduced and the PC is rebooted automatically after
> > clicking Ok in the alert window.
>
> The message you're clicking OK on, is it possible to write it down word
for
> word, and what exactly does it say? Does a Google search say anything
about
> that error message?
>
> Are your computers configured to automatically restart after a system
> failure, e.g. under My Computer Properties, Advanced, Startup? Is it
> possible to obtain a full memory dump via that same screen?
>
> I think I'd first want help from the vendor for the third-party GINA and
> other software installed to support the smart cards.
>
> --
>
> kind regards,
> Karl Levinson, CISSP, CCSA, MCSE [MS MVP]
> --------------------------------
> Microsoft Security FAQ:
> http://securityadmin.info
>
>
>