Blank screen after pressing CTRLALTDEL for login. No way of logging in across Domain.

[Asomodai]

Hello all.

 

After a bunch of Windows updates last night we are no able to log in a significant amount of computers, this also happens in safe mode where upon pressing control alt delete for login it turns to a blank screen with just a mouse cursor.

 

Reading up on google, someone said it was a DCOM setting in Group policy, but they didn't say exactly what, any ideas?!

 

Cheers!

[hornetwfc]

Hi,

 

We have also just experiencing this on our computers since last nights updates. Don't know what the fix is or which update has caused it yet though!

[6Foot2]

My brother's Windows 8 laptop [standalone] is doing the same thing. I haven't had a chance to look at it yet.

[hallb15]

I've had one PC do the same here this morning. Its a @VeryPC AIO Panel and was running Win 7 Pro, 64-bit.

 

PC boots up as normal but as soon as you CTRL-ALT-DEL to log in it goes to a black screen with just the mouse pointer. You can still move the mouse and the keyboard is responding as you can press SHIFT 5 times to get the sticky keys prompt.

We use ABTutor and that was working so I could see the blank screen with just the mouse cursor from my remote PC.

 

With Ofsted in I didn't have time to do much with it other than to quickly re-image it. I've not seen any others PCs in school do it as yet though...

[Fazza]

We get this randomly on random PCs and we just boot in to safe mode with low resolution video (easier said than done sometimes with Windows 8.1) and then reboot the computer and that seems to sort it out for us!

[3s-gtech]

I'd appreciate it if you find which update is doing it, to post here. I try to vet updates via WSUS to avoid this from happening. I will say that it doesn't seem to affect everything - I have done manual updates on 7, 8 and 10 yesterday/today with no ill effects.

[hallb15]

I'm not convinced its a windows update - there'd be more PCs affected across school if it was.

The same issue occurred in all versions of Safe mode (low res, command prompt, etc...)

I had to nuke it so I could get the teacher back up and running before Ofsted inspector came in - actually I was still doing it when she came in but it didn't seem to matter.

 

I had to bite my tongue though when the teacher was sticking flip chart pages to the smartboard with blu tak!

[Asomodai]

I'm not convinced its a windows update - there'd be more PCs affected across school if it was.

The same issue occurred in all versions of Safe mode (low res, command prompt, etc...)

I had to nuke it so I could get the teacher back up and running before Ofsted inspector came in - actually I was still doing it when she came in but it didn't seem to matter.

 

I had to bite my tongue though when the teacher was sticking flip chart pages to the smartboard with blu tak!

 

If its not a Windows Updates issue then why is it suddenly effecting all of us?>

 

- - - Updated - - -

 

We get this randomly on random PCs and we just boot in to safe mode with low resolution video (easier said than done sometimes with Windows 8.1) and then reboot the computer and that seems to sort it out for us!

 

 

Unfortunately this is not the case for us.

[Heisenberg]

We seem to have the same issue here. I can say it's most likely related to the recent windows update.

 

Also, we don't actually get to the login screen. Screen just flashes, and flashes more slowly in safe mode

[localzuk]

What anti-virus are you all using?

[strawberry]

i'm in too. Happened on one pc so far. Loads of updates done last night

[Asomodai]

Sophos

[Heisenberg]

System Center Endpoint Protection.

 

Recalled all yesterdays updates. We still have a few machines that cannot be rolled back, and cannot be accessed via safe mode. Re-image is looking likely just to get them back up and running.

 

Although, I'd rather not!

[Bev]

My school has just been hit in the last half hour, I had one teacher report it, and thought it was a one off, but then walked into the ICT suite and found more screens just flashing. I recalled all the WSUS updates as soon as I realised but it was too late for about 10 machines, so will have to reimage. No idea which update it is, there seem to be about 50 that arrived last night.

 

We use Symantec

[Bev]

We seem to have the same issue here. I can say it's most likely related to the recent windows update.

 

Also, we don't actually get to the login screen. Screen just flashes, and flashes more slowly in safe mode

 

 

|This is what we are seeing as well.

 

They are showing an error in the log

 

11/11/2015 13:59:22 - Application Error

Faulting application name: LogonUI.exe, version: 6.1.7601.17514, time stamp: 0x4ce79505 Faulting module name: nt...

11/11/2015 13:59:21 - Application Error

Edited November 11, 2015 by Bev

[localzuk]

Antivirus was a thought, looks like it isn't that then. I'm going to lean towards a Windows Update also.

[Asomodai]

Unfortunately our imaging system is kaputt, looking at uninstalling the updates via Shutdown Batch file and removing biometric login. No system restore by default, I also have 100 laptops encrypted which this could be affecting.... Edited November 11, 2015 by Asomodai

[thimon]

Happened here as well, only one machine (so far). Was able to boot into system repair and do a system restore from yesterday, rebooted and is now behaving. Will try updates again and see what happens...

[Asomodai]

Rumour on Technet says that it appears to be KB3097877. Trying to see what happens when I uninstall through GPO batch file. Edited November 11, 2015 by Asomodai

[Arreks]

I totally thought this was a windows update issue at first when it affected ~100 PCs today.. but then I found out there was a loopback and after fixing that it went away (which doesn't really make sense)?

[Asomodai]

I totally thought this was a windows update issue at first when it affected ~100 PCs today.. but then I found out there was a loopback and after fixing that it went away (which doesn't really make sense)?

 

Sorry, what do you mean Loopback?

[Asomodai]

Looks like Microsoft removed the update from the Patch tuesday bulletin.

[3s-gtech]

Pro-tip - use WSUS to hold back your updates, even for a little while. MS have had a bad record over the past year of releasing duff fixes, gives you some time to test them on a VM before deploying.

[Heisenberg]

Rumour on Technet says that it appears to be KB3097877. Trying to see what happens when I uninstall through GPO batch file.

 

Keep us updated!

[sidewinder]

Hasn't downloaded for us yet as we sync on a Sunday, but how do I stop new updates downloading for a while? WSUS says syncs are manual but they certainly arnt being done by me, probably by SCCM - but I can't for the life of me find where this is set in SCCM? Hardly have to touch it for updates usually