DCUK6 Posted May 29, 2018 Posted May 29, 2018 Hi All, Anyone else getting the black screen with just a mouse cursor? Just tried installing a new image on a new machine to make sure it isnt an old image causing issues. When a user logs into the domain a computers with 1709 or later they can get a long wait with just a black screen.
dapaulio Posted May 29, 2018 Posted May 29, 2018 Just throwing it out there... Any printers being installed/deployed. Have you tried with bare minimal group policies. Only reason I say, we have had similar symptoms when I installed printer driver became corrupt on a windows 7 client
DCUK6 Posted May 30, 2018 Author Posted May 30, 2018 Shouldnt be printers as i dont automatically push them. Just tried reinstalling with no gpo's applied and went through fine. Wonder if its applocker related.
DalekSec Posted May 30, 2018 Posted May 30, 2018 Have you tried doing ctrl+alt+del and then doing a run command to start explorer? I know this doesn't fix the problem but can help pin point it!
DCUK6 Posted June 4, 2018 Author Posted June 4, 2018 So new images seem to be installing fine now. But users logging in still randomly get the black screen and have a long wait before it loads. They can do ctrl+alt+delete and get all the options but i can seem to replicate. Applocker logs show nothing blocked, as do windows logs.
dapaulio Posted June 5, 2018 Posted June 5, 2018 (edited) In group policy can you run group policy wizard on the affected user and on the affected computer. Second are their any user settings on computer ou assigned group policies I’m placing a hunch on it is a user policy of some sorts. You are showing all the same symptoms I had. I had logon script for printers with group policy loop back deployed under a computer ou that was causing mine black screen. Took me ages to diagnose as it was only one script affecting one area randomly Edited June 5, 2018 by dapaulio
snagrat Posted June 5, 2018 Posted June 5, 2018 I am having same issue on 1803 but cannot pin point the issue. At first I thought it was Kaspersky AV but not so sure now.
haci Posted June 6, 2018 Posted June 6, 2018 Occasionally have similar issues with our W10 desktops, as someone else said generally speaking a ctrl + alt +del will resolve it (not a fix I know especially as it's not an option for students logging in). Have yet to find the cause but it's very infrequent and seemingly random in occurance for us.
DCUK6 Posted June 6, 2018 Author Posted June 6, 2018 (edited) In group policy can you run group policy wizard on the affected user and on the affected computer. Second are their any user settings on computer ou assigned group policies I’m placing a hunch on it is a user policy of some sorts. You are showing all the same symptoms I had. I had logon script for printers with group policy loop back deployed under a computer ou that was causing mine black screen. Took me ages to diagnose as it was only one script affecting one area randomly Have one policy that had user settings for printers and no loopback, just deleted the link anyway as its not needed. Happening to staff and students which narrows it down to the shared policy if it is something in there. Ctrl+alt+del on it own doesnt load the gui, just takes you to the normal screen with lock,switch user etc. Thats the annoying bit, its so random. Staff have no roaming profiles, just folder redirection. Students do have roaming. Had a bit of a tidy up of the GPOs but nothing that would seem to cause this. Edited June 6, 2018 by DCUK6
DCUK6 Posted June 14, 2018 Author Posted June 14, 2018 (edited) Had this on 2 laptops today. Ran explorer.exe from impero and that opened explorer fine, ctrl+alt+delete loaded its normal screen. Just trying to remove the profile path from the student with the issue. Edited June 14, 2018 by DCUK6
Oaktech Posted June 14, 2018 Posted June 14, 2018 I see this a lot - I think it's something to do with Impero in my instance, but I'm not 100% 1
Mic_Impero Posted June 14, 2018 Posted June 14, 2018 @DCUK6 - there are quite a few thread around 'geek listing various different causes. A particular build of windows changed the behaviour of some DLLs which Impero didn't like, and Impero became one of those causes. We since fixed that (quite a while ago) and as far as we know now, this issue isn't caused by running Impero. If you are an Impero customer, please check the version number you're running (specifically on a machine you've seen the problem on). I can't remember off the top of my head which version the fix was in but it was around 6.0 or 6.1, and we're on 6443 now. If I can assist in moving you to the latest version please give me a shout. Mic @ Impero
DCUK6 Posted June 14, 2018 Author Posted June 14, 2018 Yep, your right. Removed impero and login took seconds. Phoning them now
DCUK6 Posted June 14, 2018 Author Posted June 14, 2018 @DCUK6 - there are quite a few thread around 'geek listing various different causes. A particular build of windows changed the behaviour of some DLLs which Impero didn't like, and Impero became one of those causes. We since fixed that (quite a while ago) and as far as we know now, this issue isn't caused by running Impero. If you are an Impero customer, please check the version number you're running (specifically on a machine you've seen the problem on). I can't remember off the top of my head which version the fix was in but it was around 6.0 or 6.1, and we're on 6443 now. If I can assist in moving you to the latest version please give me a shout. Mic @ Impero Running 6.4.43, just on the phone to one of your guys now.
Oaktech Posted June 14, 2018 Posted June 14, 2018 @DCUK6 - there are quite a few thread around 'geek listing various different causes. A particular build of windows changed the behaviour of some DLLs which Impero didn't like, and Impero became one of those causes. We since fixed that (quite a while ago) and as far as we know now, this issue isn't caused by running Impero. If you are an Impero customer, please check the version number you're running (specifically on a machine you've seen the problem on). I can't remember off the top of my head which version the fix was in but it was around 6.0 or 6.1, and we're on 6443 now. If I can assist in moving you to the latest version please give me a shout. Mic @ Impero It appeared when we went to 6249... I'm looking at doing an upgrade to the latest version first week of summer holidays...
Mic_Impero Posted June 14, 2018 Posted June 14, 2018 Ok, thank you for the update all of you. Will speak with the team to collate any reports of this that we have and see if we can spot some patterns.
DCUK6 Posted June 14, 2018 Author Posted June 14, 2018 Quick update: Got sent some injection exclusions to add into the impero server. On the two machines ive tested now we seem to be getting the Windows 10 "Getting things ready" screen again which i havnt seen in a while and logon times seemed reasonable again. Going to see if i can get a class to tryout the laptops again.
Mic_Impero Posted June 14, 2018 Posted June 14, 2018 (edited) We've previously been reluctant to suggest blanket adding dllhost as this is essentially a surrogate for running other processes. So anything running within this process we wouldn't inject. The more we understand about this, the less nervous we become and so it may be time to include this as a default. I'll speak to the team about the current defaults and look to add the below. In the meantime, here's the list we've this morning shared with @DCUK6 . If this proves to have a positive impact (it would be great if you could both feedback) i'll pass this back to the team to assist with the rest of our customer base. Thank you Mic Application: Description: fontdrvhost.exe Windows Font Driver Management dwm.exe Desktop Window Manager consent.exe User Account Control werfault.exe Windows Error Reporting dllhost.exe COM Surrogate Edited August 16, 2018 by elsiegee40 Corrected to consent.exe
Oaktech Posted June 14, 2018 Posted June 14, 2018 (edited) Application: Description: fontdrvhost.exe Windows Font Driver Management dwm.exe Desktop Window Manager consent.exe User Account Control werfault.exe Windows Error Reporting dllhost.exe COM Surrogate I had all the exclusions except DLLHost in already. I've added it and rebooted a the suites. Initial results seem to be that it is shortening logins from sometimes upwards of 5 minutes to around 40 seconds... Edited August 16, 2018 by elsiegee40 Corrected to consent.exe
Mic_Impero Posted June 14, 2018 Posted June 14, 2018 OK, thanks for the feedback. I'll speak with the team around adding this as a default.
Andycat Posted June 19, 2018 Posted June 19, 2018 We have all those in our list, plus more, and are getting increasing black screens still.
Mic_Impero Posted June 19, 2018 Posted June 19, 2018 @Andycat We'll be happy to work with you to get to the bottom of this. Please could you PM me your details, we'll be in touch ASAP. Thanks Mic
DCUK6 Posted June 20, 2018 Author Posted June 20, 2018 After a few days, The exclusions seems to have helped. We do still seem to get the odd black screen but it only lasts a few minutes rather than 10-20.
DCUK6 Posted June 21, 2018 Author Posted June 21, 2018 (edited) The black screen problems just wernt being reported as i was out for a few days. Still exists. Call to impero and checked the logs and the new exclusion for injection wernt applied.Need to delete the pending folder inC:\Program Files (x86)\Impero Solutions Ltd\Impero Client\Updateand give it a reboot or 2. Setup a GPP folder item to delete this and apply it once so it doesnt affect future updates. Also setup exclusions for our AV as the self protection was stopping it being applied to these files. @Andycat Check the log on the c drive. "ImperoInjectionLog.txt" Edited June 21, 2018 by DCUK6
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now