Windows 10 logoff issue

[kestrel1]

We are having a problem with some Windows 10 machines.

When a user logs off, the screen says signing out with the circle of white dots. It stays on this machine for an age, sometimes it will logoff or we have to turn the PC off and back on to sort it out.

I have updated the Network drivers, but this made no difference. Have looked at the event log files and done plenty of google searching, but I am at a loss as to what to do next.

I have attached the event logs from one machine.

Any help would be appreciated.

Lib-PC06.txt

Edited April 26, 2019 by kestrel1

[Patrick]

In your log file there is direct references to your school, some people might edit those out so you cannot be identified. Are you using roaming profiles/local profiles or mandatory? Edited April 26, 2019 by Patrick

[kestrel1]

New file attached.

We use mandatory profiles for the students.

Edited April 26, 2019 by kestrel1

[Hybrid]

You don't by chance have Panda AV installed do you? We found out it was a DCOM module holding on for dear life and crashing the machines on log off.

[kestrel1]

You don't by chance have Panda AV installed do you? We found out it was a DCOM module holding on for dear life and crashing the machines on log off.

No, we are using ESET Endpoint AV.

Our Windows 7 machines are fine and it is not all of the Windows 10 PC's.

[Hybrid]

Does it have some kind of anti exploit technology installed? We only found it happening on a select few models of machines we had too.

[kestrel1]

Nothing for anti exploit, nothing special at all.

[6Foot2]

Have you enabled verbose logging? It might give you a clue as to where it is getting stuck...

[kestrel1]

Finally got this sorted.

I went through the event log and found an error. This indicated that it was a group policy, so I went through things and disabled certain GPO's. This solved the problem, so I enabled the GPO's until I found the one. Luckily it was a small policy.

 

On logoff we have a batch file that runs to give a log of the users logoff time etc. We have a policy that blocks the command prompt for students, but it was also set to block scripts. It was the blocking of scripts that was causing the issue.

 

Its not ideal, but I have taken that off. The funny thing is this didn't affect Windows 7 sign outs and they use the same policy.