Windows 7 'Welcome' screen hang at login

[rvdmast]

Ok another thought then:

Do you have the GPO setting "Delete user profiles older than a specified number of days on system restart" enabled?

(under Computer configuration\Administrative templates\System\User profiles )

[ianh64]

Probably not. I don't recognising having changed that but will heck next time I am logged in.

 

I had another lock-up, this time with enhanced logging and me watching. The login screen hung at 'Applying group policies'. We left it for a good hour. The only thing of note was that the machine again had resumed from standby because whilst I had changed the power plan to not suspend or hibernate for computers, there was still one in place for users and this had been applied as the default profile. So it awoke about 4am for updates and went back to sleep due to idle. So far, I cannot think of an occasion where this problem has occurred when machine has been powered up rather than come out of hibernate or standby, although reporting of this issue by teaching staff is somewhat sparse so for the ICT room machines, I can only go on belated scant reports and what I have personally witnessed by being present at the start of a class. With the machine that did hang, I was able to remotely connect and attempt to restart multimedia and shell h/w detection, the latter repeatedly shut itself down, but could not coax it back in to life even with a remote shutdown that whilst was reported, did not occur.

 

Since the spate of lock-ups in the office a week or so back, I have not had one reported on the two other office machines where the users leave themselves logged in each night and now do not standby/hibernate. But unfortunately, the nature of this problem is random so no lock-ups on 2 of 3 machines (the third that locked up was being managed differently - user logged off each night and for a period machine shut itself down only to awake at 4am for updates) does not mean that we have a confirmed work around - disable standby/hibernate.

[jconnor]

Hi, I have seen this or similiar on about 3 different machines, but can't replicate it - its random. Could anyone with the problem upload their system event logs so I can see if they are similiar.

I left a problem machine overnight and it was still stuck on the welcome screen from about 2:22 2/12/2010

 

 

With services not responding: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service.

[jconnor]

Being my first post I was unable to post a link to my logs

 

My logs MEGAUPLOAD - The leading online storage and file delivery service

[ianh64]

Does the event log you posted relate the the above date/time? I can't find any activity for at least half hour either side of 02:22 2/12/2010. Not sure what is going on (am viewing event log on a Vista machine) with the event log that I am looking at - I got a message at 21:49:30 on 2/12/2010 saying "The previous system shutdown at 8:43:20 AM on ‎3/‎12/‎2010 was unexpected." which is in the future! Possibly a result of UK/AUS time zone differences? Maybe you could post a text dump with the events leading up to the hang - I posted one above that I then went on to annotate.

 

However I would personally say that you may have more fundamental problems, possibly an issue with DNS or domain controller connectivity causing a cascade of other issues that may or may not be relevant - although you are also getting shell HW timeout events being reported which is different to the service stopping but may be related.

[jconnor]

That is weird, most likely to do with our time zones.

 

Computer starts up

Information	2/12/2010 2:22:54 PM	EventLog	6009	None	Microsoft (R) Windows (R) 6.01. 7600  Multiprocessor Free.
Information	2/12/2010 2:22:54 PM	Microsoft-Windows-UserPnp	20010	(7010)	"One or more of the Plug and Play service's subsystems has changed state. 

PlugPlay install subsystem enabled: 'true' 
PlugPlay caching subsystem enabled: 'true' 
"
Information	2/12/2010 2:22:54 PM	Service Control Manager	7036	None	The Plug and Play service entered the running state.
Information	2/12/2010 2:22:54 PM	Service Control Manager	7036	None	The Power service entered the running state.
Information	2/12/2010 2:22:54 PM	Service Control Manager	7036	None	The DCOM Server Process Launcher service entered the running state.
Information	2/12/2010 2:22:54 PM	Microsoft-Windows-FilterManager	6	None	File System Filter 'luafv' (6.1, ‎2009‎-‎07‎-‎14T10:26:13.000000000Z) has successfully loaded and registered with Filter Manager.
Information	2/12/2010 2:22:54 PM	Service Control Manager	7036	None	The RPC Endpoint Mapper service entered the running state.
Information	2/12/2010 2:22:54 PM	Service Control Manager	7036	None	The Remote Procedure Call (RPC) service entered the running state.
Information	2/12/2010 2:22:54 PM	Service Control Manager	7036	None	The Windows Event Log service entered the running state.
Information	2/12/2010 2:22:54 PM	Service Control Manager	7036	None	The Multimedia Class Scheduler service entered the running state.
Information	2/12/2010 2:22:54 PM	Service Control Manager	7036	None	The Windows Audio Endpoint Builder service entered the running state.
Information	2/12/2010 2:22:54 PM	Service Control Manager	7036	None	The Windows Audio service entered the running state.
Information	2/12/2010 2:22:54 PM	Service Control Manager	7036	None	The User Profile Service service entered the running state.
Information	2/12/2010 2:22:54 PM	Service Control Manager	7036	None	The Group Policy Client service entered the running state.
Information	2/12/2010 2:22:54 PM	Service Control Manager	7036	None	The Themes service entered the running state.
Information	2/12/2010 2:22:54 PM	Service Control Manager	7036	None	The System Event Notification Service service entered the running state.
Information	2/12/2010 2:22:54 PM	Service Control Manager	7036	None	The COM+ Event System service entered the running state.
Information	2/12/2010 2:22:54 PM	Service Control Manager	7036	None	The Offline Files service entered the running state.
Information	2/12/2010 2:22:54 PM	Service Control Manager	7036	None	The Security Accounts Manager service entered the running state.
Information	2/12/2010 2:22:54 PM	Service Control Manager	7036	None	The Desktop Window Manager Session Manager service entered the running state.
Warning	2/12/2010 2:22:58 PM	Microsoft-Windows-Wininit	11	None	Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications.
Information	2/12/2010 2:23:05 PM	Service Control Manager	7036	None	The Sophos Anti-Virus service entered the running state.
Information	2/12/2010 2:23:05 PM	Service Control Manager	7036	None	The Network Store Interface Service service entered the running state.
Information	2/12/2010 2:23:05 PM	Service Control Manager	7036	None	The TCP/IP NetBIOS Helper service entered the running state.
Information	2/12/2010 2:23:05 PM	Microsoft-Windows-Dhcp-Client	50036	Service State Event	DHCPv4 client service is started
Information	2/12/2010 2:23:06 PM	Service Control Manager	7036	None	The DHCP Client service entered the running state.
Information	2/12/2010 2:23:06 PM	Microsoft-Windows-DHCPv6-Client	51046	Service State Event	DHCPv6 client service is started
Information	2/12/2010 2:23:06 PM	Service Control Manager	7036	None	The DNS Client service entered the running state.
Information	2/12/2010 2:23:06 PM	Service Control Manager	7036	None	The Shell Hardware Detection service entered the running state.
Information	2/12/2010 2:23:06 PM	Service Control Manager	7036	None	The Task Scheduler service entered the running state.
Information	2/12/2010 2:23:06 PM	Service Control Manager	7036	None	The Print Spooler service entered the running state.
Information	2/12/2010 2:23:06 PM	Service Control Manager	7036	None	The Base Filtering Engine service entered the running state.
Information	2/12/2010 2:23:06 PM	Service Control Manager	7036	None	The Windows Firewall service entered the running state.
Information	2/12/2010 2:23:06 PM	Service Control Manager	7036	None	The Netlogon service entered the running state.
Information	2/12/2010 2:23:06 PM	Service Control Manager	7036	None	The Workstation service entered the running state.
Information	2/12/2010 2:23:07 PM	Service Control Manager	7036	None	The Andrea ADI Filters Service service entered the running state.
Information	2/12/2010 2:23:07 PM	Service Control Manager	7036	None	The Cryptographic Services service entered the running state.
Information	2/12/2010 2:23:07 PM	Service Control Manager	7036	None	The Diagnostic Policy Service service entered the running state.
Information	2/12/2010 2:23:07 PM	Service Control Manager	7036	None	The NMSAccessU service entered the running state.
Information	2/12/2010 2:23:07 PM	Service Control Manager	7036	None	The Network Location Awareness service entered the running state.
Information	2/12/2010 2:23:08 PM	Service Control Manager	7036	None	The Function Discovery Resource Publication service entered the running state.
Information	2/12/2010 2:23:09 PM	Service Control Manager	7036	None	The SAP On-Reboot Installation Service service entered the running state.
Information	2/12/2010 2:23:09 PM	Service Control Manager	7036	None	The Program Compatibility Assistant Service service entered the running state.
Information	2/12/2010 2:23:09 PM	Microsoft-Windows-Application-Experience	201	None	The Program Compatibility Assistant service started successfully.
Information	2/12/2010 2:23:09 PM	Service Control Manager	7036	None	The Sophos Anti-Virus status reporter service entered the running state.
Information	2/12/2010 2:23:10 PM	Service Control Manager	7036	None	The Application Virtualization Service Agent service entered the running state.
Information	2/12/2010 2:23:11 PM	Service Control Manager	7036	None	The Sophos Agent service entered the running state.
Information	2/12/2010 2:23:11 PM	Service Control Manager	7036	None	The Sophos AutoUpdate Service service entered the running state.
Information	2/12/2010 2:23:11 PM	Service Control Manager	7036	None	The Sophos Message Router service entered the running state.
Information	2/12/2010 2:23:12 PM	Microsoft-Windows-Winlogon	7001	(1101)	User Logon Notification for Customer Experience Improvement Program
Information	2/12/2010 2:23:13 PM	Service Control Manager	7036	None	The Sophos Web Intelligence Service service entered the running state.
Information	2/12/2010 2:23:14 PM	Service Control Manager	7036	None	The Superfetch service entered the running state.
Information	2/12/2010 2:23:14 PM	Service Control Manager	7036	None	The Distributed Link Tracking Client service entered the running state.
Information	2/12/2010 2:23:14 PM	Service Control Manager	7036	None	The Windows Management Instrumentation service entered the running state.
Information	2/12/2010 2:23:16 PM	Microsoft-Windows-FilterManager	6	None	File System Filter 'Sftredir' (6.0, ‎2009‎-‎12‎-‎03T11:55:52.000000000Z) has successfully loaded and registered with Filter Manager.
Information	2/12/2010 2:23:16 PM	Service Control Manager	7036	None	The SMS Agent Host service entered the running state.
Information	2/12/2010 2:23:16 PM	Service Control Manager	7036	None	The IP Helper service entered the running state.
Warning	2/12/2010 2:23:17 PM	Microsoft-Windows-DNS-Client	1014	None	Name resolution for the name c.8.0.6.8.8.3.0.1.0.0.2.ip6.arpa timed out after none of the configured DNS servers responded.
Information	2/12/2010 2:23:17 PM	Service Control Manager	7036	None	The Server service entered the running state.
Information	2/12/2010 2:23:29 PM	Service Control Manager	7036	None	The SAP On-Reboot Installation Service service entered the stopped state.
Information	2/12/2010 2:24:42 PM	Service Control Manager	7036	None	The Application Virtualization Client service entered the running state.
Information	2/12/2010 2:24:43 PM	Service Control Manager	7036	None	The Application Experience service entered the running state.
Information	2/12/2010 2:24:43 PM	Service Control Manager	7036	None	The Diagnostic Service Host service entered the running state.
Information	2/12/2010 2:24:43 PM	Service Control Manager	7036	None	The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.
Information	2/12/2010 2:24:44 PM	Service Control Manager	7036	None	The Remote Desktop Services service entered the running state.
Information	2/12/2010 2:24:44 PM	Service Control Manager	7036	None	The Diagnostic System Host service entered the running state.
Information	2/12/2010 2:24:44 PM	Service Control Manager	7036	None	The Portable Device Enumerator Service service entered the running state.
Information	2/12/2010 2:24:44 PM	Service Control Manager	7036	None	The Network List Service service entered the running state.
Information	2/12/2010 2:24:44 PM	Microsoft-Windows-Time-Service	37	None	The time provider NtpClient is currently receiving valid time data from AD1.AD.MONASH.EDU (ntp.d|[::]:123->[2001:388:608c:8d2::2b]:123).
Information	2/12/2010 2:24:44 PM	Service Control Manager	7036	None	The Windows Time service entered the running state.
Information	2/12/2010 2:24:45 PM	Service Control Manager	7036	None	The Certificate Propagation service entered the running state.
Information	2/12/2010 2:24:45 PM	Service Control Manager	7036	None	The Remote Desktop Configuration service entered the running state.
Information	2/12/2010 2:24:45 PM	Service Control Manager	7036	None	The Computer Browser service entered the running state.
Information	2/12/2010 2:24:46 PM	Service Control Manager	7036	None	The IPsec Policy Agent service entered the running state.
Information	2/12/2010 2:24:46 PM	Microsoft-Windows-Time-Service	37	None	The time provider NtpClient is currently receiving valid time data from AD1.AD.MONASH.EDU (ntp.d|[::]:123->[2001:388:608c:8d2::2b]:123).
Information	2/12/2010 2:24:47 PM	Service Control Manager	7036	None	The Remote Desktop Services UserMode Port Redirector service entered the running state.
Information	2/12/2010 2:24:48 PM	Service Control Manager	7036	None	The Windows Installer service entered the running state.
Information	2/12/2010 2:25:00 PM	Microsoft-Windows-Time-Service	35	None	The time service is now synchronizing the system time with the time source AD1.AD.MONASH.EDU (ntp.d|[::]:123->[2001:388:608c:8d2::2b]:123).

Timeout Error from ShellHWDetection

Error	2/12/2010 2:25:17 PM	Service Control Manager	7011	None	A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service.

Information	2/12/2010 2:26:44 PM	Service Control Manager	7036	None	The Portable Device Enumerator Service service entered the stopped state.
Error	2/12/2010 2:27:13 PM	Service Control Manager	7000	None	"The Background Intelligent Transfer Service service failed to start due to the following error: 
The service did not respond to the start or control request in a timely fashion."
Error	2/12/2010 2:27:13 PM	Service Control Manager	7011	None	A timeout (30000 milliseconds) was reached while waiting for a transaction response from the BITS service.

Then the computer keeps reporting certain service timeouts

 

It may be something else but it looks like the welcomeescreen hanging has got to do with that service I guess.

[ianh64]

A quick update and hopefully I am not talking too soon...

 

Since changing hibernate and standby power settings, I have had no reported re-occurrences of this. It would seem that it is most likely that there is some issue when our Dell Optiplex machines return from standby. Unfortunately, preventing the machines from going to standby does nothing for the schools power bill, so when I get the opportunity, I will configure the ICT machines to auto power down at end of school day and confirm that the ICT coordinator is happy to manually power them up at the start of the day/as needed.

[Freedom]

Just wanted to nudge that I believe this issue is to do with Standby return. On our Windows 7 RTM machines, if they return from standby or hibernate the first logon fails. I too came to the same conclusion and have since disabled the standby and hibernate options and I have had no more problems.

 

Whether this is a Windows / Driver / NIC issue is another problem entirely...

 

Curiosity, but what NICS and OS are we all having these problems on?

 

Ours is NVIDIA nForce / Win 7 RTM

[burgemaster]

A quick update and hopefully I am not talking too soon...

 

and confirm that the ICT coordinator is happy to manually power them up at the start of the day/as needed.

 

You can easily use WOL.exe to wake them up with a schedualed task in the morning if needed

Simple .bat script set to run...

 

WOL.exe 001CD089A178

WOL.exe 001CD0EB22C0

WOL.exe 001CD0E6323F

WOL.exe 001CD0EB2E2F

[AngryTechnician]

Just wanted to nudge that I believe this issue is to do with Standby return. On our Windows 7 RTM machines, if they return from standby or hibernate the first logon fails.

There is a hotfix that corrects this: The logon screen appears two times when you resume a Windows 7-based or Windows Server 2008 R2-based computer from Sleep (S3) or from Hibernation (S4)

 

The hotfix is included in Windows 7 SP1. All that said, I'm not convinced this is related to the OP's issue, especially since others here have said they experience the original problem even with sleep and hibernate completely disabled.

[Freedom]

There is a hotfix that corrects this: The logon screen appears two times when you resume a Windows 7-based or Windows Server 2008 R2-based computer from Sleep (S3) or from Hibernation (S4)

 

The hotfix is included in Windows 7 SP1. All that said, I'm not convinced this is related to the OP's issue, especially since others here have said they experience the original problem even with sleep and hibernate completely disabled.

 

Thanks for the link, a good job I am deploying a fresh SP1 image in the next few months - as this will resolve a nasty issue.

[ianh64]

We did apply the hotfix very early on in the investigation of this issue which, whilst it resolved the issue when you occasionally had to log in twice, it did not resolve the issue with the system hanging at login. We never got to the bottom of the problem as turning off sleep/hibernation was an adequate fix for us. Since applying SP1, I have not revisited the issue either to see if there is something in SP1 that may fix it.

[ramsay]

Hi,

 

We are having the same issue reported here, but we disabled suspend/hibernate months ago before we had this issue on our desktops and we have the issue there as well as laptops.

 

To confirm the issue:

- Completely random; staff (local profile) and students (roaming profile) affected on desktops and laptops. Sometimes a reboot helps, sometimes entering and exiting safe mode helps, sometimes a gpupdate helps

- Event viewer shows starting some services are timing out

- No errors in DHCP/DNS

- Happens where no printer settings are deployed (other topics have said it might be related to deployed printers)

 

We are running Windows 7 Enterprise 32 bit. I wonder if Windows 7 Professional would be a fix? Will try a few! Any other suggestions appreciated; already tried everything mentioned here and no luck.

 

Many thanks

 

[EDIT] Actually realised people are having this issue on Pro too so doubt that will help. Also forgot to mention it hangs on "Waiting for user profile service"

Edited January 11, 2012 by ramsay

[ramsay]

I found that although some computers are hanging at the user profile service, these actually go through eventually (can be 5 minutes or so). It is when "Applying Group Policy Local User and Group policy..." (think that's what it said, or similar) that it stays there forever. I looked at the "Local User and Group" settings in GP and found a setting that adds staff to the Local Admin group. I removed this and we have not had the issue since (3 days later). We were seeing this issue at least a few times a day before. Got to find another way to make staff a local admin automatically now.

 

I guess we still have an issue loading people's profiles but at least it does go through eventually. Maybe their profiles are big and our network is slow! Especially the wireless.