Tuesday, May 5, 2015

Windows Logs on and Logs off immediately

Issue: My desktop logs off immediately after logging on

"Windows keeps logging me off.."

"As soon as I log in, it logs off automatically"

"After turning the computer on I reach the screen where I click my account and type my password, and then it loads settings, and then BAM it saves settings and logs off right away."

This is a Registry issue which may be caused by a virus or an incorrect changes by a software or by yourself.When you login windows tries to find the registry keys required and if it does not find it logs off immediately.

You may not be able to log on to system using either Normal Mode or Safe Mode.Try logging into safe mode with command prompt if safe mode does not work. This occur only when Winlogon service tries to load the Windows default shell (explorer.exe) and user shell (userinit.exe) from registry. This service searches for Explorer.exe and Userinit.exe in the following path of registry:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon

RESOLUTION to Fix Log on and Log off immediately issue

Method 1:

Navigate to the following registry key and changes the value of Shell and Userinit as mentioned below.

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon

            Shell = explorer.exe
            Userinit=X:\windows\system32\userinit.exe

NOTE: These files may also be deleted by spywares. You may need to extract them using Windows CD or from another computer.

Steps for rectifying this Log on and Log off immediately problem:

  1. Log on to a networked computer or any other computer in your home connected to the same network.
  2. Open Registry and Point your cursor to HKEY_LOCAL_MACHINE.
  3. Select File > Connect Remote Registry.
    Windows Log on and Log off immediately
    Windows Log on and Log off immediately

  4. Type computer name (infected computer)
  5. Navigate to the following location in registry of destination or infected computer.
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon


Edit these two values in the right pane as mentioned.
                  Shell=explorer.exe
                  Userinit = x:\windows\system32\userinit.exe

6. Exit from Registry
7. Restart Infected computer.
8. You should be able to log on to computer and it won't do log off immediately.

If you don't have any other computer try the following step.

Try to boot the computer in safe mode with command prompt by pressing F8 during startup and selecting safe mode with command prompt.If it can be boot to safe mode with command prompt.

Open Registry Editor and Change the value of  the following two entries in Registry key.
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Shell=explorer.exe
Userinit = x:\windows\system32\userinit.exe


Windows Log on and Log off immediately
Windows Log on and Log off immediately


If there is a key named "OldUserinit", delete the "Userinit" key and rename the "OldUserinit" key to "Userinit".


Method 2:


For Windows XP - Infected with Wsaupdater.exe virus

Wsaupdater.exe is spyware that changes Userinit.exe, to Wsaupdater.exe in the registry and that's why windows logs off immediately after logging in.When you scan the computer with Ad-Aware by Lavasost it removes the Wsaupdater.exe file from the computer, but it cannot change the registry subkey back to Userinit.exe,. The registry subkey that is changed is

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Value: Userinit
Data: C:\Windows\System32\Wsaupdater.exe

Change the data value to C:\Windows\System32\Userinit.exe,.

Note- The comma following the file path information is required.

Use the Recovery Console to copy Userinit.exe to Wsaupdater.exe to allow logon capability to be restored and to let you manually correct the registry data. To do this, follow these steps:

  1. At the Recovery Console command prompt, type cd system32, and then press ENTER.
  2. Type copy userinit.exe wsaupdater.exe, and then press ENTER.
  3. Type exit, and then press ENTER.

Modify the registry

Open Registry Editor and go to the following key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
.
In the right pane, right-click userinit, and then click Modify.
Replace wsaupdater.exe with userinit.exe, (make sure to include the comma, as shown), and then click OK.
Restart your computer.
Delete the Wsaupdater.exe file.

Method 3:

IF YOU CANNOT GET THE COPY USERINIT.EXE WSAUPDATER.EXE TO WORK


1) Use the XP Install disk and go into the Recovery Console to open Command prompt from repair your computer option that comes when pressing F8 during startup in windows Vista and above.
2) "We need to replace the software hive with a previous good backup temporarily to stop logging off immediately ."
a.) type cd system32\config enter
b.) type ren software software.old enter
This renames the current software hive to software.old
c.) type copy C:\windows\repair\software enter
It should say "1 file(s) copied"
d.) Type exit to quit Recovery Console and restart.
3) Hit F8 before Windows starts to enter Safe Mode - You should hopefully be able to log in now
4) Now we need to Fix the registry
a.) Start-->Run--> type regedit, enter
b.) Select/Highlight HKEY_LOCAL_MACHINE
c.) Click File-->Load Hive
d.) Find where you saved the software.old file (C:\windows\system32\config\software.old)
e.) Just name it test
f.) Navigate to test\software\microsoft\windows nt\currentversion\winlogon
g.) Look for the Userinit field
h.) it may have blank or no value data.
- Double click on the key and type C:\windows\system32\userinit.exe,
Note: if anything differs repeat step 5 with HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
5) Restart and log back into Recovery Console
7) Restore the original hive now
a.) type cd system32\config enter
b.) type del software enter
c.) type ren software.old software enter
d.) type exit enter
8) Log back into Windows normally. This will work for sure!. You computer will not log off immediately now.

Method 4:

If the Userinit value is correct and all the above steps does not help and you are still logged off immediately after log in then it could be an issue with the user profile or registry associated with user profile too.Use the following steps to fix this issue.


  1. Restart the computer and login as a Local Admin or another domain user.
  2. Rename: C:\Users\%username%
  3. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\ProfileList\S-X-X-XX

(S-X-X-XX is the format of profile identifier or the security identifier of a user so Look through each Profile key under this reg key and view the ProfileImagePath value to find which key is related to which user).

4. Delete the profile key of the user who has problem logging in.

Logout and login as the original user who has login issue and it will create a new profile for him.
If you do not delete the registry key it will continually give a temporary profile to that user infinitely or until you rename their C:\Users\%username% folder back.

Try logging in again and it should work fine.



Incoming Search Term

  1. Windows vista desktop logs off after logging in
  2. Windows Log on and Log off immediately
  3. Logging into domain and instantly logged off
  4. Windows 7 logs on then immediately logs off
  5. Windows 8 logs on then immediately logs off
  6. Windows vistalogs on then immediately logs off
  7. Computer keeps logging off automatically .
  8. Only in my laptop flash drive files changed into shortcut
  9. I can't log into my facebook account Forum - Facebook
  10. Pc logs on then off again Forum - Windows
  11. Xp auto log off










Reactions:

2 comments:

  1. if you have another account that works or by other means: login to other account and grant problem account admin rights. worked for me

    ReplyDelete
  2. This fixed my issue. I found an extra entry in the UserInit key. It had "skipmetrosuite" in there. I believe that was left over from Win8 and that ridiculous metro screen. I had some software installed that bypassed the Metro UI and went right to the desktop.

    Ever since I had upgraded to Win10, the user account couldn't log in unless it was in the Administrators group. Not anymore. I removed that bit about skipmetrosuite and now I can do things as expected.

    Thanks.

    ReplyDelete