none
RDP logonui.exe shows windows 7 Professional logo then exits. Leaves logonui error in logs. RRS feed

  • Question

  • This error occurs only when connecting via remote desktop.  It does not occur when logging onto the RDP server locally (I can logon to the computer locally).  The remote server starts with the Windows 7 Professional logo displayed at the bottom of a blue screen on the client machine. A circular icon circulating then an arrow dead center.  Then a moment of black then back to the RDP app.  

    A look in the logs in Event Viewer shows the following under ERROR.

    Faulting application name: LogonUI.exe, version: 6.1.7601.17514, time stamp: 0x4ce79505
    Faulting module name: ntdll.dll, version: 6.1.7601.23572, time stamp: 0x57fd0335
    Exception code: 0xc0000374
    Fault offset: 0x000c3b9b
    Faulting process id: 0x1790
    Faulting application start time: 0x01d267d0a90edca9
    Faulting application path: C:\Windows\system32\LogonUI.exe
    Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
    Report Id: e818e673-d3c3-11e6-9e6d-0026b9168427

    There's another couple entries under Information that look like the following Fault bucket.. 

    .

    Fault bucket 1250111149, type 25
    Event Name: APPCRASH
    Response: Not available
    Cab Id: 0

    Problem signature:
    P1: LogonUI.exe
    P2: 6.1.7601.17514
    P3: 4ce79505
    P4: StackHash_1f88
    P5: 6.1.7601.23572
    P6: 57fd0335
    P7: c0000374
    P8: 000c3b9b
    P9: 
    P10: 

    Attached files:

    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_LogonUI.exe_3e33f24b5ddc1fe948deb5d6f6b92ebe6ff189_1400e730

    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: e818e673-d3c3-11e6-9e6d-0026b9168427
    Report Status: 0

    And a look at the generated "Report.wer" file from the address below...
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_LogonUI.exe_3e33f24b5ddc1fe948deb5d6f6b92

    Version=1

    EventType=APPCRASH

    EventTime=131282805197809210

    ReportType=2

    Consent=1

    UploadTime=131282805199849237

    ReportIdentifier=4681ec59-d4f7-11e6-9e6d-0026b9168427

    IntegratorReportIdentifier=4681ec58-d4f7-11e6-9e6d-0026b9168427

    Response.BucketId=1250111149

    Response.BucketTable=25

    Response.type=4

    Sig[0].Name=ApplicationName

    Sig[0].Value=LogonUI.exe

    Sig[1].Name=ApplicationVersion

    Sig[1].Value=6.1.7601.17514

    Sig[2].Name=ApplicationTimestamp

    Sig[2].Value=4ce79505

    Sig[3].Name=FaultModuleName

    Sig[3].Value=StackHash_1f88

    Sig[4].Name=FaultModuleVersion

    Sig[4].Value=6.1.7601.23572

    Sig[5].Name=FaultModuleTimestamp

    Sig[5].Value=57fd0335

    Sig[6].Name=ExceptionCode

    Sig[6].Value=c0000374

    Sig[7].Name=ExceptionOffset

    Sig[7].Value=000c3b9b

    DynamicSig[1].Name=OSVersion

    DynamicSig[1].Value=6.1.7601.2.1.0.256.48

    DynamicSig[2].Name=LocaleID

    DynamicSig[2].Value=1033

    DynamicSig[22].Name=AdditionalInformation1

    DynamicSig[22].Value=1f88

    DynamicSig[23].Name=AdditionalInformation2

    DynamicSig[23].Value=1f88975d24c5baa7a05f816b23218f1b

    DynamicSig[24].Name=AdditionalInformation3

    DynamicSig[24].Value=96dc

    DynamicSig[25].Name=AdditionalInformation4

    DynamicSig[25].Value=96dcadb04b885f8ec77939fef52af1c9

    UI[2]=C:\Windows\system32\LogonUI.exe

    UI[3]=WindowsLogonUserInterfaceHosthasstoppedworking

    UI[4]=Windowscancheckonlineforasolutiontotheproblem.

    UI[5]=Checkonlineforasolution(recommended)

    UI[6]=Checkforasolutionlater(recommended)

    UI[7]=Close

    UI[8]=WindowsLogonUserInterfaceHoststoppedworkingandwasclosed

    UI[9]=Aproblemcausedtheapplicationtostopworkingcorrectly.Windowswillnotifyyouifasolutinisavailable.

    UI[10]=&Close

    LoadedModule[0]=C:\Windows\system32\LogonUI.exe

    LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll

    LoadedModule[2]=C:\Windows\system32\kernel32.dll

    LoadedModule[3]=C:\Windows\system32\KERNELBASE.dll

    LoadedModule[4]=C:\Windows\system32\msvcrt.dll

    LoadedModule[5]=C:\Windows\system32\ole32.dll

    LoadedModule[6]=C:\Windows\system32\GDI32.dll


    • Edited by snackerdg Sunday, February 12, 2017 6:01 PM Wouldn't take this text initially
    Sunday, February 12, 2017 6:00 PM

All replies

  • The rest of the story..


    LoadedModule[7]=C:\Windows\system32\USER32.dll

    LoadedModule[8]=C:\Windows\system32\LPK.dll

    LoadedModule[9]=C:\Windows\system32\USP10.dll

    LoadedModule[10]=C:\Windows\system32\RPCRT4.dll

    LoadedModule[11]=C:\Windows\system32\apphelp.dll

    LoadedModule[12]=C:\Windows\AppPatch\AcXtrnal.DLL

    LoadedModule[13]=C:\Windows\system32\IMM32.DLL

    LoadedModule[14]=C:\Windows\system32\MSCTF.dll

    LoadedModule[15]=C:\Windows\system32\CRYPTBASE.dll

    LoadedModule[16]=C:\Windows\system32\CLBCatQ.DLL

    LoadedModule[17]=C:\Windows\system32\ADVAPI32.dll

    LoadedModule[18]=C:\Windows\SYSTEM32\sechost.dll

    LoadedModule[19]=C:\Windows\system32\OLEAUT32.dll

    LoadedModule[20]=C:\Windows\system32\authui.dll

    LoadedModule[21]=C:\Windows\system32\CRYPTUI.dll

    LoadedModule[22]=C:\Windows\system32\CRYPT32.dll

    LoadedModule[23]=C:\Windows\system32\MSASN1.dll

    LoadedModule[24]=C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\COMCTL32.dll

    LoadedModule[25]=C:\Windows\system32\SHLWAPI.dll

    LoadedModule[26]=C:\Windows\system32\UxTheme.dll

    LoadedModule[27]=C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23545_none_5c06d189a00e2c29\gdiplus.dll

    LoadedModule[28]=C:\Windows\system32\DUI70.dll

    LoadedModule[29]=C:\Windows\system32\DUser.dll

    LoadedModule[30]=C:\Windows\system32\WINSTA.dll

    LoadedModule[31]=C:\Windows\system32\SndVolSSO.DLL

    LoadedModule[32]=C:\Windows\system32\HID.DLL

    LoadedModule[33]=C:\Windows\System32\MMDevApi.dll

    LoadedModule[34]=C:\Windows\System32\PROPSYS.dll

    LoadedModule[35]=C:\Windows\system32\SETUPAPI.dll

    LoadedModule[36]=C:\Windows\system32\CFGMGR32.dll

    LoadedModule[37]=C:\Windows\system32\DEVOBJ.dll

    LoadedModule[38]=C:\Windows\system32\rdpendp_winip.dll

    LoadedModule[39]=C:\Windows\system32\WINMM.dll

    LoadedModule[40]=C:\Windows\system32\MSACM32.dll

    LoadedModule[41]=C:\Windows\system32\WTSAPI32.dll

    LoadedModule[42]=C:\Windows\system32\slc.dll

    LoadedModule[43]=C:\Windows\system32\dwmapi.dll

    LoadedModule[44]=C:\Windows\system32\xmllite.dll

    LoadedModule[45]=C:\Windows\system32\WINBRAND.dll

    LoadedModule[46]=C:\Windows\System32\VaultCredProvider.dll

    LoadedModule[47]=C:\ProgramFiles\WIDCOMM\BluetoothSoftware\BtwCP.dll

    LoadedModule[48]=C:\Windows\system32\WINSPOOL.DRV

    LoadedModule[49]=C:\Windows\system32\WS2_32.dll

    LoadedModule[50]=C:\Windows\system32\NSI.dll

    LoadedModule[51]=C:\Windows\system32\bthprops.cpl

    LoadedModule[52]=C:\Windows\system32\SHELL32.dll

    LoadedModule[53]=C:\Windows\system32\RpcRtRemote.dll

    LoadedModule[54]=C:\Windows\system32\WvCredProv.dll

    LoadedModule[55]=C:\Windows\system32\Secur32.dll

    LoadedModule[56]=C:\Windows\system32\SSPICLI.DLL

    LoadedModule[57]=C:\Windows\system32\PSAPI.DLL

    LoadedModule[58]=C:\Windows\system32\WinSCard.dll

    LoadedModule[59]=C:\Windows\system32\profapi.dll

    LoadedModule[60]=C:\Windows\system32\AmRes_en.dll

    LoadedModule[61]=C:\Windows\system32\SmartcardCredentialProvider.dll

    LoadedModule[62]=C:\Windows\System32\BioCredProv.dll

    LoadedModule[63]=C:\Windows\System32\winbio.dll

    LoadedModule[64]=C:\Windows\System32\credui.dll

    LoadedModule[65]=C:\Windows\System32\VAULTCLI.dll

    LoadedModule[66]=C:\Windows\System32\NETAPI32.dll

    LoadedModule[67]=C:\Windows\System32\netutils.dll

    LoadedModule[68]=C:\Windows\System32\srvcli.dll

    LoadedModule[69]=C:\Windows\System32\wkscli.dll

    LoadedModule[70]=C:\Windows\system32\SAMCLI.DLL

    LoadedModule[71]=C:\Windows\system32\certCredProvider.dll

    LoadedModule[72]=C:\ProgramFiles\CommonFiles\MicrosoftShared\WindowsLive\WLIDCREDPROV.DLL

    LoadedModule[73]=C:\Windows\system32\rasplap.dll

    LoadedModule[74]=C:\Windows\system32\RASAPI32.dll

    LoadedModule[75]=C:\Windows\system32\rasman.dll

    LoadedModule[76]=C:\Windows\system32\rtutils.dll

    LoadedModule[77]=C:\Windows\system32\CRYPTSP.dll

    LoadedModule[78]=C:\Windows\system32\rsaenh.dll

    LoadedModule[79]=C:\Windows\system32\OEM_Resources.dll

    LoadedModule[80]=C:\ProgramFiles\WaveSystemsCorp\Common\SsoProxy.dll

    LoadedModule[81]=C:\Windows\WinSxS\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d1cb102c435421de\ATL80.DLL

    LoadedModule[82]=C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\MSVCP80.dll

    LoadedModule[83]=C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\MSVCR80.dll

    LoadedModule[84]=C:\ProgramFiles\WaveSystemsCorp\DellPrebootManager\PrebootBiosManager.dll

    LoadedModule[85]=C:\ProgramFiles\WaveSystemsCorp\DellPrebootManager\PBMCredentialManager.dll

    LoadedModule[86]=C:\ProgramFiles\WaveSystemsCorp\TrustedDriveManager\TdmAutoLogon.dll

    LoadedModule[87]=C:\Windows\SYSTEM32\MSCOREE.DLL

    LoadedModule[88]=C:\Windows\system32\ACTIVEDS.dll

    LoadedModule[89]=C:\Windows\system32\adsldpc.dll

    LoadedModule[90]=C:\Windows\system32\WLDAP32.dll

    LoadedModule[91]=C:\Windows\system32\ATL.DLL

    LoadedModule[92]=C:\ProgramFiles\WaveSystemsCorp\TrustedDriveManager\WCR10.dll

    LoadedModule[93]=C:\Windows\system32\VERSION.dll

    LoadedModule[94]=C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcm80.dll

    LoadedModule[95]=C:\Windows\system32\WINTRUST.dll

    LoadedModule[96]=C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll

    LoadedModule[97]=C:\ProgramFiles\WaveSystemsCorp\DellPrebootManager\CredentialVaultManager.dll

    LoadedModule[98]=C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

    LoadedModule[99]=C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll

    LoadedModule[100]=C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll

    State[0].Key=Transport.DoneStage1

    State[0].Value=1

    State[1].Key=DataRequest

    State[1].Value=Bucket=1250111149/nBucketTable=25/nResponse=1/n

    FriendlyEventName=Stoppedworking

    ConsentKey=APPCRASH

    AppName=WindowsLogonUserInterfaceHost

    AppPath=C:\Windows\system32\LogonUI.exe

    Can someone please help me resolve this issue or offer insight into how to resolve it.?.

    Thanks,
    Bravo.!!!

    Sunday, February 12, 2017 6:02 PM
  • Not sure how Virtual PC or XP Mode relates to this?

    Are you running Windows 7 in Windows Virtual PC?

    Monday, February 13, 2017 5:10 PM