Slow Logins - TechRepublic
TechRepublic | Forums | Networks
Networks
Question
March 17, 2009 at 01:38 PM
#2169749
lmalhoit-networkstorageinc

Slow Logins

by lmalhoit-networkstorageinc . Updated 17 years, 4 months ago

I have multiple users that are experiencing slow logins often enough for it to be really annoying for all involved. All of these users are set up to use DHCP. I believe they all use laptops and are on and off the network, but I haven’t been able to confirm that. We have one DNS server and the users are all set up to use that only. I’m not saying that the problem doesn’t lie with DNS, though. I’ve tried upgrading NICs, applying hotfixes, etc. We do use Group Policy but there are only a few policies so I can’t imagine that would be the cause (we are a small organization). I have enabled verbose userenv logging and it always shoots back the same error. It does it when the user is logging on, but it also does it sometimes every few minutes (I believe Group Policy is applied every hour or two, correct me if I’m wrong, so again I don’t think that’s the issue, but I’m not sure). Here is a snippet from one of the userenv logs while a user was logging in:

USERENV(91c.928) 12:46:54:101 LibMain: Process Name: C:\WINDOWS\system32\wbem\wmiprvse.exe
USERENV(80c.81c) 12:46:54:591 LibMain: Process Name: C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
USERENV(80c.81c) 12:46:54:606 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:54:606 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:46:54:621 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:54:637 GetUserDNSDomainName: Failed to impersonate user
USERENV(348.810) 12:46:54:667 LibMain: Process Name: C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
USERENV(348.810) 12:46:54:683 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:54:683 GetUserNameAndDomain Failed to impersonate user
USERENV(348.810) 12:46:54:683 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:54:683 GetUserDNSDomainName: Failed to impersonate user
USERENV(348.810) 12:46:54:744 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:54:790 GetUserNameAndDomain Failed to impersonate user
USERENV(348.810) 12:46:54:805 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:54:805 GetUserDNSDomainName: Failed to impersonate user
USERENV(348.810) 12:46:54:866 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:54:882 GetUserNameAndDomain Failed to impersonate user
USERENV(348.810) 12:46:54:882 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:54:912 GetUserDNSDomainName: Failed to impersonate user
USERENV(cc4.d5c) 12:46:54:882 LibMain: Process Name: C:\Program Files\Windows Defender\MSASCui.exe
USERENV(3e4.42c) 12:46:54:989 GetProfileType: Profile already loaded.
USERENV(3e4.42c) 12:46:55:019 GetProfileType: ProfileFlags is 0
USERENV(348.810) 12:46:55:035 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:55:035 GetUserNameAndDomain Failed to impersonate user
USERENV(348.810) 12:46:55:035 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:55:035 GetUserDNSDomainName: Failed to impersonate user
USERENV(348.810) 12:46:55:096 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:55:096 GetUserNameAndDomain Failed to impersonate user
USERENV(348.810) 12:46:55:096 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:55:096 GetUserDNSDomainName: Failed to impersonate user
USERENV(348.810) 12:46:55:096 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:55:096 GetUserNameAndDomain Failed to impersonate user
USERENV(348.810) 12:46:55:096 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:55:096 GetUserDNSDomainName: Failed to impersonate user
USERENV(348.810) 12:46:55:111 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:55:111 GetUserNameAndDomain Failed to impersonate user
USERENV(348.810) 12:46:55:111 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:55:111 GetUserDNSDomainName: Failed to impersonate user
USERENV(348.810) 12:46:55:111 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:55:111 GetUserNameAndDomain Failed to impersonate user
USERENV(348.810) 12:46:55:111 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:55:111 GetUserDNSDomainName: Failed to impersonate user
USERENV(348.810) 12:46:55:142 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:55:142 GetUserNameAndDomain Failed to impersonate user
USERENV(348.810) 12:46:55:142 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:55:142 GetUserDNSDomainName: Failed to impersonate user
USERENV(348.810) 12:46:55:264 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:55:326 GetUserNameAndDomain Failed to impersonate user
USERENV(348.810) 12:46:55:387 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:55:402 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.a00) 12:46:55:417 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.a00) 12:46:55:417 GetUserNameAndDomain Failed to impersonate user
USERENV(518.a00) 12:46:55:417 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.a00) 12:46:55:417 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.a00) 12:46:55:463 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.a00) 12:46:55:463 GetUserNameAndDomain Failed to impersonate user
USERENV(518.a00) 12:46:55:463 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.a00) 12:46:55:463 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.a00) 12:46:55:509 ImpersonateUser: Failed to impersonate user with 5.
…
USERENV(348.810) 12:46:56:014 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:46:56:091 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:106 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:46:56:106 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:397 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:46:56:565 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:565 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:46:56:581 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:581 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:46:56:718 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:718 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:46:56:718 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:718 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:46:56:764 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:764 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:46:56:764 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:764 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:46:56:795 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:795 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:46:56:795 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:795 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:46:56:826 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:826 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:46:56:841 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:841 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:46:56:841 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:856 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:46:56:856 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:856 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:46:56:887 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:887 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:46:56:902 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:902 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:46:56:917 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:917 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:46:56:917 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:917 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:46:56:933 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:933 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:46:56:933 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:933 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:46:56:948 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:948 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:46:56:948 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:948 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:46:56:963 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:963 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:46:56:963 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:56:963 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:46:56:979 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:57:040 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:46:57:055 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:57:055 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:46:57:070 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:57:070 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:46:57:101 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:57:101 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:46:57:560 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:57:560 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:46:57:560 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:57:560 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:46:57:622 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:57:729 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:46:57:821 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:57:821 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:57:821 GetUserDNSDomainName: Failed to impersonate user
USERENV(348.810) 12:46:57:821 GetUserNameAndDomain Failed to impersonate user
USERENV(348.810) 12:46:57:821 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:57:821 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:46:57:821 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:57:821 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:46:57:821 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:57:821 GetUserDNSDomainName: Failed to impersonate user
…
USERENV(348.810) 12:46:58:188 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:58:188 GetUserNameAndDomain Failed to impersonate user
USERENV(348.810) 12:46:58:203 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:46:58:203 GetUserDNSDomainName: Failed to impersonate user
USERENV(19c.3a4) 12:46:58:249 LibMain: Process Name: C:\WINDOWS\system32\net.exe
USERENV(158.3a0) 12:46:59:780 LibMain: Process Name: C:\WINDOWS\system32\imapi.exe
USERENV(80c.81c) 12:46:59:795 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:59:795 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:46:59:795 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:46:59:795 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:46:59:948 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:47:00:040 GetUserNameAndDomain Failed to impersonate user
USERENV(d40.34c) 12:47:00:193 LibMain: Process Name: C:\WINDOWS\system32\net.exe
USERENV(80c.81c) 12:47:00:239 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:47:00:239 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:47:01:188 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:47:01:188 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:47:01:203 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:47:01:203 GetUserDNSDomainName: Failed to impersonate user
USERENV(4cc.414) 12:47:01:418 LibMain: Process Name: C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
USERENV(80c.81c) 12:47:01:509 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:47:01:509 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:47:01:509 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:47:01:509 GetUserDNSDomainName: Failed to impersonate user
USERENV(648.b94) 12:47:01:708 LibMain: Process Name: C:\WINDOWS\system32\net.exe
USERENV(9f8.f78) 12:47:02:443 LibMain: Process Name: C:\WINDOWS\system32\ctfmon.exe
USERENV(9f8.f78) 12:47:02:489 GetProfileType: Profile already loaded.
USERENV(9f8.f78) 12:47:02:489 GetProfileType: ProfileFlags is 0
USERENV(fbc.fc0) 12:47:02:550 LibMain: Process Name: C:\WINDOWS\system32\net.exe
USERENV(1d8.248) 12:47:03:637 LibMain: Process Name: C:\WINDOWS\system32\net.exe
USERENV(2d0.1c0) 12:47:04:402 LibMain: Process Name: C:\WINDOWS\system32\net.exe
USERENV(e4.138) 12:47:04:418 LibMain: Process Name: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
USERENV(e4.138) 12:47:04:418 ImpersonateUser: Failed to impersonate user with 5.
USERENV(e4.138) 12:47:04:418 GetUserNameAndDomain Failed to impersonate user
USERENV(e4.138) 12:47:04:418 ImpersonateUser: Failed to impersonate user with 5.
USERENV(e4.138) 12:47:04:418 GetUserDNSDomainName: Failed to impersonate user
USERENV(e4.138) 12:47:04:448 ImpersonateUser: Failed to impersonate user with 5.
USERENV(e4.138) 12:47:04:448 GetUserNameAndDomain Failed to impersonate user
USERENV(e4.138) 12:47:04:448 ImpersonateUser: Failed to impersonate user with 5.
USERENV(e4.138) 12:47:04:448 GetUserDNSDomainName: Failed to impersonate user
USERENV(958.478) 12:47:05:474 LibMain: Process Name: C:\WINDOWS\system32\net.exe
USERENV(4cc.414) 12:47:06:147 ImpersonateUser: Failed to impersonate user with 5.
USERENV(4cc.414) 12:47:06:147 GetUserNameAndDomain Failed to impersonate user
USERENV(4cc.414) 12:47:06:147 ImpersonateUser: Failed to impersonate user with 5.
USERENV(4cc.414) 12:47:06:147 GetUserDNSDomainName: Failed to impersonate user
USERENV(dd0.dd4) 12:47:06:255 LibMain: Process Name: C:\WINDOWS\system32\userinit.exe
USERENV(e3c.e54) 12:47:06:346 LibMain: Process Name: C:\WINDOWS\system32\net.exe
USERENV(e2c.c30) 12:47:07:265 LibMain: Process Name: C:\WINDOWS\system32\wuauclt.exe
USERENV(ec4.ea0) 12:47:07:357 LibMain: Process Name: C:\WINDOWS\system32\net.exe
USERENV(80c.81c) 12:47:07:739 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:47:07:739 GetUserNameAndDomain Failed to impersonate user
…
USERENV(348.810) 12:47:09:102 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:47:09:102 GetUserDNSDomainName: Failed to impersonate user
USERENV(348.810) 12:47:09:117 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:47:09:117 GetUserNameAndDomain Failed to impersonate user
USERENV(348.810) 12:47:09:117 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:47:09:117 GetUserDNSDomainName: Failed to impersonate user
USERENV(348.810) 12:47:09:117 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:47:09:117 GetUserNameAndDomain Failed to impersonate user
USERENV(348.810) 12:47:09:132 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:47:09:132 GetUserDNSDomainName: Failed to impersonate user
USERENV(348.810) 12:47:09:163 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:47:09:163 GetUserNameAndDomain Failed to impersonate user
USERENV(348.810) 12:47:09:178 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.810) 12:47:09:178 GetUserDNSDomainName: Failed to impersonate user
…
USERENV(348.f74) 12:47:09:194 ImpersonateUser: Failed to impersonate user with 5.
USERENV(348.f74) 12:47:09:194 GetUserDNSDomainName: Failed to impersonate user
USERENV(f90.fc0) 12:47:09:530 LibMain: Process Name: C:\WINDOWS\system32\schtasks.exe
USERENV(da4.248) 12:47:09:653 LibMain: Process Name: C:\WINDOWS\system32\schtasks.exe
USERENV(1d8.c34) 12:47:09:714 LibMain: Process Name: C:\WINDOWS\system32\schtasks.exe
USERENV(260.5fc) 12:47:09:791 LibMain: Process Name: C:\WINDOWS\system32\schtasks.exe
USERENV(264.290) 12:47:09:898 LibMain: Process Name: C:\WINDOWS\system32\schtasks.exe
USERENV(3a4.ee0) 12:47:09:959 LibMain: Process Name: C:\WINDOWS\system32\schtasks.exe
USERENV(d00.900) 12:47:10:265 LibMain: Process Name: C:\WINDOWS\system32\schtasks.exe
USERENV(250.9e0) 12:47:10:326 LibMain: Process Name: C:\WINDOWS\system32\schtasks.exe
USERENV(bec.d9c) 12:47:10:464 LibMain: Process Name: C:\WINDOWS\system32\schtasks.exe
USERENV(c08.a54) 12:47:10:648 LibMain: Process Name: C:\WINDOWS\system32\schtasks.exe
USERENV(2d0.e88) 12:47:13:862 LibMain: Process Name: C:\Program Files\Southwest Airlines\Ding\Ding.exe
USERENV(2d0.e88) 12:47:13:877 ImpersonateUser: Failed to impersonate user with 5.
USERENV(2d0.e88) 12:47:13:877 GetUserNameAndDomain Failed to impersonate user
USERENV(2d0.e88) 12:47:13:893 ImpersonateUser: Failed to impersonate user with 5.
USERENV(2d0.e88) 12:47:13:893 GetUserDNSDomainName: Failed to impersonate user
USERENV(2d0.e88) 12:47:13:908 ImpersonateUser: Failed to impersonate user with 5.
USERENV(2d0.e88) 12:47:13:908 GetUserNameAndDomain Failed to impersonate user
USERENV(2d0.e88) 12:47:13:908 ImpersonateUser: Failed to impersonate user with 5.
USERENV(2d0.e88) 12:47:13:908 GetUserDNSDomainName: Failed to impersonate user
USERENV(2d0.e88) 12:47:13:923 ImpersonateUser: Failed to impersonate user with 5.
USERENV(2d0.e88) 12:47:13:923 GetUserNameAndDomain Failed to impersonate user
USERENV(2d0.e88) 12:47:13:923 ImpersonateUser: Failed to impersonate user with 5.
…
USERENV(80c.81c) 12:47:29:950 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:47:29:950 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:47:29:950 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:47:37:396 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:47:37:396 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:47:37:396 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:47:37:396 GetUserDNSDomainName: Failed to impersonate user
USERENV(754.bd4) 12:47:40:901 LibMain: Process Name: C:\WINDOWS\system32\userinit.exe
USERENV(80c.81c) 12:47:44:841 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:47:44:841 GetUserNameAndDomain Failed to impersonate user
…
USERENV(518.580) 12:48:02:802 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.580) 12:48:02:802 GetUserNameAndDomain Failed to impersonate user
USERENV(518.580) 12:48:02:802 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.580) 12:48:02:802 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.210) 12:48:02:817 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.210) 12:48:02:817 GetUserNameAndDomain Failed to impersonate user
USERENV(518.210) 12:48:02:817 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.210) 12:48:02:817 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.580) 12:48:03:003 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.580) 12:48:03:003 GetUserNameAndDomain Failed to impersonate user
USERENV(518.580) 12:48:03:003 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.580) 12:48:03:003 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.580) 12:48:03:003 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.580) 12:48:03:003 GetUserNameAndDomain Failed to impersonate user
USERENV(518.580) 12:48:03:019 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.580) 12:48:03:019 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.580) 12:48:03:174 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.580) 12:48:03:189 GetUserNameAndDomain Failed to impersonate user
USERENV(518.580) 12:48:03:189 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.580) 12:48:03:189 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.580) 12:48:03:189 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.580) 12:48:03:189 GetUserNameAndDomain Failed to impersonate user
USERENV(518.580) 12:48:03:189 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.580) 12:48:03:189 GetUserDNSDomainName: Failed to impersonate user
USERENV(df4.3e4) 12:48:04:834 LibMain: Process Name: \\?\C:\WINDOWS\system32\WBEM\WMIADAP.EXE
USERENV(80c.81c) 12:48:07:160 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:48:07:160 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:48:07:160 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:48:07:160 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.580) 12:48:09:239 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.580) 12:48:09:239 GetUserNameAndDomain Failed to impersonate user
USERENV(518.580) 12:48:09:254 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.580) 12:48:09:254 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.580) 12:48:09:254 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.580) 12:48:09:254 GetUserNameAndDomain Failed to impersonate user
USERENV(518.580) 12:48:09:254 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.580) 12:48:09:254 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.210) 12:48:09:285 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.210) 12:48:09:285 GetUserNameAndDomain Failed to impersonate user
USERENV(518.210) 12:48:09:285 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.210) 12:48:09:285 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.210) 12:48:09:301 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.210) 12:48:09:301 GetUserNameAndDomain Failed to impersonate user
USERENV(518.210) 12:48:09:301 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.210) 12:48:09:301 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.210) 12:48:09:797 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.210) 12:48:09:797 GetUserNameAndDomain Failed to impersonate user
…
USERENV(518.580) 12:48:13:969 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.ac0) 12:48:23:291 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.ac0) 12:48:23:291 GetUserNameAndDomain Failed to impersonate user
USERENV(518.ac0) 12:48:23:291 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.ac0) 12:48:23:307 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.210) 12:48:23:338 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.210) 12:48:23:338 GetUserNameAndDomain Failed to impersonate user
USERENV(518.210) 12:48:23:338 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.210) 12:48:23:338 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.ac0) 12:48:23:353 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.ac0) 12:48:23:353 GetUserNameAndDomain Failed to impersonate user
USERENV(518.ac0) 12:48:23:353 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.ac0) 12:48:23:353 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.580) 12:48:23:446 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.580) 12:48:23:446 GetUserNameAndDomain Failed to impersonate user
USERENV(518.580) 12:48:23:446 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.580) 12:48:23:446 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.210) 12:48:23:462 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.210) 12:48:23:462 GetUserNameAndDomain Failed to impersonate user
USERENV(518.210) 12:48:23:462 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.210) 12:48:23:462 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.ac0) 12:48:23:462 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.ac0) 12:48:23:462 GetUserNameAndDomain Failed to impersonate user
USERENV(518.ac0) 12:48:23:462 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.ac0) 12:48:23:462 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.580) 12:48:23:477 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.580) 12:48:23:477 GetUserNameAndDomain Failed to impersonate user
USERENV(518.580) 12:48:23:477 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.580) 12:48:23:477 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:48:29:495 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:48:29:557 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:48:29:557 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:48:29:557 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:49:36:516 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:49:43:946 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:49:43:946 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:49:43:946 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:49:43:946 GetUserDNSDomainName: Failed to impersonate user
USERENV(6e0.91c) 12:49:46:691 LibMain: Process Name: C:\WINDOWS\system32\wbem\wmiprvse.exe
USERENV(80c.81c) 12:49:51:406 ImpersonateUser: Failed to impersonate user with 5.
…
USERENV(80c.81c) 12:50:13:741 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:50:13:741 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:50:21:186 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:50:21:186 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:50:21:186 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:50:21:186 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:50:28:631 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:50:28:631 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:50:28:631 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:50:28:631 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:50:36:076 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:50:36:076 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:50:36:076 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:50:36:076 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:50:43:522 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:50:43:522 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:50:43:522 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:50:43:522 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:50:50:967 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:50:50:967 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:50:50:967 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:50:50:967 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:50:58:412 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:50:58:412 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:50:58:412 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:50:58:412 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:51:05:857 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:51:05:857 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:51:05:857 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:51:05:857 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.580) 12:51:09:362 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.580) 12:51:09:362 GetUserNameAndDomain Failed to impersonate user
USERENV(518.580) 12:51:09:362 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.580) 12:51:09:362 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.ac0) 12:51:09:362 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.ac0) 12:51:09:362 GetUserNameAndDomain Failed to impersonate user
USERENV(518.ac0) 12:51:09:378 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.ac0) 12:51:09:378 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.210) 12:51:09:393 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.210) 12:51:09:393 GetUserNameAndDomain Failed to impersonate user
USERENV(518.210) 12:51:09:393 ImpersonateUser: Failed to impersonate user with 5.
USERENV(518.210) 12:51:09:393 GetUserDNSDomainName: Failed to impersonate user
USERENV(518.580) 12:51:09:393 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:51:50:511 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:51:50:511 GetUserDNSDomainName: Failed to impersonate user
USERENV(dfc.ad4) 12:51:55:521 LibMain: Process Name: C:\Program Files\Java\jre6\bin\jusched.exe
USERENV(dfc.ad4) 12:51:55:521 ImpersonateUser: Failed to impersonate user with 5.
USERENV(dfc.ad4) 12:51:55:521 GetUserNameAndDomain Failed to impersonate user
…
USERENV(80c.81c) 12:52:05:417 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:52:05:417 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:52:05:417 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:52:12:862 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:52:12:862 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:52:12:862 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:52:12:862 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:52:20:323 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:52:20:338 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:52:20:338 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:52:20:338 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:52:27:803 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:52:27:803 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:52:27:803 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:52:27:803 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:52:35:299 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:52:35:299 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:52:35:299 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:52:35:299 GetUserDNSDomainName: Failed to impersonate user
USERENV(fd0.cf4) 12:54:09:955 LibMain: Process Name: C:\WINDOWS\system32\Rundll32.exe
USERENV(80c.81c) 12:54:12:542 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:54:12:542 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:54:12:542 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:54:12:542 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:54:20:022 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:54:20:022 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:54:20:022 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:54:20:022 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:54:27:502 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:54:27:502 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:54:27:502 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:54:27:502 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:54:34:982 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:54:34:982 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:54:34:982 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:54:34:982 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:54:42:463 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:54:42:463 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:54:42:463 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:54:42:463 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:54:49:943 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:54:49:943 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:54:49:943 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:54:49:943 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:54:57:423 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:54:57:423 GetUserNameAndDomain Failed to impersonate user
…
USERENV(80c.81c) 12:58:41:965 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:58:41:965 GetUserDNSDomainName: Failed to impersonate user
USERENV(d68.950) 12:58:42:214 LibMain: Process Name: C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
USERENV(1ec.fb4) 12:58:47:038 ImpersonateUser: Failed to impersonate user with 5.
USERENV(1ec.fb4) 12:58:47:038 GetUserNameAndDomain Failed to impersonate user
USERENV(1ec.fb4) 12:58:47:054 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(fe8.fec) 12:58:48:505 LibMain: Process Name: C:\WINDOWS\system32\SearchFilterHost.exe
USERENV(ce8.848) 12:58:48:599 LibMain: Process Name: C:\Program Files\Windows Media Player\wmplayer.exe
USERENV(ce8.848) 12:58:48:599 ImpersonateUser: Failed to impersonate user with 5.
USERENV(ce8.848) 12:58:48:599 GetUserNameAndDomain Failed to impersonate user
USERENV(ce8.848) 12:58:48:615 ImpersonateUser: Failed to impersonate user with 5.
USERENV(ce8.848) 12:58:48:615 GetUserDNSDomainName: Failed to impersonate user
USERENV(ce8.848) 12:58:48:630 ImpersonateUser: Failed to impersonate user with 5.
USERENV(ce8.848) 12:58:48:630 GetUserNameAndDomain Failed to impersonate user
USERENV(ce8.848) 12:58:48:630 ImpersonateUser: Failed to impersonate user with 5.
USERENV(ce8.848) 12:58:48:630 GetUserDNSDomainName: Failed to impersonate user
USERENV(ce8.848) 12:58:48:646 ImpersonateUser: Failed to impersonate user with 5.
USERENV(ce8.848) 12:58:48:646 GetUserNameAndDomain Failed to impersonate user
USERENV(ce8.848) 12:58:48:646 ImpersonateUser: Failed to impersonate user with 5.
USERENV(ce8.848) 12:58:48:646 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:58:49:473 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:58:49:473 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:58:49:473 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:58:49:473 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:58:56:966 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:58:56:966 GetUserNameAndDomain Failed to impersonate user
USERENV(80c.81c) 12:58:56:982 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:58:56:982 GetUserDNSDomainName: Failed to impersonate user
USERENV(80c.81c) 12:59:04:459 ImpersonateUser: Failed to impersonate user with 5.
USERENV(80c.81c) 12:59:04:459 GetUserNameAndDomain Failed to impersonate user
…
USERENV(80c.81c) 12:59:41:929 GetUserDNSDomainName: Failed to impersonate user
USERENV(b04.ba4) 12:59:43:132 LibMain: Process Name: C:\Program Files\Windows Defender\MpCmdRun.exe
USERENV(b04.ba4) 12:59:43:194 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(b04.ba4) 12:59:43:194 LoadUserProfile: Yes, we can impersonate the user. Running as self
USERENV(b04.ba4) 12:59:43:194 =========================================================
USERENV(b04.ba4) 12:59:43:194 LoadUserProfile: Entering, hToken = <0xa4>, lpProfileInfo = 0x6fde8
USERENV(b04.ba4) 12:59:43:194 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>

Any ideas???

This discussion is locked

All Comments