Closing the Loop: CPU Spike in Winlogon.exehttp://blogs.msdn.com/b/ntdebugging/archive/2008/04/10/closing-the-loop-cpu-spike-in-winlogon-exe.aspxWe recently dealt with an interesting issue that I would like to share, hope you enjoy. - Jason Issue Summary Customer reports that within their Citrix server farm (running on Windows Server 2003), when a user logs into or out of a session (seemsen-USTelligent Evolution Platform Developer Build (Build: 5.6.50428.7875)re: Closing the loop: CPU spike in winlogon.exehttp://blogs.msdn.com/b/ntdebugging/archive/2008/04/10/closing-the-loop-cpu-spike-in-winlogon-exe.aspx#8384240Sat, 12 Apr 2008 09:39:18 GMT91d46819-8472-40ad-a661-2c78acb4018c:8384240PatriotB<p>&quot;USERENV.dll!MyRegUnLoadKey&quot; -- Love it! &nbsp;Also &quot;ReceiveLotsaCalls&quot; is pretty funny too :)</p><div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=8384240" width="1" height="1">re: Closing the loop: CPU spike in winlogon.exehttp://blogs.msdn.com/b/ntdebugging/archive/2008/04/10/closing-the-loop-cpu-spike-in-winlogon-exe.aspx#8377840Fri, 11 Apr 2008 05:38:12 GMT91d46819-8472-40ad-a661-2c78acb4018c:8377840molotov.molotov<P>Nice post, Jason - good use of the tools!</P> <P>(The link to Process Explorer is actually pointing at the Process Monitor utility page. &nbsp;And, interestingly, it's pointing to a prior version of Process Monitor - Process Monitor 1.3 was released this week, and the page that is linked to is apparently an old page for Process Monitor 1.26. &nbsp;The Sysinternals Site theme is even the old one...)</P> <DIV class=commentowner>[Good catch. I fixed the link.]</DIV><div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=8377840" width="1" height="1">Lost Drive Blog &raquo; Closing the loop: CPU spike in winlogon.exehttp://blogs.msdn.com/b/ntdebugging/archive/2008/04/10/closing-the-loop-cpu-spike-in-winlogon-exe.aspx#8375885Thu, 10 Apr 2008 21:37:14 GMT91d46819-8472-40ad-a661-2c78acb4018c:8375885Lost Drive Blog &raquo; Closing the loop: CPU spike in winlogon.exe<p>PingBack from <a rel="nofollow" target="_new" href="http://lostdriveblog.com/2008/04/10/closing-the-loop-cpu-spike-in-winlogonexe/">http://lostdriveblog.com/2008/04/10/closing-the-loop-cpu-spike-in-winlogonexe/</a></p> <img src="http://blogs.msdn.com/aggbug.aspx?PostID=8375885" width="1" height="1">