What does winlogon exe do?

In computing, Winlogon (Windows Logon) is the component of Microsoft Windows operating systems that is responsible for handling the secure attention sequence, loading the user profile on logon, and optionally locking the computer when a screensaver is running (requiring another authentication step).

Is winlogon exe malware?

winlogon.exe is a legitimate process file popularly known as Windows NT Logon Application. It is associated with Windows Operating System developed by Microsoft Corporation. It is located in C:\Windows\System32 by default.

Can I end process winlogon exe?

If you kill the process in Task Manager, your screen will go black and your PC won’t even answer to Ctrl+Alt+Delete. Besides, if the winlogon.exe file cannot be loaded when starting Windows, you may get the blue screen error 0xC000021A. So you shouldn’t disable the winlogon.exe process.

What is Winlogon in registry?

Winlogon is a Windows component which handles various activities such as the Logon, Logoff, loading user profile during authentication, shutdown, lock screen etc. This kind of behavior is managed by the registry which defines which processes to start during Windows logon.

How do I fix winlogon exe error in Windows 7?

How to Fix a Winlogon.exe Application Error (9 Steps)

  1. Press “Start” and then “Run.” Type SFC.
  2. Insert the Windows installation CD if requested.
  3. Enter safe mode by pressing “F8” immediately upon restarting.
  4. Turn on your virus protection program, and run a complete scan on your computer.
  5. Reboot your computer normally.

What is Winlogon initialization?

When Winlogon initializes, it registers the CTRL+ALT+DEL secure attention sequence (SAS) with the system, and then creates three desktops within the WinSta0 window station. Registering CTRL+ALT+DEL makes this initialization the first process, thus ensuring that no other application has hooked that key sequence.

What is Winlogon in Event Viewer?

This event occurs when a user logs off from the system. The Logoff event is performed synchronously, even if the notification package’s registry settings indicate that it can handle events asynchronously. Logon. This event occurs when a user logs on the system.

Where is Winlogon in registry?

Locate the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon subkey in the registry. Double-click the DefaultUserName entry, type your user name, and then click OK.