On two machines, after a Windows update, the Widows "Welcome screen" has disappeared and I have always a "NT-style" login screen (the same I got if, at the Windows Welcome screen, I would type Ctrl-Alt-Del).

l cannot bring the Welcome screen back again.

The "Use Welcome screen" box IS checked at the "Select logon and logoff options" dialog box (and I unchecked and rechecked it several times, but to no avail).

I also checked that the msgina.ddl file is in place (and not replaced by a Gina.ddl file) and has the same length as the msgina.ddl of another computer that does not have this problem.

Can anyone help with this irritating problem ?

Hi Bornival

This involves checking the registry so first we must back it up
in case of any error.

First start the registry by go to Run then in that box type regedit
In the window that opens up select File then Export
In the box that opens up give your backup a name and save it
to a place you can easily find

Now with the registry saved go back to Registry editor

Select the + beside HKEY_USERS
Then + DEFAULT
Then + Control Panel
Finally select folder Desktop.
In the right hand pane look for SCRNSAVE.EXE and double click on it
The box that opens up should show logon.scr in the Value data box.
If it is different change it to logon.scr.

Now restart your PC is the logon screen should be returned to normal.
If the SCRNSAVE.EXE contains the value logon.scr. There's no need to make the changes.
Please post back and we will try to find another solution to the problem.

If you make an error with these instructions your can restore your registry by starting regedit
as instructed above and go to File and select Import.
Now find the file you saved.
Then select open. This will restore it to the condition before you
carried out the changes.

Jim

Dear Jim,

Unfortunately, the SCRNSAVE.EXE shows logon.scr as a value.

So, it must be something else. Incidentally, I looked at the WIDOWS HELP and found that I could change the way users log in by going to the Users Account and, there, going to the "Advanced Tab". The trouble is that I see no "Advance Tab" on my Users account screen (all I see when going to "Select logon and logoff options" is the possibility t o check or uncheck the option "Use the Welcome screen" but this option IS checked.

Hi Bornival

We can check to see if the logon file is corrupt.
go to here Fix Windows® XP Logon/Restore Welcome Screen
Download the file and create a new folder on the desktop extract the download file to that folder.
Now go to the folder and in it you will see a program called XP_FixLogon
Double click on that and if the file is corrupt it will give you the option to repair it.

Once completed try unchecking Use Welcome Screen. restart.
Then recheck Use Welcome Screen

To get the advanced tab in user accounts you need to go to Start then Run and type control userpasswords2
In that window you will see the Advanced tab.

Jim

Unfortunately again, both maneuvers failed to provide the solution.

1. I actually had already tried the XP-fix-logon program which I found on Internet, but its says that the file (MSGINA) is the correct one and does not offer to repair it (I checked the file with Widnwos Explorer and it is the same as in an unaffected computer)

2. Thank your instructing how to access the User Account Advanced tab (I should have found that my-self...), but here again, the "Secure logon" box is unchecked ...

I'll retry all that on Tuesday (as I need yo leave now) and try to check the Secure logon, then reboot, and then uncheck it again) and will report. However, if you cold think about something different, this may always be useful.

As the last resource, I may try to make a "sfc /scannow", which in my experience is quite useful ... but it takes long and, in some machines, required to make a lot of updates after its has ran because it has put back a series of original but older files.

In any case, thank you for your support !

Can you check that Do not display last user name is not enable in the registry.
First do a backup as per previous instructions.
Now go to the following registry key:
HKEY_LOCAL_MACHINE\Softwar\Microsoft\Windows\Curre ntVersion\Policies\System
Now in the right pane, check that DontDisplayLastName registry key value, as its value data set to 0
If it is set to 1 double click on DontDisplayLastName registry key value, and set its value data to 0

You can also check Local Security settings do not have the option Interactive Logon: Do not display last user name. Enabled

Go to Start then Run and type secpol.msc
No go to Security Settings then Local Policies then Security Options.
In the right and pane look for Interactive Logon: Do not display last user name. If it is Enabled.
Double click on it and select the option Disabled.
Close and restart the PC. Is the Windows Welcome logon screen now there?

Jim

Dear Jim,

I tried everything you suggested but to no avail.

I also tried to uncheck the "Use Welcome screen" box on the Users Account, to restart and to recheck it, but again, no change (interestingly enough, when doing that, the log off windows became NT style after unchecking , and it resumed to XP style when rechecking the "Welcome screen" box; however, the login windows definitely remains "NT style").

Dear Jim (and all other),

I'm glad to report that I have found the reason and also the solution to my problem.

It was due to the presence of a somewhat outdated version of ZoneAlarm Security suite (version 7 or 8) that detects a specific key as a potential risk for the computer. This key is HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UIHost and what ZASS do is simply to delete key...

Once the key has been recreated (as an exapandable key) with value "logonui.exe", everything is back to normal.

I could have found that my-self by carefully comparing the registry data, but it was actually clearly posted on ZA community web site at
logonui.exe detected as win32.worm.socks.bw - ZoneAlarm User Community

Thnak you for you help, and I hope this information is helpful to others.

Originally Posted by Bornival

Dear Jim (and all other),

I'm glad to report that I have found the reason and also the solution to my problem.

It was due to the presence of a somewhat outdated version of ZoneAlarm Security suite (version 7 or 8) that detects a specific key as a potential risk for the computer. This key is HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UIHost and what ZASS do is simply to delete key...

Once the key has been recreated (as an exapandable key) with value "logonui.exe", everything is back to normal.

I could have found that my-self by carefully comparing the registry data, but it was actually clearly posted on ZA community web site at
logonui.exe detected as win32.worm.socks.bw - ZoneAlarm User Community

Thankyou for you help, and I hope this information is helpful to others.

Hi Bornival

Glad to see you got it sorted

Thanks for posting back with your find I'm sure it will others searching for a solution.

These kind of problems are always difficult to find when some secondary software
is the cause.

Jim