Article ID: 969557 - View products that this article applies to.
In the network environment, you enable synchronous processing of logon scripts in a Group Policy object (GPO).
Consider the following scenario, you log on to a Windows XP-based computer. Then, within 1 or 2 seconds, you press the Windows Key+L keyboard sequence to lock the computer. In this scenario, the operating system may automatically unlock. This enables the desktop to be accessed. When the desktop can be accessed, all usual actions can be performed in the previously locked user session.
When this problem occurs, if you press Windows Key+L again, nothing happens and the user session remains open. Then, if you press CTRL+ALT+DEL, you receive a message box for the user's credentials.
If you enable the Fast Logon Optimization feature, this problem occurs.
This problem occurs because synchronous processing of logon scripts requires Windows to switch to the user desktop. This is because a script may start a program that requires user input. However, the operating system does not check whether the user has already locked the desktop before the operating system displays the desktop.
Hotfix informationA supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem.
If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix.
Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:
http://support.microsoft.com/contactus/?ws=supportNote The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.
PrerequisitesTo apply this hotfix, you must have Windows XP Service Pack 2 or a later service pack installed on the computer. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/322389/ )How to obtain the latest Windows XP service pack
Restart requirementYou must restart the computer after you apply this hotfix.
Hotfix replacement informationThis hotfix does not replace any other hotfixes.
File informationThe English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
Windows XP with Service Pack 2, x86-based versions
Collapse this tableExpand this table
Windows XP with Service Pack 3, x86-based versions
Collapse this tableExpand this table
To work around this problem, enable the "Always wait for the network at computer startup and logon" policy.
You can locate the policy in the following location:
Computer Configuration\Administrative Templates\System\Logon\
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
For more information, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/305293/ )Description of the Windows XP Professional Fast Logon Optimization feature
For more information about the Fast Logon Optimization feature, visit the following Web site: