Forum Discussion
Liam_Baker
Feb 27, 2023Copper Contributor
Blackscreen after log in - Explorer.exe not started
We have an issue with multiple tenants where users sign in and are presented with a backscreen on Windows 10. The fix is to press CTRL ALT and DEL > Run Task Manager and start Explorer.exe. After, it...
Matthias_VDB
Feb 28, 2023Iron Contributor
Hi,
Seems strange issue...
I would think in the direction of applocker or WDAC...
Don't know if you have some scripts running at start-up or logon?
Further, if all machines have the same patch-level and configuration, but only this machine has the issue, I would start looking at differences... Which software and so on, when did it start, etc.
I would also start investigating for malicious infections...
You could restage the machine, but then you would loose all "evidence" and you didn't really solved the cause of the issue, so if it would happen again you aren't any wiser 🙂
Things you can check are for example also the Shell, if this is still explorer.exe... maybe some software or installation changed this.
You can check in the registry: (also check the user hive....)
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
You can also run a system filechecker to check for corrupted files in the OS:
run sfc /scannow