• How to trace Winlogon activity in Windows Server 2003, Windows XP, Windows 2000, and Windows NT
  The checked version of Winlogon.exe, in conjunction with a modification in Win.ini, creates a log file useful in troubleshooting problems related to Winlogon. For example, you can track all messages exchanged between GINA and Winlogon. To enable...
  in winternals with winternals checked version winlogon.exe conjunction modification win.ini file

win.ini from all users