To set up Dr. Watson to trap user-mode program errors, follow these steps:
It is very common for certain types of remote
control software to replace the default Windows GINA DLL
(Msgina.dll). Therefore, a good first step is to examine the system
to see if it has a third-party GINA DLL. To do this, locate the
following registry key:
- At a command prompt, type System Root\System32\Drwtsn32.exe -I, and then press ENTER.
This command configures Dr. Watson as the default system debugger.
- At a command prompt, type System Root\System32\Drwtsn32.exe, and then select the following options:
Append to existing log file
Create crash dump
- After the computer restarts from the STOP 0xC000021A error, run Dr. Watson (Drwtsn32.exe).
- View the Dr. Watson log to determine what user mode process may be causing the problem.
the Dr. Watson log does not contain sufficient information to
determine the cause of the problem, analyze the User.dmp file to
determine the cause of the STOP 0xC000021A error.
If Dr. Watson
did not create a User.dmp file for either Winlogon.exe or
Csrss.exe, you may have to use a different tool to generate a memory
dump file of the process that fails. For more information, click
the following article number to view the article in the Microsoft
How to use the Userdump.exe tool to create a dump file Note
Follow the instructions in the Knowledge Base article to
troubleshoot a process that shuts down with an exception. While you
follow these instructions, monitor the following processes to
troubleshoot the STOP 0xC000021A error:
Most STOP 0xC000021A errors occur because Winlogon.exe fails. This
typically occurs because of a faulty third-party Graphical
Identification and Authentication (GINA) DLL. The GINA is a
replaceable DLL component that Winlogon.exe loads. The GINA
implements the authentication policy of the interactive logon model.
The GINA performs all identification and authentication user
Value = GinaDLL REG_SZ
this error first occurred after the installation of a new or
updated device driver, system service, or third-party program, the new
software should be removed or disabled. Contact the manufacturer of
the software to see if an update is available. For more
information about hardware and software vendor contact information,
visit the following Microsoft Web site:
Last known good configuration If the previous steps in this article do not resolve
the problem, start the computer by using the last known good
configuration. To start the computer by using the last known good
configuration, follow these steps:Note Because there are
several versions of Microsoft Windows, the following steps may be
different on your computer. If they are, see your product
documentation to complete these steps.
the Gina DLL value is present and if it is anything other than
Msgina.dll, it probably means that a third-party product has changed
- If this value is not present, the system uses Msgina.dll as the default GINA DLL.
- Click Start, and then click Shut Down.
- Click Restart, and then click OK.
- Press F8 at the indicated time:
an x86-based computer: When a screen of text appears and then
disappears , press F8. (The screen of text may include a memory test,
lines about the BIOS, and other lines.) There may also be a prompt that
tells you when to press F8.
- For an Itanium
architecture-based computer: After you make your selection from
the boot menu, press F8. There may be a prompt that tells you when
to press F8.
- Use the arrow keys to select Last Known Good Configuration, and then press ENTER.
NUM LOCK must be off before the arrow keys on the numeric keypad will function.
- Use the arrow keys to highlight an operating system, and then press ENTER.
the Last Known Good Configuration startup option provides a way to
recover from problems such as a newly added driver that may be
incorrect for your hardware. However, it does not solve problems that
are caused by corrupted or missing drivers or files.
- When you choose the Last Known Good Configuration option, only the information in registry key HKLM\System\CurrentContro