Cannot logoff Windows 2000

Hi

Do you use this laptop on a network and require a network user login. If thats the case then I think the problem exists in the user profile. I faced the same problem on my company network when I coul dno longer shutdown the pc by using the shut down option from start menu or the CTRl+alt+del option. I was also using the Win 2000. I had to get my profile amended to have these options. Still after that there are times when that option dies out and becomes active again after sometime.

If you have the administrative access to the system then have a look at the user profile which might need tweaking.

Hope this helps.

Regards
Raj

Thanks Raj, but that's not it. The laptop isn't on a network. I've also tried resetting the My computer>Properties>Network indentification>Network Id> Network identification Wizard> to "This computer is for home use and is not part of a business network", to no avail (it resets the next time you look at that page). I've also tried running UPHClean to no avail.
Mike

Have you tried checking for any trojans or spyware on your laptop Mike. Sometimes they are responsible for this sort of behaviour. I have had a lot of trouble in the past with viruses etc and sometimes the same case would happen that although i try to shut off the pc from start or ctrl/alt/del but it wont.
Give it a check using some of the popular free spywares and see if that might do you any good. Anti virus programs like Mcaffee/ Norton may not be that helpful to you in this case mate. There are a lot of free ones you can give a try from the Trajans, Viruses, Spyware forum.

It might not be the case but i d do it to be on the safe side and to be sure. do let us know about ur progress.

Raj.

What's running (Task Manager/Processes) when you try to shut down? Not the whole list but the top 5 in CPU usage order?

Is there any externally attached hardware (in case there's an interrupt held)?

Is it on a Latitude docking station?

It puzzles me that you can't just switch off by holding the power switch down for a couple of seconds. Doing the battery thing is dodgy in that if the hard disk is just kicked in by Windows and you remove the battery you're f*cked.

Dammit why didnt i ask him this question. I was thinkin about it earlier that he should be able to switch it off that way than what he has been doin. guees i got lost with other suggestions there.

Raj

Thanks Suspishio and Coolraj.
Top 5 in CPU usage order: System idle 99% with bursts roughly every second of Services.exe at 7% and DWLGTI.exe at 4% (the last one is my 'D-link' router, I believe). Everything below that zero.
No attached hardware; no docking station.
Thanks for the advice on popping the battery!!
I confirm that I get ONE normal logoff or shutdown following a reboot. After that, on any user account (there are 7), regardless of privilege, it is impossible to shutdown, restart or logoff.
It looked hopeful that the problem lay in the laptop believing it was part of a network: there was some NetWare software lurking. However, I successfully uninstalled that (Start>Settings>Network connections>local area connections>properties and >incoming connections) and now there's no evidence of NetWare yet the problem remains.
In fact I CAN hold down the power switch and get the result described in Microsoft Article ID : 810903 Last Review : May 7, 2007 Revision : 3.3, namely a hang at an inset blue screen with the message "It is now safe to turn off your computer". I then have to pop the battery at that point to move forward.
My own thoughts: run Registry Mechanic 7 (I haven't bought it yet) or upgrade to windows XP? I've spent the whole day on it and I can't afford not to be able to move easily between user accounts.
Would be grateful for your further advice. Many thanks.

I will try looking for a trojan, but the laptop lies behind a physical firewall, and I religiously keep up the AV, so I feel that's unlikely.

have you tried restoring the the power management to default and give it a try. also check on the policy setting if this is turned off.

bobbyraw's suggestion makes good sense.

Additionally, your virus/malware confidence may be misplaced. This forum is littered with the corpses of cases who were firewalled to their throats, AV'd to their eyes and anti-spywared over their heads and still the stuff got through by way of careless download. So a good run through with SPYBOT and AVG's anti-spyware software (both trusted on this forum) is highly recommended and in any case to assist those of us many thousands of miles away from your system in discounting the trojan possibility.

You've presumably read this article: http://support.microsoft.com/kb/315409

You're considering cleaning out the registry - it never hurts. I use Advanced Windows Care for this.

Finally, I remember something that happened to me about three years ago on a PC (not laptop) which was running W2000 Pro SP4 with Norton AV. When I stopped NAV, the problem went away. What's happening is that a socket or a process is being held "open" and this inhibits shutdown which, after all needs to leave your system in a state of grace. Perversely, such manipulating applications that theselves are not in a state of grace can cause these problems - and that includes Windows itself which is why you need to be at the latest service pack.

Thanks to Suspishio and all others who offered help.
I have proved that it was the Sunbelt (aka Kerio) Personal Firewall that was causing the problem. Uninstall it & the problem disappears. Re-install it & the problem returns.

A few thoughts perhaps useful to have recorded here for anyone else with similar problems:
1. I'm certain I read somewhere (can't now find it) that Kerio was problematic in this area.
2. The idea that a process was being 'held open' led me to the firewall.
3. Along the road of reaching a solution I found out how to get rid of Novell NetWare, which caused unnecessary and confusing dialogs when creating new users, so that was useful anyway.
4. One part of the advice in the KB315409 was to shut down running processes one by one, and each time see if the problem stopped (not a quick option!). However, doing that I noticed that each time I stopped kpf4.gui it simply re-appeared further down the list of processes.
5. Simply diasabling the firewall wasn't sufficient either - only an uninstall did the trick.

Other thoughts in conclusion:

In trying to solve this, Suspishio's suggestion to use Spybot and Advanced Windows Care was good. (Although AWC has anti-spyware itself, so I'm not sure if the money spent on Spybot was really necessary in the end? Suspishio -do you think Spybot has the edge on anti-spyware?) However, it satisfied me that no trojans were lurking, and the AWC has improved other aspects of computer running.

Both Kb 315409 (How to troubleshoot shutdown problems in Windows 2000) and Kb 810903 ("It is Now Safe to Turn Off Your Computer" error message when you try to shut down your computer) broadly say 'try checking everything'.
It also doesn't inspire confidence when their Step 1 involves clicking the APM tab, which I don't have. (I also don't have a 'default' power management setting, nor could I find a power management policy iaw Bobbyraw's suggestion).
Oh yes: 'Try talking to 3rd party vendors'. Come on Microsoft, this is plainly unhelpful.

Sadly, in trying hard to resolve this I have caused other problems with user profiles and also have a problem driving a separate monitor. Further posts (when I get time to post them!) are on the cards. But thanks again to all for offering time and advice.
Mike

Mike - on your SpyBot question - it's free. I didn't pay for it and I run it from time to time to second guess Ad-Aware 2007. It certainly picked stuff up that Ad-Aware didn't when my sonhad the Virtumonde problem. I didn't have to pay for AWC either but I only use the Registry Cleaner in AWC which I second guess with Uniblue Registry Booster (paid for).

I'll tell you someting though. There comes a point where when new problems follow the resolution of another problem; then you've got more trouble ahead than you night now suspect.

Unless you are sure of what caused the effects you now suffer, I'd stream off your data and rebuild your software environment. From this distance, I'd estimate it's cut your losses time.

Hi Susp, hmm, how annoying to pay for something that's available free elsewhere. The copy of Spybot I downloaded from Download.com was free up to the point of scanning and finding problems. Thereafter it demanded registration and a fee to correct them. So I paid $46.94. Maybe it was completely free previously?

Your advice on dealing with a legacy of consequent problems is spot on, though in this case I know how I've caused them. Here goes:
I created and then deleted user profiles (testing the logoff issue). When a newly created user logs on for the 1st time a file structure is generated for him under Documents and Settings - which structure remains when the user profile is removed. I assumed you could reconnect to that structure by re-creating the same user name - not true. Windows re-creates, say, 'Jack', but he is totally new; Jack's previous file structure is renamed. Thus all the bits of the profile that I wanted are now locked away in another user. This is chiefly problematic in Outlook Express with mail client settings lost and the downloaded mail store in another user's part of the C drive - Docs&settings\Jack(old)\Local settings\Application data\Identities\and so it goes on. All those handy shortcuts and important documents on the desktop also. But I guess I can copy them across?

The other problem was, in fact, pre-existing. As it's a laptop I'm connecting to a separate flatscreen Fujitsu monitor. A red-bordered warning comes up on boot saying 'Over-frequency. Mode not supported, please change to a supported mode'. I'm not sure if this is a laptop or a monitor error? I've fiddled with Desktop>Display properties>Settings>Advanced>Monitor and have it set to the lowest refresh freq (60Hz) but the error message persists. I ignored it until the display froze with a worrying flicker, the like of which I'd not seen. I've now returned, frightened, to using the laptop screen only. But my daughter uses another C600 laptop with an identical Fujitsu external screen, error free. Only difference is she has a Mobility M4 display adapter fitted, while I have a Mobility M3. Is this likely to be a hardware issue I can't easily remedy, or might a new driver for my adapter do the trick? I've looked for a new driver (admittedly not very hard) but without success.
Hope you don't mind my asking for more help.
Mike

Your advice on dealing with a legacy of consequent problems is spot on, though in this case I know how I've caused them. Here goes:
I created and then deleted user profiles (testing the logoff issue). When a newly created user logs on for the 1st time a file structure is generated for him under Documents and Settings - which structure remains when the user profile is removed. I assumed you could reconnect to that structure by re-creating the same user name - not true. Windows re-creates, say, 'Jack', but he is totally new; Jack's previous file structure is renamed. Thus all the bits of the profile that I wanted are now locked away in another user. This is chiefly problematic in Outlook Express with mail client settings lost and the downloaded mail store in another user's part of the C drive - Docs&settings\Jack(old)\Local settings\Application data\Identities\and so it goes on. All those handy shortcuts and important documents on the desktop also. But I guess I can copy them across?

Yes - you can create the file structure in the recreated user and drag files across. Shortcuts can be dragged to the user's desktop as with Favorites onto the right part of Documents & Settings. I've done this many times and it works well if the applications were set up for all users. That's not much work and not really openn to screw ups.

The other problem was, in fact, pre-existing. As it's a laptop I'm connecting to a separate flatscreen Fujitsu monitor. A red-bordered warning comes up on boot saying 'Over-frequency. Mode not supported, please change to a supported mode'. I'm not sure if this is a laptop or a monitor error? I've fiddled with Desktop>Display properties>Settings>Advanced>Monitor and have it set to the lowest refresh freq (60Hz) but the error message persists. I ignored it until the display froze with a worrying flicker, the like of which I'd not seen. I've now returned, frightened, to using the laptop screen only. But my daughter uses another C600 laptop with an identical Fujitsu external screen, error free. Only difference is she has a Mobility M4 display adapter fitted, while I have a Mobility M3. Is this likely to be a hardware issue I can't easily remedy, or might a new driver for my adapter do the trick? I've looked for a new driver (admittedly not very hard) but without success.

This one is strange. The over-frequency on boot suggests to me that there might be a BIOS setting you can get to; not the laptop BIOS but the ATI BIOS. Read the docs or interrupt the boot to see if you can get into the ATI BIOS. For example I can get into a SCSI BIOS - there may be a separate key you have to press.

Let us know.